last executing test programs: 58.717877018s ago: executing program 2 (id=322): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0xb, 0x200, 0x38e41e62, 0x64}) socket$inet6(0xa, 0x80002, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r5) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x14}, 0x18) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x40080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xfffffffe, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff06, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x4, 0xf, 0x4, 0x7f, 0x58}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0xd, &(0x7f00000001c0)=""/13, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2f232, r6, 0x2, &(0x7f00000005c0)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000000600)=[{0x2, 0x2, 0x9, 0x5}, {0x0, 0x5, 0x1}], 0x10, 0x2}, 0x94) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0) 58.43418751s ago: executing program 2 (id=323): r0 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000002100)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@mmap={0x40000401, 0x2, 0x4, 0x10, 0x4, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x3, 0x1, {}, 0x101}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x24040080) r2 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000001540)={0x1, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x82, 0x6, "0d671aefe5444670bd3a232bff7f28feb30391f8a8d0ba4160c5ee447209d6cf95f97ee14b99a44a97d4110be1a37a8ff793b97df9a0b18ececa0ad14475fcf68c4832d3063502a6b1c8bc2cd1285e822839a428f810b9969348eadd1c9a4e68f8195bab3e4268f0b33b30d7aad5a95bb09c49d33dbad99971fe2506c2fc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "3013bbf2f60c75d7abbcd37d1b462d3fb298ff411e7c410627b12ecdc5e4c71a566d22c1595e5b14e76ece6027f9c5facf0c0732798d963f790e6b04830610c83c8fc9df3395a3acae99437055547ce353892413b6dc74df94e5fba340eb85dc0826339d516a8d6cbaacba04911a8a5d0677562b8e7fc0a6b99c0a5062c1b4ccde2ce0b40483fc336d525afc3426bf18acee75a9b362e67a76"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x250, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_DESC={0xf0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff094}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}]}, @NFTA_SET_DESC={0x90, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd37e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3486}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffcb52}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x50, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x564}}, 0x8000) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x521200, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000340)=0x208864, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) 55.992290657s ago: executing program 3 (id=336): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 55.141735976s ago: executing program 2 (id=338): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0xfffff802, 0x3ff}) 53.177995753s ago: executing program 2 (id=344): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec"], 0x28}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x32e000, 0x1000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 52.619215009s ago: executing program 3 (id=346): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x541b, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x11) 52.618699132s ago: executing program 0 (id=347): r0 = socket$unix(0x1, 0x5, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x3, 0xbf}, @cipso={0x86, 0x32, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x6, 0x2}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x4, "02a2"}, {0x7, 0xd, "ccf0301f78d89b5d6afffb"}]}]}}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc11d, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) close_range(r1, r6, 0x2) r7 = socket$nl_crypto(0x10, 0x3, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r8], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 52.089885551s ago: executing program 3 (id=348): r0 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000002100)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@mmap={0x40000401, 0x2, 0x4, 0x10, 0x4, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x3, 0x1, {}, 0x101}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x24040080) r2 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000001540)={0x1, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[], 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x521200, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000340)=0x208864, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) 52.057309042s ago: executing program 4 (id=349): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f9", 0xc1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71", 0x3c}, {&(0x7f0000000600)="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", 0x123}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 51.555218045s ago: executing program 4 (id=350): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffe", 0x32}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa481753", 0x92}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 50.980576992s ago: executing program 4 (id=351): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0xc2010) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 50.22812824s ago: executing program 0 (id=352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/19, 0x13}, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x437, 0xb2, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000000c0)='\x02\x00\x00\x00\x05\x00\x00\x00-contr\br\x82\t\xb2\xe2\xac\x95\xf3\xbeEmBl\xdc\xe3\xa5\xc2\x80\x9aA\x06\x18ol\x00') ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006980)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8091}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004801}, {0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x2000c8c0}, {0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1, 0x0, 0x0, 0x4}], 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000184000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000529000/0x1000)=nil, &(0x7f000036d000/0x4000)=nil, 0x0, 0x0, r4}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0xe, 0xa, 0x20, "0506ddff0600000000000000000000ea00000010f9ffffffffffffff00", 0x30314742}) syslog(0x4, 0x0, 0x0) r10 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000940)={{r10}, r11, 0x18, @unused=[0x7, 0x7, 0x8, 0x9], @name="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"}) read$FUSE(r10, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r10, &(0x7f0000000240)={0x78, 0x0, r12, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0xa000, 0xa0000000, r13, r14, 0x0, 0x0, 0x1000000}}}, 0x78) 49.732985087s ago: executing program 4 (id=353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00100001a000100feffffff00010000ac1e01010000000000010000000000000000000000000001000107174e2300050a0000203a00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980001"], 0x1d0}}, 0x844) 48.906749134s ago: executing program 4 (id=354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0xfffff802, 0x3ff}) 48.686269546s ago: executing program 3 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20000080, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 48.554092944s ago: executing program 1 (id=356): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x4}, 0x1c) write(r1, &(0x7f00000000c0)="8f2a0a65", 0x4) 48.339120334s ago: executing program 3 (id=357): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 48.170315549s ago: executing program 2 (id=358): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r4) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x14}, 0x18) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x40080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xfffffffe, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff06, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x4, 0xf, 0x4, 0x7f, 0x58}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0xd, &(0x7f00000001c0)=""/13, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2f232, r5, 0x2, &(0x7f00000005c0)=[r6, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000600)=[{0x2, 0x2, 0x9, 0x5}, {0x0, 0x5, 0x1}], 0x10, 0x2}, 0x94) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaacc3, 0x8, 0x0, 0x0) 48.14422628s ago: executing program 1 (id=359): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x541b, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x11) 47.790537394s ago: executing program 1 (id=360): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f9", 0xc1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71", 0x3c}, {&(0x7f0000000600)="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", 0x123}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 47.555889229s ago: executing program 1 (id=361): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000012c0)=""/197) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r4, 0x0, 0x0, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10001}) sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x24008850) 47.512140068s ago: executing program 2 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x573485146423e6c7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3b5cc370465e24f6, 0x84}}}, 0xdc}}, 0x80) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x29, 0x2, "d8acf77f552917"}], 0x18}}], 0x1, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040011022a3e740009056cff7f0000100109050b36"], 0x0) 47.127926667s ago: executing program 0 (id=363): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000012c0)=""/197) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r4, 0x0, 0x0, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10001}) sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x24008850) 47.123508798s ago: executing program 1 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) shutdown(r0, 0x1) 46.586268348s ago: executing program 0 (id=365): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) shutdown(r0, 0x1) 46.4158989s ago: executing program 1 (id=366): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) 46.127298925s ago: executing program 0 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20000080, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) 45.644123072s ago: executing program 0 (id=368): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec"], 0x28}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x32e000, 0x1000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 45.437368247s ago: executing program 4 (id=369): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x40000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@typed={0x7, 0x14e, 0x0, 0x0, @str=']#\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008002) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) connect$inet(r4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) sendfile(r5, r5, 0x0, 0x2000fb) 44.946075431s ago: executing program 3 (id=370): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0xf}, &(0x7f0000000580)=0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 27.164137879s ago: executing program 32 (id=368): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec"], 0x28}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x32e000, 0x1000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.519414253s ago: executing program 33 (id=366): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) 