last executing test programs: 8m37.075256251s ago: executing program 0 (id=682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0xd641, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xffdffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x84, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x9, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x7, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x2, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x42, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x3, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x1000, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0x5, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x10004, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0x8, 0x5, 0x0, 0x9, 0x1c, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x5, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x4, 0x6f}, {0x2, 0x1, 0x7, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929b, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x7}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x81}, 0x800) 8m36.385771869s ago: executing program 0 (id=685): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_io_uring_setup(0x3d12, &(0x7f0000000040)={0x0, 0xdd68, 0x10100, 0xffffffff, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0xd44, 0x0, 0xc, 0x0, 0x0) 8m36.063960247s ago: executing program 0 (id=688): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r7, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r7, 0xd3) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r10, 0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00') 8m34.320557396s ago: executing program 0 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad880c1000004c0012800b00010067656e65766500003c0002800800020000000000050003000c"], 0x74}, 0x1, 0x0, 0x0, 0x8055}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m34.011178217s ago: executing program 0 (id=698): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_connect$cdc_ncm(0x2, 0x78, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0xc, 0x40, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab30}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x2, 0xf}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8d, 0x4, 0xad}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0xc, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x58, 0x77}}}}}}}]}}, 0x0) preadv(r1, &(0x7f0000000cc0)=[{&(0x7f0000000680)=""/193, 0xc1}, {0x0}], 0x2, 0x9, 0x2) 8m32.824909468s ago: executing program 0 (id=707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfd, {{@in=@loopback, @in=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 8m32.52227146s ago: executing program 32 (id=707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfd, {{@in=@loopback, @in=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2m49.390586556s ago: executing program 1 (id=1576): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x1000, 0x4d03c0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m49.162006669s ago: executing program 1 (id=1578): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) 2m46.280341469s ago: executing program 1 (id=1585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) 2m43.993545995s ago: executing program 1 (id=1592): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) 2m43.801206815s ago: executing program 1 (id=1593): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) 2m41.406719328s ago: executing program 1 (id=1599): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m26.166340172s ago: executing program 33 (id=1599): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17.668182048s ago: executing program 6 (id=1879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r2 = timerfd_create(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 15.435662476s ago: executing program 6 (id=1882): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r2 = timerfd_create(0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000780)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 14.258995059s ago: executing program 2 (id=1885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) sendfile(r2, r3, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 14.008439468s ago: executing program 4 (id=1886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 13.23281416s ago: executing program 3 (id=1887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r2 = timerfd_create(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 12.968361174s ago: executing program 6 (id=1888): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0x203, 0x54442) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91109d000000000095ea7b83"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x2, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @broadcast, @broadcast, {[@noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) sendmsg$inet(r4, 0x0, 0x4008844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xfff3}, {0xffff, 0x7}}, [{0x8, 0xb, 0x63a7}, {0x8, 0xb, 0x405fea2e}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xb55}, {0x8, 0xb, 0xffff0000}, {0x8, 0xb, 0xfffff000}]}, 0x5c}}, 0x40000) 12.54123688s ago: executing program 5 (id=1889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 11.159416435s ago: executing program 4 (id=1890): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0x203, 0x54442) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91109d000000000095ea7b83"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x2, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @broadcast, @broadcast, {[@noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) sendmsg$inet(r4, 0x0, 0x4008844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xfff3}, {0xffff, 0x7}}, [{0x8, 0xb, 0x63a7}, {0x8, 0xb, 0x405fea2e}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xb55}, {0x8, 0xb, 0xffff0000}, {0x8, 0xb, 0xfffff000}]}, 0x5c}}, 0x40000) 11.123472924s ago: executing program 2 (id=1891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r2 = timerfd_create(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 10.60481679s ago: executing program 3 (id=1892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 10.344217471s ago: executing program 5 (id=1893): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8.335318283s ago: executing program 6 (id=1894): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0x203, 0x54442) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91109d000000000095ea7b831269"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x2, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @broadcast, @broadcast, {[@noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) sendmsg$inet(r4, 0x0, 0x4008844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xfff3}, {0xffff, 0x7}}, [{0x8, 0xb, 0x63a7}, {0x8, 0xb, 0x405fea2e}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xb55}, {0x8, 0xb, 0xffff0000}, {0x8, 0xb, 0xfffff000}]}, 0x5c}}, 0x40000) 8.22055837s ago: executing program 3 (id=1895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 7.655153887s ago: executing program 2 (id=1896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7.072659533s ago: executing program 5 (id=1897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) sendfile(r2, r3, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 6.982007829s ago: executing program 4 (id=1898): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 5.467766998s ago: executing program 3 (id=1899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 5.231716067s ago: executing program 4 (id=1900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5.168252749s ago: executing program 2 (id=1901): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x12000, 0x8, 0xc678, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sched_setattr(0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.664905543s ago: executing program 6 (id=1902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 4.622325574s ago: executing program 5 (id=1903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 3.77289358s ago: executing program 2 (id=1904): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 3.772131658s ago: executing program 4 (id=1905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 2.595937426s ago: executing program 3 (id=1906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 2.345276905s ago: executing program 5 (id=1907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.311405887s ago: executing program 4 (id=1908): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.310516328s ago: executing program 6 (id=1909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) 844.028834ms ago: executing program 2 (id=1910): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 71.78161ms ago: executing program 3 (id=1911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 5 (id=1912): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 379.983123][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'. [ 380.160246][ T5964] cdc_ncm 6-1:1.0: bind() failure [ 380.178393][ T5964] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 380.205165][ T5964] cdc_ncm 6-1:1.1: bind() failure [ 380.294957][ T5900] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 380.466266][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 380.471747][ T5964] usb 6-1: USB disconnect, device number 4 [ 380.515312][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.575933][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.702929][ T5900] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 380.742987][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.796989][ T5900] usb 5-1: config 0 descriptor?? [ 381.247439][ T9150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.816'. [ 381.275072][ T9150] netlink: 'syz.3.816': attribute type 21 has an invalid length. [ 381.351368][ T5900] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 382.636348][ T5900] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 382.756364][ T5964] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 382.816219][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 382.942060][ T9167] syzkaller0: entered promiscuous mode [ 382.947725][ T9167] syzkaller0: entered allmulticast mode [ 383.038165][ T5900] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 383.057659][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.071901][ T5900] usb 2-1: Product: syz [ 383.079072][ T5900] usb 2-1: Manufacturer: syz [ 383.112244][ T5900] usb 2-1: SerialNumber: syz [ 383.156303][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 383.179034][ T5900] usb 2-1: config 0 descriptor?? [ 383.289731][ T5900] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 383.316198][ T5900] pctv452e: pctv452e_power_ctrl: 1 [ 383.316198][ T5900] [ 383.326315][ T5886] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 383.335775][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.355732][ T5886] usb 6-1: Product: syz [ 383.369386][ T5900] usb 2-1: selecting invalid altsetting 3 [ 383.375984][ T5886] usb 6-1: Manufacturer: syz [ 383.392924][ T5886] usb 6-1: SerialNumber: syz [ 383.402684][ T5900] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 383.402684][ T5900] [ 383.433991][ T5886] r8152-cfgselector 6-1: Unknown version 0x0000 [ 383.450724][ T5886] r8152-cfgselector 6-1: config 0 descriptor?? [ 383.517403][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 383.904795][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.940858][ T5900] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 384.118182][ T5900] usb 2-1: media controller created [ 384.130277][ T5900] dvb-usb: bulk message failed: -22 (8/0) [ 384.141867][ T5900] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 384.249247][ T5900] dvb-usb: MAC address reading failed. [ 384.318232][ T9164] binder: 9163:9164 ioctl c0306201 0 returned -14 [ 384.356671][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.621582][ T5886] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 384.667940][ T5900] DVB: Unable to find symbol stb0899_attach() [ 384.674166][ T5900] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 384.806859][ T5900] rc_core: IR keymap rc-tt-1500 not found [ 384.843611][ T5900] Registered IR keymap rc-empty [ 384.865275][ T5900] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 384.927987][ T798] usb 5-1: USB disconnect, device number 28 [ 384.937426][ T5900] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input25 [ 385.124786][ T5900] dvb-usb: schedule remote query interval to 100 msecs. [ 385.135492][ T5900] pctv452e: pctv452e_power_ctrl: 0 [ 385.135492][ T5900] [ 385.179828][ T5900] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 385.238847][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 385.245356][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 385.344867][ T9183] netlink: 'syz.5.822': attribute type 1 has an invalid length. [ 385.378921][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 385.384747][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 385.463529][ T8128] usb 2-1: USB disconnect, device number 24 [ 385.632113][ T8128] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 385.806206][ T5900] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 386.015804][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 386.060231][ T5900] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 386.080325][ T5900] usb 6-1: config 254 has no interface number 0 [ 386.099390][ T5900] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 386.140635][ T5900] usb 6-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.157925][ T5900] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 386.175700][ T5900] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 386.195807][ T5900] usb 6-1: config 254 interface 235 has no altsetting 0 [ 386.207592][ T5900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 386.217341][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.226807][ T5900] usb 6-1: Product: syz [ 386.231292][ T5900] usb 6-1: Manufacturer: syz [ 386.236933][ T5900] usb 6-1: SerialNumber: syz [ 386.497401][ T9188] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 386.725894][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.822'. [ 388.457557][ T9183] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 388.513039][ T9185] gretap1: entered promiscuous mode [ 388.535288][ T9192] netlink: 96 bytes leftover after parsing attributes in process `syz.1.823'. [ 388.634119][ T9188] macvtap1: entered promiscuous mode [ 388.646393][ T9188] bond0: entered promiscuous mode [ 388.651636][ T9188] bond_slave_0: entered promiscuous mode [ 388.658245][ T9188] bond_slave_1: entered promiscuous mode [ 388.665506][ T9188] macvtap1: entered allmulticast mode [ 388.671495][ T9188] bond0: entered allmulticast mode [ 388.677950][ T9188] bond_slave_0: entered allmulticast mode [ 388.683744][ T9188] bond_slave_1: entered allmulticast mode [ 388.691265][ T9188] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 388.751899][ T9196] bond0: left allmulticast mode [ 388.756848][ T9196] bond_slave_0: left allmulticast mode [ 388.762349][ T9196] bond_slave_1: left allmulticast mode [ 388.767931][ T9196] bond0: left promiscuous mode [ 388.772752][ T9196] bond_slave_0: left promiscuous mode [ 388.778532][ T9196] bond_slave_1: left promiscuous mode [ 388.917716][ T9212] capability: warning: `syz.2.826' uses 32-bit capabilities (legacy support in use) [ 388.956362][ T5900] usbtest 6-1:254.235: couldn't get endpoints, -71 [ 388.974011][ T5900] usbtest 6-1:254.235: probe with driver usbtest failed with error -71 [ 389.073746][ T5900] usb 6-1: USB disconnect, device number 6 [ 390.588416][ T9225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.830'. [ 390.615224][ T9225] netlink: 'syz.1.830': attribute type 21 has an invalid length. [ 391.650287][ T9242] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.960480][ T9247] wg1: entered promiscuous mode [ 392.976605][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.295942][ T9247] wg1: entered allmulticast mode [ 396.116193][ T5900] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 396.607968][ T5900] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.618091][ T5900] usb 6-1: config 0 has no interface number 0 [ 396.684199][ T5900] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.696403][ T5900] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.707324][ T5900] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 396.796163][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.868932][ T5900] usb 6-1: config 0 descriptor?? [ 396.976211][ T95] wlan0: Trigger new scan to find an IBSS to join [ 397.307025][ T5900] prodikeys 0003:041E:2801.0017: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 397.431328][ T5900] hid_prodikeys: hid-prodikeys: failed to find output report [ 397.431328][ T5900] [ 397.476232][ T8128] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 397.544855][ T9282] wg1: entered promiscuous mode [ 397.554497][ T9282] wg1: entered allmulticast mode [ 397.676209][ T8128] usb 3-1: Using ep0 maxpacket: 32 [ 397.740988][ T8128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.786282][ T8128] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.801911][ T5900] usb 6-1: USB disconnect, device number 7 [ 397.846893][ T8128] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 397.896165][ T8128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.936034][ T8128] usb 3-1: config 0 descriptor?? [ 398.303846][ T8128] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 398.577521][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.647920][ T8128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.675379][ T8128] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 398.731683][ T8128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.803659][ T8128] usb 5-1: config 0 descriptor?? [ 399.176386][ T8128] usb 5-1: bad CDC descriptors [ 400.698410][ T798] usb 3-1: USB disconnect, device number 20 [ 400.805018][ T5964] usb 5-1: USB disconnect, device number 29 [ 400.834464][ T9325] block device autoloading is deprecated and will be removed. [ 400.877202][ T9328] hub 9-0:1.0: USB hub found [ 400.882701][ T9328] hub 9-0:1.0: 1 port detected [ 401.040718][ T9328] netlink: 96 bytes leftover after parsing attributes in process `syz.1.849'. [ 402.126919][ T13] wlan0: Trigger new scan to find an IBSS to join [ 402.128614][ T5964] IPVS: starting estimator thread 0... [ 402.317163][ T9344] IPVS: using max 39 ests per chain, 93600 per kthread [ 403.455158][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.737160][ T9353] netlink: 'syz.1.856': attribute type 29 has an invalid length. [ 403.900404][ T9355] netlink: 'syz.1.856': attribute type 29 has an invalid length. [ 404.575386][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.616814][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 406.180449][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 406.180477][ T29] audit: type=1326 audit(1773071468.494:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 406.674746][ T29] audit: type=1326 audit(1773071468.494:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 406.865361][ T29] audit: type=1326 audit(1773071468.494:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 406.941914][ T29] audit: type=1326 audit(1773071468.494:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 407.230490][ T29] audit: type=1326 audit(1773071468.494:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 407.926252][ T29] audit: type=1326 audit(1773071468.494:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 408.300928][ T29] audit: type=1326 audit(1773071468.494:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 408.451689][ T29] audit: type=1326 audit(1773071468.494:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 408.486757][ T29] audit: type=1326 audit(1773071468.494:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 408.653761][ T29] audit: type=1326 audit(1773071468.504:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9376 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 410.097200][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.227622][ T9419] binder: 9413:9419 ioctl 4018620d 0 returned -22 [ 410.526165][ T5900] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 410.736933][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.785739][ T5900] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 410.799118][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.809458][ T5900] usb 4-1: config 0 descriptor?? [ 410.822642][ T5900] usb 4-1: bad CDC descriptors [ 411.510477][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 411.510498][ T29] audit: type=1326 audit(1773071473.874:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 411.554883][ T29] audit: type=1326 audit(1773071473.894:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 411.615547][ T5900] usb 4-1: USB disconnect, device number 24 [ 411.774275][ T29] audit: type=1326 audit(1773071474.014:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 411.846471][ T29] audit: type=1326 audit(1773071474.014:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 411.933550][ T29] audit: type=1326 audit(1773071474.014:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 411.965849][ T29] audit: type=1326 audit(1773071474.024:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 412.062577][ T29] audit: type=1326 audit(1773071474.024:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 412.135915][ T29] audit: type=1326 audit(1773071474.024:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 412.187166][ T29] audit: type=1326 audit(1773071474.024:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 412.281128][ T29] audit: type=1326 audit(1773071474.024:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 414.668511][ T5964] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 415.001896][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.014296][ T5964] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 415.043621][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.094943][ T9475] netlink: 'syz.4.887': attribute type 29 has an invalid length. [ 415.176511][ T5964] usb 3-1: config 0 descriptor?? [ 415.208808][ T5964] usb 3-1: bad CDC descriptors [ 415.270332][ T9476] netlink: 'syz.4.887': attribute type 29 has an invalid length. [ 415.856757][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.500232][ T9490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.891'. [ 416.515806][ T9490] netlink: 'syz.1.891': attribute type 21 has an invalid length. [ 416.680997][ T9492] netlink: 132 bytes leftover after parsing attributes in process `syz.5.893'. [ 416.693150][ T9492] netlink: 'syz.5.893': attribute type 21 has an invalid length. [ 416.946196][ T5964] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 417.098883][ T5964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.130719][ T5964] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 417.278796][ T798] usb 3-1: USB disconnect, device number 21 [ 417.322535][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.368162][ T5964] usb 4-1: config 0 descriptor?? [ 417.388762][ T5964] usb 4-1: bad CDC descriptors [ 417.746354][ T798] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 417.907973][ T798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.919581][ T798] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 417.930916][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.943486][ T798] usb 6-1: config 0 descriptor?? [ 418.017133][ T5964] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 418.036185][ T798] usb 6-1: bad CDC descriptors [ 418.158440][ T9512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.907'. [ 418.186011][ T9512] netlink: 'syz.1.907': attribute type 21 has an invalid length. [ 418.259278][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.269946][ T5964] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 418.283618][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.308155][ T5964] usb 3-1: config 0 descriptor?? [ 418.327588][ T5964] usb 3-1: bad CDC descriptors [ 418.336386][ T5900] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 418.526230][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 418.559584][ T5900] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 418.580408][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.598733][ T5900] usb 5-1: Product: syz [ 418.608992][ T5900] usb 5-1: Manufacturer: syz [ 418.621793][ T5900] usb 5-1: SerialNumber: syz [ 418.642640][ T5900] usb 5-1: config 0 descriptor?? [ 418.663560][ T5900] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 418.680474][ T5900] pctv452e: pctv452e_power_ctrl: 1 [ 418.680474][ T5900] [ 418.699808][ T5900] usb 5-1: selecting invalid altsetting 3 [ 418.714819][ T5900] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 418.714819][ T5900] [ 418.743094][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 418.763191][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.791940][ T5900] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 418.813136][ T5900] usb 5-1: media controller created [ 418.837506][ T5900] dvb-usb: bulk message failed: -22 (8/0) [ 418.850140][ T5900] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 418.874482][ T9510] dvb-usb: bulk message failed: -22 (7/0) [ 418.881638][ T5900] dvb-usb: MAC address reading failed. [ 418.883060][ T9510] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 418.903360][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.045909][ T5900] DVB: Unable to find symbol stb0899_attach() [ 419.053646][ T5900] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 419.192854][ T8128] usb 4-1: USB disconnect, device number 25 [ 419.226770][ T5900] rc_core: IR keymap rc-tt-1500 not found [ 419.235251][ T5900] Registered IR keymap rc-empty [ 419.255384][ T5900] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 419.281167][ T5900] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 419.298316][ T5900] dvb-usb: schedule remote query interval to 100 msecs. [ 419.308949][ T5900] pctv452e: pctv452e_power_ctrl: 0 [ 419.308949][ T5900] [ 419.317786][ T5900] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 419.416164][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 419.422134][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 419.608059][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 419.615519][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 419.786657][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 419.792504][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 419.856491][ T5964] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 419.926296][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 419.932165][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 420.027670][ T5964] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 420.041555][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.059919][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 420.076554][ T5964] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 420.083193][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 420.158213][ T5964] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 420.175988][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.205573][ T5964] usb 2-1: config 0 descriptor?? [ 420.296259][ T798] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 420.316354][ T8128] dvb-usb: bulk message failed: -22 (4/0) [ 420.322382][ T8128] dvb-usb: error -22 while querying for an remote control event. [ 420.401340][ T8128] usb 6-1: USB disconnect, device number 8 [ 420.436251][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 420.444435][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 420.454961][ T798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.566215][ T5886] usb 3-1: USB disconnect, device number 22 [ 420.584593][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 420.591616][ T798] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 420.622113][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.631078][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 420.646191][ T5964] holtek_kbd 0003:04D9:A055.0018: unknown main item tag 0x0 [ 420.677457][ T5964] holtek_kbd 0003:04D9:A055.0018: unknown main item tag 0x0 [ 420.694997][ T798] usb 4-1: config 0 descriptor?? [ 420.766769][ T798] usb 4-1: bad CDC descriptors [ 420.776209][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 420.784186][ T5964] holtek_kbd 0003:04D9:A055.0018: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 420.806138][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 420.881331][ T5964] usb 2-1: USB disconnect, device number 25 [ 420.961917][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 420.967935][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 420.998464][ T9524] fido_id[9524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 421.099108][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 421.105102][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 421.216174][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 421.224118][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 421.266152][ T5964] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 421.336150][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 421.342029][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 421.501028][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.506387][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 421.511973][ T5964] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 421.526259][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 421.535762][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.556920][ T5964] usb 3-1: config 0 descriptor?? [ 421.577507][ T5964] usb 3-1: bad CDC descriptors [ 421.630450][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.647698][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 421.653740][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 421.784435][ T5900] dvb-usb: bulk message failed: -22 (4/0) [ 421.806189][ T5964] usb 3-1: USB disconnect, device number 23 [ 421.819003][ T5900] dvb-usb: error -22 while querying for an remote control event. [ 421.864481][ T798] usb 5-1: USB disconnect, device number 30 [ 422.008383][ T798] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 423.005557][ T8128] usb 4-1: USB disconnect, device number 26 [ 423.046340][ T5900] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 423.226187][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.242698][ T5900] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 423.272661][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.304379][ T5900] usb 3-1: config 0 descriptor?? [ 423.327298][ T5900] usb 3-1: bad CDC descriptors [ 423.750301][ T5964] usb 3-1: USB disconnect, device number 24 [ 423.996211][ T798] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 424.246612][ T798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.257036][ T798] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 424.450229][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.474519][ T798] usb 4-1: config 0 descriptor?? [ 424.488290][ T798] usb 4-1: bad CDC descriptors [ 426.173019][ T798] usb 4-1: USB disconnect, device number 27 [ 427.333539][ T9601] netlink: 132 bytes leftover after parsing attributes in process `syz.5.925'. [ 427.376841][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.477397][ T9604] netlink: 'syz.5.925': attribute type 21 has an invalid length. [ 429.766158][ T798] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 430.077773][ T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.096212][ T798] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 430.106583][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.146520][ T798] usb 2-1: config 0 descriptor?? [ 430.168647][ T798] usb 2-1: bad CDC descriptors [ 430.266194][ T5900] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 430.434965][ T5900] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 430.446344][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.547343][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 430.565924][ T5900] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 430.575453][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.596682][ T5900] usb 4-1: config 0 descriptor?? [ 430.863325][ T8128] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 431.098147][ T8128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.108707][ T8128] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 431.118329][ T8128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.140901][ T8128] usb 3-1: config 0 descriptor?? [ 431.152081][ T5900] holtek_kbd 0003:04D9:A055.0019: bogus close delimiter [ 431.159331][ T5900] holtek_kbd 