last executing test programs: 11m23.609742386s ago: executing program 1 (id=586): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) shutdown(r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 11m22.338847676s ago: executing program 1 (id=587): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x40840) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) 11m22.142133913s ago: executing program 1 (id=589): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x5) accept$inet(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) 11m20.97893491s ago: executing program 1 (id=597): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11m20.510445505s ago: executing program 1 (id=601): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000018000904b4b60000000000000a000000000000070200000008001e000100"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 11m19.227369426s ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x60}}, 0x0) 11m18.754661201s ago: executing program 32 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x60}}, 0x0) 2m44.269255771s ago: executing program 0 (id=1866): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d", 0xdd, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m43.846967824s ago: executing program 0 (id=1867): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(r3, &(0x7f00000005c0)=""/147, 0x93) 2m40.803135532s ago: executing program 0 (id=1873): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xac8d, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x1, 0xab7, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x54}}}, &(0x7f0000000240)) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) syz_open_dev$ublk_chdev(&(0x7f0000000540), r8, 0x250000) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000300)={r8}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r10, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r11], 0x34}}, 0x4008000) r14 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r15 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r14) keyctl$KEYCTL_WATCH_KEY(0x20, r15, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r15, 0x0, 0x0) 2m38.277711152s ago: executing program 0 (id=1875): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d", 0xdd, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m35.310593288s ago: executing program 0 (id=1880): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x0) 2m33.206959954s ago: executing program 0 (id=1884): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0xfffffffffffffffe) 2m17.672169101s ago: executing program 33 (id=1884): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0xfffffffffffffffe) 43.526731249s ago: executing program 3 (id=2156): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d", 0xdd, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xd9f}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42.359439537s ago: executing program 3 (id=2160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x35, 0x0, [{0x40000000}]}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x404040) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2b, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcf, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 40.98151719s ago: executing program 3 (id=2162): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) 39.965332123s ago: executing program 3 (id=2163): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.654910403s ago: executing program 3 (id=2165): connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e22, 0x8, @empty, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) 37.994706506s ago: executing program 3 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) sendmsg$nl_route(r3, 0x0, 0x2400c4c0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) unshare(0x2c040000) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) sync() chdir(&(0x7f00000001c0)='./file1\x00') 22.24813255s ago: executing program 34 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) sendmsg$nl_route(r3, 0x0, 0x2400c4c0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) unshare(0x2c040000) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) sync() chdir(&(0x7f00000001c0)='./file1\x00') 13.718880962s ago: executing program 5 (id=2217): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fstat(r3, 0x0) setreuid(0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.045016446s ago: executing program 5 (id=2220): syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$dri(0x0, 0xfffffffffffffc01, 0xa0001) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000b00)=""/182, 0xb6, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f0000000080)=""/97, 0x61, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000480)={0x1, {&(0x7f0000000100)=""/2, 0x2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_control_io$uac1(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 9.045676741s ago: executing program 5 (id=2227): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000004000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 5.691545158s ago: executing program 2 (id=2232): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) accept4(r0, 0x0, &(0x7f0000000680), 0x800) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.31480767s ago: executing program 2 (id=2233): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.213934734s ago: executing program 2 (id=2235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x8cf2826c8227b098, 0x0, {0x0, 0x11}}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="400001801400020070696d36726567300000000000000000140002", @ANYRES8, @ANYRES32, @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)=',8Z', 0x3) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.942829673s ago: executing program 4 (id=2236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x1) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2b, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcf, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.941039552s ago: executing program 5 (id=2237): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d", 0xdd, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.887516754s ago: executing program 2 (id=2238): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) 3.788788029s ago: executing program 4 (id=2239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) 3.778563079s ago: executing program 2 (id=2240): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) accept4(r0, 0x0, &(0x7f0000000680), 0x800) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.306826995s ago: executing program 2 (id=2241): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102384, 0x18ff0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'wlan1\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x30, 0xd, 0x1ff, {0x7, @sctp_ip6_spec={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x4e23, 0xd}, {0x0, @broadcast, 0xf, 0x5e}, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa, 0x9}, {0x0, @local, 0x5e9, 0x101, [0x2, 0x1]}, 0xd908, 0x4009}}}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@private=0xa010102, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.687127124s ago: executing program 4 (id=2242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x3, 0xf3, 0x10, 0xadbd, 0x1, 0x5, 0x6, 0x81, 0x6, 0x9, 0x10001, 0x6, 0x9, 0x8eac, 0x6, 0xffff, 0x9, 0x8, 0x2, 0xc, 0x9, 0x10, 0x9, 0x81, 0x9, 0x1, 0x9, 0x8, 0x0, 0x1000000, 0xd68, 0x8001, 0x9, 0x101, 0x0, 0x6, 0xc5, 0x9, 0x7, 0x0, 0xff3, 0x8, 0x94, 0x8, 0x7, 0x41b0, 0x7, 0xbbd, 0x7, 0x2, 0x8, 0x6, 0x4, 0x24, 0x4, 0x3, 0x280, 0x1, 0x10001, 0x6, 0xfff, 0x7, 0x1, 0x3, 0xd, 0x3, 0x2, 0x9, 0xffffffff, 0xdf, 0x9, 0x7, 0x6, 0x4, 0x3, 0x6, 0x8, 0x0, 0x0, 0x1, 0x8000, 0x8, 0x5, 0x8, 0x6, 0x74, 0x8, 0x4000, 0x5, 0xc69, 0x4, 0x3, 0x9, 0x0, 0x8, 0x81, 0xd, 0xcaf4, 0x5, 0x4, 0x9, 0x8, 0x16, 0xffff, 0x40, 0x7, 0x80000000, 0x5a6, 0xff, 0x400000, 0x4, 0x1, 0xa4, 0x3, 0xdbf9, 0x2, 0xffffffff, 0x8, 0x7fffffff, 0x6, 0x3, 0x1, 0xe894, 0x5, 0x4, 0x9, 0x5, 0x1000, 0x0, 0x6, 0x9, 0x161, 0xdc1, 0x4, 0x6, 0x8, 0x7, 0x6, 0x2, 0x0, 0x10000, 0x5f11, 0x1, 0x7, 0xffffff05, 0x8, 0x8000, 0x5, 0x4, 0x3, 0x0, 0x1000, 0x3, 0x10000, 0xa5588d4, 0xfffffff3, 0x0, 0x0, 0xffffffff, 0xfd, 0x2, 0x2, 0x3, 0x8, 0x3c, 0x7fffffff, 0xffffff01, 0x0, 0xdf, 0x9, 0xee26, 0x3, 0x3, 0xb6, 0x5, 0xb, 0xd5, 0x5, 0x1, 0xffffffff, 0x2, 0x0, 0x101, 0x3, 0x7, 0x6, 0xffff, 0x5, 0xdd, 0x8, 0x5, 0x4, 0x7c4, 0x10000, 0x200, 0xea63, 0x1d, 0x6, 0x4, 0x7, 0xfff, 0x2, 0x97d7, 0x8001, 0x80, 0x7, 0xffffcf18, 0x8, 0x2, 0x93fd, 0x0, 0xbe69, 0x2ddcfc8a, 0xd9a9, 0x8a1, 0xb1, 0x6, 0x6, 0x1000, 0x6, 0xf, 0xf, 0x1, 0xc0a1, 0x0, 0x80, 0x7, 0x53, 0x1f1, 0x0, 0x9, 0x0, 0x100, 0x9dc, 0x1ff, 0x200, 0x0, 0x800, 0x6a, 0x3, 0xe, 0x8, 0x2, 0x8bfe90e4, 0x5, 0x5, 0x2, 0x3, 0x60d5, 0x2, 0xfff, 0x7fff, 0xfffffffe, 0xd, 0x401]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.588376608s ago: executing program 5 (id=2243): r0 = socket$kcm(0x2, 0xa, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f00000002c0)="7c799b566c84e467f6add6f63ee4b5af7f007e19d959ab484fdd790000001ab40002251ada62d4f1f15565d1c91558cee592941b3dd99b184489856c") ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000a40000000020c0001800800094000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r0, 0x0, 0x0, 0x0, 0x8080}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0xfffffffffffffd5e) 998.943748ms ago: executing program 5 (id=2244): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200088a4) connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e24, 0x4b, @empty, 0x80000001}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:11 1', 0x1b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f000095f000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000803000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 998.528479ms ago: executing program 4 (id=2245): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x8cf2826c8227b098, 0x0, {0x0, 0x11}}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="400001801400020070696d36726567300000000000000000140002", @ANYRES8, @ANYRES32, @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 657.06169ms ago: executing program 4 (id=2246): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000004000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 0s ago: executing program 4 (id=2247): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80000000}) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) kernel console output (not intermixed with test programs): int 0x82 has invalid maxpacket 32 [ 554.259273][ T5839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 554.280085][ T5839] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.297060][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.308556][ T5839] usb 1-1: Product: syz [ 554.312787][ T5839] usb 1-1: Manufacturer: syz [ 554.328113][ T5839] usb 1-1: SerialNumber: syz [ 554.613162][ T5839] cdc_ncm 1-1:1.0: bind() failure [ 554.655247][ T5839] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 554.686587][ T5839] cdc_ncm 1-1:1.1: bind() failure [ 554.754102][ T5839] usb 1-1: USB disconnect, device number 12 [ 554.763000][ T5838] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 554.943320][ T5838] usb 4-1: device descriptor read/64, error -71 [ 555.214561][ T5838] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 555.424157][ T5838] usb 4-1: device descriptor read/64, error -71 [ 555.546997][ T5838] usb usb4-port1: attempt power cycle [ 555.983233][ T5838] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 556.073798][ T5838] usb 4-1: device descriptor read/8, error -71 [ 556.343035][ T5838] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 556.383957][ T5838] usb 4-1: device descriptor read/8, error -71 [ 556.623462][ T5838] usb usb4-port1: unable to enumerate USB device [ 557.323973][T10327] sock: sock_timestamping_bind_phc: sock not bind to device [ 557.933421][ T5838] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 558.134470][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 558.169694][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 558.188802][ T5838] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 558.216792][ T5838] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 558.246026][ T5838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.255522][ T5821] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 558.268636][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.299871][ T5838] usb 4-1: Product: syz [ 558.308011][ T5838] usb 4-1: Manufacturer: syz [ 558.321259][ T5838] usb 4-1: SerialNumber: syz [ 558.413139][ T5821] usb 5-1: device descriptor read/64, error -71 [ 558.552169][ T5838] cdc_ncm 4-1:1.0: bind() failure [ 558.573965][ T5838] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 558.599729][ T5838] cdc_ncm 4-1:1.1: bind() failure [ 558.619126][ T5838] usb 4-1: USB disconnect, device number 20 [ 558.723142][ T5821] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 558.973439][ T5821] usb 5-1: device descriptor read/64, error -71 [ 559.803475][ T5821] usb usb5-port1: attempt power cycle [ 560.323066][ T5821] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 560.361066][T10373] sock: sock_timestamping_bind_phc: sock not bind to device [ 560.383467][ T5821] usb 5-1: device descriptor read/8, error -71 [ 560.459500][T10375] usb usb8: usbfs: process 10375 (syz.3.1228) did not claim interface 0 before use [ 560.716993][ T5821] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 560.793054][ T5821] usb 5-1: device descriptor read/8, error -71 [ 560.945006][ T5821] usb usb5-port1: unable to enumerate USB device [ 563.201825][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.208393][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.473726][T10410] sock: sock_timestamping_bind_phc: sock not bind to device [ 563.632664][ T5086] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 563.843051][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 564.052808][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 564.063121][ T5819] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 564.172022][ T5839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 564.366794][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 564.439986][ T5839] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 564.470594][ T5819] usb 4-1: config 2 has an invalid interface number: 170 but max is 0 [ 564.505805][ T5839] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 564.545970][ T5819] usb 4-1: config 2 has no interface number 0 [ 564.585421][ T5819] usb 4-1: config 2 interface 170 has no altsetting 0 [ 564.612366][ T5839] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.667647][ T5819] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=f8.56 [ 564.687374][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.706119][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.727928][ T5839] usb 3-1: Product: syz [ 564.732211][ T5839] usb 3-1: Manufacturer: syz [ 564.748499][ T5819] usb 4-1: Product: syz [ 564.768733][ T5839] usb 3-1: SerialNumber: syz [ 564.774303][ T5819] usb 4-1: Manufacturer: syz [ 564.783849][ T5819] usb 4-1: SerialNumber: syz [ 565.012798][ T5839] cdc_ncm 3-1:1.0: bind() failure [ 565.039567][ T5839] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 565.069551][ T5839] cdc_ncm 3-1:1.1: bind() failure [ 565.091514][ T5819] usb 4-1: USB disconnect, device number 21 [ 565.107298][ T5839] usb 3-1: USB disconnect, device number 15 [ 565.153656][ T5838] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 565.353060][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 565.365585][ T5838] usb 1-1: config 236 has too many interfaces: 127, using maximum allowed: 32 [ 565.379165][ T5838] usb 1-1: config 236 has an invalid descriptor of length 216, skipping remainder of the config [ 565.390939][ T5838] usb 1-1: config 236 has 0 interfaces, different from the descriptor's value: 127 [ 565.406225][ T5838] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 565.416556][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.424881][ T5838] usb 1-1: Product: syz [ 565.429180][ T5838] usb 1-1: Manufacturer: syz [ 565.434227][ T5838] usb 1-1: SerialNumber: syz [ 565.711099][ T5838] usb 1-1: USB disconnect, device