956.346549ms ago: executing program 34 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x573485146423e6c7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3b5cc370465e24f6, 0x84}}}, 0xdc}}, 0x80) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x29, 0x2, "d8acf77f552917"}], 0x18}}], 0x1, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040011022a3e740009056cff7f0000100109050b36"], 0x0) 379.913555ms ago: executing program 35 (id=370): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0xf}, &(0x7f0000000580)=0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 36 (id=369): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x40000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@typed={0x7, 0x14e, 0x0, 0x0, @str=']#\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008002) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) connect$inet(r4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d584ef31e86fc6, 0x0) sendfile(r5, r5, 0x0, 0x2000fb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 72.500481][ T5608] cgroup: Unknown subsys name 'net' [ 72.627676][ T5608] cgroup: Unknown subsys name 'cpuset' [ 72.636659][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.957776][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.481875][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.491511][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.499634][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.502300][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.509056][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.515443][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.528861][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.533306][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.537643][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.544426][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.550691][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.560016][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.567782][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.571544][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.586638][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.586776][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.594913][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.603580][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.610319][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.617236][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.624115][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.630123][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.646400][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.657441][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.665394][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.474043][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.481907][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.496255][ T5643] bridge_slave_0: entered allmulticast mode [ 78.504192][ T5643] bridge_slave_0: entered promiscuous mode [ 78.543206][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.553111][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.560587][ T5643] bridge_slave_1: entered allmulticast mode [ 78.568403][ T5643] bridge_slave_1: entered promiscuous mode [ 78.652107][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.710542][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.719991][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.728570][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.735769][ T5641] bridge_slave_0: entered allmulticast mode [ 78.742592][ T5641] bridge_slave_0: entered promiscuous mode [ 78.775804][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.782955][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.790111][ T5641] bridge_slave_1: entered allmulticast mode [ 78.797260][ T5641] bridge_slave_1: entered promiscuous mode [ 78.864687][ T5643] team0: Port device team_slave_0 added [ 78.872473][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.905107][ T5643] team0: Port device team_slave_1 added [ 78.912614][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.933392][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.941507][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.949137][ T5642] bridge_slave_0: entered allmulticast mode [ 78.956608][ T5642] bridge_slave_0: entered promiscuous mode [ 78.997557][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.004791][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.011908][ T5642] bridge_slave_1: entered allmulticast mode [ 79.019504][ T5642] bridge_slave_1: entered promiscuous mode [ 79.034047][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.041216][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.048881][ T5638] bridge_slave_0: entered allmulticast mode [ 79.055983][ T5638] bridge_slave_0: entered promiscuous mode [ 79.073288][ T5641] team0: Port device team_slave_0 added [ 79.088194][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.095896][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.102995][ T5637] bridge_slave_0: entered allmulticast mode [ 79.110211][ T5637] bridge_slave_0: entered promiscuous mode [ 79.117141][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.124217][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.131503][ T5638] bridge_slave_1: entered allmulticast mode [ 79.138469][ T5638] bridge_slave_1: entered promiscuous mode [ 79.146210][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.153146][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.179457][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.195607][ T5641] team0: Port device team_slave_1 added [ 79.209921][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.217127][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.224252][ T5637] bridge_slave_1: entered allmulticast mode [ 79.231322][ T5637] bridge_slave_1: entered promiscuous mode [ 79.246235][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.253233][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.279682][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.301928][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.325087][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.391213][ T5642] team0: Port device team_slave_0 added [ 79.399333][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.409072][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.416349][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.442588][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.456183][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.475540][ T5642] team0: Port device team_slave_1 added [ 79.483032][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.493026][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.500085][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.526083][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.539391][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.593318][ T5643] hsr_slave_0: entered promiscuous mode [ 79.599715][ T5643] hsr_slave_1: entered promiscuous mode [ 79.626906][ T5638] team0: Port device team_slave_0 added [ 79.643433][ T5637] team0: Port device team_slave_0 added [ 79.649954][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.657633][ T5629] Bluetooth: hci3: command tx timeout [ 79.657855][ T5629] Bluetooth: hci1: command tx timeout [ 79.663104][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.663368][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.707038][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.713979][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.740463][ T5629] Bluetooth: hci2: command tx timeout [ 79.741037][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.746859][ T5629] Bluetooth: hci4: command tx timeout [ 79.756674][ T4940] Bluetooth: hci0: command tx timeout [ 79.769453][ T5638] team0: Port device team_slave_1 added [ 79.788137][ T5637] team0: Port device team_slave_1 added [ 79.847934][ T5641] hsr_slave_0: entered promiscuous mode [ 79.854289][ T5641] hsr_slave_1: entered promiscuous mode [ 79.860575][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 79.866398][ T5641] Cannot create hsr debugfs directory [ 79.878808][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.885913][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.911984][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.932205][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.939203][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.965637][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.989928][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.997537][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.024012][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.042924][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.050027][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.076144][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.145116][ T5642] hsr_slave_0: entered promiscuous mode [ 80.151251][ T5642] hsr_slave_1: entered promiscuous mode [ 80.157579][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 80.163348][ T5642] Cannot create hsr debugfs directory [ 80.244700][ T5637] hsr_slave_0: entered promiscuous mode [ 80.250829][ T5637] hsr_slave_1: entered promiscuous mode [ 80.257019][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 80.262744][ T5637] Cannot create hsr debugfs directory [ 80.314887][ T5638] hsr_slave_0: entered promiscuous mode [ 80.321011][ T5638] hsr_slave_1: entered promiscuous mode [ 80.327399][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 80.333139][ T5638] Cannot create hsr debugfs directory [ 80.707962][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.718796][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.726583][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.737785][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.745520][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.756406][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.764923][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.774857][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.840674][ T5641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.850758][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.865684][ T5641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.875008][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.882744][ T5641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.893730][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.901924][ T5641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.911449][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.993040][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.004647][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.031195][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.040676][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.048833][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.057565][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.076148][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.087092][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.135371][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.151301][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.168605][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.178485][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.186678][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.196247][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.211994][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.221436][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.301771][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.312429][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.323140][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.337893][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.346787][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.354261][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.365581][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.383807][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.392914][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.434066][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.470458][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.477822][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.496086][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.503298][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.523222][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.586672][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.627395][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.634561][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.653098][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.679238][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.686356][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.712738][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.732735][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.739560][ T4940] Bluetooth: hci3: command tx timeout [ 81.745059][ T4940] Bluetooth: hci1: command tx timeout [ 81.753371][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.760547][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.797296][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.804454][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.815218][ T4940] Bluetooth: hci4: command tx timeout [ 81.821121][ T5626] Bluetooth: hci2: command tx timeout [ 81.829419][ T5629] Bluetooth: hci0: command tx timeout [ 81.856908][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.873024][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.882116][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.901555][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.908673][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.941894][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.949016][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.980503][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.010852][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.018014][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.047482][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.054598][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.079639][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.119849][ T5643] veth0_vlan: entered promiscuous mode [ 82.149989][ T5643] veth1_vlan: entered promiscuous mode [ 82.179027][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.233478][ T5641] veth0_vlan: entered promiscuous mode [ 82.280577][ T5641] veth1_vlan: entered promiscuous mode [ 82.290495][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.299553][ T5643] veth0_macvtap: entered promiscuous mode [ 82.324018][ T5643] veth1_macvtap: entered promiscuous mode [ 82.335156][ T5642] veth0_vlan: entered promiscuous mode [ 82.353472][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.381293][ T5642] veth1_vlan: entered promiscuous mode [ 82.398842][ T5641] veth0_macvtap: entered promiscuous mode [ 82.417793][ T5641] veth1_macvtap: entered promiscuous mode [ 82.428520][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.455860][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.490657][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.499999][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.518504][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.529863][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.539628][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.563597][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.587189][ T5638] veth0_vlan: entered promiscuous mode [ 82.602477][ T5642] veth0_macvtap: entered promiscuous mode [ 82.609716][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.619796][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.638705][ T5642] veth1_macvtap: entered promiscuous mode [ 82.645995][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.655655][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.667695][ T5637] veth0_vlan: entered promiscuous mode [ 82.714131][ T5638] veth1_vlan: entered promiscuous mode [ 82.757787][ T5637] veth1_vlan: entered promiscuous mode [ 82.766950][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.817188][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.834008][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.843563][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.861863][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.883280][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.902915][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.908851][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.912898][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.940324][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.942152][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.953457][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.963788][ T5638] veth0_macvtap: entered promiscuous mode [ 82.999834][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.005305][ T5637] veth0_macvtap: entered promiscuous mode [ 83.013410][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.027324][ T5637] veth1_macvtap: entered promiscuous mode [ 83.047772][ T5638] veth1_macvtap: entered promiscuous mode [ 83.110894][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.128956][ T5643] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.167198][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.177507][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.191941][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.200278][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.248928][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.275795][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.329031][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.351783][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.362107][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.381697][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.390754][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.407215][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.419942][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.478109][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.487909][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.596132][ T5698] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.745777][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.754837][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.763896][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.771783][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.776251][ T5698] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.794589][ T5698] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 83.806989][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.816807][ T5629] Bluetooth: hci1: command tx timeout [ 83.822237][ T5629] Bluetooth: hci3: command tx timeout [ 83.829103][ T5698] usb 3-1: Product: syz [ 83.833462][ T5698] usb 3-1: Manufacturer: syz [ 83.838527][ T5698] usb 3-1: SerialNumber: syz [ 83.852015][ T5698] usb 3-1: config 0 descriptor?? [ 83.857967][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.873007][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.894760][ T5629] Bluetooth: hci0: command tx timeout [ 83.900210][ T4940] Bluetooth: hci4: command tx timeout [ 83.907288][ T4940] Bluetooth: hci2: command tx timeout [ 83.918512][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.926776][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.955243][ T5727] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.083748][ T5698] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 84.111661][ T5698] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 84.125588][ T5698] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 84.125882][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 84.136915][ T5698] usb 3-1: media controller created [ 84.166383][ T5737] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.183985][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.189046][ T5727] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 84.211493][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.233053][ T5727] usb 5-1: config 0 descriptor?? [ 84.287370][ T5737] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 84.297352][ T5698] DVB: Unable to find symbol dib7000p_attach() [ 84.304037][ T5737] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 84.322281][ T5698] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 84.333188][ T5698] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 84.345345][ T5698] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 84.354672][ T5698] usb 3-1: media controller created [ 84.366551][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.391649][ T5698] dib0700: the master dib7090 has to be initialized first [ 84.400324][ T5698] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 84.461980][ T5727] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 84.477918][ T5698] rc_core: IR keymap rc-dib0700-rc5 not found [ 84.483226][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.492396][ T5698] Registered IR keymap rc-empty [ 84.511884][ T5727] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 84.531035][ T5698] dvb-usb: could not initialize remote control. [ 84.544122][ T5727] usb 5-1: media controller created [ 84.571703][ T5698] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 84.641365][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.641515][ T5698] usb 3-1: USB disconnect, device number 2 [ 84.851084][ T5698] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 84.980265][ T5727] DVB: Unable to find symbol dib7000p_attach() [ 85.005085][ T5727] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 85.154518][ T5727] rc_core: IR keymap rc-dib0700-rc5 not found [ 85.191882][ T5727] Registered IR keymap rc-empty [ 85.221324][ T5727] dvb-usb: could not initialize remote control. [ 85.362195][ T5727] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 85.485536][ T5735] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 85.667626][ T5735] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.696922][ T10] usb 5-1: USB disconnect, device number 2 [ 85.702842][ T5735] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.727867][ T5735] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.739991][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.801327][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 85.831495][ T5735] usb 4-1: config 0 descriptor?? [ 85.867584][ T5735] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 85.885941][ T5735] dvb-usb: bulk message failed: -22 (3/0) [ 85.895981][ T4940] Bluetooth: hci3: command tx timeout [ 85.901636][ T5629] Bluetooth: hci1: command tx timeout [ 85.946191][ T5735] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 85.958269][ T5735] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 85.970248][ T5735] usb 4-1: media controller created [ 85.976905][ T4940] Bluetooth: hci2: command tx timeout [ 85.982704][ T5629] Bluetooth: hci0: command tx timeout [ 85.988439][ T5626] Bluetooth: hci4: command tx timeout [ 85.999672][ T5735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.037973][ T5735] dvb-usb: bulk message failed: -22 (6/0) [ 86.049838][ T5735] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 86.078633][ T5735] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 86.109388][ T5735] dvb-usb: schedule remote query interval to 150 msecs. [ 86.133080][ T5735] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 86.289839][ T5735] dvb-usb: bulk message failed: -22 (1/0) [ 86.309644][ T5735] dvb-usb: error while querying for an remote control event. [ 86.509041][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 86.518671][ T9] dvb-usb: error while querying for an remote control event. [ 86.641701][ T54] cfg80211: failed to load regulatory.db [ 86.656248][ T5735] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.695970][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 86.712584][ T10] dvb-usb: error while querying for an remote control event. [ 86.824388][ T5735] usb 5-1: Using ep0 maxpacket: 16 [ 86.852411][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 86.876030][ T5735] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 86.890658][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.915086][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 86.922559][ T5735] usb 5-1: Product: syz [ 86.932126][ T5735] usb 5-1: Manufacturer: syz [ 86.937954][ T10] dvb-usb: error while querying for an remote control event. [ 86.962879][ T5735] usb 5-1: SerialNumber: syz [ 87.004641][ T5735] usb 5-1: config 0 descriptor?? [ 87.039596][ T5735] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 87.062195][ T5735] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 87.144444][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 87.150915][ T10] dvb-usb: error while querying for an remote control event. [ 87.214531][ T5625] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.343692][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 87.370028][ T9] dvb-usb: error while querying for an remote control event. [ 87.378568][ T10] usb 4-1: USB disconnect, device number 2 [ 87.400424][ T5625] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.436129][ T5625] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.464042][ T5625] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 87.486353][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.499374][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 87.516481][ T5625] usb 1-1: Product: syz [ 87.531997][ T5625] usb 1-1: Manufacturer: syz [ 87.547974][ T5625] usb 1-1: SerialNumber: syz [ 87.568788][ T5625] usb 1-1: config 0 descriptor?? [ 87.589850][ T5625] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 87.607703][ T5625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.625774][ T5625] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 87.638116][ T5625] usb 1-1: media controller created [ 87.646700][ T5735] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 87.722397][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.870558][ T5625] DVB: Unable to find symbol tda10046_attach() [ 87.890330][ T5625] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 87.932578][ T5625] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 88.156993][ T5625] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 88.205733][ T5625] usb 1-1: USB disconnect, device number 2 [ 88.277428][ T5735] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 88.306090][ T5735] em28xx 5-1:0.0: board has no eeprom [ 88.384434][ T5735] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 88.399608][ T5735] em28xx 5-1:0.0: dvb set to bulk mode. [ 88.419638][ T5625] em28xx 5-1:0.0: Binding DVB extension [ 88.437020][ T5781] bridge0: port 3(netdevsim0) entered blocking state [ 88.457176][ T5735] usb 5-1: USB disconnect, device number 3 [ 88.490915][ T5781] bridge0: port 3(netdevsim0) entered disabled state [ 88.496508][ T5735] em28xx 5-1:0.0: Disconnecting em28xx [ 88.568564][ T5781] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 88.587858][ T5787] input: syz1 as /devices/virtual/input/input8 [ 88.625528][ T5625] em28xx 5-1:0.0: Registering input extension [ 88.633537][ T5735] em28xx 5-1:0.0: Closing input extension [ 88.726728][ T5781] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 88.752703][ T5735] em28xx 5-1:0.0: Freeing device [ 88.783440][ T5781] bridge0: port 3(netdevsim0) entered blocking state [ 88.784040][ T5790] kvm: pic: non byte write [ 88.790688][ T5781] bridge0: port 3(netdevsim0) entered forwarding state [ 89.711309][ T5811] fuse: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 91.024409][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.346221][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.356702][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.373195][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.404119][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.439820][ T24] usb 5-1: config 0 descriptor?? [ 91.518361][ T5853] netlink: 'syz.1.43': attribute type 12 has an invalid length. [ 91.751894][ T5858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.45'. [ 92.032982][ T30] audit: type=1326 audit(1777730106.079:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5866 comm="syz.3.49" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc121f9cdd9 code=0x0 [ 93.844577][ T54] usb 5-1: USB disconnect, device number 4 [ 94.319049][ T5933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.57'. [ 94.572994][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 95.714274][ T5965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.70'. [ 95.899746][ T4940] Bluetooth: Unknown BR/EDR signaling command 0xff [ 95.906762][ T4940] Bluetooth: Wrong link type (-22) [ 97.146283][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 97.171351][ T5999] netlink: 104 bytes leftover after parsing attributes in process `syz.2.82'. [ 97.199321][ T4940] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 97.210311][ T4940] CPU: 0 UID: 0 PID: 4940 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.210337][ T4940] Tainted: [L]=SOFTLOCKUP [ 97.210343][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.210353][ T4940] Workqueue: hci1 hci_rx_work [ 97.210401][ T4940] Call Trace: [ 97.210409][ T4940] [ 97.210416][ T4940] dump_stack_lvl+0xe8/0x150 [ 97.210440][ T4940] sysfs_create_dir_ns+0x271/0x2a0 [ 97.210463][ T4940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 97.210486][ T4940] ? do_raw_spin_unlock+0xf5/0x210 [ 97.210514][ T4940] kobject_add_internal+0x62b/0xd00 [ 97.210541][ T4940] kobject_add+0x163/0x240 [ 97.210565][ T4940] ? __pfx_kobject_add+0x10/0x10 [ 97.210588][ T4940] ? _raw_spin_unlock+0x28/0x50 [ 97.210609][ T4940] ? get_device_parent+0x366/0x3a0 [ 97.210632][ T4940] device_add+0x408/0xbb0 [ 97.210655][ T4940] hci_conn_add_sysfs+0xd5/0x210 [ 97.210689][ T4940] le_conn_complete_evt+0x10e6/0x16b0 [ 97.210715][ T4940] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 97.210731][ T4940] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 97.210752][ T4940] ? __asan_memcpy+0x40/0x70 [ 97.210777][ T4940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.210796][ T4940] ? skb_pull_data+0xfb/0x200 [ 97.210824][ T4940] hci_le_conn_complete_evt+0x187/0x470 [ 97.210848][ T4940] hci_event_packet+0x659/0xef0 [ 97.210878][ T4940] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 97.210893][ T4940] ? __pfx_hci_event_packet+0x10/0x10 [ 97.210918][ T4940] ? kcov_remote_start+0x49a/0x7a0 [ 97.210942][ T4940] ? hci_send_to_monitor+0xe2/0x590 [ 97.210964][ T4940] hci_rx_work+0x3ee/0x1040 [ 97.210993][ T4940] ? process_scheduled_works+0xa70/0x1860 [ 97.211013][ T4940] process_scheduled_works+0xb5d/0x1860 [ 97.211060][ T4940] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.211084][ T4940] ? assign_work+0x3d5/0x5e0 [ 97.211105][ T4940] worker_thread+0xa53/0xfc0 [ 97.211149][ T4940] kthread+0x388/0x470 [ 97.211170][ T4940] ? __pfx_worker_thread+0x10/0x10 [ 97.211185][ T4940] ? __pfx_kthread+0x10/0x10 [ 97.211206][ T4940] ret_from_fork+0x514/0xb70 [ 97.211226][ T4940] ? __pfx_ret_from_fork+0x10/0x10 [ 97.211242][ T4940] ? __switch_to+0xc79/0x1410 [ 97.211267][ T4940] ? __pfx_kthread+0x10/0x10 [ 97.211289][ T4940] ret_from_fork_asm+0x1a/0x30 [ 97.211325][ T4940] [ 97.212715][ T4940] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.463755][ T4940] Bluetooth: hci1: failed to register connection device [ 97.843931][ T6017] binder: 6016:6017 ioctl 541b 0 returned -22 [ 97.872947][ T6017] Zero length message leads to an empty skb [ 97.879019][ T5735] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.047832][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.076550][ T5735] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.094464][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.111719][ T5735] usb 1-1: config 0 descriptor?? [ 98.129775][ T5735] pwc: Askey VC010 type 2 USB webcam detected. [ 98.264095][ T6027] kvm: pic: non byte write [ 98.531052][ T5735] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.551483][ T5735] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.572817][ T5735] pwc: recv_control_msg error -32 req 02 val 2c00 [ 98.589482][ T5735] pwc: recv_control_msg error -32 req 04 val 1000 [ 98.614152][ T5735] pwc: recv_control_msg error -32 req 04 val 1300 [ 98.636525][ T5735] pwc: recv_control_msg error -32 req 04 val 1400 [ 98.653933][ T5735] pwc: recv_control_msg error -32 req 02 val 2000 [ 98.672394][ T5735] pwc: recv_control_msg error -32 req 02 val 2100 [ 98.855442][ T4940] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 98.865746][ T4940] Bluetooth: hci3: Injecting HCI hardware error event [ 98.874212][ T5626] Bluetooth: hci3: hardware error 0x00 [ 98.887497][ T5735] pwc: recv_control_msg error -71 req 02 val 2500 [ 98.902947][ T5735] pwc: recv_control_msg error -71 req 02 val 2400 [ 98.921038][ T5735] pwc: recv_control_msg error -71 req 02 val 2600 [ 98.932466][ T5735] pwc: recv_control_msg error -71 req 02 val 2900 [ 98.952687][ T5735] pwc: recv_control_msg error -71 req 02 val 2800 [ 98.968220][ T5735] pwc: recv_control_msg error -71 req 04 val 1100 [ 98.984438][ T5735] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.003008][ T5735] pwc: Registered as video103. [ 99.029580][ T5735] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 99.061409][ T5735] usb 1-1: USB disconnect, device number 3 [ 99.794631][ T54] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.956272][ T54] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.973675][ T54] usb 1-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 99.992037][ T54] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 100.009713][ T54] usb 1-1: config 220 has no interface number 2 [ 100.016922][ T54] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 100.031346][ T54] usb 1-1: config 220 interface 0 has no altsetting 0 [ 100.039391][ T54] usb 1-1: config 220 interface 76 has no altsetting 0 [ 100.047482][ T54] usb 1-1: config 220 interface 1 has