last executing test programs: 2m11.508338836s ago: executing program 3 (id=1036): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x4000000) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x5fc, 0x83, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x40880) pipe(&(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') 2m9.374559599s ago: executing program 3 (id=1044): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x3) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000340)={0x1, r6, 0x4, 0xb808, 0x6, 0x8, 0x7, 0x8, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x401, 0x2, 0x1, "b09789985539e6d654954ddb9c9a8af07e5235a0bdb0fca932f40a4723289ee8", 0x32314d56}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) 2m7.246028551s ago: executing program 3 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="9e99", 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) 2m6.163460618s ago: executing program 3 (id=1051): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a) sendmsg$nl_route(r0, 0x0, 0x4000864) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) 2m2.572714049s ago: executing program 3 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61}, 0x28) 2m0.83179662s ago: executing program 3 (id=1062): socket(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0xfffffe4a, 0xfa00, {0x0, {0xa, 0x4e28, 0x7, @remote, 0xf}, r1}}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40043, @mcast1, 0xf}, {0x2, 0xfff8, 0xc00, @empty, 0x10000}, r1, 0x9dffffff}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r8, @ANYRES8=r6, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 1m45.568390055s ago: executing program 32 (id=1062): socket(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0xfffffe4a, 0xfa00, {0x0, {0xa, 0x4e28, 0x7, @remote, 0xf}, r1}}, 0x30) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40043, @mcast1, 0xf}, {0x2, 0xfff8, 0xc00, @empty, 0x10000}, r1, 0x9dffffff}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r8, @ANYRES8=r6, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 10.849827392s ago: executing program 2 (id=1305): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3, 0x0, 0x0, r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 8.89096592s ago: executing program 1 (id=1308): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r1], &(0x7f0000000080), &(0x7f0000000200), 0x0}) 8.877608492s ago: executing program 2 (id=1309): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30}, 0x30) 8.864444013s ago: executing program 4 (id=1310): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000340)={0x1, 0x0, 0x4, 0xb808, 0x6, 0x8, 0x7, 0x8, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000001c0)={0x401, 0x2, 0x1, "b09789985539e6d654954ddb9c9a8af07e5235a0bdb0fca932f40a4723289ee8", 0x32314d56}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) 7.335826506s ago: executing program 1 (id=1313): syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb45", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x2, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d345318754a0f8730265b7e113f1aff3c989a", @ANYRESDEC=0x0, @ANYBLOB=',subj_role=,G,']) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000a2140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x80) 6.743555894s ago: executing program 5 (id=1314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32, @ANYBLOB="00000000001400001c00128009000100626f6e640000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.714417376s ago: executing program 1 (id=1315): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 6.564071229s ago: executing program 4 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) setpriority(0x2, 0x0, 0x7) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, 0x0, 0x50) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000480)={r7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r7, @in6={{0xa, 0x0, 0x0, @empty, 0x1}}, 0x5, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.358374595s ago: executing program 0 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61}, 0x28) 6.349117966s ago: executing program 2 (id=1319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.56576484s ago: executing program 0 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfff0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000e6ff0900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.499424056s ago: executing program 5 (id=1321): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) socket$netlink(0x10, 0x3, 0xb) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.408827133s ago: executing program 1 (id=1322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.366937496s ago: executing program 0 (id=1323): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r1], &(0x7f0000000080), &(0x7f0000000200), 0x0}) 4.241972387s ago: executing program 2 (id=1324): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$snapshot(r1, &(0x7f0000000100)="bdb7", 0x2) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) 4.208984259s ago: executing program 4 (id=1325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) getpid() write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 4.099458038s ago: executing program 0 (id=1326): syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb45", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x2, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d345318754a0f8730265b7e113f1aff3c989a", @ANYRESDEC=0x0, @ANYBLOB=',subj_role=,G,']) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000a2140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x80) 3.349361909s ago: executing program 5 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="9e99", 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) 3.128777846s ago: executing program 4 (id=1328): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000001c0)={0x9, 0x3, 0x1, {0xb, 0xfdfffe40, 0x20000009, 0xf}}) 3.120079687s ago: executing program 1 (id=1329): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'os2.', './binderfs/binder0\x00'}, &(0x7f0000000180)='./binderfs/binder0\x00', 0x13, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100, 0x800001}, @flat=@weak_binder={0x77622a85, 0x1101, 0x800001}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.180807493s ago: executing program 5 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61]}}, 0x0, 0x61}, 0x28) 1.840511971s ago: executing program 0 (id=1331): r0 = socket(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0xfffffe4a, 0xfa00, {0x0, {0xa, 0x4e28, 0x7, @remote, 0xf}, r2}}, 0x30) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000001a300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40043, @mcast1, 0xf}, {0x2, 0xfff8, 0xc00, @empty, 0x10000}, r2, 0x9dffffff}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYRES32=r9, @ANYRES8=r7, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket$packet(0x11, 0x3, 0x300) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000480)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x2b4, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x10, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x284, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfd}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1719, 0x0, 0x0, 0x12, 0x0, 0xfd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x3, 0xe, 0x1e, 0x12, 0x11, 0x6}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4002, 0x7, 0x4, 0x12, 0x1b, 0x7}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, @TCA_CHOKE_STAB={0x104, 0x2, "6df6ee2725b4baef45a999d2b45b7cf8307c212b2e79051695bd442d0909589dbb17422bc35c965d85e275ef5fc14b850d2cf8fa66fe9d2d9e4d0127d78ba34d7a1bc432cec28c52df23078d96651f7bcf0c6d0ed8747ae9a4a4711ddf95c9ffecb5699f99e8ff73a20dbff8c1f2126041754c2aa43a7e4695e80d4b7cfaefb2a844623935ef977ec3250b1b8d9b5ff723efb9cf9a64f1364a1ca5e290b96c441e8f4034780b46ee76bf26c3a3c27b6a1e4ee1c51f04e456f1f1f293889014c2fcca9214ca9e1a2f7b9ed4e4069b92bf63a17addec0eb157b05abd7cd5aa8e58218ef4cec183469bd05f05162bca96d132adaa87d1fc2a21bbca24142fa4ee27"}]}}]}, 0x2b4}}, 0x0) 1.840227041s ago: executing program 1 (id=1332): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32, @ANYBLOB="00000000001400001c00128009000100626f6e640000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.778891656s ago: executing program 2 (id=1333): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfff0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000e6ff0900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.778530706s