number 13 [ 566.110016][T10461] loop2: detected capacity change from 0 to 128 [ 566.932336][T10461] FAT-fs (loop2): bogus logical sector size 65535 [ 566.938932][T10461] FAT-fs (loop2): Can't find a valid FAT filesystem [ 566.980363][T10460] sock: sock_timestamping_bind_phc: sock not bind to device [ 567.073140][T10464] syzkaller0: entered promiscuous mode [ 567.155605][T10464] syzkaller0: entered allmulticast mode [ 567.641141][ T5838] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 567.804895][ T5838] usb 4-1: device descriptor read/64, error -71 [ 568.088926][ T5838] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 568.263123][ T5838] usb 4-1: device descriptor read/64, error -71 [ 568.303671][ T970] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 568.384099][ T5838] usb usb4-port1: attempt power cycle [ 569.209437][T10485] loop2: detected capacity change from 0 to 128 [ 569.997815][ T970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 570.127073][ T970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 570.148809][ T970] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 570.173239][ T970] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 570.215688][ T970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.225681][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.247928][ T970] usb 1-1: Product: syz [ 570.252197][ T970] usb 1-1: Manufacturer: syz [ 570.268231][ T970] usb 1-1: SerialNumber: syz [ 570.274011][ T5838] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 570.334483][ T5838] usb 4-1: device descriptor read/8, error -71 [ 570.462826][T10487] sock: sock_timestamping_bind_phc: sock not bind to device [ 570.520657][ T970] cdc_ncm 1-1:1.0: bind() failure [ 570.538888][ T970] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 570.550234][ T970] cdc_ncm 1-1:1.1: bind() failure [ 570.562453][ T970] usb 1-1: USB disconnect, device number 14 [ 571.397096][T10490] loop2: detected capacity change from 0 to 128 [ 572.234669][T10490] FAT-fs (loop2): bogus logical sector size 65535 [ 572.241273][T10490] FAT-fs (loop2): Can't find a valid FAT filesystem [ 573.853310][ T5819] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 574.013013][ T5819] usb 3-1: device descriptor read/64, error -71 [ 574.289481][ T5819] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 574.445577][T10517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.466394][ T5819] usb 3-1: device descriptor read/64, error -71 [ 574.632468][ T5819] usb usb3-port1: attempt power cycle [ 574.796852][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 574.830991][T10517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.103094][ T5819] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 575.195241][ T5819] usb 3-1: device descriptor read/8, error -71 [ 575.336283][T10518] syz_tun: entered promiscuous mode [ 575.371875][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 575.493173][ T5819] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 575.500325][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 575.538650][ T5819] usb 3-1: device descriptor read/8, error -71 [ 575.576890][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.662429][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.694611][ T5819] usb usb3-port1: unable to enumerate USB device [ 575.759214][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 575.961565][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.016431][ T8] usb 1-1: Product: syz [ 576.021662][T10525] loop8: detected capacity change from 0 to 8 [ 576.034839][ T8] usb 1-1: Manufacturer: syz [ 576.039505][ T8] usb 1-1: SerialNumber: syz [ 576.053994][T10525] Dev loop8: unable to read RDB block 8 [ 576.063422][T10525] loop8: unable to read partition table [ 576.070187][T10525] loop8: partition table beyond EOD, truncated [ 576.100561][T10525] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 576.111572][ T8] usb 1-1: config 0 descriptor?? [ 577.880931][ T5821] usb 1-1: USB disconnect, device number 15 [ 578.049686][T10547] sock: sock_timestamping_bind_phc: sock not bind to device [ 579.033290][ T5819] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 579.245763][ T5819] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 579.269765][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.319255][ T5819] usb 1-1: config 0 has no interface number 0 [ 579.319319][ T5819] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 579.319369][ T5819] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 579.319396][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.329444][ T5819] usb 1-1: config 0 descriptor?? [ 579.410871][ T5819] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 579.598224][ T1097] usb 1-1: Failed to submit usb control message: -71 [ 579.598295][ T5819] usb 1-1: USB disconnect, device number 16 [ 579.644525][ T1097] usb 1-1: unable to send the bmi data to the device: -71 [ 579.651734][ T1097] usb 1-1: unable to get target info from device [ 579.698279][ T1097] usb 1-1: could not get target info (-71) [ 579.715658][ T1097] usb 1-1: could not probe fw (-71) [ 579.911633][T10570] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 580.462536][T10570] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 580.597374][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.624587][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.649037][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.677633][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.836539][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.845198][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.852664][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.860172][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.867677][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.878157][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.885669][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.893449][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.900885][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.932985][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.940464][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 580.966564][ T5819] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 581.002477][ T5819] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 581.233529][ T970] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 581.482988][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 581.494589][T10580] fido_id[10580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 581.543405][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.557365][ T970] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.575054][ T970] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 581.590276][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.603457][ T970] usb 4-1: Product: syz [ 581.607830][ T970] usb 4-1: Manufacturer: syz [ 581.612642][ T970] usb 4-1: SerialNumber: syz [ 581.624117][ T970] usb 4-1: config 0 descriptor?? [ 581.646279][T10583] sock: sock_timestamping_bind_phc: sock not bind to device [ 581.753063][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 582.398762][ T97] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 90 seconds [ 582.409626][ T97] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 90 seconds [ 582.421343][ T97] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 90 seconds [ 582.432477][ T97] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 90 seconds [ 583.619782][ T5821] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 584.053125][ T5821] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 584.062300][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.130827][ T5821] usb 5-1: config 0 descriptor?? [ 584.163124][ T5838] usb 4-1: USB disconnect, device number 26 [ 587.024410][ T5821] usb 5-1: Cannot read MAC address [ 587.029807][ T5821] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 587.045102][T10616] sock: sock_timestamping_bind_phc: sock not bind to device [ 587.122756][ T5821] usb 5-1: USB disconnect, device number 15 [ 587.496904][T10622] binder: 10617:10622 unknown command 1074553619 [ 587.503466][T10622] binder: 10617:10622 ioctl c0306201 200000000040 returned -22 [ 588.251676][T10627] loop8: detected capacity change from 0 to 8 [ 588.343066][T10627] Dev loop8: unable to read RDB block 8 [ 588.348740][T10627] loop8: unable to read partition table [ 588.478610][T10627] loop8: partition table beyond EOD, truncated [ 588.498852][T10627] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 590.773411][ T970] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 591.023062][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 591.295498][ T970] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 591.312980][ T970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.337660][ T970] usb 1-1: config 0 has no interface number 0 [ 591.384765][ T970] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 591.395156][ T970] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.408719][ T970] usb 1-1: config 0 interface 12 has no altsetting 0 [ 591.418633][ T970] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 591.825016][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.902929][ T970] usb 1-1: Product: syz [ 591.938483][ T970] usb 1-1: Manufacturer: syz [ 592.000515][ T970] usb 1-1: SerialNumber: syz [ 592.122357][ T970] usb 1-1: config 0 descriptor?? [ 592.264184][ T970] f81534 1-1:0.12: required endpoints missing [ 593.659645][ T970] usb 1-1: USB disconnect, device number 17 [ 594.788510][T10682] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 594.938458][T10682] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 595.180749][T10685] syzkaller0: entered promiscuous mode [ 595.196486][T10685] syzkaller0: entered allmulticast mode [ 597.103028][ T5838] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 597.312964][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 597.333841][ T5838] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 597.346864][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.357717][ T5838] usb 5-1: config 0 has no interface number 0 [ 597.364344][ T5838] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.381388][ T5838] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.408824][ T5838] usb 5-1: config 0 interface 12 has no altsetting 0 [ 597.444984][ T5838] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 597.467511][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.476718][ T5838] usb 5-1: Product: syz [ 597.480952][ T5838] usb 5-1: Manufacturer: syz [ 597.491975][ T5838] usb 5-1: SerialNumber: syz [ 597.501907][ T5838] usb 5-1: config 0 descriptor?? [ 597.519192][T10702] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 597.533730][ T5838] f81534 5-1:0.12: required endpoints missing [ 600.403114][ T5821] usb 5-1: USB disconnect, device number 16 [ 600.651316][T10732] syzkaller0: entered promiscuous mode [ 600.657000][T10732] syzkaller0: entered allmulticast mode [ 602.428873][ T5786] Bluetooth: hci1: unexpected event 0x09 length: 4 > 3 [ 603.783037][T10770] sock: sock_timestamping_bind_phc: sock not bind to device [ 603.804678][T10768] syzkaller0: entered promiscuous mode [ 603.810228][T10768] syzkaller0: entered allmulticast mode [ 604.088468][ T5786] Bluetooth: hci0: unexpected event 0x09 length: 4 > 3 [ 605.375836][T10792] sock: sock_timestamping_bind_phc: sock not bind to device [ 605.797401][T10806] syzkaller0: entered promiscuous mode [ 605.810582][T10806] syzkaller0: entered allmulticast mode [ 607.043630][T10812] 9pnet_fd: Insufficient options for proto=fd [ 607.845250][T10825] sock: sock_timestamping_bind_phc: sock not bind to device [ 608.310770][T10831] syzkaller0: entered promiscuous mode [ 608.337571][T10831] syzkaller0: entered allmulticast mode [ 608.488165][ T5786] Bluetooth: hci3: hcon ffff88802ea5a000 sent 1 < count 32778 [ 609.804653][T10852] sock: sock_timestamping_bind_phc: sock not bind to device [ 610.667100][T10866] syzkaller0: entered promiscuous mode [ 610.694453][T10866] syzkaller0: entered allmulticast mode [ 611.003244][ T5821] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 611.365853][ T5821] usb 4-1: config 0 has no interfaces? [ 611.371451][ T5821] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 611.418536][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.569430][ T5821] usb 4-1: config 0 descriptor?? [ 612.600595][ T97] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 120 seconds [ 612.611481][ T97] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 120 seconds [ 612.637914][ T97] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 120 seconds [ 612.711273][ T97] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 120 seconds [ 613.997826][T10894] sock: sock_timestamping_bind_phc: sock not bind to device [ 615.237736][T10904] syzkaller0: entered promiscuous mode [ 615.246856][T10904] syzkaller0: entered allmulticast mode [ 615.770300][T10913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.727620][ T1193] usb 4-1: USB disconnect, device number 27 [ 616.758230][T10923] sock: sock_timestamping_bind_phc: sock not bind to device [ 617.193889][T10935] syzkaller0: entered promiscuous mode [ 617.199451][T10935] syzkaller0: entered allmulticast mode [ 618.948299][T10954] sock: sock_timestamping_bind_phc: sock not bind to device [ 618.982268][T10956] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1412'. [ 619.155365][ T5838] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 619.346768][T10966] syzkaller0: entered promiscuous mode [ 619.352533][T10966] syzkaller0: entered allmulticast mode [ 619.482980][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 619.489798][ T5838] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 619.498059][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.508268][ T5838] usb 4-1: config 0 has no interface number 0 [ 619.517107][ T5838] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.530238][ T5838] usb 4-1: config 0 interface 12 has no altsetting 0 [ 619.544367][ T5838] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 619.553780][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.561872][ T5838] usb 4-1: Product: syz [ 619.566865][ T5838] usb 4-1: Manufacturer: syz [ 619.571522][ T5838] usb 4-1: SerialNumber: syz [ 619.579827][ T5838] usb 4-1: config 0 descriptor?? [ 619.588671][ T5838] f81534 4-1:0.12: required endpoints missing [ 619.603080][ T1193] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 620.694685][ T1193] usb 5-1: Using ep0 maxpacket: 16 [ 620.725149][ T1193] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.739390][ T1193] usb 5-1: config 0 interface 0 has no altsetting 0 [ 620.764843][ T1193] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 620.786566][ T1193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.821805][ T1193] usb 5-1: Product: syz [ 620.830274][ T1193] usb 5-1: Manufacturer: syz [ 620.836583][ T1193] usb 5-1: SerialNumber: syz [ 620.848287][ T1193] usb 5-1: config 0 descriptor?? [ 620.951849][ T5821] IPVS: starting estimator thread 0... [ 621.094801][T10982] IPVS: using max 17 ests per chain, 40800 per kthread [ 621.533255][ T1193] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 623.793079][ T1193] rc_core: IR keymap rc-imon-pad not found [ 623.799106][ T1193] Registered IR keymap rc-empty [ 624.003760][ T5819] usb 4-1: USB disconnect, device number 28 [ 624.638786][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.645274][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.977136][ T1193] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 624.987601][ T1193] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 625.153588][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 625.162199][ T1193] imon:send_packet: packet tx failed (-71) [ 625.183077][ T1193] imon 5-1:0.0: remote input dev register failed [ 625.193289][ T1193] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 625.237942][T10994] sock: sock_timestamping_bind_phc: sock not bind to device [ 625.340706][ T1193] imon 5-1:0.0: unable to initialize intf0, err 0 [ 625.369054][ T1193] imon:imon_probe: failed to initialize context! [ 625.387874][ T1193] imon 5-1:0.0: unable to register, err -19 [ 625.417874][ T1193] usb 5-1: USB