no altsetting 0 [ 100.059088][ T54] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 100.074448][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.086813][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.097425][ T54] usb 1-1: Product: syz [ 100.107064][ T54] usb 1-1: Manufacturer: syz [ 100.115920][ T54] usb 1-1: SerialNumber: syz [ 100.248092][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.281667][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.303863][ T24] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 100.323902][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.356976][ T24] usb 2-1: Product: syz [ 100.361831][ T54] usb 1-1: selecting invalid altsetting 0 [ 100.368335][ T6077] xt_CT: No such helper "syz1" [ 100.371515][ T24] usb 2-1: Manufacturer: syz [ 100.391513][ T24] usb 2-1: SerialNumber: syz [ 100.403474][ T54] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 100.428476][ T54] uvcvideo 1-1:220.0: No valid video chain found. [ 100.435292][ T24] usb 2-1: config 0 descriptor?? [ 100.456486][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 100.471977][ T54] usb 1-1: selecting invalid altsetting 0 [ 100.483482][ T54] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 100.493224][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.520648][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 100.540104][ T54] usb 1-1: USB disconnect, device number 4 [ 100.556407][ T24] usb 2-1: media controller created [ 100.613976][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.707799][ T24] DVB: Unable to find symbol tda10046_attach() [ 100.714234][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 100.727294][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 100.737376][ T24] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 100.783576][ T24] usb 2-1: USB disconnect, device number 2 [ 101.014764][ T5626] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 101.070248][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 101.079961][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.079986][ T5626] Tainted: [L]=SOFTLOCKUP [ 101.079991][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.080001][ T5626] Workqueue: hci2 hci_rx_work [ 101.080029][ T5626] Call Trace: [ 101.080036][ T5626] [ 101.080043][ T5626] dump_stack_lvl+0xe8/0x150 [ 101.080064][ T5626] sysfs_create_dir_ns+0x271/0x2a0 [ 101.080088][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 101.080110][ T5626] ? do_raw_spin_unlock+0xf5/0x210 [ 101.080138][ T5626] kobject_add_internal+0x62b/0xd00 [ 101.080169][ T5626] kobject_add+0x163/0x240 [ 101.080197][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 101.080220][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 101.080241][ T5626] ? get_device_parent+0x366/0x3a0 [ 101.080263][ T5626] device_add+0x408/0xbb0 [ 101.080285][ T5626] hci_conn_add_sysfs+0xd5/0x210 [ 101.080320][ T5626] le_conn_complete_evt+0x10e6/0x16b0 [ 101.080347][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 101.080362][ T5626] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 101.080383][ T5626] ? __asan_memcpy+0x40/0x70 [ 101.080406][ T5626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.080425][ T5626] ? skb_pull_data+0xfb/0x200 [ 101.080452][ T5626] hci_le_conn_complete_evt+0x187/0x470 [ 101.080476][ T5626] hci_event_packet+0x659/0xef0 [ 101.080506][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 101.080521][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 101.080546][ T5626] ? kcov_remote_start+0x49a/0x7a0 [ 101.080572][ T5626] ? hci_send_to_monitor+0xe2/0x590 [ 101.080593][ T5626] hci_rx_work+0x3ee/0x1040 [ 101.080621][ T5626] ? process_scheduled_works+0xa70/0x1860 [ 101.080640][ T5626] process_scheduled_works+0xb5d/0x1860 [ 101.080686][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 101.080707][ T5626] ? assign_work+0x3d5/0x5e0 [ 101.080728][ T5626] worker_thread+0xa53/0xfc0 [ 101.080770][ T5626] kthread+0x388/0x470 [ 101.080791][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 101.080806][ T5626] ? __pfx_kthread+0x10/0x10 [ 101.080827][ T5626] ret_from_fork+0x514/0xb70 [ 101.080848][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 101.080866][ T5626] ? __switch_to+0xc79/0x1410 [ 101.080892][ T5626] ? __pfx_kthread+0x10/0x10 [ 101.080924][ T5626] ret_from_fork_asm+0x1a/0x30 [ 101.080961][ T5626] [ 101.081016][ T5626] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.333455][ T5626] Bluetooth: hci2: failed to register connection device [ 101.964295][ T6123] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 102.008188][ T6123] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.248370][ T6123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.297148][ T6126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.305176][ T6126] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 102.316330][ T6126] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 102.325481][ T6126] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 102.337243][ T5690] bond_slave_0: entered promiscuous mode [ 102.343382][ T5690] bond_slave_1: entered promiscuous mode [ 102.349151][ T5690] syz_tun: entered promiscuous mode [ 103.379357][ T6148] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 103.435359][ T6148] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 103.506666][ T6148] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 104.775767][ T5626] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 104.784805][ T5626] Bluetooth: hci4: Injecting HCI hardware error event [ 104.793188][ T4940] Bluetooth: hci4: hardware error 0x00 [ 105.218124][ T30] audit: type=1326 audit(1777730119.269:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.4.155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab99d9cdd9 code=0x0 [ 105.424643][ T5625] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.509117][ T6199] netlink: 224 bytes leftover after parsing attributes in process `syz.2.157'. [ 105.608017][ T5625] usb 1-1: Using ep0 maxpacket: 16 [ 105.624367][ T5625] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 105.641932][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.659319][ T5625] usb 1-1: Product: syz [ 105.664563][ T5625] usb 1-1: Manufacturer: syz [ 105.669244][ T5625] usb 1-1: SerialNumber: syz [ 105.677136][ T5625] usb 1-1: config 0 descriptor?? [ 105.691310][ T5625] gspca_main: spca508-2.14.0 probing 041e:4018 [ 105.893352][ T5625] gspca_spca508: reg_read err -32 [ 105.898844][ T5626] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 105.907395][ T5626] Bluetooth: hci0: Injecting HCI hardware error event [ 105.917997][ T5629] Bluetooth: hci0: hardware error 0x00 [ 105.942486][ T5625] gspca_spca508: reg_read err -32 [ 106.128355][ T5626] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 106.155602][ T5625] gspca_spca508: reg_read err -71 [ 106.176628][ T5625] gspca_spca508: reg_read err -71 [ 106.182054][ T5625] gspca_spca508: reg write: error -71 [ 106.187586][ T5625] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 106.200214][ T5625] usb 1-1: USB disconnect, device number 5 [ 106.582390][ T6227] netlink: 224 bytes leftover after parsing attributes in process `syz.2.170'. [ 106.776865][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 106.843234][ T30] audit: type=1326 audit(1777730120.889:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.0.175" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41f2d9cdd9 code=0x0 [ 106.934714][ T4940] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 107.134625][ T5625] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.304400][ T5625] usb 3-1: Using ep0 maxpacket: 32 [ 107.318780][ T5625] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.333202][ T5625] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.348590][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.365152][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.382387][ T5625] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.398451][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.416538][ T6253] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 107.418855][ T5625] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.424575][ T54] IPVS: starting estimator thread 0... [ 107.440638][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.460412][ T5625] usb 3-1: config 0 descriptor?? [ 107.580594][ T6255] IPVS: using max 30 ests per chain, 72000 per kthread [ 107.730877][ T5625] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.802094][ T5625] usb 3-1: USB disconnect, device number 3 [ 107.842743][ T5625] usblp0: removed [ 107.895673][ T4940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 107.904595][ T4940] Bluetooth: hci1: Injecting HCI hardware error event [ 107.912210][ T5626] Bluetooth: hci1: hardware error 0x00 [ 107.974516][ T5629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 108.054653][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.216737][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.242828][ T54] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.248288][ T6268] netlink: 224 bytes leftover after parsing attributes in process `syz.4.185'. [ 108.263074][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.275680][ T5625] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.295116][ T54] usb 4-1: config 0 descriptor?? [ 108.307791][ T54] pwc: Askey VC010 type 2 USB webcam detected. [ 108.434393][ T5625] usb 3-1: Using ep0 maxpacket: 32 [ 108.445542][ T5625] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.460826][ T5625] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.479085][ T5625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.500241][ T5625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.520372][ T5625] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.541800][ T5625] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.567577][ T5625] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.586000][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.608589][ T5625] usb 3-1: config 0 descriptor?? [ 108.706588][ T54] pwc: recv_control_msg error -32 req 02 val 2b00 [ 108.727626][ T54] pwc: recv_control_msg error -32 req 02 val 2700 [ 108.739690][ T54] pwc: recv_control_msg error -32 req 02 val 2c00 [ 108.767649][ T54] pwc: recv_control_msg error -71 req 04 val 1000 [ 108.792235][ T54] pwc: recv_control_msg error -71 req 04 val 1300 [ 108.810201][ T54] pwc: recv_control_msg error -71 req 04 val 1400 [ 108.825414][ T54] pwc: recv_control_msg error -71 req 02 val 2000 [ 108.834145][ T5625] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.849888][ T54] pwc: recv_control_msg error -71 req 02 val 2100 [ 108.864619][ T54] pwc: recv_control_msg error -71 req 04 val 1500 [ 108.886366][ T54] pwc: recv_control_msg error -71 req 02 val 2500 [ 108.913611][ T54] pwc: recv_control_msg error -71 req 02 val 2400 [ 108.925472][ T54] pwc: recv_control_msg error -71 req 02 val 2600 [ 108.942465][ T54] pwc: recv_control_msg error -71 req 02 val 2900 [ 108.962203][ T54] pwc: recv_control_msg error -71 req 02 val 2800 [ 108.981215][ T54] pwc: recv_control_msg error -71 req 04 val 1100 [ 108.998364][ T54] pwc: recv_control_msg error -71 req 04 val 1200 [ 109.025599][ T54] pwc: Registered as video103. [ 109.046713][ T54] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 109.052391][ T9] usb 3-1: USB disconnect, device number 4 [ 109.101607][ T54] usb 4-1: USB disconnect, device number 3 [ 109.117819][ T9] usblp0: removed [ 109.441168][ T30] audit: type=1326 audit(1777730123.489:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6287 comm="syz.3.192" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc121f9cdd9 code=0x0 [ 109.977283][ T5626] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 109.998203][ T6302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.196'. [ 110.679079][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 111.511002][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 111.566640][ T5626] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 111.678654][ T30] audit: type=1326 audit(1777730125.729:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.1.211" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31f5b9cdd9 code=0x0 [ 111.986306][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 112.166295][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.182393][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 112.193198][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 68, changing to 4 [ 112.219996][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 112.240847][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023 [ 112.259533][ T6352] netlink: 'syz.0.215': attribute type 29 has an invalid length. [ 112.266602][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 112.269406][ T6352] netlink: 'syz.0.215': attribute type 29 has an invalid length. [ 112.294745][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.304243][ T9] usb 5-1: Product: syz [ 112.309624][ T9] usb 5-1: Manufacturer: syz [ 112.323985][ T9] usb 5-1: SerialNumber: syz [ 112.344420][ T54] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.484626][ T54] usb 4-1: device descriptor read/64, error -71 [ 112.571751][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 112.580980][ T5690] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.607694][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 112.724410][ T5690] usb 1-1: device descriptor read/64, error -71 [ 112.744766][ T54] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.771370][ T9] usb 5-1: USB disconnect, device number 5 [ 112.843268][ T6362] process 'syz.1.217' launched './file1' with NULL argv: empty string added [ 112.924476][ T54] usb 4-1: device descriptor read/64, error -71 [ 112.959097][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.995264][ T5690] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.044726][ T54] usb usb4-port1: attempt power cycle [ 113.144431][ T5690] usb 1-1: device descriptor read/64, error -71 [ 113.264789][ T5690] usb usb1-port1: attempt power cycle [ 113.272721][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 113.404529][ T54] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.445958][ T54] usb 4-1: device descriptor read/8, error -71 [ 113.644429][ T5690] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.684696][ T54] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.694653][ T5690] usb 1-1: device descriptor read/8, error -71 [ 113.725253][ T54] usb 4-1: device descriptor read/8, error -71 [ 113.761958][ T6362] bond2: option lacp_active: invalid value (5) [ 113.779149][ T6362] bond2 (unregistering): Released all slaves [ 113.834912][ T54] usb usb4-port1: unable to enumerate USB device [ 113.954427][ T5690] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.035533][ T5690] usb 1-1: device descriptor read/8, error -71 [ 114.147175][ T5690] usb usb1-port1: unable to enumerate USB device [ 114.496714][ T6380] syzkaller0: entered promiscuous mode [ 114.502231][ T6380] syzkaller0: entered allmulticast mode [ 114.654664][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.225'. [ 114.755567][ T30] audit: type=1326 audit(1777730128.809:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31f5b9cdd9 code=0x0 [ 115.926948][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 116.062851][ T6418] syz.4.237 uses obsolete (PF_INET,SOCK_PACKET) [ 116.123192][ T6410] bond2: option lacp_active: invalid value (5) [ 116.273002][ T6410] bond2 (unregistering): Released all slaves [ 117.097283][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.240'. [ 117.134460][ T54] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.177965][ T5629] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 117.308883][ T54] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 117.321823][ T54] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 117.332866][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.365307][ T54] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 117.384913][ T5690] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.431375][ T30] audit: type=1326 audit(1777730131.479:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.1.244" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31f5b9cdd9 code=0x0 [ 117.534643][ T5690] usb 5-1: device descriptor read/64, error -71 [ 117.785174][ T5690] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.934779][ T5690] usb 5-1: device descriptor read/64, error -71 [ 118.066383][ T5690] usb usb5-port1: attempt power cycle [ 118.424469][ T5690] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.445125][ T5690] usb 5-1: device descriptor read/8, error -71 [ 118.457249][ T54] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 118.566563][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.250'. [ 118.668704][ T54] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 118.685300][ T54] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 118.704011][ T54] usb 1-1: USB disconnect, device number 10 [ 118.714410][ T5690] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.754993][ T5690] usb 5-1: device descriptor read/8, error -71 [ 118.877186][ T5690] usb usb5-port1: unable to enumerate USB device [ 120.038599][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.205552][ T9] usb 2-1: device descriptor read/64, error -71 [ 120.363716][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.256'. [ 120.471069][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.618744][ T9] usb 2-1: device descriptor read/64, error -71 [ 120.738276][ T9] usb usb2-port1: attempt power cycle [ 121.104731][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.146260][ T9] usb 2-1: device descriptor read/8, error -71 [ 121.398142][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.427121][ T9] usb 2-1: device descriptor read/8, error -71 [ 121.549339][ T9] usb usb2-port1: unable to enumerate USB device [ 122.198565][ T6484] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 122.199011][ T9] IPVS: starting estimator thread 0... [ 122.324436][ T6486] IPVS: using max 31 ests per chain, 74400 per kthread [ 123.594441][ T5690] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.747248][ T5690] usb 2-1: device descriptor read/64, error -71 [ 123.994986][ T5690] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.144877][ T5690] usb 2-1: device descriptor read/64, error -71 [ 124.287127][ T5690] usb usb2-port1: attempt power cycle [ 124.364774][ T6515] netlink: 14 bytes leftover after parsing attributes in process `syz.2.271'. [ 124.439105][ T6515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.467657][ T6515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.491242][ T6515] bond0 (unregistering): Released all slaves [ 124.534445][ T5727] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.644456][ T5690] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.684473][ T5727] usb 5-1: device descriptor read/64, error -71 [ 124.692647][ T5690] usb 2-1: device descriptor read/8, error -71 [ 124.964443][ T5727] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.972090][ T5690] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.025675][ T5690] usb 2-1: device descriptor read/8, error -71 [ 125.134416][ T5727] usb 5-1: device descriptor read/64, error -71 [ 125.165727][ T5690] usb usb2-port1: unable to enumerate USB device [ 125.256768][ T5727] usb usb5-port1: attempt power cycle [ 125.614572][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.628597][ T5727] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 125.675431][ T5727] usb 5-1: device descriptor read/8, error -71 [ 125.763666][ T6536] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.281'. [ 125.776215][ T6536] tipc: Started in network mode [ 125.781916][ T6536] tipc: Node identity 2e29e636e4ae, cluster identity 4711 [ 125.790635][ T6536] tipc: Enabled bearer , priority 0 [ 125.801775][ T6536] syzkaller0: entered promiscuous mode [ 125.807821][ T6536] syzkaller0: entered allmulticast mode [ 125.825550][ T6536] tipc: Resetting bearer [ 125.836798][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 125.851418][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.865872][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 125.893984][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.924153][ T9] usb 4-1: Product: syz [ 125.924491][ T5727] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 125.929747][ T9] usb 4-1: Manufacturer: syz [ 125.943145][ T9] usb 4-1: SerialNumber: syz [ 125.977407][ T5727] usb 5-1: device descriptor read/8, error -71 [ 126.085230][ T5735] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.105311][ T5727] usb usb5-port1: unable to enumerate USB device [ 126.168997][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.236713][ T5735] usb 3-1: config 27 interface 0 altsetting 17 has an endpoint descriptor with address 0x6C, changing to 0xC [ 126.269252][ T5735] usb 3-1: config 27 interface 0 altsetting 17 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 126.302880][ T9] usb 4-1: USB disconnect, device number 8 [ 126.315725][ T5735] usb 3-1: config 27 interface 0 altsetting 17 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.360996][ T5735] usb 3-1: config 27 interface 0 altsetting 17 bulk endpoint 0xB has invalid maxpacket 0 [ 126.375125][ T5735] usb 3-1: config 27 interface 0 has no altsetting 0 [ 126.405649][ T5735] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.452336][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.519266][ T5735] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.541272][ T5735] usb 3-1: invalid MIDI in EP 0 [ 126.578080][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 126.828514][ T5735] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 126.836941][ T6544] bond1: option lacp_active: invalid value (5) [ 126.866796][ T5735] usb 3-1: USB disconnect, device number 5 [ 126.909461][ T6544] bond1 (unregistering): Released all slaves [ 126.993178][ T6535] tipc: Resetting bearer [ 127.012431][ T6535] tipc: Disabling bearer [ 127.028865][ T9] tipc: Node number set to 3397903926 [ 127.416090][ T6565] syzkaller0: entered promiscuous mode [ 127.425986][ T6565] syzkaller0: entered allmulticast mode [ 127.965720][ T5690] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.054163][ T6582] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.296'. [ 128.090772][ T6582] tipc: Started in network mode [ 128.108480][ T6582] tipc: Node identity 82a8dee838b5, cluster identity 4711 [ 128.126520][ T5690] usb 3-1: device descriptor read/64, error -71 [ 128.138176][ T6582] tipc: Enabled bearer , priority 0 [ 128.162201][ T6584] syzkaller0: entered promiscuous mode [ 128.179008][ T6584] syzkaller0: entered allmulticast mode [ 128.292234][ T6582] tipc: Resetting bearer [ 128.345832][ T6581] tipc: Resetting bearer [ 128.395286][ T5690] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.442673][ T6581] tipc: Disabling bearer [ 128.544390][ T5690] usb 3-1: device descriptor read/64, error -71 [ 128.680948][ T5690] usb usb3-port1: attempt power cycle [ 129.034451][ T5690] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.086102][ T5690] usb 3-1: device descriptor read/8, error -71 [ 129.214957][ T5698] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.344918][ T5690] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.375013][ T5690] usb 3-1: device descriptor read/8, error -71 [ 129.386901][ T6593] CUSE: info not properly terminated [ 129.396817][ T5698] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 129.414385][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.434631][ T5698] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.443788][ T5698] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.456030][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.470853][ T5698] usb 1-1: config 0 descriptor?? [ 129.495024][ T5690] usb usb3-port1: unable to enumerate USB device [ 129.900563][ T5698] usb 1-1: string descriptor 0 read error: -71 [ 129.910354][ T5735] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.941633][ T5698] usb 1-1: USB disconnect, device number 11 [ 130.064420][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 130.073074][ T5735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.083953][ T5735] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 130.093558][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.104579][ T5735] usb 2-1: Product: syz [ 130.108768][ T5735] usb 2-1: Manufacturer: syz [ 130.113360][ T5735] usb 2-1: SerialNumber: syz [ 130.370268][ T6607] syzkaller0: entered promiscuous mode [ 130.377793][ T6607] syzkaller0: entered allmulticast mode [ 130.540719][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 130.553086][ T6614] netlink: 224 bytes leftover after parsing attributes in process `syz.0.308'. [ 131.045316][ T5698] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.104447][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.196021][ T5698] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 131.204951][ T5698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.215173][ T5698] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 131.225265][ T5698] usb 5-1: config 1 has no interface number 1 [ 131.231419][ T5698] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 131.244532][ T9] usb 1-1: device descriptor read/64, error -71 [ 131.250845][ T5698] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.269402][ T5698] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.278674][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.286775][ T5698] usb 5-1: Product: syz [ 131.291058][ T5698] usb 5-1: Manufacturer: syz [ 131.295739][ T5698] usb 5-1: SerialNumber: syz [ 131.497381][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 131.566393][ T6620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 131.634842][ T9] usb 1-1: device descriptor read/64, error -71 [ 131.699267][ T6635] netlink: 'syz.3.316': attribute type 29 has an invalid length. [ 131.727556][ T6635] netlink: 'syz.3.316': attribute type 29 has an invalid length. [ 131.764886][ T9] usb usb1-port1: attempt power cycle [ 132.014415][ T5690] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.100522][ T5698] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 132.114613][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 132.123491][ T5698] usb 5-1: MIDIStreaming interface descriptor not found [ 132.147954][ T9] usb 1-1: device descriptor read/8, error -71 [ 132.165691][ T5690] usb 4-1: device descriptor read/64, error -71 [ 132.391730][ T5735] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.406934][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 132.424665][ T5690] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.455466][ T9] usb 1-1: device descriptor read/8, error -71 [ 132.464271][ T5698] usb 5-1: USB disconnect, device number 14 [ 132.499454][ T6642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.319'. [ 132.585929][ T9] usb usb1-port1: unable to enumerate USB device [ 132.615053][ T5690] usb 4-1: device descriptor read/64, error -71 [ 132.698305][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709636][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.754265][ T5690] usb usb4-port1: attempt power cycle [ 132.812297][ T5735] usb 2-1: USB disconnect, device number 11 [ 133.013860][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 133.129223][ T5690] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.175585][ T5690] usb 4-1: device descriptor read/8, error -71 [ 133.204467][ T5698] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 133.377290][ T5698] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 133.394466][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.409636][ T5698] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.419871][ T5698] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.424541][ T5690] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 133.445525][ T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 133.454500][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.457292][ T5690] usb 4-1: device descriptor read/8, error -71 [ 133.483950][ T5698] usb 5-1: config 0 descriptor?? [ 133.496724][ T6659] CUSE: info not properly terminated [ 133.590515][ T5690] usb usb4-port1: unable to enumerate USB device [ 133.644588][ T29] usb 3-1: device descriptor read/64, error -71 [ 133.886335][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.918874][ T5698] usb 5-1: string descriptor 0 read error: -71 [ 133.950355][ T5698] usb 5-1: USB disconnect, device number 15 [ 134.046411][ T29] usb 3-1: device descriptor read/64, error -71 [ 134.167174][ T6663] syzkaller0: entered promiscuous mode [ 134.192602][ T6663] syzkaller0: entered allmulticast mode [ 134.199630][ T29] usb usb3-port1: attempt power cycle [ 134.544457][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.582862][ T29] usb 3-1: device descriptor read/8, error -71 [ 134.654419][ T5727] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 134.819736][ T5727] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.829323][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 134.854127][ T5727] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.883331][ T6675] netlink: 224 bytes leftover after parsing attributes in process `syz.3.330'. [ 134.888828][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 134.903123][ T5727] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 134.923493][ T5727] usb 2-1: config 1 has no interface number 1 [ 134.931654][ T29] usb 3-1: device descriptor read/8, error -71 [ 134.949691][ T5727] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 134.985425][ T5727] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.023876][ T5727] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.039879][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.050822][ T29] usb usb3-port1: unable to enumerate USB device [ 135.066960][ T5727] usb 2-1: Product: syz [ 135.076372][ T5727] usb 2-1: Manufacturer: syz [ 135.091456][ T5727] usb 2-1: SerialNumber: syz [ 135.105054][ T5690] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 135.268102][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 135.293221][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.310001][ T5690] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 135.330712][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.364045][ T5690] usb 5-1: Product: syz [ 135.412509][ T5690] usb 5-1: Manufacturer: syz [ 135.429754][ T5690] usb 5-1: SerialNumber: syz [ 135.738528][ T5690] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.975021][ T5735] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.026049][ T5727] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 136.040623][ T5690] usb 5-1: USB disconnect, device number 16 [ 136.074505][ T5727] usb 2-1: MIDIStreaming interface descriptor not found [ 136.154494][ T5735] usb 4-1: device descriptor read/64, error -71 [ 136.427395][ T5727] usb 2-1: USB disconnect, device number 12 [ 136.435531][ T5735] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 136.518329][ T6694] syzkaller0: entered promiscuous mode [ 136.563550][ T6694] syzkaller0: entered allmulticast mode [ 136.616245][ T5735] usb 4-1: device descriptor read/64, error -71 [ 136.754755][ T5735] usb usb4-port1: attempt power cycle [ 136.796875][ T6691] CUSE: info not properly terminated [ 136.860840][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 136.874474][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 137.083531][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 137.123734][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.136089][ T5735] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 137.199539][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.215982][ T5735] usb 4-1: device descriptor read/8, error -71 [ 137.234956][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.261530][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.303975][ T9] usb 3-1: config 0 descriptor?? [ 137.393360][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 137.459288][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.464501][ T5735] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 137.546105][ T5735] usb 4-1: device descriptor read/8, error -71 [ 137.685596][ T5735] usb usb4-port1: unable to enumerate USB device [ 137.737603][ T9] usb 3-1: string descriptor 0 read error: -71 [ 137.776852][ T6711] netlink: 224 bytes leftover after parsing attributes in process `syz.0.342'. [ 137.808579][ T9] usb 3-1: USB disconnect, device number 14 [ 137.956854][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.544343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 138.554347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 139.536812][ T5735] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 139.727950][ T5735] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.783007][ T5735] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.851988][ T5735] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.864341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 139.874340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 139.895246][ T5735] usb 1-1: config 1 has no interface number 1 [ 139.928136][ T5735] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 139.967101][ T5735] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.994334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.042243][ T5735] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.052473][ T5689] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.082165][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.110927][ T5735] usb 1-1: Product: syz [ 140.126173][ T5735] usb 1-1: Manufacturer: syz [ 140.151921][ T5735] usb 1-1: SerialNumber: syz [ 140.225001][ T5689] usb 4-1: device descriptor read/64, error -71 [ 140.517564][ T5689] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.623993][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'. [ 140.714926][ T5689] usb 4-1: device descriptor read/64, error -71 [ 140.865368][ T5689] usb usb4-port1: attempt power cycle [ 141.080213][ T6736] syzkaller0: entered promiscuous mode [ 141.117585][ T6736] syzkaller0: entered allmulticast mode [ 141.234743][ T5689] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 141.245405][ T5735] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 