0003:04D9:A055.0019: item 0 4 2 10 parsing failed [ 431.168661][ T5900] holtek_kbd 0003:04D9:A055.0019: probe with driver holtek_kbd failed with error -22 [ 431.187054][ T8128] usb 3-1: bad CDC descriptors [ 431.392672][ T5900] usb 3-1: USB disconnect, device number 25 [ 431.420416][ T798] usb 4-1: USB disconnect, device number 28 [ 432.117568][ T5964] usb 2-1: USB disconnect, device number 26 [ 432.428239][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.616513][ T5964] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 433.001256][ T5964] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 433.022434][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.046908][ T5964] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 433.087165][ T5964] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 433.109263][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.839011][ T5964] usb 2-1: config 0 descriptor?? [ 434.268139][ T5964] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 434.275538][ T5964] holtek_kbd 0003:04D9:A055.001A: unknown main item tag 0x0 [ 434.318704][ T5964] holtek_kbd 0003:04D9:A055.001A: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 434.364534][ T9692] netlink: 132 bytes leftover after parsing attributes in process `syz.4.952'. [ 434.424201][ T9689] netlink: 'syz.4.952': attribute type 21 has an invalid length. [ 434.492437][ T5964] usb 2-1: USB disconnect, device number 27 [ 435.310553][ T9708] netlink: 132 bytes leftover after parsing attributes in process `syz.5.956'. [ 435.641245][ T9708] netlink: 'syz.5.956': attribute type 21 has an invalid length. [ 436.350722][ T344] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.512774][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.986176][ T5964] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 440.202420][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209460][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.227721][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.486199][ T5964] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 440.495494][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.860513][ T5964] usb 3-1: config 0 descriptor?? [ 440.881621][ T5964] usb 3-1: bad CDC descriptors [ 441.242002][ T5900] usb 3-1: USB disconnect, device number 26 [ 441.789733][ T9769] netlink: 'syz.5.972': attribute type 1 has an invalid length. [ 442.809652][ T5900] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 443.063994][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.084571][ T5900] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 443.116203][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.157121][ T5900] usb 2-1: config 0 descriptor?? [ 443.187672][ T5900] usb 2-1: bad CDC descriptors [ 443.949555][ T9803] netlink: 9 bytes leftover after parsing attributes in process `syz.4.980'. [ 443.978499][ T9802] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 443.988255][ T9803] netlink: 9 bytes leftover after parsing attributes in process `syz.4.980'. [ 444.016804][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.827831][ T9809] netlink: 9 bytes leftover after parsing attributes in process `syz.4.984'. [ 444.838164][ T9809] netlink: 9 bytes leftover after parsing attributes in process `syz.4.984'. [ 444.969102][ T5964] usb 2-1: USB disconnect, device number 28 [ 445.174222][ T9820] netlink: 9 bytes leftover after parsing attributes in process `syz.5.988'. [ 445.215181][ T9820] netlink: 9 bytes leftover after parsing attributes in process `syz.5.988'. [ 446.108796][ T9826] netlink: 9 bytes leftover after parsing attributes in process `syz.5.990'. [ 446.217032][ T9826] netlink: 9 bytes leftover after parsing attributes in process `syz.5.990'. [ 447.148709][ T9842] netlink: 'syz.1.992': attribute type 1 has an invalid length. [ 449.136899][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.084301][ T9870] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1000'. [ 450.165365][ T9870] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1000'. [ 451.277657][ T9880] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1002'. [ 451.287937][ T9880] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1002'. [ 451.416181][ T5964] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 451.575275][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.606379][ T5964] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 451.618376][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.647459][ T5964] usb 6-1: config 0 descriptor?? [ 451.657891][ T5964] usb 6-1: bad CDC descriptors [ 451.734924][ T9888] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1006'. [ 451.787093][ T9891] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 451.928496][ T9888] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1006'. [ 452.387137][ T5964] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 452.549071][ T5964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.624124][ T9904] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 452.637342][ T5964] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 452.646748][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.768864][ T5964] usb 2-1: config 0 descriptor?? [ 452.787332][ T5964] usb 2-1: bad CDC descriptors [ 453.960162][ T5900] usb 6-1: USB disconnect, device number 9 [ 454.911680][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.018817][ T5964] usb 2-1: USB disconnect, device number 29 [ 456.150412][ T9924] syzkaller0: entered promiscuous mode [ 456.216240][ T9924] syzkaller0: entered allmulticast mode [ 456.223793][ T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.245979][ T9929] netlink: 'syz.5.1016': attribute type 1 has an invalid length. [ 456.421586][ T9932] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1017'. [ 456.533569][ T9932] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1017'. [ 456.576647][ T9935] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1018'. [ 456.609693][ T9935] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1018'. [ 457.076669][ T9938] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1019'. [ 457.149568][ T9938] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1019'. [ 457.396233][ T5964] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 457.552642][ T5964] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 457.604483][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.670044][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.742085][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 457.800464][ T5964] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 457.819916][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.880855][ T5964] usb 4-1: config 0 descriptor?? [ 458.207855][ T9953] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1025'. [ 458.246544][ T9953] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1025'. [ 458.340021][ T5964] holtek_kbd 0003:04D9:A055.001B: unknown main item tag 0x0 [ 458.368348][ T5964] holtek_kbd 0003:04D9:A055.001B: unknown main item tag 0x0 [ 458.395814][ T5964] holtek_kbd 0003:04D9:A055.001B: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 458.902802][ T5964] usb 4-1: USB disconnect, device number 29 [ 459.040908][ T9963] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 459.298062][ T9966] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1028'. [ 459.447884][ T9968] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 459.520920][ T9966] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1028'. [ 460.016642][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.561169][ T9994] __nla_validate_parse: 4 callbacks suppressed [ 461.561189][ T9994] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1036'. [ 461.601429][ T9994] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1036'. [ 461.658101][ T8128] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 461.906181][ T8128] usb 4-1: device descriptor read/64, error -71 [ 462.157465][ T5900] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 462.209627][ T8128] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 462.427604][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.521715][T10008] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 462.590062][ T8128] usb 4-1: device descriptor read/64, error -71 [ 462.612730][ T5900] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 462.636849][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.665035][ T5900] usb 5-1: config 0 descriptor?? [ 462.682389][ T5900] usb 5-1: bad CDC descriptors [ 462.726426][ T8128] usb usb4-port1: attempt power cycle [ 463.063441][T10012] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1040'. [ 463.073235][ T8128] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 463.084385][T10012] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1040'. [ 463.096932][ T8128] usb 4-1: device descriptor read/8, error -71 [ 463.538538][ T8128] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 463.697378][ T8128] usb 4-1: device descriptor read/8, error -71 [ 463.776416][ T5964] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 463.808042][ T8128] usb usb4-port1: unable to enumerate USB device [ 463.906158][ T5886] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 463.938061][ T5964] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 463.955648][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.972853][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.987936][ T5964] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 464.002571][ T5964] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 464.017565][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.060043][ T5886] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 464.069439][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.079818][ T5964] usb 6-1: config 0 descriptor?? [ 464.095045][ T5886] usb 3-1: Product: syz [ 464.101627][ T5886] usb 3-1: Manufacturer: syz [ 464.106551][ T5886] usb 3-1: SerialNumber: syz [ 464.137228][ T5886] usb 3-1: config 0 descriptor?? [ 464.187461][T10021] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1044'. [ 464.210698][T10021] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1044'. [ 464.372307][ T5886] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 464.465346][ T798] usb 5-1: USB disconnect, device number 31 [ 464.541141][ T5964] usbhid 6-1:0.0: can't add hid device: -71 [ 464.618798][ T5964] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 464.649252][ T5964] usb 6-1: USB disconnect, device number 10 [ 464.746176][ T8128] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 464.902232][ T8128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.919203][ T8128] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.940024][ T8128] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 464.949751][ T8128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.968301][ T8128] usb 4-1: config 0 descriptor?? [ 465.016248][ T798] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 465.176801][ T798] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 465.201745][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.224418][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.243842][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 465.417778][ T798] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 465.427751][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.442595][ T798] usb 5-1: config 0 descriptor?? [ 465.626975][T10036] syzkaller0: entered promiscuous mode [ 465.632755][T10036] syzkaller0: entered allmulticast mode [ 465.649365][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.857757][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.947926][ T5886] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 465.974079][ T5886] usb 3-1: USB disconnect, device number 27 [ 466.073426][ T798] holtek_kbd 0003:04D9:A055.001C: unknown main item tag 0x0 [ 466.081625][ T798] holtek_kbd 0003:04D9:A055.001C: unknown main item tag 0x0 [ 466.104044][ T798] holtek_kbd 0003:04D9:A055.001C: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 466.309625][ T8128] usb 5-1: USB disconnect, device number 32 [ 466.375607][T10043] fido_id[10043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 466.942429][T10048] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1051'. [ 467.148359][T10048] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1051'. [ 467.170027][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 467.428688][ T5886] usb 4-1: USB disconnect, device number 34 [ 467.443594][T10056] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1053'. [ 467.648583][T10056] netlink: 'syz.5.1053': attribute type 21 has an invalid length. [ 467.717654][T10062] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1055'. [ 467.734849][T10064] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1056'. [ 467.759537][T10062] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1055'. [ 467.771578][T10064] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1056'. [ 468.336566][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.433115][T10070] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1058'. [ 469.274221][T10077] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1060'. [ 469.855731][T10084] netlink: 'syz.1.1061': attribute type 21 has an invalid length. [ 471.423318][ T8128] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 471.546595][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.622395][ T8128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.641047][ T8128] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 471.745158][ T8128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.898202][ T8128] usb 4-1: config 0 descriptor?? [ 471.992367][ T8128] usb 4-1: bad CDC descriptors [ 472.233872][T10117] syzkaller0: entered promiscuous mode [ 472.239457][T10117] syzkaller0: entered allmulticast mode [ 472.248707][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.259767][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.361772][T10119] syzkaller0: entered promiscuous mode [ 472.400172][T10119] syzkaller0: entered allmulticast mode [ 472.436366][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.818635][T10132] __nla_validate_parse: 6 callbacks suppressed [ 472.818649][T10132] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1074'. [ 472.846824][T10132] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1074'. [ 473.845223][ T5886] usb 4-1: USB disconnect, device number 35 [ 476.618079][T10167] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1084'. [ 476.637235][T10167] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1084'. [ 476.691764][T10169] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1085'. [ 476.703423][T10169] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1085'. [ 476.896214][ T5900] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 476.948758][T10175] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1087'. [ 476.968904][T10175] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1087'. [ 477.156757][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.180682][ T5900] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 477.258829][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.282695][ T5900] usb 5-1: config 0 descriptor?? [ 477.302790][ T5900] usb 5-1: bad CDC descriptors [ 477.308271][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.478875][T10189] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1090'. [ 477.537042][T10189] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1090'. [ 477.576120][ T5900] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 477.748166][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.759740][ T5900] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 477.772675][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.796437][ T5900] usb 3-1: config 0 descriptor?? [ 477.814298][ T5900] usb 3-1: bad CDC descriptors [ 478.891389][ T5886] usb 5-1: USB disconnect, device number 33 [ 478.975570][T10198] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1093'. [ 478.989965][T10199] syzkaller0: entered promiscuous mode [ 478.995628][T10199] syzkaller0: entered allmulticast mode [ 479.003512][T10198] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1093'. [ 479.014475][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.044127][T10199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.191548][T10202] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1094'. [ 