disconnect, device number 17 [ 625.684848][T10998] syzkaller0: entered promiscuous mode [ 625.700975][T10998] syzkaller0: entered allmulticast mode [ 626.641414][T11015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.358561][T11015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.416230][ T1193] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 627.668076][ T1193] usb 3-1: Using ep0 maxpacket: 32 [ 627.680352][ T1193] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 627.688794][ T1193] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.724254][ T1193] usb 3-1: config 0 has no interface number 0 [ 629.439046][ T1193] usb 3-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.461724][ T1193] usb 3-1: config 0 interface 12 has no altsetting 0 [ 629.482456][ T1193] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 629.503084][ T1193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.531810][ T1193] usb 3-1: Product: syz [ 629.541403][ T1193] usb 3-1: Manufacturer: syz [ 629.574756][ T1193] usb 3-1: SerialNumber: syz [ 630.396871][ T1193] usb 3-1: config 0 descriptor?? [ 630.402633][T11017] syz_tun: entered promiscuous mode [ 630.429217][ T1193] usb 3-1: can't set config #0, error -71 [ 630.458358][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 630.478815][ T1193] usb 3-1: USB disconnect, device number 20 [ 630.993768][T11045] syzkaller0: entered promiscuous mode [ 631.000111][T11045] syzkaller0: entered allmulticast mode [ 631.203092][ T27] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 631.463553][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 631.713041][ T27] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 631.756496][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.802950][ T27] usb 4-1: Product: syz [ 631.823740][ T27] usb 4-1: Manufacturer: syz [ 631.830241][ T27] usb 4-1: SerialNumber: syz [ 631.848547][ T27] usb 4-1: config 0 descriptor?? [ 631.861270][ T27] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 632.933554][ T9546] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 633.018067][T11061] Can't find a SQUASHFS superblock on nullb0 [ 633.233365][ T9546] usb 3-1: Using ep0 maxpacket: 32 [ 633.255682][ T9546] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 633.309562][ T9546] usb 3-1: config 0 has no interface number 0 [ 633.351944][ T9546] usb 3-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 633.436701][ T9546] usb 3-1: config 0 interface 12 has no altsetting 0 [ 633.504732][ T9546] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 633.565992][ T9546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.624672][ T9546] usb 3-1: Product: syz [ 633.655099][ T9546] usb 3-1: Manufacturer: syz [ 633.694270][ T9546] usb 3-1: SerialNumber: syz [ 633.757100][ T9546] usb 3-1: config 0 descriptor?? [ 633.794540][ T27] gspca_sonixj: reg_r err -110 [ 633.799556][ T27] sonixj: probe of 4-1:0.0 failed with error -110 [ 633.938939][ T9546] f81534 3-1:0.12: required endpoints missing [ 634.441522][T11066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.239486][ T9617] usb 4-1: USB disconnect, device number 29 [ 635.378524][ T9546] usb 3-1: USB disconnect, device number 21 [ 635.432352][T11066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.533411][T11067] syz_tun: entered promiscuous mode [ 635.566596][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 636.068421][T11084] syzkaller0: entered promiscuous mode [ 636.084572][T11084] syzkaller0: entered allmulticast mode [ 637.178994][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 637.968542][T11086] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 638.063021][ T5819] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 638.275025][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 638.313172][ T5819] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 638.322402][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.331179][ T5819] usb 5-1: Product: syz [ 638.335710][ T5819] usb 5-1: Manufacturer: syz [ 638.340445][ T5819] usb 5-1: SerialNumber: syz [ 638.365602][ T5819] usb 5-1: config 0 descriptor?? [ 638.409035][ T5819] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 638.934805][ T5819] gspca_sonixj: reg_w1 err -110 [ 639.005637][ T5819] sonixj: probe of 5-1:0.0 failed with error -110 [ 639.060690][T11114] Can't find a SQUASHFS superblock on nullb0 [ 641.553866][ T5819] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 641.759943][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 641.779253][ T5819] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 641.792427][ T5819] usb 3-1: config 0 has no interface number 0 [ 641.813382][ T5819] usb 3-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 641.868267][ T5819] usb 3-1: config 0 interface 12 has no altsetting 0 [ 641.892009][ T5819] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 641.903782][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.923719][ T5819] usb 3-1: Product: syz [ 641.934489][ T5819] usb 3-1: Manufacturer: syz [ 641.946532][ T5819] usb 3-1: SerialNumber: syz [ 641.969564][ T5819] usb 3-1: config 0 descriptor?? [ 641.992018][ T5819] f81534 3-1:0.12: required endpoints missing [ 642.066045][T11129] syzkaller0: entered promiscuous mode [ 642.071697][T11129] syzkaller0: entered allmulticast mode [ 642.234037][ T5818] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 642.432928][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 642.497086][ T1193] usb 5-1: USB disconnect, device number 18 [ 643.352597][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.363798][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.373669][ T5818] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 643.382939][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.414477][ T5818] usb 4-1: config 0 descriptor?? [ 643.420779][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 150 seconds [ 643.433095][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 150 seconds [ 643.444567][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 150 seconds [ 643.464944][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 150 seconds [ 643.527536][ T5821] usb 3-1: USB disconnect, device number 22 [ 644.705481][ T5818] usb 4-1: string descriptor 0 read error: -71 [ 644.759450][ T5818] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 644.778383][ T5818] letsketch: probe of 0003:6161:4D15.0006 failed with error -32 [ 644.843634][ T5818] usb 4-1: USB disconnect, device number 30 [ 646.184999][T11162] syzkaller0: entered promiscuous mode [ 646.190648][T11162] syzkaller0: entered allmulticast mode [ 646.210402][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 647.952981][ T5821] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 647.983966][ T5819] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 648.138599][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 648.158409][ T5821] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 648.178478][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.191979][ T5821] usb 4-1: Product: syz [ 648.203005][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 648.215849][ T5819] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 648.220082][ T5821] usb 4-1: Manufacturer: syz [ 648.232282][ T5819] usb 3-1: config 0 has no interface number 0 [ 648.238719][ T5821] usb 4-1: SerialNumber: syz [ 648.239903][ T5819] usb 3-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 648.260009][ T5819] usb 3-1: config 0 interface 12 has no altsetting 0 [ 648.272377][ T5819] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 648.281896][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.300373][ T5819] usb 3-1: Product: syz [ 648.308354][ T5819] usb 3-1: Manufacturer: syz [ 648.322299][ T5819] usb 3-1: SerialNumber: syz [ 648.355723][ T5821] usb 4-1: config 0 descriptor?? [ 648.364883][ T5821] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 648.429409][ T5819] usb 3-1: config 0 descriptor?? [ 648.456430][ T5819] f81534 3-1:0.12: required endpoints missing [ 648.850664][T11178] Can't find a SQUASHFS superblock on nullb0 [ 649.383158][ T5821] gspca_sonixj: reg_r err -110 [ 649.388136][ T5821] sonixj: probe of 4-1:0.0 failed with error -110 [ 650.733307][ T9617] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 651.050634][ T5821] usb 4-1: USB disconnect, device number 31 [ 651.103004][ T9617] usb 5-1: Using ep0 maxpacket: 32 [ 651.134091][ T9617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.164914][ T5839] usb 3-1: USB disconnect, device number 23 [ 651.179267][ T9617] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.206706][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 651.224385][ T9617] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.08 [ 651.262939][ T9617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.331367][ T9617] usb 5-1: config 0 descriptor?? [ 651.364455][T11196] vlan2: entered promiscuous mode [ 651.369612][T11196] bond1: entered promiscuous mode [ 651.383545][T11196] vlan2: entered allmulticast mode [ 651.388779][T11196] bond1: entered allmulticast mode [ 651.413171][T11196] bond1: (slave vlan2): Opening slave failed [ 651.436536][T11198] syzkaller0: entered promiscuous mode [ 651.442281][T11198] syzkaller0: entered allmulticast mode [ 651.865691][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.872671][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.880885][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.888220][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.896394][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.903828][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.910798][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.919090][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 651.926336][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.579087][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.592247][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.599369][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.612922][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.619872][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.641646][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.659617][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.678357][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.693453][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.700680][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.713552][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.731029][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.743252][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.750201][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.763175][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.780586][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.804110][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.823023][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.842965][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.849922][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.878108][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.901179][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.920660][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.933090][ T5819] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 652.951102][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.964969][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.982939][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 652.996718][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.022995][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.030053][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.040200][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.052966][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.064777][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.079975][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.098945][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.116482][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.133045][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 653.139803][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.140439][ T5786] Bluetooth: hci1: unexpected event 0x35 length: 7 > 6 [ 653.159084][ T5819] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 653.180962][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.252115][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.283779][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.291973][ T5819] usb 1-1: Product: syz [ 653.304086][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.311333][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.330225][ T5819] usb 1-1: Manufacturer: syz [ 653.343154][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.350384][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.357589][ T5819] usb 1-1: SerialNumber: syz [ 653.371745][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.391831][ T5819] usb 1-1: config 0 descriptor?? [ 653.398082][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.411809][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.442650][ T5819] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 653.449264][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.458505][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.468652][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.476307][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.485191][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.492722][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.501895][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.509389][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.523664][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.532017][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.541637][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.549604][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.558405][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.568160][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.575596][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.586068][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.623005][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.659916][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.692445][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.700198][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.707745][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.718458][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.726294][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.736887][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.744371][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.752151][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.760091][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.771230][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.778978][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.787931][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.800027][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.809521][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.817780][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.825243][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.838710][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.848048][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.855613][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.863614][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.870930][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.878578][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.889033][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.896217][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.904531][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.911785][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.922122][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.929642][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.937960][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.945389][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.953208][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.960586][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 