141.277348][ T5735] usb 1-1: MIDIStreaming interface descriptor not found [ 141.308868][ T5689] usb 4-1: device descriptor read/8, error -71 [ 141.589039][ T5689] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 141.675622][ T5689] usb 4-1: device descriptor read/8, error -71 [ 141.826349][ T5689] usb usb4-port1: unable to enumerate USB device [ 142.089724][ T5735] usb 1-1: USB disconnect, device number 16 [ 142.205887][ T6742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.353'. [ 142.406590][ T6646] udevd[6646]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.125450][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.315666][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 143.332540][ T9] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 143.346931][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 143.364306][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.419158][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.469915][ T9] usb 5-1: config 0 descriptor?? [ 143.496676][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.614588][ T5735] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 143.759564][ T5735] usb 4-1: device descriptor read/64, error -71 [ 144.036326][ T5735] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 144.237000][ T5735] usb 4-1: device descriptor read/64, error -71 [ 144.261346][ T6763] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.362'. [ 144.353754][ T6763] tipc: Enabled bearer , priority 0 [ 144.356386][ T5735] usb usb4-port1: attempt power cycle [ 144.421428][ T6764] syzkaller0: entered promiscuous mode [ 144.460782][ T6764] syzkaller0: entered allmulticast mode [ 144.523399][ T6763] tipc: Resetting bearer [ 144.734565][ T5735] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 144.786310][ T5735] usb 4-1: device descriptor read/8, error -71 [ 145.087133][ T5735] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 145.193438][ T5735] usb 4-1: device descriptor read/8, error -71 [ 145.339484][ T5735] usb usb4-port1: unable to enumerate USB device [ 145.372188][ T6771] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.039987][ T9] usb 5-1: USB disconnect, device number 17 [ 146.410084][ T5690] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 147.024336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.084334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.144336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.204347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 147.264334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.393691][ T6764] tipc: Resetting bearer [ 164.514463][ C1] sched: DL replenish lagged too much [ 192.200314][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.222860][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.233873][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.265875][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.277648][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.477833][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.488979][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.516766][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.534945][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.544364][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.990939][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.007680][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.030763][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.049080][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.075540][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.437715][ T5626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 193.465119][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 193.474578][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 193.489158][ T5626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 193.500208][ T5626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 193.649162][ T5629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 193.665642][ T5629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 193.685265][ T5629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 193.704152][ T5629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 193.714553][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 194.374801][ T5629] Bluetooth: hci5: command tx timeout [ 194.431354][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.439958][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615126][ T5629] Bluetooth: hci6: command tx timeout [ 195.174821][ T5629] Bluetooth: hci7: command tx timeout [ 195.574932][ T5629] Bluetooth: hci8: command tx timeout [ 195.814667][ T5629] Bluetooth: hci9: command tx timeout [ 196.454681][ T5629] Bluetooth: hci5: command tx timeout [ 196.694713][ T5629] Bluetooth: hci6: command tx timeout [ 197.254801][ T5629] Bluetooth: hci7: command tx timeout [ 197.655758][ T5629] Bluetooth: hci8: command tx timeout [ 197.894643][ T5629] Bluetooth: hci9: command tx timeout [ 198.534756][ T5629] Bluetooth: hci5: command tx timeout [ 198.775310][ T5629] Bluetooth: hci6: command tx timeout [ 199.334489][ T5629] Bluetooth: hci7: command tx timeout [ 199.734896][ T5629] Bluetooth: hci8: command tx timeout [ 199.974623][ T5629] Bluetooth: hci9: command tx timeout [ 200.614832][ T5629] Bluetooth: hci5: command tx timeout [ 200.855853][ T5629] Bluetooth: hci6: command tx timeout [ 201.334700][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 201.414668][ T5629] Bluetooth: hci7: command tx timeout [ 201.817096][ T5629] Bluetooth: hci8: command tx timeout [ 202.054577][ T5629] Bluetooth: hci9: command tx timeout [ 253.652454][ T4940] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 253.667608][ T4940] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 253.677752][ T4940] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 253.704941][ T4940] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 253.715338][ T4940] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 254.327003][ T5630] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 254.345196][ T5630] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 254.354623][ T5630] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 254.365337][ T5630] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 254.375583][ T5630] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 254.774830][ T5621] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 254.788965][ T5621] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 254.800510][ T5621] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 254.830953][ T5621] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 254.841536][ T5621] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 255.064293][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 255.076272][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 255.090622][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 255.100743][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 255.114414][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 255.322933][ T5633] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 255.340362][ T5633] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 255.351658][ T5633] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 255.362290][ T5633] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 255.372350][ T5633] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 255.577368][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.589690][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.514287][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 288.521261][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5690/1:b..l [ 288.529546][ C0] rcu: (detected by 0, t=10502 jiffies, g=24609, q=4380 ncpus=2) [ 288.537363][ C0] task:kworker/1:4 state:R running task stack:21568 pid:5690 tgid:5690 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 288.551698][ C0] Workqueue: usb_hub_wq hub_event [ 288.556760][ C0] Call Trace: [ 288.560038][ C0] [ 288.562984][ C0] __schedule+0x17b4/0x5680 [ 288.567539][ C0] ? __pfx___schedule+0x10/0x10 [ 288.572414][ C0] preempt_schedule_irq+0x4d/0xa0 [ 288.577445][ C0] irqentry_exit+0x14f/0x730 [ 288.582044][ C0] ? trace_irq_disable+0x3b/0x140 [ 288.587091][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.593077][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 288.598368][ C0] Code: ff ff ff e8 f1 94 06 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 5f 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 87 09 0a cc 48 8d 3d e8 5d 92 [ 288.617977][ C0] RSP: 0018:ffffc90004c470b8 EFLAGS: 00000286 [ 288.624048][ C0] RAX: 9897711692613700 RBX: 0000000000000000 RCX: 0000000000000046 [ 288.632025][ C0] RDX: 0000000036d7d30f RSI: ffffffff8e2189d3 RDI: ffffffff8c28ac60 [ 288.640000][ C0] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 288.647974][ C0] R10: ffffc90004c47218 R11: ffffffff81b0d870 R12: 0000000000000002 [ 288.655950][ C0] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246 [ 288.663925][ C0] ? unwind_next_frame+0xa6/0x2550 [ 288.669046][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.675212][ C0] ? unwind_next_frame+0xa6/0x2550 [ 288.680339][ C0] ? __reset_page_owner+0x71/0x1f0 [ 288.685458][ C0] ? unwind_next_frame+0xa6/0x2550 [ 288.690582][ C0] unwind_next_frame+0xc3/0x2550 [ 288.695529][ C0] ? unwind_next_frame+0xa6/0x2550 [ 288.700652][ C0] ? unwind_next_frame+0xa6/0x2550 [ 288.705770][ C0] ? save_stack+0x122/0x230 [ 288.710283][ C0] ? __reset_page_owner+0x71/0x1f0 [ 288.715400][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.721566][ C0] arch_stack_walk+0x11b/0x150 [ 288.726344][ C0] ? __reset_page_owner+0x71/0x1f0 [ 288.731469][ C0] stack_trace_save+0xa9/0x100 [ 288.736252][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 288.741646][ C0] save_stack+0x122/0x230 [ 288.745988][ C0] ? __pfx_save_stack+0x10/0x10 [ 288.750870][ C0] __reset_page_owner+0x71/0x1f0 [ 288.755820][ C0] __free_frozen_pages+0xbc7/0xd30 [ 288.760947][ C0] __slab_free+0x274/0x2c0 [ 288.765383][ C0] qlist_free_all+0x99/0x100 [ 288.769981][ C0] kasan_quarantine_reduce+0x148/0x160 [ 288.775450][ C0] __kasan_slab_alloc+0x22/0x80 [ 288.780315][ C0] __kmalloc_noprof+0x316/0x760 [ 288.785176][ C0] ? usb_alloc_urb+0x46/0x150 [ 288.789867][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 288.794909][ C0] usb_alloc_urb+0x46/0x150 [ 288.799432][ C0] usb_control_msg+0x118/0x3e0 [ 288.804205][ C0] hub_port_init+0xb1e/0x28d0 [ 288.808910][ C0] hub_event+0x2593/0x4f30 [ 288.813328][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 288.818500][ C0] ? __pfx_hub_event+0x10/0x10 [ 288.823280][ C0] ? process_scheduled_works+0xa70/0x1860 [ 288.829013][ C0] ? process_scheduled_works+0xa70/0x1860 [ 288.834734][ C0] ? process_scheduled_works+0xa70/0x1860 [ 288.840461][ C0] process_scheduled_works+0xb5d/0x1860 [ 288.846038][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.852030][ C0] ? assign_work+0x3d5/0x5e0 [ 288.856628][ C0] worker_thread+0xa53/0xfc0 [ 288.861252][ C0] kthread+0x388/0x470 [ 288.865336][ C0] ? __pfx_worker_thread+0x10/0x10 [ 288.870461][ C0] ? __pfx_kthread+0x10/0x10 [ 288.875061][ C0] ret_from_fork+0x514/0xb70 [ 288.879658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 288.884774][ C0] ? __switch_to+0xc79/0x1410 [ 288.889468][ C0] ? __pfx_kthread+0x10/0x10 [ 288.894079][ C0] ret_from_fork_asm+0x1a/0x30 [ 288.898864][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)