479.241169][T10202] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1094'. [ 479.323324][T10204] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 479.663259][T10212] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1097'. [ 479.677672][T10211] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1098'. [ 479.687698][T10212] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1097'. [ 479.698065][T10211] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1098'. [ 480.951481][ T5886] usb 3-1: USB disconnect, device number 28 [ 481.395244][T10231] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1105'. [ 481.418010][T10235] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 481.538028][T10231] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1105'. [ 481.596332][T10243] bridge_slave_1: left allmulticast mode [ 481.602017][T10243] bridge_slave_1: left promiscuous mode [ 481.705584][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.943062][T10243] bridge_slave_0: left allmulticast mode [ 482.005191][T10243] bridge_slave_0: left promiscuous mode [ 482.019918][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.739834][T10252] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 483.056511][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.741683][T10269] netlink: 'syz.5.1112': attribute type 1 has an invalid length. [ 485.256591][ T5886] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 485.874804][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.896109][ T5886] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 485.905219][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.925651][T10274] __nla_validate_parse: 2 callbacks suppressed [ 485.925665][T10274] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1114'. [ 485.977918][T10274] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1114'. [ 486.017888][ T5886] usb 4-1: config 0 descriptor?? [ 486.033834][ T5886] usb 4-1: bad CDC descriptors [ 486.411159][T10284] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 486.462692][T10285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1118'. [ 486.547074][T10287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1117'. [ 486.939809][T10290] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1119'. [ 487.650393][T10307] hub 9-0:1.0: USB hub found [ 487.656061][T10307] hub 9-0:1.0: 1 port detected [ 487.671010][T10307] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1122'. [ 488.530393][ T8128] usb 4-1: USB disconnect, device number 36 [ 488.818202][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.205161][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1137'. [ 492.265759][T10360] hub 9-0:1.0: USB hub found [ 492.270949][T10360] hub 9-0:1.0: 1 port detected [ 492.345598][T10360] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1138'. [ 494.228468][T10379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1143'. [ 494.627525][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.796207][T10401] syzkaller0: entered promiscuous mode [ 496.824268][T10401] syzkaller0: entered allmulticast mode [ 498.505921][T10418] netlink: 'syz.4.1153': attribute type 21 has an invalid length. [ 499.894464][T10432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1156'. [ 500.353009][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.985506][ T95] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.633293][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.646274][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.427539][T10416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1153'. [ 502.678150][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 505.330461][T10471] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1166'. [ 507.044792][T10496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1171'. [ 508.286549][T10500] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1172'. [ 508.305547][T10500] netlink: 'syz.5.1172': attribute type 21 has an invalid length. [ 508.879959][T10513] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1174'. [ 509.573164][T10515] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1176'. [ 509.936919][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.141890][T10520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1177'. [ 510.966850][ T798] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 511.147803][ T798] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.415051][ T798] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 511.454753][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.485245][ T798] usb 4-1: Product: syz [ 511.500920][ T798] usb 4-1: Manufacturer: syz [ 511.518156][ T798] usb 4-1: SerialNumber: syz [ 511.542980][ T798] usb 4-1: config 0 descriptor?? [ 513.668387][T10557] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1185'. [ 513.895602][ T798] usb 4-1: USB disconnect, device number 37 [ 514.665008][T10568] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1188'. [ 515.635507][T10577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1190'. [ 515.645760][T10577] bridge_slave_1: left allmulticast mode [ 515.657072][T10577] bridge_slave_1: left promiscuous mode [ 515.670719][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.696546][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.857548][T10577] bridge_slave_0: left allmulticast mode [ 515.863352][T10577] bridge_slave_0: left promiscuous mode [ 515.869414][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.117092][T10584] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1192'. [ 516.654348][T10588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1191'. [ 516.665298][T10592] netlink: 'syz.1.1191': attribute type 21 has an invalid length. [ 520.493001][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1198'. [ 520.816967][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.306573][T10633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1201'. [ 525.696118][ T5886] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 525.951232][ T5886] usb 3-1: device descriptor read/64, error -71 [ 526.366767][ T5886] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 526.598369][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.948201][ T5886] usb 3-1: device descriptor read/64, error -71 [ 527.209584][ T5886] usb usb3-port1: attempt power cycle [ 527.568350][ T5886] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 527.603156][ T5886] usb 3-1: device descriptor read/8, error -71 [ 528.076732][ T5886] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 528.398939][ T5886] usb 3-1: device descriptor read/8, error -71 [ 528.668444][ T5886] usb usb3-port1: unable to enumerate USB device [ 531.386187][ T5886] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 531.547926][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.592882][ T5886] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 531.632658][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.659761][ T5886] usb 6-1: config 0 descriptor?? [ 531.684808][ T5886] usb 6-1: bad CDC descriptors [ 531.914609][ T5886] usb 6-1: USB disconnect, device number 11 [ 532.374300][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.385420][ T344] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 536.478768][T10753] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1232'. [ 536.550297][T10753] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1232'. [ 536.822085][T10757] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1234'. [ 536.841590][T10757] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1234'. [ 537.468316][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.744480][T10782] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1242'. [ 538.767084][T10782] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1242'. [ 538.896151][ T8128] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 539.046444][ T8128] usb 4-1: device descriptor read/64, error -71 [ 539.300484][ T8128] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 539.446097][ T8128] usb 4-1: device descriptor read/64, error -71 [ 539.691368][ T8128] usb usb4-port1: attempt power cycle [ 539.722353][T10803] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1245'. [ 540.096332][ T8128] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 540.135258][ T8128] usb 4-1: device descriptor read/8, error -71 [ 540.647112][ T8128] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 540.857658][ T8128] usb 4-1: device descriptor read/8, error -71 [ 541.036142][ T8128] usb usb4-port1: unable to enumerate USB device [ 542.228353][T10826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1251'. [ 543.217099][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.686547][T10848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1257'. [ 548.419328][T10890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1263'. [ 548.440986][T10882] netlink: 'syz.4.1263': attribute type 21 has an invalid length. [ 548.987979][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.466133][ T8128] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 549.616153][ T8128] usb 6-1: device descriptor read/64, error -71 [ 549.866078][ T8128] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 550.026376][ T8128] usb 6-1: device descriptor read/64, error -71 [ 550.147443][ T8128] usb usb6-port1: attempt power cycle [ 550.371174][T10909] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1271'. [ 550.472367][T10909] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1271'. [ 550.585700][ T8128] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 550.780846][ T8128] usb 6-1: device descriptor read/8, error -71 [ 551.036454][ T8128] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 551.067099][ T8128] usb 6-1: device descriptor read/8, error -71 [ 551.176458][ T8128] usb usb6-port1: unable to enumerate USB device [ 551.475930][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1275'. [ 553.451433][T10943] hub 9-0:1.0: USB hub found [ 553.466199][T10943] hub 9-0:1.0: 1 port detected [ 554.551908][T10953] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1281'. [ 554.618670][T10953] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1281'. [ 554.741774][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.596824][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.035879][T11037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1297'. [ 563.062647][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.079495][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.106569][T11039] netlink: 'syz.4.1297': attribute type 21 has an invalid length. [ 563.730671][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1299'. [ 564.347067][ T344] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.911739][ T798] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 565.138227][ T798] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 565.149468][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.166314][ T798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 565.179686][ T798] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 565.222485][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.643667][ T798] usb 4-1: config 0 descriptor?? [ 566.089343][ T798] holtek_kbd 0003:04D9:A055.001D: bogus close delimiter [ 566.257055][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.307964][ T798] holtek_kbd 0003:04D9:A055.001D: item 0 4 2 10 parsing failed [ 566.416993][ T798] holtek_kbd 0003:04D9:A055.001D: probe with driver holtek_kbd failed with error -22 [ 566.440068][ T798] usb 4-1: USB disconnect, device number 42 [ 569.772018][T11099] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1313'. [ 570.847152][T11114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1317'. [ 572.030024][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.652500][T11130] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1321'. [ 572.723727][T11130] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1321'. [ 573.546119][ T5886] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 573.768437][ T5886] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 573.974181][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.009684][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 574.107166][ T5886] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 574.329892][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.529634][ T5886] usb 4-1: config 0 descriptor?? [ 574.879389][ T8128] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 575.042521][ T5886] holtek_kbd 0003:04D9:A055.001E: bogus close delimiter [ 575.115907][ T8128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.126661][ T8128] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.145263][ T5886] holtek_kbd 0003:04D9:A055.001E: item 0 4 2 10 parsing failed [ 575.155551][ T5886] holtek_kbd 0003:04D9:A055.001E: probe with driver holtek_kbd failed with error -22 [ 575.165394][ T8128] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 575.188164][ T8128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.315544][ T5886] usb 4-1: USB disconnect, device number 43 [ 575.363253][ T8128] usb 3-1: config 0 descriptor?? [ 575.567164][T11161] netlink: 'syz.1.1328': attribute type 1 has an invalid length. [ 575.926157][ T8128] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 576.066200][ T8128] usb 5-1: device descriptor read/64, error -71 [ 576.486641][ T8128] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 576.626498][ T8128] usb 5-1: device descriptor read/64, error -71 [ 576.738428][ T8128] usb usb5-port1: attempt power cycle [ 577.113646][ T8128] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 577.180402][ T8128] usb 5-1: device descriptor read/8, error -71 [ 577.398463][T11174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1331'. [ 577.427740][ T8128] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 577.467862][T11175] netlink: 'syz.1.1331': attribute type 21 has an invalid length. [ 577.499214][ T8128] usb 5-1: device descriptor read/8, error -71 [ 577.566143][ T5886] usb 3-1: USB disconnect, device number 33 [ 577.617584][ T8128] usb usb5-port1: unable to enumerate USB device [ 577.778263][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.314147][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1333'. [ 582.996169][ T5886] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 583.160022][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.172774][ T5886] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.182099][ T5886] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 583.228516][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.299271][ T5886] usb 6-1: config 0 descriptor?? [ 583.540962][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.716248][ T5900] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 583.901352][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.915291][ T5900] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 583.941311][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.982458][ T5900] usb 4-1: config 0 descriptor?? [ 584.003354][ T5900] usb 4-1: bad CDC descriptors [ 585.544665][T11253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1349'. [ 585.789334][ T5900] usb 6-1: USB disconnect, device number 16 [ 586.271574][ T5886] usb 4-1: USB disconnect, device number 44 [ 587.939662][T11279] hub 9-0:1.0: USB hub found [ 587.946170][T11279] hub 9-0:1.0: 1 port detected [ 588.293225][T11283] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 589.318735][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 591.012327][T11306] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 591.316158][ T5900] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 591.908122][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.918650][ T5900] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 591.946162][ T5900] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 592.011210][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.029690][ T5900] usb 6-1: config 0 descriptor?? [ 592.746630][ T5886] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 593.058623][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.096338][ T5886] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 593.116397][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.148888][ T5886] usb 2-1: config 0 descriptor?? [ 593.184138][ T5886] usb 2-1: bad CDC descriptors [ 