653.969073][ T5819] gspca_sonixj: reg_w1 err -110 [ 653.974622][ T5819] sonixj: probe of 1-1:0.0 failed with error -110 [ 653.981487][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.007395][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.023173][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.031090][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.043114][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.053040][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.063041][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.083651][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.103003][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.132940][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.153644][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.173060][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.193123][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.213061][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.230443][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.242969][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.253123][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.260726][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.272956][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.293076][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.313340][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.352997][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.361105][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.368096][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.403584][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.487744][T11226] Can't find a SQUASHFS superblock on nullb0 [ 654.513207][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.654055][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.766151][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.865953][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 654.973671][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 655.055195][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 655.129145][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 655.341523][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 656.951996][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 656.960120][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 656.967551][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 656.975030][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 656.982484][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 656.998342][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.005920][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.015588][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.022567][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.098400][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.132214][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.158376][ T5839] usb 1-1: USB disconnect, device number 18 [ 657.171340][ T5786] Bluetooth: hci3: unexpected event 0x09 length: 4 > 3 [ 657.184467][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.240167][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.289730][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.289743][T11237] syzkaller0: entered promiscuous mode [ 657.306064][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.330734][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.335207][T11237] syzkaller0: entered allmulticast mode [ 657.360682][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.372810][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.380000][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.396660][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.404546][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.411594][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.448208][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.495436][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.506904][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.662172][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.695499][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.730512][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.737828][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.754003][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.767113][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.778994][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.789062][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.800610][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.894136][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.902695][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.916395][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.927128][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.937891][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.948905][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.984049][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 657.992294][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.023904][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.067673][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.100503][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.133684][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.169492][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.206125][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.223163][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.230376][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.238810][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.246080][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.293496][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.300736][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.308311][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.317258][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.324930][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.333176][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.341469][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.348906][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.358228][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.365483][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.374882][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.378148][T11246] 9pnet_fd: Insufficient options for proto=fd [ 658.381977][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.395506][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.402690][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.412806][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.423679][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.431144][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.438456][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.446532][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.453988][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.461812][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.469270][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.476849][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.484350][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.491743][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.499454][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.506795][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.515069][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.522957][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.530684][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.541359][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.549376][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.557440][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.568028][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.578570][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.600972][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.615016][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.623682][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.630896][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.638124][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.645660][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.653872][ T9617] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 658.817201][ T9617] betop 0003:8380:1850.0007: hidraw0: USB HID v7f.fd Device [HID 8380:1850] on usb-dummy_hcd.4-1/input0 [ 658.872977][ T9617] betop 0003:8380:1850.0007: no inputs found [ 658.976862][ T9617] usb 5-1: USB disconnect, device number 19 [ 660.510624][T11251] fido_id[11251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 660.737895][T11255] IPv6: Can't replace route, no match found [ 662.584687][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 665.613889][ T5820] IPVS: starting estimator thread 0... [ 665.713505][T11319] IPVS: using max 26 ests per chain, 62400 per kthread [ 665.736533][T11320] netlink: 'syz.4.1519': attribute type 13 has an invalid length. [ 665.783004][T11320] netlink: 'syz.4.1519': attribute type 17 has an invalid length. [ 666.455005][T11320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.308689][T11343] sock: sock_timestamping_bind_phc: sock not bind to device [ 667.397304][T11341] syzkaller0: entered promiscuous mode [ 667.405776][T11341] syzkaller0: entered allmulticast mode [ 670.853200][T11363] IPv6: Can't replace route, no match found [ 671.476287][T11380] sock: sock_timestamping_bind_phc: sock not bind to device [ 671.563025][ T5820] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 671.584697][T11382] syzkaller0: entered promiscuous mode [ 671.600554][T11382] syzkaller0: entered allmulticast mode [ 671.775408][ T5820] usb 5-1: config 0 has no interfaces? [ 671.787183][ T5820] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 671.799761][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.814499][ T5820] usb 5-1: config 0 descriptor?? [ 672.044523][ T9617] usb 5-1: USB disconnect, device number 20 [ 673.915791][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 180 seconds [ 673.927033][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 180 seconds [ 673.938303][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 180 seconds [ 673.949524][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 180 seconds [ 675.793463][ T9617] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 675.993153][ T9617] usb 3-1: Using ep0 maxpacket: 8 [ 676.003907][ T9617] usb 3-1: config 0 has an invalid interface number: 124 but max is 0 [ 676.012134][ T9617] usb 3-1: config 0 has no interface number 0 [ 676.019997][ T9617] usb 3-1: config 0 interface 124 has no altsetting 0 [ 676.036076][ T9617] usb 3-1: New USB device found, idVendor=10d2, idProduct=e82c, bcdDevice=87.5e [ 676.146547][ T9617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.180470][ T9617] usb 3-1: Product: syz [ 676.230862][T11436] sock: sock_timestamping_bind_phc: sock not bind to device [ 676.243490][ T9617] usb 3-1: Manufacturer: syz [ 676.249401][ T9617] usb 3-1: SerialNumber: syz [ 676.280579][ T9617] usb 3-1: config 0 descriptor?? [ 676.556635][T11438] syzkaller0: entered promiscuous mode [ 676.562434][T11438] syzkaller0: entered allmulticast mode [ 676.582078][ T9617] usblcd 3-1:0.124: USBLCD model not supported. [ 676.624246][ T9617] usb 3-1: USB disconnect, device number 24 [ 677.272797][ T1193] IPVS: starting estimator thread 0... [ 677.393354][T11451] IPVS: using max 18 ests per chain, 43200 per kthread [ 677.693125][ T1193] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 678.093023][ T1193] usb 5-1: Using ep0 maxpacket: 32 [ 678.127142][ T1193] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 678.204582][ T1193] usb 5-1: config 0 has no interface number 0 [ 678.274175][ T1193] usb 5-1: config 0 interface 12 has no altsetting 0 [ 678.809580][T11464] sock: sock_timestamping_bind_phc: sock not bind to device [ 678.982040][T11466] syzkaller0: entered promiscuous mode [ 678.991431][T11466] syzkaller0: entered allmulticast mode [ 679.496905][ T1193] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 679.506090][ T1193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.514227][ T1193] usb 5-1: Product: syz [ 679.518628][ T1193] usb 5-1: Manufacturer: syz [ 679.523363][ T1193] usb 5-1: SerialNumber: syz [ 679.717469][ T1193] usb 5-1: config 0 descriptor?? [ 682.061990][ T1193] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 682.153343][ T1193] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 682.182343][ T1193] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 682.202370][ T1193] f81534: probe of 5-1:0.12 failed with error -71 [ 682.252534][T11497] sock: sock_timestamping_bind_phc: sock not bind to device [ 682.292197][ T1193] usb 5-1: USB disconnect, device number 21 [ 682.458273][T11499] syzkaller0: entered promiscuous mode [ 682.485180][T11499] syzkaller0: entered allmulticast mode [ 686.058983][T11535] sock: sock_timestamping_bind_phc: sock not bind to device [ 686.078414][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.086393][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.231343][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'. [ 690.861589][T11556] netlink: 'syz.2.1587': attribute type 13 has an invalid length. [ 690.873360][T11556] netlink: 'syz.2.1587': attribute type 17 has an invalid length. [ 691.453885][T11556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 693.627894][T11574] sock: sock_timestamping_bind_phc: sock not bind to device [ 696.514350][ T9617] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 696.695999][ T5820] IPVS: starting estimator thread 0... [ 696.713503][ T9617] usb 3-1: Using ep0 maxpacket: 32 [ 696.721272][ T9617] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 696.729723][ T9617] usb 3-1: config 0 has no interface number 0 [ 696.736147][ T9617] usb 3-1: config 0 interface 12 has no altsetting 0 [ 696.750721][ T9617] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 696.761850][ T9617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.776073][ T9617] usb 3-1: Product: syz [ 696.780780][ T9617] usb 3-1: Manufacturer: syz [ 696.785979][T11604] IPVS: using max 20 ests per chain, 48000 per kthread [ 696.801826][ T9617] usb 3-1: SerialNumber: syz [ 696.810959][ T9617] usb 3-1: config 0 descriptor?? [ 696.892049][T11606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 697.601754][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 698.517039][ T9617] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 698.525547][ T9617] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 698.537074][ T9617] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 698.548882][ T9617] f81534: probe of 3-1:0.12 failed with error -71 [ 698.647127][ T9617] usb 3-1: USB disconnect, device number 25 [ 699.600638][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 700.676303][T11652] orangefs_mount: mount request failed with -4 [ 702.616095][ T5821] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 702.631898][T11685] sock: sock_timestamping_bind_phc: sock not bind to device [ 702.802903][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 702.826960][ T5821] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 702.839139][ T5821] usb 4-1: config 0 has no interface number 0 [ 702.852968][ T5821] usb 4-1: config 0 interface 12 has no altsetting 0 [ 702.865375][ T5821] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 702.882891][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.911338][ T5821] usb 4-1: Product: syz [ 702.915706][ T5821] usb 4-1: Manufacturer: syz [ 702.930725][ T5821] usb 4-1: SerialNumber: syz [ 702.946503][ T5821] usb 4-1: config 0 descriptor?? [ 704.029219][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 210 seconds [ 704.040713][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 210 seconds [ 704.052145][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 210 seconds [ 704.073200][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 210 seconds [ 704.845192][ T5821] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 705.102964][ T5821] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 705.110356][ T5821] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 705.118119][ T5821] f81534: probe of 4-1:0.12 failed with error -71 [ 705.181991][ T5821] usb 4-1: USB disconnect, device number 32 [ 707.103199][T11732] netlink: 'syz.4.1643': attribute type 13 has an invalid length. [ 707.120362][T11732] netlink: 'syz.4.1643': attribute type 17 has an invalid length. [ 707.142543][T11732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.643311][T11741] usb usb8: usbfs: process 11741 (syz.0.1644) did not claim interface 0 before use [ 708.932933][ T5821] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 709.122972][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 709.710968][ T5821] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 709.720832][ T5821] usb 4-1: config 0 has no interface number 0 [ 709.727290][ T5821] usb 4-1: config 0 interface 12 has no altsetting 0 [ 709.737161][ T5821] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 709.747310][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.763199][ T5821] usb 4-1: Product: syz [ 709.767519][ T5821] usb 4-1: Manufacturer: syz [ 709.772172][ T5821] usb 4-1: SerialNumber: syz [ 709.794524][ T5821] usb 4-1: config 0 descriptor?? [ 712.052720][ T5821] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 712.237565][ T5821] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 712.252886][ T5821] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 712.260592][ T5821] f81534: probe of 4-1:0.12 failed with error -71 [ 712.315211][ T5821] usb 4-1: USB disconnect, device number 33 [ 712.779389][ T9617] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 712.783476][ T5838] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 712.822349][T11785] netlink: 'syz.3.1659': attribute type 13 has an invalid length. [ 712.831943][T11785] netlink: 'syz.3.1659': attribute type 17 has an invalid length. [ 712.873513][T11785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.982925][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 712.989886][ T5838] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 712.993992][ T9617] usb 5-1: Using ep0 maxpacket: 8 [ 712.999535][ T5838] usb 1-1: config 0 has no interface number 0 [ 713.009461][ T5838] usb 1-1: config 0 interface 12 has no altsetting 0 [ 713.017876][ T9617] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 713.027527][ T9617] usb 5-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 713.038584][ T9617] usb 5-1: config 179 has no interface number 0 [ 713.045175][ T9617] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 713.055248][ T5838] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 713.058285][ T9617] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 713.077628][ T9617] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 713.078245][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.092741][ T9617] usb 5-1: config 179 interface 65 has no altsetting 0 [ 713.106750][ T9617] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 713.109613][ T5838] usb 1-1: Product: syz [ 713.117839][ T9617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.122765][ T5838] usb 1-1: Manufacturer: syz [ 713.138053][ T5838] usb 1-1: SerialNumber: syz [ 713.149886][ T5838] usb 1-1: config 0 descriptor?? [ 713.239582][T11787] QAT: Device 128 not found [ 713.472863][ C0] hrtimer: interrupt took 90867 ns [ 713.496036][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.525730][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.560620][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.583304][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.603622][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.623036][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.639793][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.657240][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.665198][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.672697][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 713.680669][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 714.534645][ T5838] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 714.542251][ T5838] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 714.549740][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 714.557276][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 714.565639][ T5838] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 714.573343][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 714.580791][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 714.588435][ T5838] f81534: probe of 1-1:0.12 failed with error -71 [ 714.600097][ T5838] usb 1-1: USB disconnect, device number 19 [ 714.611286][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 714.620997][ T1193] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 714.665646][ T1193] hid-generic 0006:0004:0009.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 714.689077][ T5839] usb 5-1: USB disconnect, device number 22 [ 715.584517][T11805] fido_id[11805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 715.923846][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 718.643442][ T9617] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 718.833064][ T9617] usb 1-1: Using ep0 maxpacket: 32 [ 718.898985][ T9617] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 718.908171][ T9617] usb 1-1: config 0 has no interface number 0 [ 718.926520][ T9617] usb 1-1: config 0 interface 12 has no altsetting 0 [ 719.032965][ T9617] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 719.049733][ T9617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.058478][ T9617] usb 1-1: Product: syz [ 719.070195][ T9617] usb 1-1: Manufacturer: syz [ 719.075308][ T9617] usb 1-1: SerialNumber: syz [ 719.087452][ T9617] usb 1-1: config 0 descriptor?? [ 719.832410][ T9617] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 719.854872][ T9617] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 719.872478][ T9617] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 719.890082][ T9617] f81534: probe of 1-1:0.12 failed with error -71 [ 719.917288][ T9617] usb 1-1: USB disconnect, device number 20 [ 721.465263][T11878] syzkaller0: entered promiscuous mode [ 721.473687][T11878] syzkaller0: entered allmulticast mode [ 721.928050][ T5838] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 722.132983][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 722.145156][ T5838] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 722.154095][ T5838] usb 3-1: config 0 has no interface number 0 [ 722.160273][ T5838] usb 3-1: config 0 interface 12 has no altsetting 0 [ 722.189195][ T5838] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 722.203201][ T9617] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 722.206839][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.241677][ T5838] usb 3-1: Product: syz [ 722.254515][ T5838] usb 3-1: Manufacturer: syz [ 722.259192][ T5838] usb 3-1: SerialNumber: syz [ 722.298439][ T5838] usb 3-1: config 0 descriptor?? [ 722.393026][ T9617] usb 4-1: Using ep0 maxpacket: 32 [ 722.410698][ T9617] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 722.426638][ T9617] usb 4-1: config 0 has no interface number 0 [ 722.433003][ T9617] usb 4-1: config 0 interface 12 has no altsetting 0 [ 722.446100][ T9617] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 722.456771][ T9617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.464971][ T9617] usb 4-1: Product: syz [ 722.469372][ T9617] usb 4-1: Manufacturer: syz [ 722.474371][ T9617] usb 4-1: SerialNumber: syz [ 722.485951][ T9617] usb 4-1: config 0 descriptor?? [ 723.157094][ T9617] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 723.169971][ T9617] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 723.186254][ T9617] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 723.208629][ T9617] f81534: probe of 4-1:0.12 failed with error -71 [ 723.235267][ T9617] usb 4-1: USB disconnect, device number 34 [ 724.399880][ T5838] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 724.530725][ T5838] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 724.640020][ T5838] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 724.699297][ T5838] f81534: probe of 3-1:0.12 failed with error -71 [ 724.751938][ T5838] usb 3-1: USB disconnect, device number 26 [ 725.922538][T11933] netlink: 'syz.3.1707': attribute type 13 has an invalid length. [ 725.939075][T11933] netlink: 'syz.3.1707': attribute type 17 has an invalid length. [ 725.985054][T11933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.392943][ T5838] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 726.596324][ T5838] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 726.615627][ T5838] usb 3-1: config 5 has no interface number 0 [ 726.621840][ T5838] usb 3-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 726.664177][ T5838] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 726.702213][ T5838] usb 3-1: config 5 interface 123 has no altsetting 0 [ 726.719550][ T5838] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 726.741121][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.777715][ T5838] usb 3-1: Product: syz [ 726.782127][ T5838] usb 3-1: Manufacturer: syz [ 726.787425][ T5838] usb 3-1: SerialNumber: syz [ 727.047548][T11935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.074692][T11935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.204049][ T5838] comedi comedi5: Wrong number of endpoints [ 727.220836][ T5838] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 727.249917][ T5838] usb 3-1: USB disconnect, device number 27 [ 728.433070][T11961] netlink: 'syz.2.1719': attribute type 13 has an invalid length. [ 728.451702][T11961] netlink: 'syz.2.1719': attribute type 17 has an invalid length. [ 728.502703][T11961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 734.120868][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 240 seconds [ 734.134267][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 240 seconds [ 734.612956][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 240 seconds [ 734.624378][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 240 seconds [ 735.660616][T12024] netlink: 'syz.0.1740': attribute type 13 has an invalid length. [ 735.793171][T12024] netlink: 'syz.0.1740': attribute type 17 has an invalid length. [ 736.920967][T12024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 738.243520][ T1193] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 738.443111][ T1193] usb 1-1: Using ep0 maxpacket: 32 [ 738.465914][ T1193] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 738.483169][ T1193] usb 1-1: config 0 has no interface number 0 [ 738.499597][ T1193] usb 1-1: config 0 interface 12 has no altsetting 0 [ 738.522373][ T1193] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 738.547496][ T1193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.566117][ T1193] usb 1-1: Product: syz [ 738.576270][ T1193] usb 1-1: Manufacturer: syz [ 738.587551][ T1193] usb 1-1: SerialNumber: syz [ 738.644187][ T1193] usb 1-1: config 0 descriptor?? [ 740.235387][ T1193] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 740.272894][ T1193] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 740.380306][ T1193] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 740.434791][ T1193] f81534: probe of 1-1:0.12 failed with error -71 [ 740.476640][ T1193] usb 1-1: USB disconnect, device number 21 [ 743.615671][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 744.012937][ T9546] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 744.335709][ T9546] usb 3-1: Using ep0 maxpacket: 32 [ 744.689373][ T9546] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 744.698348][ T9546] usb 3-1: config 0 has no interface number 0 [ 744.704977][ T9546] usb 3-1: config 0 interface 12 has no altsetting 0 [ 744.723258][ T9546] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 744.751100][ T9546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.777417][ T9546] usb 3-1: Product: syz [ 744.781837][ T9546] usb 3-1: Manufacturer: syz [ 744.793238][ T9546] usb 3-1: SerialNumber: syz [ 744.809423][ T9546] usb 3-1: config 0 descriptor?? [ 746.651446][ T9546] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 746.678801][ T9546] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 746.713778][ T9546] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 747.562342][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.573570][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.590188][ T9546] f81534: probe of 3-1:0.12 failed with error -71 [ 747.614370][ T9546] usb 3-1: USB disconnect, device number 28 [ 747.656361][T12120] netlink: 'syz.0.1768': attribute type 3 has an invalid length. [ 749.563199][ T5820] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 749.782961][ T5820] usb 5-1: Using ep0 maxpacket: 32 [ 749.830389][ T5820] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 749.863608][ T5820] usb 5-1: config 0 has no interface number 0 [ 749.896730][ T5820] usb 5-1: config 0 interface 12 has no altsetting 0 [ 750.005567][ T5820] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 750.078844][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.141834][ T5820] usb 5-1: Product: syz [ 750.181271][ T5820] usb 5-1: Manufacturer: syz [ 750.229401][ T5820] usb 5-1: SerialNumber: syz [ 750.316412][ T5820] usb 5-1: config 0 descriptor?? [ 751.273702][T12155] input: syz0 as /devices/virtual/input/input22 [ 751.328788][ T5820] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 751.360760][ T5820] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 751.412477][T12158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.448066][ T5820] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 751.577529][ T5820] f81534: probe of 5-1:0.12 failed with error -71 [ 751.936992][ T5820] usb 5-1: USB disconnect, device number 23 [ 753.145016][T12158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.325654][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 754.017710][T12155] ALSA: mixer_oss: invalid OSS volume '' [ 756.872967][ T5821] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 757.950440][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 757.958089][ T5821] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 757.967138][ T5821] usb 4-1: config 0 has no interface number 0 [ 757.973968][ T5821] usb 4-1: config 0 interface 12 has no altsetting 0 [ 758.034813][ T5821] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 758.806149][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.814330][ T5821] usb 4-1: Product: syz [ 758.818556][ T5821] usb 4-1: Manufacturer: syz [ 758.823408][ T5821] usb 4-1: SerialNumber: syz [ 758.849871][ T5821] usb 4-1: config 0 descriptor?? [ 760.230448][ T5821] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 760.256071][ T5821] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 760.299115][ T5821] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 760.362985][ T5821] f81534: probe of 4-1:0.12 failed with error -71 [ 760.414125][ T5821] usb 4-1: USB disconnect, device number 35 [ 762.622953][ T5818] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 762.853089][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 762.872518][ T5818] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 762.893243][ T5818] usb 1-1: config 0 has no interface number 0 [ 762.907380][ T5818] usb 1-1: config 0 interface 12 has no altsetting 0 [ 762.922910][ T1193] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 762.937851][ T5818] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 762.959001][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.973033][ T5818] usb 1-1: Product: syz [ 762.977287][ T5818] usb 1-1: Manufacturer: syz [ 762.992381][ T5818] usb 1-1: SerialNumber: syz [ 763.013235][ T5818] usb 1-1: config 0 descriptor?? [ 763.122989][ T1193] usb 3-1: Using ep0 maxpacket: 32 [ 763.136756][ T1193] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 763.160499][ T1193] usb 3-1: config 0 has no interface number 0 [ 763.185188][ T1193] usb 3-1: config 0 interface 12 has no altsetting 0 [ 763.213311][ T1193] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 763.232929][ T1193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.245627][ T1193] usb 3-1: Product: syz [ 763.282976][ T1193] usb 3-1: Manufacturer: syz [ 763.287674][ T1193] usb 3-1: SerialNumber: syz [ 763.308003][ T1193] usb 3-1: config 0 descriptor?? [ 763.872520][ T5818] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 763.892142][ T5818] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 763.900021][ T5818] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 763.916863][ T5818] f81534: probe of 1-1:0.12 failed with error -71 [ 764.153341][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 270 seconds [ 764.628560][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 270 seconds [ 764.642656][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 270 seconds [ 764.666069][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 270 seconds [ 764.751396][ T5818] usb 1-1: USB disconnect, device number 22 [ 765.239850][ T1193] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 765.379291][ T1193] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 765.438457][ T1193] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 765.515766][ T1193] f81534: probe of 3-1:0.12 failed with error -71 [ 765.728281][ T1193] usb 3-1: USB disconnect, device number 29 [ 767.419125][ T5819] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 768.149166][T12345] netlink: 'syz.4.1840': attribute type 13 has an invalid length. [ 768.162967][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 768.170698][ T5819] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 768.180550][ T5819] usb 1-1: config 0 has no interface number 0 [ 768.186997][T12345] netlink: 'syz.4.1840': attribute type 17 has an invalid length. [ 768.187773][ T5819] usb 1-1: config 0 interface 12 has no altsetting 0 [ 768.225108][ T5819] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 768.241365][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.250784][ T5819] usb 1-1: Product: syz [ 768.255400][ T5819] usb 1-1: Manufacturer: syz [ 768.260229][ T5819] usb 1-1: SerialNumber: syz [ 768.273469][T12345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.291303][ T5819] usb 1-1: config 0 descriptor?? [ 769.301833][ T5819] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 769.334957][ T5819] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 769.382862][ T5819] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 769.415776][ T5819] f81534: probe of 1-1:0.12 failed with error -71 [ 769.453477][ T5819] usb 1-1: USB disconnect, device number 23 [ 769.596667][ T5821] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 769.870468][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 769.914274][ T5821] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 770.026863][ T5821] usb 5-1: config 0 has no interface number 0 [ 770.203541][ T5821] usb 5-1: config 0 interface 12 has no altsetting 0 [ 770.274802][ T5821] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 770.320919][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.352257][ T5821] usb 5-1: Product: syz [ 771.191270][ T5821] usb 5-1: Manufacturer: syz [ 771.196425][ T5821] usb 5-1: SerialNumber: syz [ 771.223247][ T5821] usb 5-1: config 0 descriptor?? [ 771.721861][ T9546] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 771.983134][ T9546] usb 1-1: Using ep0 maxpacket: 8 [ 772.189376][ T9546] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 772.269666][ T9546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.356492][ T9546] usb 1-1: Product: syz [ 772.393807][ T9546] usb 1-1: Manufacturer: syz [ 772.398522][ T9546] usb 1-1: SerialNumber: syz [ 772.458876][ T9546] usb 1-1: config 0 descriptor?? [ 772.475501][ T9546] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 772.809619][T12395] Can't find a SQUASHFS superblock on nullb0 [ 773.151549][ T5821] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 773.281409][ T5821] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 773.447524][ T5821] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 773.533420][ T9546] gspca_sonixj: reg_w1 err -110 [ 773.564003][ T5821] f81534: probe of 5-1:0.12 failed with error -71 [ 773.571725][ T9546] sonixj: probe of 1-1:0.0 failed with error -110 [ 773.870298][ T5821] usb 5-1: USB disconnect, device number 24 [ 774.531942][ T5821] usb 1-1: USB disconnect, device number 24 [ 775.046521][T12416] ip6tnl0: entered promiscuous mode [ 775.058528][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 775.113022][ T5821] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 776.120226][ T5821] usb 1-1: Using ep0 maxpacket: 32 [ 777.457874][ T5821] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 777.468002][ T5821] usb 1-1: config 0 has no interface number 0 [ 777.493804][ T5821] usb 1-1: config 0 interface 12 has no altsetting 0 [ 777.510545][ T5821] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 777.522385][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.545168][ T5821] usb 1-1: Product: syz [ 777.549462][ T5821] usb 1-1: Manufacturer: syz [ 777.560370][ T5821] usb 1-1: SerialNumber: syz [ 777.585618][ T5821] usb 1-1: config 0 descriptor?? [ 777.603840][ T5838] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 777.628857][T12428] netlink: 'syz.4.1865': attribute type 13 has an invalid length. [ 777.641350][T12428] netlink: 'syz.4.1865': attribute type 17 has an invalid length. [ 777.657618][T12428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.719039][ T5821] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 777.737854][ T5821] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 777.753483][ T5821] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 777.774197][ T5821] f81534: probe of 1-1:0.12 failed with error -71 [ 777.785640][ T5821] usb 1-1: USB disconnect, device number 25 [ 777.802980][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 777.814913][ T5838] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 777.829886][ T5838] usb 3-1: config 0 has no interface number 0 [ 777.839462][ T5838] usb 3-1: config 0 interface 12 has no altsetting 0 [ 777.846336][ T5839] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 777.859095][ T5838] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 777.876060][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.893074][ T5838] usb 3-1: Product: syz [ 777.901869][ T5838] usb 3-1: Manufacturer: syz [ 777.910409][ T5838] usb 3-1: SerialNumber: syz [ 777.920377][ T5838] usb 3-1: config 0 descriptor?? [ 778.043169][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 778.065070][ T5839] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 778.074731][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.084344][ T5839] usb 4-1: Product: syz [ 778.088756][ T5839] usb 4-1: Manufacturer: syz [ 778.093859][ T5839] usb 4-1: SerialNumber: syz [ 778.101418][ T5839] usb 4-1: config 0 descriptor?? [ 778.128546][ T5839] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 778.575502][T12441] Can't find a SQUASHFS superblock on nullb0 [ 779.456769][ T5839] gspca_sonixj: reg_w1 err -110 [ 779.461893][ T5839] sonixj: probe of 4-1:0.0 failed with error -110 [ 779.924567][ T5838] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 780.031415][ T5838] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 780.108086][ T5838] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 780.173039][ T5838] f81534: probe of 3-1:0.12 failed with error -71 [ 780.344583][ T5838] usb 3-1: USB disconnect, device number 30 [ 780.640120][ T5820] usb 4-1: USB disconnect, device number 36 [ 781.043014][ T1193] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 781.262982][ T1193] usb 5-1: Using ep0 maxpacket: 8 [ 781.290589][ T1193] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 781.472313][ T1193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.415043][ T1193] usb 5-1: Product: syz [ 783.419272][ T1193] usb 5-1: Manufacturer: syz [ 783.424081][ T1193] usb 5-1: SerialNumber: syz [ 783.443996][ T1193] usb 5-1: config 0 descriptor?? [ 783.452571][ T1193] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 783.569701][T12462] ip6tnl0: entered promiscuous mode [ 783.607797][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 783.822980][ T5821] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 783.868283][T12471] Can't find a SQUASHFS superblock on nullb0 [ 784.583154][ T1193] gspca_sonixj: reg_w1 err -110 [ 784.588167][ T1193] sonixj: probe of 5-1:0.0 failed with error -110 [ 786.195208][ T1193] usb 5-1: USB disconnect, device number 25 [ 786.286815][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 786.304264][ T5821] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 786.326875][ T5821] usb 3-1: config 0 has no interface number 0 [ 786.345351][ T5821] usb 3-1: config 0 interface 12 has no altsetting 0 [ 786.374209][ T5821] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 786.391147][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.405664][ T5821] usb 3-1: Product: syz [ 786.410151][ T5821] usb 3-1: Manufacturer: syz [ 786.416035][ T5821] usb 3-1: SerialNumber: syz [ 786.424476][ T5821] usb 3-1: config 0 descriptor?? [ 786.603009][ T5821] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 786.633528][ T5821] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 786.657221][ T5821] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 786.703019][ T5821] f81534: probe of 3-1:0.12 failed with error -71 [ 786.713081][ T1193] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 786.749115][ T5821] usb 3-1: USB disconnect, device number 31 [ 786.925111][ T1193] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 786.966137][ T1193] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 786.995831][ T1193] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 787.013113][ T1193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.037120][ T1193] usb 5-1: Product: syz [ 787.048441][ T1193] usb 5-1: Manufacturer: syz [ 787.057415][ T1193] usb 5-1: SerialNumber: syz [ 787.098051][ T1193] usb 5-1: config 0 descriptor?? [ 787.116629][ T1193] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 788.346145][ T1193] usb 5-1: USB disconnect, device number 26 [ 789.573085][ T1193] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 789.852989][ T1193] usb 5-1: Using ep0 maxpacket: 8 [ 789.880491][ T1193] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 789.889689][ T1193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.906357][ T1193] usb 5-1: Product: syz [ 789.918045][ T1193] usb 5-1: Manufacturer: syz [ 789.922679][ T1193] usb 5-1: SerialNumber: syz [ 789.935327][ T1193] usb 5-1: config 0 descriptor?? [ 789.949341][ T1193] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 790.745915][ T1193] gspca_sonixj: reg_w1 err -110 [ 790.751027][ T1193] sonixj: probe of 5-1:0.0 failed with error -110 [ 790.905753][T12525] /dev/nullb0: Can't open blockdev [ 794.233162][ T97] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 300 seconds [ 794.644216][ T97] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 300 seconds [ 794.683424][ T97] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 300 seconds [ 794.724388][ T97] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 300 seconds [ 796.312426][ T1193] usb 5-1: USB disconnect, device number 27 [ 798.533506][T12557] 9pnet_fd: Insufficient options for proto=fd [ 798.803300][ T5819] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 798.913001][ T5839] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 799.003382][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 799.078045][ T5819] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 799.113266][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.152950][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 799.162097][ T5819] usb 5-1: Product: syz [ 799.200567][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 799.209941][ T5819] usb 5-1: Manufacturer: syz [ 799.231895][ T5819] usb 5-1: SerialNumber: syz [ 799.255315][ T5839] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 799.324159][ T5839] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.341311][ T5819] usb 5-1: config 0 descriptor?? [ 799.502662][ T5819] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 799.520044][ T5839] usb 4-1: config 1 interface 0 has no altsetting 0 [ 799.585975][ T5839] usb 4-1: string descriptor 0 read error: -22 [ 799.603076][ T5839] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 799.612261][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.846271][T12571] Can't find a SQUASHFS superblock on nullb0 [ 800.563201][ T5819] gspca_sonixj: reg_w1 err -110 [ 800.930863][ T5819] sonixj: probe of 5-1:0.0 failed with error -110 [ 801.588391][T12561] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 801.633154][T12561] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 801.662568][ T5819] usb 5-1: USB disconnect, device number 28 [ 801.942503][ T5839] usb 4-1: can't set config #1, error -71 [ 801.963632][ T5839] usb 4-1: USB disconnect, device number 37 [ 802.383066][ T5839] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 802.604019][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 802.615880][ T5839] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 802.632113][ T5839] usb 4-1: config 0 has no interface number 0 [ 802.642627][ T5839] usb 4-1: config 0 interface 12 has no altsetting 0 [ 802.658704][ T5839] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 802.669621][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.681694][ T5839] usb 4-1: Product: syz [ 802.689614][ T5839] usb 4-1: Manufacturer: syz [ 802.694768][ T5839] usb 4-1: SerialNumber: syz [ 802.707372][ T5839] usb 4-1: config 0 descriptor?? [ 804.480319][ T5839] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 804.503346][ T5839] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 804.510724][ T5839] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 804.543231][ T5839] f81534: probe of 4-1:0.12 failed with error -71 [ 804.569837][ T5839] usb 4-1: USB disconnect, device number 38 [ 804.673111][ T9546] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 804.837446][T12610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 804.848693][T12610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 804.863022][ T9546] usb 3-1: Using ep0 maxpacket: 8 [ 804.868453][T12610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 804.879857][T12610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 804.889314][T12610] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 804.897448][T12610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 804.905901][ T9546] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 804.922221][ T9546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.934163][ T9546] usb 3-1: Product: syz [ 804.955707][ T9546] usb 3-1: Manufacturer: syz [ 804.960394][ T9546] usb 3-1: SerialNumber: syz [ 804.993984][ T9546] usb 3-1: config 0 descriptor?? [ 805.012686][ T9546] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 805.522588][T12614] Can't find a SQUASHFS superblock on nullb0 [ 806.263137][ T9546] gspca_sonixj: reg_w1 err -110 [ 806.920399][ T9546] sonixj: probe of 3-1:0.0 failed with error -110 [ 806.980200][ T5786] Bluetooth: hci4: command tx timeout [ 807.370840][ T9546] usb 3-1: USB disconnect, device number 32 [ 807.721494][T12608] chnl_net:caif_netlink_parms(): no params data found [ 808.897412][T12608] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.956080][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.962482][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.975055][T12608] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.982366][T12608] bridge_slave_0: entered allmulticast mode [ 809.016888][T12608] bridge_slave_0: entered promiscuous mode [ 809.032950][ T5786] Bluetooth: hci4: command tx timeout [ 809.056522][T12608] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.067842][T12608] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.078928][T12608] bridge_slave_1: entered allmulticast mode [ 809.092423][T12608] bridge_slave_1: entered promiscuous mode [ 809.228982][T12608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.242127][T12608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.294811][T12608] team0: Port device team_slave_0 added [ 809.307603][T12608] team0: Port device