594.532155][ T5886] usb 6-1: USB disconnect, device number 17 [ 595.030362][ T8128] usb 2-1: USB disconnect, device number 30 [ 595.064427][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.339851][ T1326] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.739144][T11350] hub 9-0:1.0: USB hub found [ 596.746155][T11350] hub 9-0:1.0: 1 port detected [ 596.769180][T11350] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1370'. [ 600.826528][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.620736][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.346500][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.619964][T11538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1413'. [ 618.096515][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.014162][T11567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1419'. [ 621.996107][ T5886] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 622.258136][ T5886] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 622.339297][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.371523][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 622.413066][ T5886] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 622.426624][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.477450][ T5886] usb 6-1: config 0 descriptor?? [ 623.037488][ T5886] holtek_kbd 0003:04D9:A055.001F: bogus close delimiter [ 623.056042][ T5886] holtek_kbd 0003:04D9:A055.001F: item 0 4 2 10 parsing failed [ 623.092666][ T5886] holtek_kbd 0003:04D9:A055.001F: probe with driver holtek_kbd failed with error -22 [ 623.253344][ T5886] usb 6-1: USB disconnect, device number 18 [ 624.194626][T11591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1425'. [ 624.491750][T11598] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1427'. [ 624.504848][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.511444][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.715217][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.344381][ T95] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 629.411063][T11636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1438'. [ 629.422605][ T8128] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 629.688298][ T8128] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 629.722538][ T8128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.756021][ T8128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 629.804383][ T8128] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 629.857993][ T8128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.089135][ T8128] usb 3-1: config 0 descriptor?? [ 630.535009][ T8128] holtek_kbd 0003:04D9:A055.0020: bogus close delimiter [ 630.550332][ T8128] holtek_kbd 0003:04D9:A055.0020: item 0 4 2 10 parsing failed [ 630.569966][ T8128] holtek_kbd 0003:04D9:A055.0020: probe with driver holtek_kbd failed with error -22 [ 630.894823][ T8128] usb 3-1: USB disconnect, device number 34 [ 632.817226][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 632.986365][ T8128] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 633.152969][ T8128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.166174][ T8128] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 633.207155][ T8128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.254014][ T8128] usb 5-1: config 0 descriptor?? [ 633.278632][ T8128] usb 5-1: bad CDC descriptors [ 633.591394][ T8128] usb 5-1: USB disconnect, device number 38 [ 634.650192][T11689] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1453'. [ 636.606097][ T8128] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 636.923409][ T8128] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 636.935017][ T8128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.946904][ T8128] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 636.991609][ T8128] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 637.014817][ T8128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.057722][ T8128] usb 4-1: config 0 descriptor?? [ 637.088235][ T8128] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 637.944425][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.404709][ T8128] usb 4-1: USB disconnect, device number 45 [ 639.795249][T11748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1466'. [ 641.727015][T11765] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1470'. [ 641.862850][T11767] netlink: 'syz.5.1470': attribute type 21 has an invalid length. [ 643.386432][T11775] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1472'. [ 643.696497][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.760240][T11797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1477'. [ 647.325459][T11815] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1481'. [ 648.293190][ T8128] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 648.511587][ T8128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.525216][ T8128] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 648.549138][ T8128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.583139][ T8128] usb 6-1: config 0 descriptor?? [ 648.771878][ T8128] usb 6-1: bad CDC descriptors [ 648.976514][T11829] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1485'. [ 649.456963][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.494339][T11836] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1487'. [ 649.621035][T11843] netlink: 'syz.4.1487': attribute type 21 has an invalid length. [ 650.815781][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1490'. [ 650.889465][ T5886] usb 6-1: USB disconnect, device number 19 [ 652.176119][ T5886] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 652.379378][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.405626][ T5886] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 652.447065][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.513444][ T5886] usb 3-1: config 0 descriptor?? [ 652.847695][ T5886] usb 3-1: bad CDC descriptors [ 652.873060][T11869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1496'. [ 653.067278][ T8128] usb 3-1: USB disconnect, device number 35 [ 653.109624][T11874] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1497'. [ 655.245536][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 656.256749][T11905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1504'. [ 656.302249][T11905] netlink: 'syz.2.1504': attribute type 21 has an invalid length. [ 656.490458][ T5886] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 656.693449][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.731081][ T5886] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 656.771238][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.841338][ T5886] usb 5-1: config 0 descriptor?? [ 656.862846][ T5886] usb 5-1: bad CDC descriptors [ 657.208689][T11913] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1506'. [ 658.512825][T11919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1507'. [ 658.676709][ T5886] usb 5-1: USB disconnect, device number 39 [ 658.730947][T11921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1508'. [ 659.418062][ T8128] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 659.660758][ T8128] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 659.675446][ T8128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.694268][ T8128] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.713266][ T8128] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 659.746580][ T8128] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 659.778137][ T8128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.814639][ T8128] usb 4-1: config 0 descriptor?? [ 660.238765][ T8128] usbhid 4-1:0.0: can't add hid device: -71 [ 660.244771][ T8128] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 660.293433][ T8128] usb 4-1: USB disconnect, device number 46 [ 660.342649][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 661.000496][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.024479][ T8128] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 664.210924][ T8128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.225734][ T8128] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 664.246135][ T8128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.416590][ T8128] usb 4-1: config 0 descriptor?? [ 664.437332][ T8128] usb 4-1: bad CDC descriptors [ 665.216117][ T5900] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 665.516267][ T5900] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 665.537213][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.556104][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 665.587187][ T5900] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 665.624406][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.666694][ T5900] usb 6-1: config 0 descriptor?? [ 666.273519][ T5900] holtek_kbd 0003:04D9:A055.0021: bogus close delimiter [ 666.283247][ T5900] holtek_kbd 0003:04D9:A055.0021: item 0 4 2 10 parsing failed [ 666.297509][ T5900] holtek_kbd 0003:04D9:A055.0021: probe with driver holtek_kbd failed with error -22 [ 666.476095][ T5886] usb 6-1: USB disconnect, device number 20 [ 666.701955][ T798] usb 4-1: USB disconnect, device number 47 [ 666.746409][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 668.868250][T12018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1531'. [ 669.887100][T12029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1534'. [ 671.335621][T12037] hub 9-0:1.0: USB hub found [ 671.341427][T12037] hub 9-0:1.0: 1 port detected [ 671.359506][T12037] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1535'. [ 671.936424][ T798] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 672.110851][ T798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.134217][ T798] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 672.151629][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.170519][ T798] usb 6-1: config 0 descriptor?? [ 672.195568][ T798] usb 6-1: bad CDC descriptors [ 672.496538][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.991110][T12046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1538'. [ 674.500120][T12058] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1540'. [ 674.552836][ T798] usb 6-1: USB disconnect, device number 21 [ 675.189098][T12074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1544'. [ 675.277559][T12075] netlink: 'syz.3.1544': attribute type 21 has an invalid length. [ 677.366090][ T798] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 677.792887][ T798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.803525][ T798] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 677.813907][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.840835][ T798] usb 3-1: config 0 descriptor?? [ 677.878994][ T798] usb 3-1: bad CDC descriptors [ 678.182550][T12099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1549'. [ 678.197661][T12099] netlink: 'syz.1.1549': attribute type 21 has an invalid length. [ 678.383641][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.408939][ T798] usb 3-1: USB disconnect, device number 36 [ 680.326142][ T798] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 680.409564][T12120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1555'. [ 680.609519][ T798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.901149][ T798] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 680.924368][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.938628][ T798] usb 6-1: config 0 descriptor?? [ 680.946626][ T798] usb 6-1: bad CDC descriptors [ 681.956097][T12130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1558'. [ 682.289926][T12134] netlink: 'syz.2.1558': attribute type 21 has an invalid length. [ 682.998452][ T8128] usb 6-1: USB disconnect, device number 22 [ 684.031332][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 684.914207][T12160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1565'. [ 684.936797][T12164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1566'. [ 684.963552][T12160] netlink: 'syz.3.1565': attribute type 21 has an invalid length. [ 685.946400][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.952963][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.178089][T12199] hub 9-0:1.0: USB hub found [ 689.185688][T12199] hub 9-0:1.0: 1 port detected [ 689.212876][T12199] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1572'. [ 689.725638][T12203] hub 9-0:1.0: USB hub found [ 689.731053][T12203] hub 9-0:1.0: 1 port detected [ 689.796006][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.145328][T12216] hub 9-0:1.0: USB hub found [ 691.704864][T12216] hub 9-0:1.0: 1 port detected [ 692.259250][T12229] hub 9-0:1.0: USB hub found [ 692.265416][T12229] hub 9-0:1.0: 1 port detected [ 692.281037][T12229] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1581'. [ 692.336689][ T344] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 695.536657][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 695.558514][T12252] hub 9-0:1.0: USB hub found [ 695.578421][T12252] hub 9-0:1.0: 1 port detected [ 695.637909][T12252] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1588'. [ 696.026108][ T8128] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 696.190104][T12266] hub 9-0:1.0: USB hub found [ 696.195257][T12266] hub 9-0:1.0: 1 port detected [ 696.232092][ T8128] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 696.250919][ T8128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.282031][ T8128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.313588][ T8128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 696.341192][ T8128] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 696.350828][ T8128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.369390][ T8128] usb 3-1: config 0 descriptor?? [ 696.677607][T12273] hub 9-0:1.0: USB hub found [ 696.683240][T12273] hub 9-0:1.0: 1 port detected [ 696.721287][T12273] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1593'. [ 696.800449][ T8128] usbhid 3-1:0.0: can't add hid device: -71 [ 696.807502][ T8128] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 696.836597][ T8128] usb 3-1: USB disconnect, device number 37 [ 700.870218][T12321] hub 9-0:1.0: USB hub found [ 700.875574][T12321] hub 9-0:1.0: 1 port detected [ 700.903486][T12321] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1603'. [ 701.326946][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.469636][T12330] hub 9-0:1.0: USB hub found [ 702.474821][T12330] hub 9-0:1.0: 1 port detected [ 702.503415][T12330] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1605'. [ 704.240230][T12352] hub 9-0:1.0: USB hub found [ 704.249994][T12352] hub 9-0:1.0: 1 port detected [ 704.411472][T12351] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1610'. [ 705.246099][T12359] hub 9-0:1.0: USB hub found [ 705.251187][T12359] hub 9-0:1.0: 1 port detected [ 705.333809][T12359] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1611'. [ 705.498899][T12365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1613'. [ 706.416578][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.818553][T12382] hub 9-0:1.0: USB hub found [ 706.825009][T12382] hub 9-0:1.0: 1 port detected [ 706.840471][T12382] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1616'. [ 710.396451][T12401] hub 9-0:1.0: USB hub found [ 710.402573][T12401] hub 9-0:1.0: 1 port detected [ 710.571533][T12409] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1622'. [ 711.546508][ T5900] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 711.714588][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.997002][ T5900] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 712.008449][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.164847][ T5900] usb 6-1: config 0 descriptor?? [ 712.177014][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.194849][ T5900] usb 6-1: bad CDC descriptors [ 712.522536][ T798] usb 6-1: USB disconnect, device number 23 [ 712.763570][T12429] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1628'. [ 713.594963][T12435] hub 9-0:1.0: USB hub found [ 713.601201][T12435] hub 9-0:1.0: 1 port detected [ 713.617953][T12435] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1629'. [ 714.318144][T12446] hub 9-0:1.0: USB hub found [ 714.324432][T12446] hub 9-0:1.0: 1 port detected [ 714.413342][T12447] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1631'. [ 714.672195][ T7215] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 714.717502][ T7215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 714.725874][ T7215] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 714.733841][ T7215] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 714.761495][ T7215] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.881157][T12450] hub 9-0:1.0: USB hub found [ 714.887575][T12450] hub 9-0:1.0: 1 port detected [ 714.910188][T12450] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1633'. [ 715.892786][T12451] chnl_net:caif_netlink_parms(): no params data found [ 716.929884][ T7215] Bluetooth: hci5: command tx timeout [ 717.008986][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.023562][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.031255][T12451] bridge_slave_0: entered allmulticast mode [ 717.088653][T12451] bridge_slave_0: entered promiscuous mode [ 717.101411][T12469] hub 9-0:1.0: USB hub found [ 717.107941][T12469] hub 9-0:1.0: 1 port detected [ 717.114200][T12451] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.127230][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.135396][T12451] bridge_slave_1: entered allmulticast mode [ 717.174987][T12451] bridge_slave_1: entered promiscuous mode [ 717.572065][T12451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.590987][T12451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.704979][T12451] team0: Port device team_slave_0 added [ 717.733998][T12451] team0: Port device team_slave_1 added [ 717.812961][T12451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.834411][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.896457][T12451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.936459][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.967971][T12451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.984374][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.054628][T12451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.338526][T12451] hsr_slave_0: entered promiscuous mode [ 718.359206][T12451] hsr_slave_1: entered promiscuous mode [ 718.452841][T12451] debugfs: 'hsr0' already exists in 'hsr' [ 718.472548][T12451] Cannot create hsr debugfs directory [ 719.026240][ T7215] Bluetooth: hci5: command tx timeout [ 719.170912][T12487] hub 9-0:1.0: USB hub found [ 719.177041][T12487] hub 9-0:1.0: 1 port detected [ 719.226407][T12489] hub 9-0:1.0: USB hub found [ 719.232575][T12489] hub 9-0:1.0: 1 port detected [ 719.460806][T12487] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1639'. [ 719.478959][T12489] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1641'. [ 719.776032][ T798] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 719.951854][T12451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 719.964938][ T798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.996075][ T798] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 720.061949][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.081144][ T798] usb 5-1: config 0 descriptor?? [ 720.097497][ T798] usb 5-1: bad CDC descriptors [ 720.127771][T12451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 720.275548][T12451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 720.408966][ T798] usb 5-1: USB disconnect, device number 40 [ 720.450415][T12451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 720.894870][T12451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.964227][T12451] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.047958][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.055955][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.056604][ T7215] Bluetooth: hci5: command tx timeout [ 721.219660][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.226847][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.285123][T12451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.299919][T12451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.490779][T12512] hub 9-0:1.0: USB hub found [ 721.497029][T12512] hub 9-0:1.0: 1 port detected [ 721.897911][T12512] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1644'. [ 722.819064][T12451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.059542][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.138160][ T7215] Bluetooth: hci5: command tx timeout [ 723.157011][T12451] veth0_vlan: entered promiscuous mode [ 723.203248][T12526] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1647'. [ 723.274792][T12526] netlink: 'syz.5.1647': attribute type 21 has an invalid length. [ 723.347548][T12451] veth1_vlan: entered promiscuous mode [ 723.447248][T12451] veth0_macvtap: entered promiscuous mode [ 723.478664][T12451] veth1_macvtap: entered promiscuous mode [ 723.520484][T12451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.545771][T12451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.565061][ T95] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.576641][ T95] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.660063][T12532] hub 9-0:1.0: USB hub found [ 723.666109][T12532] hub 9-0:1.0: 1 port detected [ 723.684014][ T95] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.703650][ T95] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.761214][T12532] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1649'. [ 723.909962][T12537] hub 9-0:1.0: USB hub found [ 723.916343][T12537] hub 9-0:1.0: 1 port detected [ 723.955379][T12537] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1648'. [ 724.093824][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.103797][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.187691][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.196844][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.367143][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.468577][T12542] hub 9-0:1.0: USB hub found [ 724.475869][T12542] hub 9-0:1.0: 1 port detected [ 724.535868][T12542] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1650'. [ 724.872219][T12546] hub 9-0:1.0: USB hub found [ 724.882413][T12546] hub 9-0:1.0: 1 port detected [ 725.256301][T12546] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1632'. [ 726.647835][T12556] hub 9-0:1.0: USB hub found [ 726.654395][T12556] hub 9-0:1.0: 1 port detected [ 726.765096][T12556] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1652'. [ 727.364048][T12568] hub 9-0:1.0: USB hub found [ 727.376171][T12568] hub 9-0:1.0: 1 port detected [ 727.398372][T12568] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1654'. [ 728.822684][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.900425][T12581] hub 9-0:1.0: USB hub found [ 728.906265][T12581] hub 9-0:1.0: 1 port detected [ 728.931517][T12581] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1657'. [ 729.155697][T12538] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 729.358990][T12538] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.370317][T12538] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 729.380373][T12538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.397230][T12538] usb 6-1: config 0 descriptor?? [ 729.413124][T12538] usb 6-1: bad CDC descriptors [ 729.700736][T12538] usb 6-1: USB disconnect, device number 24 [ 730.991047][T12594] hub 9-0:1.0: USB hub found [ 730.997324][T12594] hub 9-0:1.0: 1 port detected [ 731.012232][T12594] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1660'. [ 731.969825][T12607] hub 9-0:1.0: USB hub found [ 731.976197][T12607] hub 9-0:1.0: 1 port detected [ 731.994517][T12602] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1662'. [ 732.191517][T12611] hub 9-0:1.0: USB hub found [ 732.198338][T12611] hub 9-0:1.0: 1 port detected [ 732.219398][T12611] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1663'. [ 734.356178][T12633] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1667'. [ 734.577837][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 734.705717][T12636] hub 9-0:1.0: USB hub found [ 734.711150][T12636] hub 9-0:1.0: 1 port detected [ 734.867686][T12633] bridge_slave_1: left allmulticast mode [ 734.873590][T12633] bridge_slave_1: left promiscuous mode [ 734.880328][T12633] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.968862][T12633] bridge_slave_0: left allmulticast mode [ 735.000253][T12633] bridge_slave_0: left promiscuous mode [ 735.131267][T12633] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.986110][T12636] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1669'. [ 736.345034][T12645] hub 9-0:1.0: USB hub found [ 736.351258][T12645] hub 9-0:1.0: 1 port detected [ 736.370548][T12645] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1671'. [ 736.559596][T12648] hub 9-0:1.0: USB hub found [ 736.566092][T12648] hub 9-0:1.0: 1 port detected [ 736.586137][ T5886] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 736.779461][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.793005][ T5886] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 736.803798][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.833882][ T5886] usb 4-1: config 0 descriptor?? [ 736.857845][ T5886] usb 4-1: bad CDC descriptors [ 736.985503][T12652] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1673'. [ 737.257510][ T5829] usb 4-1: USB disconnect, device number 48 [ 738.460554][T12661] hub 9-0:1.0: USB hub found [ 738.466080][T12661] hub 9-0:1.0: 1 port detected [ 738.508862][T12661] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1675'. [ 738.643011][T12667] hub 9-0:1.0: USB hub found [ 738.649502][T12667] hub 9-0:1.0: 1 port detected [ 739.861709][T12677] hub 9-0:1.0: USB hub found [ 739.867651][T12677] hub 9-0:1.0: 1 port detected [ 739.903397][T12677] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1679'. [ 740.550958][T12682] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1680'. [ 740.935692][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1681'. [ 744.177969][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 744.956062][T12720] hub 9-0:1.0: USB hub found [ 744.965464][T12720] hub 9-0:1.0: 1 port detected [ 744.998959][T12720] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1689'. [ 746.198032][T12726] hub 9-0:1.0: USB hub found [ 746.328642][T12726] hub 9-0:1.0: 1 port detected [ 747.376134][ T5829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 747.397644][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.406230][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.538340][ T5829] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 747.773435][T12743] hub 9-0:1.0: USB hub found [ 747.897117][T12743] hub 9-0:1.0: 1 port detected [ 748.081451][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.104751][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.135022][ T5829] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 748.184291][ T5829] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 748.382159][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.400869][ T5829] usb 7-1: config 0 descriptor?? [ 748.888549][ T5829] holtek_kbd 0003:04D9:A055.0022: unknown main item tag 0x0 [ 748.902454][ T5829] holtek_kbd 0003:04D9:A055.0022: unknown main item tag 0x0 [ 748.919194][ T5829] holtek_kbd 0003:04D9:A055.0022: unknown main item tag 0x0 [ 748.936206][ T5829] holtek_kbd 0003:04D9:A055.0022: unknown main item tag 0x0 [ 748.954139][ T5829] holtek_kbd 0003:04D9:A055.0022: unknown main item tag 0x0 [ 749.169647][ T5829] holtek_kbd 0003:04D9:A055.0022: unknown main item tag 0x0 [ 749.186074][ T5829] holtek_kbd 0003:04D9:A055.0022: unknown main item tag 0x0 [ 749.806557][ T5829] holtek_kbd 0003:04D9:A055.0022: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 749.892463][ T5829] usb 7-1: USB disconnect, device number 2 [ 749.939725][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.409302][T12759] fido_id[12759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 750.463697][T12764] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1699'. [ 750.998069][T12770] hub 9-0:1.0: USB hub found [ 751.006134][T12770] hub 9-0:1.0: 1 port detected [ 751.331887][T12780] hub 9-0:1.0: USB hub found [ 751.389242][T12780] hub 9-0:1.0: 1 port detected [ 751.691329][T12779] hub 9-0:1.0: USB hub found [ 751.697937][T12779] hub 9-0:1.0: 1 port detected [ 751.707967][T12780] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1702'. [ 753.600230][T12801] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1706'. [ 753.627339][T12801] netlink: 'syz.6.1706': attribute type 21 has an invalid length. [ 755.468963][T12816] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1709'. [ 755.755500][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.337335][ T95] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 757.829342][T12834] hub 9-0:1.0: USB hub found [ 757.836034][T12834] hub 9-0:1.0: 1 port detected [ 758.610143][T12841] hub 9-0:1.0: USB hub found [ 758.616496][T12841] hub 9-0:1.0: 1 port detected [ 758.636571][T12841] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1715'. [ 760.817050][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.024154][T12861] netlink: 'syz.3.1719': attribute type 21 has an invalid length. [ 761.617663][T12863] hub 9-0:1.0: USB hub found [ 761.622626][T12863] hub 9-0:1.0: 1 port detected [ 763.395109][T12877] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1723'. [ 764.877366][T12895] hub 9-0:1.0: USB hub found [ 764.885344][T12895] hub 9-0:1.0: 1 port detected [ 764.982210][T12902] hub 9-0:1.0: USB hub found [ 764.996153][T12902] hub 9-0:1.0: 1 port detected [ 765.031926][T12902] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1728'. [ 765.697799][T12906] hub 9-0:1.0: USB hub found [ 765.704913][T12906] hub 9-0:1.0: 1 port detected [ 766.474220][T12910] hub 9-0:1.0: USB hub found [ 766.480501][T12910] hub 9-0:1.0: 1 port detected [ 766.493955][T12910] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1730'. [ 766.579813][ T95] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.865496][T12917] hub 9-0:1.0: USB hub found [ 766.871582][T12917] hub 9-0:1.0: 1 port detected [ 767.731115][T12928] hub 9-0:1.0: USB hub found [ 767.756093][T12928] hub 9-0:1.0: 1 port detected [ 769.282165][T12942] netlink: 'syz.4.1736': attribute type 21 has an invalid length. [ 770.453896][T12953] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1738'. [ 771.602364][T12962] hub 9-0:1.0: USB hub found [ 771.611491][T12962] hub 9-0:1.0: 1 port detected [ 771.632846][T12962] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1740'. [ 772.336380][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 773.196028][ T5829] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 773.426994][ T5829] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 773.579712][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.589633][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 773.614093][ T5829] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 773.623389][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.634259][ T5829] usb 5-1: config 0 descriptor?? [ 773.642770][ T5886] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 773.918543][T12978] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1745'. [ 774.009071][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.031807][ T5886] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 774.096527][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 774.104902][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 774.115474][ T5829] usbhid 5-1:0.0: can't add hid device: -71 [ 774.115717][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.123613][ T5829] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 774.163257][ T5829] usb 5-1: USB disconnect, device number 41 [ 774.187627][ T5886] usb 3-1: config 0 descriptor?? [ 774.459205][ T5886] usb 3-1: bad CDC descriptors [ 774.772773][ T5829] usb 3-1: USB disconnect, device number 38 [ 775.216821][T12986] hub 9-0:1.0: USB hub found [ 775.226108][T12986] hub 9-0:1.0: 1 port detected [ 775.262864][T12986] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1747'. [ 775.876730][T12999] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1751'. [ 776.020018][T13001] hub 9-0:1.0: USB hub found [ 776.026825][T13001] hub 9-0:1.0: 1 port detected [ 776.052991][T13001] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1750'. [ 776.148754][T13004] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1749'. [ 777.826153][T13012] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1753'. [ 778.096984][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 