team_slave_1 added [ 809.360063][T12608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.367528][T12608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.400586][T12608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.424010][T12608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.431109][T12608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.465408][T12608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.571334][T12608] hsr_slave_0: entered promiscuous mode [ 809.580045][T12608] hsr_slave_1: entered promiscuous mode [ 809.604274][T12608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.611926][T12608] Cannot create hsr debugfs directory [ 811.112941][ T5786] Bluetooth: hci4: command tx timeout [ 811.382927][ T9546] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 811.679791][T12608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 811.698504][T12608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 811.720295][T12608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 811.740440][T12608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 811.832917][ T9546] usb 4-1: Using ep0 maxpacket: 8 [ 811.846535][ T9546] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 811.873578][ T9546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.881658][ T9546] usb 4-1: Product: syz [ 811.920295][ T9546] usb 4-1: Manufacturer: syz [ 811.929349][ T9546] usb 4-1: SerialNumber: syz [ 811.959819][ T9546] usb 4-1: config 0 descriptor?? [ 811.998772][T12608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.031381][ T9546] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 812.050772][T12608] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.086020][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.094539][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.154939][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.162151][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.442850][T12678] Can't find a SQUASHFS superblock on nullb0 [ 813.163066][ T9546] gspca_sonixj: reg_w1 err -110 [ 813.168133][ T9546] sonixj: probe of 4-1:0.0 failed with error -110 [ 813.391968][ T5786] Bluetooth: hci4: command tx timeout [ 815.029245][T12679] 9pnet_fd: Insufficient options for proto=fd [ 815.734917][ T5819] usb 4-1: USB disconnect, device number 39 [ 816.029662][T12608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.252862][ T5819] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 816.473056][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 816.685498][T12608] veth0_vlan: entered promiscuous mode [ 817.008773][T12608] veth1_vlan: entered promiscuous mode [ 817.306007][ T5819] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 817.318503][ T5819] usb 4-1: config 0 has no interface number 0 [ 817.324808][ T5819] usb 4-1: config 0 interface 12 has no altsetting 0 [ 817.335953][ T5819] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 817.345407][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.355089][ T5819] usb 4-1: Product: syz [ 817.360232][ T5819] usb 4-1: Manufacturer: syz [ 817.365179][ T5819] usb 4-1: SerialNumber: syz [ 817.374642][ T5819] usb 4-1: config 0 descriptor?? [ 817.441284][T12608] veth0_macvtap: entered promiscuous mode [ 817.482335][T12608] veth1_macvtap: entered promiscuous mode [ 817.534847][T12608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.568057][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.612947][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.627488][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.638628][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.649261][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.660796][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.671260][T12608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.685179][T12608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.704491][T12608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.725754][T12608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.735589][T12608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.749756][T12608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.759612][T12608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.964096][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.984954][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.039906][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.051278][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.513078][T12724] (null): rxe_set_mtu: Set mtu to 1024 [ 819.632955][ T5786] Bluetooth: hci0: command tx timeout [ 819.778514][T12724] infiniband syz2: set down [ 819.783380][T12724] infiniband syz2: added ipvlan0 [ 819.842509][ T5820] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 820.628147][T12724] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 820.648014][T12724] infiniband syz2: Couldn't open port 1 [ 820.686534][ T5819] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 820.697933][ T5819] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 820.705365][ T5819] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 820.713472][ T5819] f81534: probe of 4-1:0.12 failed with error -32 [ 820.768740][T12724] RDS/IB: syz2: added [ 820.772933][T12724] smc: adding ib device syz2 with port count 1 [ 820.779197][T12724] smc: ib device syz2 port 1 has pnetid [ 821.138473][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 821.172706][ T9546] usb 4-1: USB disconnect, device number 40 [ 821.293295][ T5820] usb 5-1: device descriptor read/all, error -71 [ 823.442971][ T5820] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 824.033378][ T5819] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 824.050164][T12760] netlink: 'syz.4.1957': attribute type 13 has an invalid length. [ 824.084931][T12760] netlink: 'syz.4.1957': attribute type 17 has an invalid length. [ 824.211362][T12760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.332942][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 330 seconds [ 824.393081][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 824.408396][ T5819] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 824.435712][ T5820] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 824.448163][ T5819] usb 4-1: config 5 has no interface number 0 [ 824.469811][ T5820] usb 3-1: config 0 has no interface number 0 [ 824.476413][ T5819] usb 4-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 824.492427][ T5820] usb 3-1: config 0 interface 12 has no altsetting 0 [ 824.501118][ T5819] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 824.519127][ T5819] usb 4-1: config 5 interface 123 has no altsetting 0 [ 824.526638][ T5820] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 824.553314][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.571831][ T5820] usb 3-1: Product: syz [ 824.585828][ T5819] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 824.603328][ T5820] usb 3-1: Manufacturer: syz [ 824.608191][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.616453][ T5820] usb 3-1: SerialNumber: syz [ 824.626552][ T5819] usb 4-1: Product: syz [ 824.630843][ T5819] usb 4-1: Manufacturer: syz [ 824.637066][ T5820] usb 3-1: config 0 descriptor?? [ 824.643373][ T5819] usb 4-1: SerialNumber: syz [ 824.693075][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 330 seconds [ 824.743207][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 330 seconds [ 824.773099][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 330 seconds [ 824.970104][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.998486][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.087778][ T5819] comedi comedi5: Wrong number of endpoints [ 825.700389][ T5819] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 825.749976][ T5819] usb 4-1: USB disconnect, device number 41 [ 826.439404][ T5820] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 826.735301][ T5820] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 826.743176][ T5820] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 826.750867][ T5820] f81534: probe of 3-1:0.12 failed with error -71 [ 826.762367][ T5820] usb 3-1: USB disconnect, device number 33 [ 828.731254][T12800] netlink: 'syz.2.1970': attribute type 13 has an invalid length. [ 828.750079][T12800] netlink: 'syz.2.1970': attribute type 17 has an invalid length. [ 829.588508][T12800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.261542][T12830] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 835.384480][T12869] (null): rxe_set_mtu: Set mtu to 1024 [ 835.391381][T12869] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 848.455210][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2026'. [ 848.552362][T12986] netlink: 'syz.3.2025': attribute type 13 has an invalid length. [ 848.564152][T12986] netlink: 'syz.3.2025': attribute type 17 has an invalid length. [ 848.603102][T12986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.243784][T13012] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 853.312483][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 854.394705][T13046] netlink: 'syz.4.2042': attribute type 13 has an invalid length. [ 854.399608][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 360 seconds [ 854.413558][T13046] netlink: 'syz.4.2042': attribute type 17 has an invalid length. [ 854.460478][T13046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 854.510230][T13052] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 854.713394][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 360 seconds [ 854.972894][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 360 seconds [ 854.984314][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 360 seconds [ 858.347378][ T5141] udevd[5141]: worker [5784] /devices/virtual/block/nbd0 timeout; kill it [ 858.385146][ T5141] udevd[5141]: seq 14136 '/devices/virtual/block/nbd0' killed [ 862.205893][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 862.260538][T13088] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 862.574071][T13100] netlink: 'syz.2.2057': attribute type 13 has an invalid length. [ 862.582610][T13100] netlink: 'syz.2.2057': attribute type 17 has an invalid length. [ 862.603543][T13100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.946578][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 866.363407][T13135] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 866.866214][T13144] netlink: 'syz.2.2069': attribute type 13 has an invalid length. [ 866.883476][T13144] netlink: 'syz.2.2069': attribute type 17 has an invalid length. [ 867.237754][T13144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 870.413845][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.420229][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.498943][T13164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.605687][T13164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.690733][T13171] ip6gre0: entered promiscuous mode [ 870.706949][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2075'. [ 870.800344][T13173] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 871.253013][ T5819] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 871.432825][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 871.611675][ T5819] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 871.633381][ T5819] usb 3-1: config 0 has no interface number 0 [ 871.640944][ T5819] usb 3-1: config 0 interface 12 has no altsetting 0 [ 872.306933][ T5819] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 872.317764][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.326287][ T5819] usb 3-1: Product: syz [ 872.331531][ T5819] usb 3-1: Manufacturer: syz [ 872.336796][ T5819] usb 3-1: SerialNumber: syz [ 872.372985][ T5819] usb 3-1: config 0 descriptor?? [ 874.841026][T13208] ip6gre0: entered promiscuous mode [ 874.880733][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 874.913170][ T970] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 875.113283][ T970] usb 6-1: Using ep0 maxpacket: 16 [ 875.135583][ T970] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 875.158240][ T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.191216][ T970] usb 6-1: config 0 descriptor?? [ 875.229501][ T970] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 875.552128][ T5819] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 875.571978][ T5819] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 876.012241][ T5819] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 876.059364][ T5819] f81534: probe of 3-1:0.12 failed with error -71 [ 876.105383][ T5819] usb 3-1: USB disconnect, device number 34 [ 876.350796][T13223] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 877.453094][ T970] gspca_sonixj: i2c_w8 err -71 [ 877.509008][ T970] sonixj: probe of 6-1:0.0 failed with error -71 [ 877.537212][ T970] usb 6-1: USB disconnect, device number 2 [ 877.566734][T13240] ip6gre0: entered promiscuous mode [ 877.621431][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 877.874161][T13250] netlink: 'syz.4.2100': attribute type 13 has an invalid length. [ 877.882202][T13250] netlink: 'syz.4.2100': attribute type 17 has an invalid length. [ 877.910231][T13250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.083521][ T970] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 878.273269][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 878.285380][ T970] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 878.301066][ T970] usb 4-1: config 0 has no interface number 0 [ 878.314753][ T970] usb 4-1: config 0 interface 12 has no altsetting 0 [ 878.339953][ T970] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 878.352407][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.361029][ T970] usb 4-1: Product: syz [ 878.366979][ T970] usb 4-1: Manufacturer: syz [ 878.374034][ T970] usb 4-1: SerialNumber: syz [ 878.390236][ T970] usb 4-1: config 0 descriptor?? [ 879.196825][T13276] ip6gre0: entered promiscuous mode [ 879.219105][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 880.450685][ T970] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 880.493261][ T970] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 880.500648][ T970] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 880.643209][ T970] f81534: probe of 4-1:0.12 failed with error -71 [ 880.721522][ T970] usb 4-1: USB disconnect, device number 42 [ 881.094360][T13290] netlink: 'syz.2.2112': attribute type 13 has an invalid length. [ 881.102262][T13290] netlink: 'syz.2.2112': attribute type 17 has an invalid length. [ 881.168360][T13290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.653897][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2117'. [ 884.383054][ T970] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 884.572974][ T970] usb 5-1: Using ep0 maxpacket: 32 [ 884.590575][ T970] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 884.599869][ T970] usb 5-1: config 0 has no interface number 0 [ 884.604628][ T10] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 390 seconds [ 884.606595][ T970] usb 5-1: config 0 interface 12 has no altsetting 0 [ 884.729389][ T970] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 884.743126][ T10] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 390 seconds [ 884.832833][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.840906][ T970] usb 5-1: Product: syz [ 884.901349][ T970] usb 5-1: Manufacturer: syz [ 884.906468][ T970] usb 5-1: SerialNumber: syz [ 884.924998][ T970] usb 5-1: config 0 descriptor?? [ 884.993390][ T10] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 390 seconds [ 885.004776][ T10] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 390 seconds [ 885.040635][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 886.385576][T13356] fuse: Bad value for 'fd' [ 887.824552][ T970] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 887.832144][ T970] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 887.839723][ T970] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 887.850250][ T970] f81534: probe of 5-1:0.12 failed with error -71 [ 887.898888][ T970] usb 5-1: USB disconnect, device number 31 [ 893.061631][T13387] block device autoloading is deprecated and will be removed. [ 893.083962][T13387] syz.3.2144: attempt to access beyond end of device [ 