778.338594][T13019] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1754'. [ 778.964718][T13021] hub 9-0:1.0: USB hub found [ 778.996640][T13021] hub 9-0:1.0: 1 port detected [ 779.077039][T13022] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1755'. [ 780.307983][T13031] hub 9-0:1.0: USB hub found [ 780.315784][T13031] hub 9-0:1.0: 1 port detected [ 780.343086][T13031] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1756'. [ 781.159040][T13042] hub 9-0:1.0: USB hub found [ 781.175589][T13042] hub 9-0:1.0: 1 port detected [ 781.188869][T13042] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1758'. [ 782.996103][T12538] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 783.124316][T13059] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1763'. [ 783.258777][T12538] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.293505][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 783.317690][T12538] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 783.381576][T12538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.469770][T12538] usb 5-1: config 0 descriptor?? [ 783.694546][T12538] usb 5-1: bad CDC descriptors [ 783.934275][T12538] usb 5-1: USB disconnect, device number 42 [ 786.463066][T13088] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1768'. [ 786.659985][T13089] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1769'. [ 788.338475][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 789.000519][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 789.887473][T13117] hub 9-0:1.0: USB hub found [ 789.893287][T13117] hub 9-0:1.0: 1 port detected [ 789.936380][T13117] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1775'. [ 790.832396][T13129] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1778'. [ 791.181042][T13134] hub 9-0:1.0: USB hub found [ 791.187298][T13134] hub 9-0:1.0: 1 port detected [ 791.203671][T13134] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1780'. [ 792.222321][T13146] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1782'. [ 793.725987][T13154] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1784'. [ 793.863643][T13162] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1786'. [ 794.230784][T13168] netlink: 'syz.2.1787': attribute type 21 has an invalid length. [ 794.263748][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.384076][T13170] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1788'. [ 795.915833][T13181] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1790'. [ 796.540288][T13185] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1791'. [ 797.667180][T13192] hub 9-0:1.0: USB hub found [ 797.672586][T13192] hub 9-0:1.0: 1 port detected [ 797.701056][T13192] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1792'. [ 798.037003][T13193] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1793'. [ 798.256996][T13198] hub 9-0:1.0: USB hub found [ 798.266310][T13198] hub 9-0:1.0: 1 port detected [ 798.302567][T13198] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1794'. [ 798.649094][T13201] hub 9-0:1.0: USB hub found [ 798.654891][T13201] hub 9-0:1.0: 1 port detected [ 798.690017][T13201] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1795'. [ 799.856924][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 800.729836][T13220] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1799'. [ 802.463159][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1803'. [ 803.234021][T13241] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1804'. [ 805.204789][T13253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1807'. [ 805.512341][T13258] hub 9-0:1.0: USB hub found [ 805.617016][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 805.757607][T13258] hub 9-0:1.0: 1 port detected [ 805.785430][T13264] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1808'. [ 805.832878][T13265] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1806'. [ 807.230220][T13273] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1811'. [ 807.683176][T13278] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1812'. [ 808.562863][T13284] hub 9-0:1.0: USB hub found [ 808.568854][T13284] hub 9-0:1.0: 1 port detected [ 808.699372][T13285] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1813'. [ 808.827335][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.836644][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.851117][T13288] hub 9-0:1.0: USB hub found [ 808.856475][T13288] hub 9-0:1.0: 1 port detected [ 808.878233][T13288] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1814'. [ 809.424799][T13292] hub 9-0:1.0: USB hub found [ 809.429928][T13292] hub 9-0:1.0: 1 port detected [ 809.499189][T13292] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1815'. [ 810.723723][T13302] hub 9-0:1.0: USB hub found [ 810.736371][T13302] hub 9-0:1.0: 1 port detected [ 810.770595][T13302] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1817'. [ 811.386436][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 811.874687][T13311] hub 9-0:1.0: USB hub found [ 811.880654][T13311] hub 9-0:1.0: 1 port detected [ 811.891231][T13311] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1819'. [ 812.177281][T13315] hub 9-0:1.0: USB hub found [ 812.186212][T13315] hub 9-0:1.0: 1 port detected [ 812.214565][T13315] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1820'. [ 813.593282][T13326] hub 9-0:1.0: USB hub found [ 813.605108][T13326] hub 9-0:1.0: 1 port detected [ 813.637440][T13326] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1823'. [ 814.599936][T13332] hub 9-0:1.0: USB hub found [ 814.605220][T13332] hub 9-0:1.0: 1 port detected [ 814.620173][T13332] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1824'. [ 815.879778][T13344] netlink: 'syz.5.1827': attribute type 21 has an invalid length. [ 816.418815][T13349] hub 9-0:1.0: USB hub found [ 816.426105][T13349] hub 9-0:1.0: 1 port detected [ 816.553614][T13349] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1828'. [ 816.713701][T13352] hub 9-0:1.0: USB hub found [ 816.726083][T13352] hub 9-0:1.0: 1 port detected [ 816.756107][T13352] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1829'. [ 817.150758][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 817.443418][T13354] hub 9-0:1.0: USB hub found [ 817.448401][T13354] hub 9-0:1.0: 1 port detected [ 817.616235][T13354] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1830'. [ 818.450265][T13366] hub 9-0:1.0: USB hub found [ 818.456078][T13366] hub 9-0:1.0: 1 port detected [ 818.478057][T13366] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1833'. [ 819.351211][T13375] hub 9-0:1.0: USB hub found [ 819.357191][T13375] hub 9-0:1.0: 1 port detected [ 819.526037][T13378] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1835'. [ 819.556271][T13379] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1834'. [ 820.433077][ T344] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 820.876575][T13387] hub 9-0:1.0: USB hub found [ 821.462283][T13387] hub 9-0:1.0: 1 port detected [ 821.483267][T13387] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1837'. [ 822.195252][T13397] hub 9-0:1.0: USB hub found [ 822.201072][T13397] hub 9-0:1.0: 1 port detected [ 822.215133][T13397] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1839'. [ 822.752524][T13405] hub 9-0:1.0: USB hub found [ 822.758767][T13405] hub 9-0:1.0: 1 port detected [ 822.775258][T13405] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1841'. [ 822.946821][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 823.760570][T13416] hub 9-0:1.0: USB hub found [ 823.765805][T13416] hub 9-0:1.0: 1 port detected [ 824.032934][T13416] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1843'. [ 825.012833][T13421] netlink: 'syz.4.1844': attribute type 21 has an invalid length. [ 825.705349][T13430] hub 9-0:1.0: USB hub found [ 825.731997][T13427] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1846'. [ 825.811170][T13430] hub 9-0:1.0: 1 port detected [ 825.892299][T13432] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1845'. [ 826.649759][T13443] hub 9-0:1.0: USB hub found [ 826.656345][T13443] hub 9-0:1.0: 1 port detected [ 826.682713][T13443] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1849'. [ 827.053792][T13447] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1848'. [ 827.206898][T13446] hub 9-0:1.0: USB hub found [ 827.216230][T13446] hub 9-0:1.0: 1 port detected [ 828.235954][T13456] hub 9-0:1.0: USB hub found [ 828.241548][T13456] hub 9-0:1.0: 1 port detected [ 828.255844][T13456] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1850'. [ 828.711998][ T344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.997678][T13469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1854'. [ 830.793994][T13481] hub 9-0:1.0: USB hub found [ 830.800655][T13481] hub 9-0:1.0: 1 port detected [ 830.818110][T13481] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1856'. [ 831.273920][T13491] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1857'. [ 834.122706][T13513] hub 9-0:1.0: USB hub found [ 834.131531][T13513] hub 9-0:1.0: 1 port detected [ 834.394063][T13513] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1863'. [ 834.417107][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.366267][T13526] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1865'. [ 836.100212][T13533] hub 9-0:1.0: USB hub found [ 836.106985][T13533] hub 9-0:1.0: 1 port detected [ 836.134234][T13533] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1867'. [ 836.325367][T13534] hub 9-0:1.0: USB hub found [ 836.331307][T13534] hub 9-0:1.0: 1 port detected [ 836.353318][T13534] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1866'. [ 837.161587][T13543] hub 9-0:1.0: USB hub found [ 837.168229][T13543] hub 9-0:1.0: 1 port detected [ 837.184516][T13543] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1869'. [ 838.901105][T13554] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1871'. [ 839.050579][T13555] hub 9-0:1.0: USB hub found [ 839.323446][T13555] hub 9-0:1.0: 1 port detected [ 839.347694][T13557] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1872'. [ 840.244402][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.276197][T13570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1875'. [ 841.412204][T13572] hub 9-0:1.0: USB hub found [ 841.417543][T13572] hub 9-0:1.0: 1 port detected [ 841.467459][T13572] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1876'. [ 841.617443][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 842.172279][T13577] hub 9-0:1.0: USB hub found [ 842.179132][T13577] hub 9-0:1.0: 1 port detected [ 842.264630][T13576] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1877'. [ 842.622656][T13582] netlink: 'syz.2.1878': attribute type 21 has an invalid length. [ 844.248471][T13594] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1881'. [ 844.991560][T13602] netlink: 'syz.3.1883': attribute type 21 has an invalid length. [ 845.937756][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 846.564719][T13612] hub 9-0:1.0: USB hub found [ 846.571168][T13612] hub 9-0:1.0: 1 port detected [ 846.718864][T13612] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1885'. [ 847.990841][T13625] hub 9-0:1.0: USB hub found [ 847.998031][T13625] hub 9-0:1.0: 1 port detected [ 848.015776][T13625] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1889'. [ 848.164718][T13627] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1888'. [ 849.429740][T13633] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1890'. [ 851.481593][T13641] hub 9-0:1.0: USB hub found [ 851.486656][T13641] hub 9-0:1.0: 1 port detected [ 851.500622][T13641] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1892'. [ 851.698069][ T1326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 852.203248][T13654] hub 9-0:1.0: USB hub found [ 852.230234][T13651] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1894'. [ 852.251930][T13654] hub 9-0:1.0: 1 port detected [ 852.302006][T13654] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1895'. [ 852.977098][ T344] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 853.879165][T13667] hub 9-0:1.0: USB hub found [ 853.885984][T13667] hub 9-0:1.0: 1 port detected [ 853.907176][T13668] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1898'. [ 853.934613][T13667] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1897'. [ 855.202984][T13679] hub 9-0:1.0: USB hub found [ 855.216046][T13679] hub 9-0:1.0: 1 port detected [ 855.242037][T13679] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1899'. [ 855.792796][T13689] hub 9-0:1.0: USB hub found [ 855.806334][T13689] hub 9-0:1.0: 1 port detected [ 855.841256][T13689] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1903'. [ 855.905188][T13690] hub 9-0:1.0: USB hub found [ 855.910565][T13690] hub 9-0:1.0: 1 port detected [ 856.187422][T13690] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1902'. [ 856.790062][T13700] hub 9-0:1.0: USB hub found [ 856.796246][T13700] hub 9-0:1.0: 1 port detected [ 856.992569][T13698] hub 9-0:1.0: USB hub found [ 857.006280][T13698] hub 9-0:1.0: 1 port detected [ 857.031565][T13698] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1904'. [ 857.116069][T13700] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1905'. [ 857.841737][T13706] hub 9-0:1.0: USB hub found [ 857.856118][T13706] hub 9-0:1.0: 1 port detected [ 857.890748][T13706] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1906'. [ 859.102968][T13714] hub 9-0:1.0: USB hub found [ 859.116339][T13714] hub 9-0:1.0: 1 port detected [ 859.150554][T13714] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1909'. [ 860.656266][ T30] INFO: task syz.1.1599:12295 blocked for more than 143 seconds. [ 860.664182][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 860.786198][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.837223][T13731] hub 9-0:1.0: USB hub found [ 860.843405][T13731] hub 9-0:1.0: 1 port detected [ 860.859105][T13731] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1912'. [ 861.036737][ T30] task:syz.1.1599 state:D stack:25120 pid:12295 tgid:12295 ppid:5840 task_flags:0x400040 flags:0x08080002 [ 861.297106][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 861.306083][ T30] Call Trace: [ 861.311104][ T30] [ 861.314149][ T30] __schedule+0x15dd/0x52d0 [ 861.352194][ T30] ? __schedule+0x15f3/0x52d0 [ 861.360445][ T30] ? __pfx___schedule+0x10/0x10 [ 861.365369][ T30] ? schedule+0x90/0x360 [ 861.386171][ T30] schedule+0x164/0x360 [ 861.390413][ T30] schedule_timeout+0xc3/0x2c0 [ 861.395298][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 861.426795][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 861.431937][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 861.455955][ T30] ? wait_for_completion+0x274/0x5e0 [ 861.461742][ T30] wait_for_completion+0x2cc/0x5e0 [ 861.476070][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 861.481821][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 861.507855][ T30] restrict_one_thread_callback+0x320/0x570 [ 861.514204][ T30] task_work_run+0x1d9/0x270 [ 861.526082][ T30] ? __pfx_task_work_run+0x10/0x10 [ 861.536380][ T30] ? futex_wait+0x154/0x380 [ 861.540988][ T30] ? __pfx_futex_wait+0x10/0x10 [ 861.572247][ T30] get_signal+0x11eb/0x1330 [ 861.617648][ T30] ? do_futex+0x333/0x420 [ 861.622045][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 861.656029][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 861.661406][ T30] ? ktime_get+0x45/0x200 [ 861.676028][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 861.682282][ T30] ? read_tsc+0x9/0x20 [ 861.696077][ T30] exit_to_user_mode_loop+0x86/0x480 [ 861.701494][ T30] ? rcu_is_watching+0x15/0xb0 [ 861.706855][ T30] __do_fast_syscall_32+0x415/0x640 [ 861.716179][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 861.721996][ T30] ? do_fast_syscall_32+0x33/0x70 [ 861.735988][ T30] ? irqentry_exit+0x10e/0x620 [ 861.740832][ T30] ? trace_irq_disable+0x3b/0x150 [ 861.756417][ T30] do_fast_syscall_32+0x33/0x70 [ 861.761374][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 861.768161][ T30] RIP: 0023:0xf7f78f6c [ 861.772267][ T30] RSP: 002b:00000000f755fb0c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 861.795540][ T30] RAX: fffffffffffffdfc RBX: 00000000f7435024 RCX: 0000000000000080 [ 861.805995][ T30] RDX: 0000000000000000 RSI: 00000000f755fca8 RDI: 0000000000000000 [ 861.816158][ T30] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 861.824167][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 861.835492][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.856275][ T30] [ 861.865338][ T30] INFO: task syz.1.1599:12296 blocked for more than 144 seconds. [ 861.896052][ T30] Tainted: G L syzkaller #0 [ 861.912874][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 861.921895][ T30] task:syz.1.1599 state:D stack:25120 pid:12296 tgid:12295 ppid:5840 task_flags:0x400040 flags:0x08080002 [ 861.966435][ T30] Call Trace: [ 861.969780][ T30] [ 861.972784][ T30] __schedule+0x15dd/0x52d0 [ 862.006070][ T30] ? aa_sock_msg_perm+0xda/0x1b0 [ 862.011152][ T30] ? __pfx___schedule+0x10/0x10 [ 862.040309][ T30] ? schedule+0x90/0x360 [ 862.044652][ T30] schedule+0x164/0x360 [ 862.067452][ T30] schedule_timeout+0xc3/0x2c0 [ 862.072292][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 862.086283][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.091447][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 862.116025][ T30] ? wait_for_completion+0x274/0x5e0 [ 862.121428][ T30] wait_for_completion+0x2cc/0x5e0 [ 862.166025][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 862.171719][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.197976][ T30] restrict_one_thread_callback+0x320/0x570 [ 862.212368][ T30] task_work_run+0x1d9/0x270 [ 862.225763][ T30] ? __pfx_task_work_run+0x10/0x10 [ 862.245125][ T30] ? do_recvmmsg+0x736/0x800 [ 862.250163][ T30] get_signal+0x11eb/0x1330 [ 862.254690][ T30] ? __pfx_do_recvmmsg+0x10/0x10 [ 862.260061][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 862.265656][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 862.278466][ T30] exit_to_user_mode_loop+0x86/0x480 [ 862.283839][ T30] ? rcu_is_watching+0x15/0xb0 [ 862.296740][ T30] ? asm_int80_emulation+0x1a/0x20 [ 862.301951][ T30] ? asm_int80_emulation+0x1a/0x20 [ 862.307661][ T30] do_int80_emulation+0x2ef/0x4d0 [ 862.312766][ T30] ? asm_int80_emulation+0x1a/0x20 [ 862.318406][ T30] ? clear_bhb_loop+0x40/0x90 [ 862.323146][ T30] ? clear_bhb_loop+0x40/0x90 [ 862.328334][ T30] asm_int80_emulation+0x1a/0x20 [ 862.333358][ T30] RIP: 0023:0xf7f78f6c [ 862.338988][ T30] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 862.348165][ T30] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 00000000800000c0 [ 862.356262][ T30] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 862.364268][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 862.372821][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 862.381265][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 862.389543][ T30] [ 862.392652][ T30] INFO: task syz.1.1599:12301 blocked for more than 145 seconds. [ 862.402447][ T30] Tainted: G L syzkaller #0 [ 862.409095][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 862.417956][ T30] task:syz.1.1599 state:D stack:26560 pid:12301 tgid:12295 ppid:5840 task_flags:0x400040 flags:0x08080006 [ 862.431162][ T30] Call Trace: [ 862.435995][ T30] [ 862.449909][ T30] __schedule+0x15dd/0x52d0 [ 862.454503][ T30] ? __pfx___schedule+0x10/0x10 [ 862.459493][ T30] ? schedule+0x90/0x360 [ 862.466023][ T30] schedule+0x164/0x360 [ 862.480604][ T30] schedule_timeout+0xc3/0x2c0 [ 862.485409][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 862.490939][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.496102][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 862.501328][ T30] ? wait_for_completion+0x274/0x5e0 [ 862.507641][ T30] wait_for_completion+0x2cc/0x5e0 [ 862.513074][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 862.518349][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 862.524229][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.529405][ T30] restrict_one_thread_callback+0x320/0x570 [ 862.535454][ T30] task_work_run+0x1d9/0x270 [ 862.540213][ T30] ? __pfx_task_work_run+0x10/0x10 [ 862.545379][ T30] ? tipc_connect+0x18c/0x700 [ 862.550454][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 862.556473][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 862.561783][ T30] ? tipc_connect+0x18c/0x700 [ 862.566601][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 862.571940][ T30] get_signal+0x11eb/0x1330 [ 862.576613][ T30] ? __pfx_tipc_connect+0x10/0x10 [ 862.581705][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 862.587481][ T30] ? __sys_connect+0x39c/0x450 [ 862.592387][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 862.598662][ T30] exit_to_user_mode_loop+0x86/0x480 [ 862.603989][ T30] ? rcu_is_watching+0x15/0xb0 [ 862.608907][ T30] __do_fast_syscall_32+0x415/0x640 [ 862.614188][ T30] ? do_fast_syscall_32+0x33/0x70 [ 862.619611][ T30] ? asm_int80_emulation+0x1a/0x20 [ 862.624776][ T30] ? do_int80_emulation+0x274/0x4d0 [ 862.630175][ T30] do_fast_syscall_32+0x33/0x70 [ 862.635071][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 862.641502][ T30] RIP: 0023:0xf7f78f6c [ 862.645602][ T30] RSP: 002b:00000000f541550c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 862.654564][ T30] RAX: fffffffffffffffc RBX: 0000000000000008 RCX: 0000000080000000 [ 862.662977][ T30] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 862.671433][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 862.679670][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 862.687762][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 862.695826][ T30] [ 862.699110][ T30] INFO: task syz.1.1599:12302 blocked for more than 145 seconds. [ 862.706984][ T30] Tainted: G L syzkaller #0 [ 862.713537][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 862.722339][ T30] task:syz.1.1599 state:D stack:28368 pid:12302 tgid:12295 ppid:5840 task_flags:0x400140 flags:0x08080006 [ 862.747552][ T30] Call Trace: [ 862.750915][ T30] [ 862.753933][ T30] __schedule+0x15dd/0x52d0 [ 862.786289][ T30] ? register_lock_class+0x31/0x2e0 [ 862.791577][ T30] ? __pfx___schedule+0x10/0x10 [ 862.816072][ T30] ? schedule+0x90/0x360 [ 862.820376][ T30] schedule+0x164/0x360 [ 862.824571][ T30] schedule_timeout+0xc3/0x2c0 [ 862.835966][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.841182][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 862.856494][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.862072][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 862.867775][ T30] ? wait_for_completion+0x274/0x5e0 [ 862.873108][ T30] wait_for_completion+0x2cc/0x5e0 [ 862.886341][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 862.892038][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 862.915994][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 862.922656][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 862.929967][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 862.935202][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 862.956029][ T30] do_int80_emulation+0x173/0x4d0 [ 862.961114][ T30] ? asm_int80_emulation+0x1a/0x20 [ 862.967956][ T30] ? clear_bhb_loop+0x40/0x90 [ 862.972674][ T30] ? clear_bhb_loop+0x40/0x90 [ 862.977902][ T30] asm_int80_emulation+0x1a/0x20 [ 862.996020][ T30] RIP: 0023:0xf7f78f6c [ 863.000147][ T30] RSP: 002b:00000000f53f450c EFLAGS: 00000206 ORIG_RAX: 00000000000001be [ 863.009290][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000000e [ 863.017642][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.025666][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.044075][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 863.052542][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.061405][ T30] [ 863.064908][ T30] INFO: task syz.1.1599:12303 blocked for more than 145 seconds. [ 863.106054][ T30] Tainted: G L syzkaller #0 [ 863.112601][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 863.131983][ T30] task:syz.1.1599 state:D stack:28328 pid:12303 tgid:12295 ppid:5840 task_flags:0x400140 flags:0x08080006 [ 863.144678][ T30] Call Trace: [ 863.156342][ T30] [ 863.159362][ T30] __schedule+0x15dd/0x52d0 [ 863.163955][ T30] ? register_lock_class+0x31/0x2e0 [ 863.186253][ T30] ? __pfx___schedule+0x10/0x10 [ 863.191222][ T30] ? schedule+0x90/0x360 [ 863.195516][ T30] schedule+0x164/0x360 [ 863.206786][ T30] schedule_timeout+0xc3/0x2c0 [ 863.211657][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 863.226917][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 863.232383][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 863.246416][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 863.251706][ T30] ? wait_for_completion+0x274/0x5e0 [ 863.307142][ T30] wait_for_completion+0x2cc/0x5e0 [ 863.312416][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 863.325974][ T30] landlock_restrict_sibling_threads+0xe9c/0x11f0 [ 863.332488][ T30] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 863.370222][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 863.378421][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 863.383692][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 863.390283][ T30] do_int80_emulation+0x173/0x4d0 [ 863.396001][ T30] ? asm_int80_emulation+0x1a/0x20 [ 863.401271][ T30] ? clear_bhb_loop+0x40/0x90 [ 863.407394][ T30] ? clear_bhb_loop+0x40/0x90 [ 863.413658][ T30] asm_int80_emulation+0x1a/0x20 [ 863.420072][ T30] RIP: 0023:0xf7f78f6c [ 863.424171][ T30] RSP: 002b:00000000f4fd150c EFLAGS: 00000206 ORIG_RAX: 00000000000001be [ 863.432798][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000009 [ 863.441092][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.449765][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.458087][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 863.466333][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.474714][ T30] [ 863.478073][ T30] [ 863.478073][ T30] Showing all locks held in the system: [ 863.485830][ T30] 3 locks held by kworker/u8:1/13: [ 863.493082][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 863.505042][ T30] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 863.516433][ T30] #2: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 863.525606][ T30] 1 lock held by ksoftirqd/0/15: [ 863.576446][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 863.595974][ T30] 1 lock held by khungtaskd/30: [ 863.600878][ T30] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 863.610979][ T30] 2 locks held by getty/5585: [ 863.620596][ T30] #0: ffff8880377ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 863.630812][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 863.641246][ T30] 2 locks held by kworker/0:0/12538: [ 863.646914][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 863.658095][ T30] #1: ffffc90003defc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 863.668820][ T30] 2 locks held by syz.4.1908/13719: [ 863.674035][ T30] #0: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 863.683704][ T30] #1: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 863.694826][ T30] 1 lock held by syz.2.1910/13717: [ 863.700101][ T30] #0: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 863.709648][ T30] 1 lock held by syz.3.1911/13727: [ 863.714795][ T30] #0: ffffffff8fbccd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 863.725646][ T30] [ 863.733097][ T30] ============================================= [ 863.733097][ T30] [ 863.741732][ T30] NMI backtrace for cpu 1 [ 863.741766][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 863.741796][ T30] Tainted: [L]=SOFTLOCKUP [ 863.741803][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.741816][ T30] Call Trace: [ 863.741825][ T30] [ 863.741833][ T30] dump_stack_lvl+0xe8/0x150 [ 863.741894][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 863.742007][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 863.742038][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 863.742068][ T30] sys_info+0x135/0x170 [ 863.742090][ T30] watchdog+0xfd9/0x1030 [ 863.742127][ T30] ? watchdog+0x21a/0x1030 [ 863.742166][ T30] kthread+0x388/0x470 [ 863.742187][ T30] ? __pfx_watchdog+0x10/0x10 [ 863.742215][ T30] ? __pfx_kthread+0x10/0x10 [ 863.742235][ T30] ret_from_fork+0x51e/0xb90 [ 863.742274][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 863.742299][ T30] ? __switch_to+0xc7d/0x1450 [ 863.742326][ T30] ? __pfx_kthread+0x10/0x10 [ 863.742348][ T30] ret_from_fork_asm+0x1a/0x30 [ 863.742393][ T30] [ 863.742402][ T30] Sending NMI from CPU 1 to CPUs 0: [ 863.859582][ C0] NMI backtrace for cpu 0 [ 863.859603][ C0] CPU: 0 UID: 0 PID: 344 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.859628][ C0] Tainted: [L]=SOFTLOCKUP [ 863.859635][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.859647][ C0] Workqueue: events_unbound toggle_allocation_gate [ 863.859739][ C0] RIP: 0010:__lock_acquire+0xb17/0x2cf0 [ 863.859766][ C0] Code: 49 73 0e 48 c7 c6 99 13 01 8e 67 48 0f b9 3a 90 48 bb eb 83 b5 80 46 86 c8 61 48 0f af dd 48 c1 eb 2d 48 8b 04 dd 40 a4 df 93 <48> 85 c0 0f 94 c1 48 83 c0 f8 0f 94 c2 08 ca 0f 84 1c 01 00 00 e8 [ 863.859782][ C0] RSP: 0018:ffffc900032476c8 EFLAGS: 00000006 [ 863.859797][ C0] RAX: ffffffff9423e818 RBX: 000000000003d39c RCX: 0000000000040000 [ 863.859809][ C0] RDX: 00000000da898d36 RSI: 00000000f0de310e RDI: ffff888020311e80 [ 863.859822][ C0] RBP: f87ed065c2565a7a R08: ffffffff84b8ac00 R09: ffffffff9a5173f0 [ 863.859835][ C0] R10: ffffc900032478b8 R11: fffff52000648f19 R12: ffff888020312a28 [ 863.859848][ C0] R13: ffff888020312a28 R14: ffff888020311e80 R15: 0000000000000002 [ 863.859860][ C0] FS: 0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000 [ 863.859874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.859886][ C0] CR2: 000000008018b018 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 863.859901][ C0] Call Trace: [ 863.859908][ C0] [ 863.859918][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 863.859947][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 863.859964][ C0] ? smp_call_function_many_cond+0xde6/0x12c0 [ 863.859985][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 863.860006][ C0] lock_acquire+0xf0/0x2e0 [ 863.860028][ C0] ? debug_object_assert_init+0xb0/0x370 [ 863.860132][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 863.860155][ C0] ? debug_object_assert_init+0xb0/0x370 [ 863.860176][ C0] debug_object_assert_init+0xb0/0x370 [ 863.860203][ C0] __mod_timer+0x4a/0xf30 [ 863.860220][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 863.860242][ C0] queue_delayed_work_on+0x11a/0x1e0 [ 863.860271][ C0] toggle_allocation_gate+0x245/0x290 [ 863.860292][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 863.860313][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 863.860335][ C0] ? process_scheduled_works+0xa25/0x1830 [ 863.860357][ C0] ? process_scheduled_works+0xa25/0x1830 [ 863.860380][ C0] process_scheduled_works+0xb02/0x1830 [ 863.860415][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 863.860440][ C0] ? assign_work+0x3d5/0x5e0 [ 863.860464][ C0] worker_thread+0xa50/0xfc0 [ 863.860498][ C0] kthread+0x388/0x470 [ 863.860514][ C0] ? __pfx_worker_thread+0x10/0x10 [ 863.860536][ C0] ? __pfx_kthread+0x10/0x10 [ 863.860552][ C0] ret_from_fork+0x51e/0xb90 [ 863.860576][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 863.860597][ C0] ? __switch_to+0xc7d/0x1450 [ 863.860618][ C0] ? __pfx_kthread+0x10/0x10 [ 863.860634][ C0] ret_from_fork_asm+0x1a/0x30 [ 863.860667][ C0] [ 864.186125][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 864.193068][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 864.203784][ T30] Tainted: [L]=SOFTLOCKUP [ 864.208136][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.218210][ T30] Call Trace: [ 864.221507][ T30] [ 864.224459][ T30] vpanic+0x56c/0xa60 [ 864.228474][ T30] ? __pfx___schedule+0x10/0x10 [ 864.233355][ T30] ? __pfx_vpanic+0x10/0x10 [ 864.238006][ T30] ? __pfx_console_unlock+0x10/0x10 [ 864.243245][ T30] panic+0xc5/0xd0 [ 864.246996][ T30] ? __pfx_panic+0x10/0x10 [ 864.251441][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 864.256886][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 864.263080][ T30] watchdog+0x1023/0x1030 [ 864.267446][ T30] ? watchdog+0x21a/0x1030 [ 864.271898][ T30] kthread+0x388/0x470 [ 864.275991][ T30] ? __pfx_watchdog+0x10/0x10 [ 864.280710][ T30] ? __pfx_kthread+0x10/0x10 [ 864.285328][ T30] ret_from_fork+0x51e/0xb90 [ 864.290037][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 864.295204][ T30] ? __switch_to+0xc7d/0x1450 [ 864.299929][ T30] ? __pfx_kthread+0x10/0x10 [ 864.304568][ T30] ret_from_fork_asm+0x1a/0x30 [ 864.309405][ T30] [ 864.313059][ T30] Kernel Offset: disabled [ 864.317396][ T30] Rebooting in 86400 seconds..