893.083962][T13387] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 894.111716][ T9546] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 894.462864][ T9546] usb 6-1: Using ep0 maxpacket: 8 [ 895.243183][ T9546] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 896.552920][ T9546] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.565488][ T9546] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 896.575318][ T9546] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 896.585457][ T9546] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.598920][ T9546] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 896.612894][ T9546] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.771646][ T9546] usb 6-1: usb_control_msg returned -71 [ 896.801353][ T9546] usbtmc 6-1:16.0: can't read capabilities [ 897.397646][ T9546] usb 6-1: USB disconnect, device number 3 [ 897.583586][T13413] Illegal XDP return value 16128 on prog (id 57) dev syz_tun, expect packet loss! [ 899.603068][ T5821] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 900.158013][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 900.797500][ T5821] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 900.808720][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.865648][ T5821] usb 5-1: config 0 descriptor?? [ 900.896139][ T5821] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 901.649057][T13450] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 902.572921][ T5821] gspca_sonixj: i2c_w8 err -71 [ 902.613028][ T5821] sonixj: probe of 5-1:0.0 failed with error -71 [ 903.275314][ T5821] usb 5-1: USB disconnect, device number 32 [ 905.666025][T13479] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 912.433674][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2180'. [ 915.305937][ T97] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 420 seconds [ 915.316757][ T97] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 420 seconds [ 915.327821][ T97] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 420 seconds [ 915.338850][ T97] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 420 seconds [ 915.607231][T13571] fuse: Bad value for 'fd' [ 915.721629][T13573] syzkaller0: entered promiscuous mode [ 915.729300][T13573] syzkaller0: entered allmulticast mode [ 920.028690][T13607] syzkaller0: entered promiscuous mode [ 920.058656][T13607] syzkaller0: entered allmulticast mode [ 925.014240][T12610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 925.038930][T12610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 925.058377][T12610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 925.066925][T12610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 925.082938][T12610] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 925.093531][T12610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 925.121206][T13642] syzkaller0: entered promiscuous mode [ 925.126918][T13642] syzkaller0: entered allmulticast mode [ 925.743096][T13653] 9pnet_fd: Insufficient options for proto=fd [ 927.194373][T12610] Bluetooth: hci5: command tx timeout [ 928.854882][T12610] Bluetooth: hci4: command 0x0406 tx timeout [ 929.274530][ T5786] Bluetooth: hci5: command tx timeout [ 930.732501][T13639] chnl_net:caif_netlink_parms(): no params data found [ 930.822562][ T5821] IPVS: starting estimator thread 0... [ 930.874464][T13692] netlink: 'syz.5.2220': attribute type 13 has an invalid length. [ 930.882368][T13692] netlink: 'syz.5.2220': attribute type 17 has an invalid length. [ 930.963488][T13693] IPVS: using max 18 ests per chain, 43200 per kthread [ 931.353173][ T5786] Bluetooth: hci5: command tx timeout [ 931.795247][T13692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 931.838521][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.844992][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.006952][T13639] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.014311][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.021581][T13639] bridge_slave_0: entered allmulticast mode [ 932.034172][T13639] bridge_slave_0: entered promiscuous mode [ 932.043957][T13639] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.051207][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.059326][T13639] bridge_slave_1: entered allmulticast mode [ 932.067048][T13639] bridge_slave_1: entered promiscuous mode [ 932.125936][T13639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.138899][T13639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.192920][T13639] team0: Port device team_slave_0 added [ 932.205191][T13639] team0: Port device team_slave_1 added [ 932.879432][T13639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.946940][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.130942][T13639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.144078][T13639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.151087][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.177037][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.183831][T13639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.303513][T13639] hsr_slave_0: entered promiscuous mode [ 933.320313][T13639] hsr_slave_1: entered promiscuous mode [ 933.339828][T13639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 933.362969][T13639] Cannot create hsr debugfs directory [ 933.433057][ T5786] Bluetooth: hci5: command tx timeout [ 936.227435][T13639] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 936.274805][T13639] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 936.314469][T13639] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 936.373830][T13639] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 936.694153][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.840216][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.898644][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.905885][T13522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.976130][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.983412][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.121380][T13639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 937.162407][T13639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.335876][T13639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.081384][ T29] INFO: task syz.0.1884:12500 blocked for more than 144 seconds. [ 942.113377][ T29] Not tainted syzkaller #0 [ 942.118408][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 942.159532][ T29] task:syz.0.1884 state:D stack:27784 pid:12500 ppid:5776 flags:0x00004004 [ 942.209731][ T29] Call Trace: [ 942.352873][ T29] [ 942.355970][ T29] __schedule+0x1553/0x45a0 [ 942.360649][ T29] ? asan.module_dtor+0x20/0x20 [ 942.677757][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 942.755186][T13639] veth0_vlan: entered promiscuous mode [ 942.808292][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 943.022312][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 943.079905][T13639] veth1_vlan: entered promiscuous mode [ 943.120141][ T29] schedule+0xbd/0x170 [ 943.146491][T13639] veth0_macvtap: entered promiscuous mode [ 943.154743][ T29] schedule_preempt_disabled+0x13/0x20 [ 943.160334][ T29] __mutex_lock+0x6a9/0xcc0 [ 943.161992][T13639] veth1_macvtap: entered promiscuous mode [ 943.206332][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 943.211128][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 943.256103][ T29] ? mutex_lock_nested+0x20/0x20 [ 943.261156][ T29] ? iput+0x343/0x920 [ 943.318794][ T29] ? ilookup+0x1c4/0x200 [ 943.324062][ T29] ? disk_block_events+0xa7/0x120 [ 943.329163][ T29] ? blkdev_get_by_dev+0xf7/0x600 [ 943.353268][ T29] blkdev_get_by_dev+0x121/0x600 [ 943.358455][ T29] blkdev_open+0x152/0x360 [ 943.372847][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 943.377547][ T29] do_dentry_open+0x8c6/0x1500 [ 943.382391][ T29] path_openat+0x27f1/0x3230 [ 943.395713][ T29] ? do_sys_openat2+0xda/0x1d0 [ 943.400586][ T29] ? verify_lock_unused+0x140/0x140 [ 943.429448][ T29] ? do_filp_open+0x430/0x430 [ 943.435420][ T29] ? __virt_addr_valid+0x18c/0x540 [ 943.440655][ T29] do_filp_open+0x1f5/0x430 [ 943.455836][ T29] ? vfs_tmpfile+0x490/0x490 [ 943.460589][ T29] ? _raw_spin_unlock+0x28/0x40 [ 943.469317][ T29] ? alloc_fd+0x58f/0x630 [ 943.480179][ T29] do_sys_openat2+0x134/0x1d0 [ 943.500189][ T29] ? do_sys_open+0xe0/0xe0 [ 943.504776][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 943.510886][ T29] ? lock_chain_count+0x20/0x20 [ 943.540825][ T29] ? lock_chain_count+0x20/0x20 [ 943.562893][ T29] __x64_sys_openat+0x139/0x160 [ 943.567917][ T29] do_syscall_64+0x55/0xb0 [ 943.572399][ T29] ? clear_bhb_loop+0x40/0x90 [ 943.600140][ T29] ? clear_bhb_loop+0x40/0x90 [ 943.605211][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.611208][ T29] RIP: 0033:0x7f979935d68e [ 943.632939][ T29] RSP: 002b:00007f979a268b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 943.641507][ T29] RAX: ffffffffffffffda RBX: 00007f979a2696c0 RCX: 00007f979935d68e [ 943.686483][ T29] RDX: 0000000000000000 RSI: 00007f979a268c00 RDI: ffffffffffffff9c [ 943.708224][ T29] RBP: 00007f979a268c00 R08: 0000000000000000 R09: 0000000000000000 [ 943.718065][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 943.752765][ T29] R13: 00007f9799616038 R14: 00007f9799615fa0 R15: 00007ffd22f986a8 [ 943.760854][ T29] [ 943.779022][ T29] [ 943.779022][ T29] Showing all locks held in the system: [ 944.262780][ T29] 1 lock held by khungtaskd/29: [ 944.282747][ T29] #0: ffffffff8d132120 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 944.304447][ T29] 3 locks held by kworker/0:2/1193: [ 944.309735][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 944.384027][ T29] #1: ffffc90004a5fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 944.442805][ T29] #2: ffffffff8d137af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 944.482839][ T29] 2 locks held by getty/5532: [ 944.512964][ T29] #0: ffff88802d44c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 944.533151][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 944.573112][ T29] 1 lock held by udevd/5784: [ 944.577780][ T29] #0: ffff8880220e44c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 944.612952][ T29] 1 lock held by syz.2.130/6198: [ 944.629756][ T29] #0: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 944.662778][ T29] 2 locks held by kworker/0:1/9546: [ 944.693079][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 944.733274][ T29] #1: ffffc9000e9afd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 944.762769][ T29] 1 lock held by syz.0.1884/12500: [ 944.767968][ T29] #0: ffff8880220e44c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 944.812935][ T29] 1 lock held by syz.3.2169/13473: [ 944.818141][ T29] #0: ffff8880220e44c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 944.843030][ T29] 3 locks held by kworker/u4:19/13515: [ 944.848569][ T29] #0: ffff88814c54ad38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 944.895041][ T29] #1: ffffc90004b4fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 944.932936][ T29] #2: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 944.942467][ T29] 3 locks held by kworker/u4:22/13522: [ 944.959212][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 944.982836][ T29] #1: ffffc90004bdfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 945.042796][ T29] #2: ffffffff8e3c5848 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 945.051899][ T29] 2 locks held by kworker/u4:25/13530: [ 945.103025][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 945.132792][ T29] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 945.141663][ T29] 4 locks held by syz-executor/13639: [ 945.167244][ T29] #0: ffff8880262b0e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500 [ 945.202841][ T29] #1: ffff8880262b00b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x5d6/0x1220 [ 945.242998][ T29] #2: ffffffff8e5338e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 945.272824][ T29] #3: ffff88805c817338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 945.282378][ T29] 1 lock held by syz.5.2244/13785: [ 945.302833][ T29] [ 945.305237][ T29] ============================================= [ 945.305237][ T29] [ 945.368714][ T29] NMI backtrace for cpu 1 [ 945.373096][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 945.380298][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 945.390363][ T29] Call Trace: [ 945.393654][ T29] [ 945.396613][ T29] dump_stack_lvl+0x18c/0x250 [ 945.401319][ T29] ? show_regs_print_info+0x20/0x20 [ 945.406541][ T29] ? load_image+0x420/0x420 [ 945.411064][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 945.416022][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 945.422184][ T29] ? _printk+0xde/0x130 [ 945.426361][ T29] ? load_image+0x420/0x420 [ 945.430911][ T29] ? load_image+0x420/0x420 [ 945.435457][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 945.441572][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 945.447603][ T29] watchdog+0xf3d/0xf80 [ 945.451817][ T29] ? watchdog+0x1e1/0xf80 [ 945.456215][ T29] kthread+0x2fa/0x390 [ 945.460332][ T29] ? hungtask_pm_notify+0x90/0x90 [ 945.465411][ T29] ? kthread_blkcg+0xd0/0xd0 [ 945.470046][ T29] ret_from_fork+0x48/0x80 [ 945.474520][ T29] ? kthread_blkcg+0xd0/0xd0 [ 945.479155][ T29] ret_from_fork_asm+0x11/0x20 [ 945.483984][ T29] [ 945.488013][ T29] Sending NMI from CPU 1 to CPUs 0: [ 945.493396][ C0] NMI backtrace for cpu 0 [ 945.493407][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 945.493423][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 945.493432][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 945.493461][ C0] Code: b8 1f 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 24 40 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 945.493475][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 945.493489][ C0] RAX: 7f8470773947a700 RBX: ffffffff8162aea1 RCX: 7f8470773947a700 [ 945.493502][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9a20 [ 945.493513][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 945.493526][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 945.493538][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 945.493550][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 945.493564][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.493575][ C0] CR2: 00007fbe20af2990 CR3: 0000000030c50000 CR4: 00000000003506f0 [ 945.493590][ C0] Call Trace: [ 945.493596][ C0] [ 945.493601][ C0] default_idle+0x13/0x20 [ 945.493626][ C0] default_idle_call+0x6c/0xa0 [ 945.493651][ C0] do_idle+0x221/0x590 [ 945.493675][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 945.493695][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 945.493729][ C0] cpu_startup_entry+0x43/0x60 [ 945.493749][ C0] rest_init+0x2e2/0x300 [ 945.493763][ C0] ? time_init+0x40/0x40 [ 945.493784][ C0] arch_call_rest_init+0xe/0x10 [ 945.493807][ C0] start_kernel+0x459/0x4e0 [ 945.493829][ C0] x86_64_start_reservations+0x2a/0x30 [ 945.493850][ C0] x86_64_start_kernel+0x60/0x60 [ 945.493869][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 945.493902][ C0] [ 945.713121][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 945.720044][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 945.727287][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 945.737383][ T29] Call Trace: [ 945.740703][ T29] [ 945.743678][ T29] dump_stack_lvl+0x18c/0x250 [ 945.748414][ T29] ? show_regs_print_info+0x20/0x20 [ 945.753696][ T29] ? load_image+0x420/0x420 [ 945.758238][ T29] panic+0x2dc/0x730 [ 945.762150][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 945.767794][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 945.772316][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 945.777891][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 945.784085][ T29] watchdog+0xf7c/0xf80 [ 945.788256][ T29] ? watchdog+0x1e1/0xf80 [ 945.792599][ T29] kthread+0x2fa/0x390 [ 945.796711][ T29] ? hungtask_pm_notify+0x90/0x90 [ 945.801758][ T29] ? kthread_blkcg+0xd0/0xd0 [ 945.806364][ T29] ret_from_fork+0x48/0x80 [ 945.810820][ T29] ? kthread_blkcg+0xd0/0xd0 [ 945.815421][ T29] ret_from_fork_asm+0x11/0x20 [ 945.820204][ T29] [ 945.823818][ T29] Kernel Offset: disabled [ 945.828148][ T29] Rebooting in 86400 seconds..