ago: executing program 4 (id=1334): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.017298388s ago: executing program 0 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 976.940941ms ago: executing program 5 (id=1336): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r1], &(0x7f0000000080), &(0x7f0000000200), 0x0}) 95.388882ms ago: executing program 2 (id=1337): clock_getres(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001c00), 0x40000000000017a, 0x40840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x4000) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x62da}, {0x6, 0x11, 0xe98}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040088) r6 = socket(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', r7, 0x29, 0x0, 0x1, 0x65b, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') 80.523183ms ago: executing program 5 (id=1338): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x2, 0xff, 0x21, @empty, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x40, 0x1, 0xffffffff, 0x6}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2c0, 0x940c, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3, 0x20}, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000200000000", @ANYRES32=r1, @ANYBLOB="000000000100"], 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x8, r4, 0x0, 0x0, 0x3}]) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0xec0}, {0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7f0}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xcb1}, {}, {0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x5}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x391a04c0a5f5edad}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) 0s ago: executing program 4 (id=1339): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) socket$netlink(0x10, 0x3, 0xb) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): c0: link becomes ready [ 59.747593][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.756822][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.834555][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.846616][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.857199][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.868821][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.880810][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.894267][ T4185] device veth0_vlan entered promiscuous mode [ 59.928677][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.938506][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.947757][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.951857][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.964819][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.973462][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.982124][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.990430][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.998461][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.009009][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.020390][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.031195][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.042145][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.053873][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.067258][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.075642][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.078259][ T4185] device veth1_vlan entered promiscuous mode [ 60.098950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.109123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.118557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.128639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.138117][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.148887][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.157958][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.167451][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.198187][ T4295] Bluetooth: hci3: command 0x040f tx timeout [ 60.205411][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 60.211848][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 60.213769][ T4192] device veth0_macvtap entered promiscuous mode [ 60.218531][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 60.238234][ T4192] device veth1_macvtap entered promiscuous mode [ 60.249977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.258458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.265451][ T4296] Bluetooth: hci4: command 0x040f tx timeout [ 60.268237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.282136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.291522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.316482][ T4185] device veth0_macvtap entered promiscuous mode [ 60.328812][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.331516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.343543][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.347894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.361038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.370252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.383541][ T4185] device veth1_macvtap entered promiscuous mode [ 60.392195][ T3081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.395793][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.411274][ T3081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.416502][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.430168][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.441793][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.452136][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.463664][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.477837][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.495164][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.512152][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.521877][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.538445][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.550728][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.562046][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.573478][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.584339][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.596190][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.607129][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.618553][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.641311][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.653734][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.664219][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.678203][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.688082][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.698631][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.708719][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.719575][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.731199][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.745298][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.754277][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.766020][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.776152][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.787135][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.798303][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.808311][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.822780][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.870386][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.887231][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.900034][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.922435][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.936517][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.947629][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.957976][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.968794][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.981217][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.990779][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.002905][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.061610][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.090370][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.100740][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.114395][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.245398][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.278330][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.332794][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.360907][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.372286][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.434621][ T4315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 61.460310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.489702][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.506720][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.514016][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.515928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.542248][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.635440][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.656308][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.664386][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.779689][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.813175][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.832116][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.862513][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.922206][ T4322] tipc: Started in network mode [ 61.927614][ T4323] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 61.945679][ T4322] tipc: Node identity a692f3883a4f, cluster identity 4711 [ 61.966862][ T4322] tipc: Enabled bearer , priority 0 [ 62.081347][ T4328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.129011][ T4322] tipc: Resetting bearer [ 62.199392][ T4320] tipc: Disabling bearer [ 62.266127][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 62.282983][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 62.299113][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 62.345811][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 62.379100][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 62.662792][ T4339] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 62.715589][ T4339] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 63.066275][ T4252] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.118164][ T4348] kvm [4346]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x100008604 [ 63.163642][ T4348] kvm [4346]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 63.242992][ T4358] process 'syz.0.17' launched './file0' with NULL argv: empty string added [ 63.283445][ T4348] kvm [4346]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x100004600 [ 63.312963][ T4348] kvm [4346]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 63.371740][ T4348] kvm [4346]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x628 [ 63.405316][ T4348] kvm [4346]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 63.455183][ T4252] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.478271][ T4252] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 63.502214][ T4252] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.532018][ T4252] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 63.564040][ T4252] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 63.717039][ T4252] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.737257][ T4252] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.755096][ T4252] usb 4-1: Product: syz [ 63.765309][ T4252] usb 4-1: Manufacturer: syz [ 63.815247][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.842586][ T4252] cdc_wdm 4-1:1.0: skipping garbage [ 63.849793][ T4252] cdc_wdm 4-1:1.0: skipping garbage [ 63.862209][ T4252] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 63.883727][ T4252] cdc_wdm 4-1:1.0: Unknown control protocol [ 64.179619][ T4311] usb 4-1: USB disconnect, device number 2 [ 64.186583][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 64.186771][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 64.186790][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 64.210545][ T7] usb 3-1: config 0 has no interfaces? [ 64.216552][ T4349] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 64.335126][ T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=8e26, bcdDevice= 0.40 [ 64.344649][ T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.354028][ T7] usb 3-1: Product: syz [ 64.358804][ T7] usb 3-1: Manufacturer: syz [ 64.376211][ T7] usb 3-1: config 0 descriptor?? [ 64.465129][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.618447][ T4187] usb 3-1: USB disconnect, device number 2 [ 65.085311][ T4237] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 65.094664][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.103125][ T4237] usb 1-1: Product: syz [ 65.107621][ T4237] usb 1-1: Manufacturer: syz [ 65.112489][ T4237] usb 1-1: SerialNumber: syz [ 65.192637][ T4390] loop7: detected capacity change from 0 to 7 [ 65.204476][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.215660][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.224393][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.235614][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.251492][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.262658][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.272727][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.283947][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.295630][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.306630][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.314921][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.326003][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.335353][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.346446][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.354640][ T4204] ldm_validate_partition_table(): Disk read failed. [ 65.362009][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.372945][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.396026][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.407002][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.431659][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 65.442670][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.452681][ T4204] Dev loop7: unable to read RDB block 0 [ 65.464790][ T4204] loop7: unable to read partition table [ 65.472242][ T4204] loop7: partition table beyond EOD, truncated [ 65.477932][ T4393] sd 0:0:1:0: PR command failed: 2 [ 65.491232][ T4390] ldm_validate_partition_table(): Disk read failed. [ 65.498266][ T4393] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 65.507864][ T4393] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 65.522273][ T4390] Dev loop7: unable to read RDB block 0 [ 65.539186][ T4390] loop7: unable to read partition table [ 65.559810][ T4390] loop7: partition table beyond EOD, truncated [ 65.569399][ T4390] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 65.588437][ T4378] udc-core: couldn't find an available UDC or it's busy [ 65.599470][ T4378] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.616303][ T4237] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 65.653020][ T3563] ldm_validate_partition_table(): Disk read failed. [ 65.668848][ T4237] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 65.685445][ T3563] Dev loop7: unable to read RDB block 0 [ 65.692505][ T3563] loop7: unable to read partition table [ 65.706241][ T3563] loop7: partition table beyond EOD, truncated [ 65.709796][ T4237] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 65.760819][ T4237] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 65.791851][ T4237] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 65.818547][ T4237] lan78xx: probe of 1-1:1.0 failed with error -71 [ 65.842947][ T4237] usb 1-1: USB disconnect, device number 2 [ 65.985671][ T4311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.043833][ T4406] block device autoloading is deprecated and will be removed. [ 66.053806][ T4405] md2: error: bitmap file must open for write [ 66.287030][ T4413] block device autoloading is deprecated and will be removed. [ 66.300919][ T4412] md2: error: bitmap file must be a regular file [ 66.345449][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.376823][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.388778][ T4311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.403235][ T4311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.413570][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.433859][ T4311] usb 4-1: config 0 descriptor?? [ 66.512993][ T4417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.575380][ T4419] device syzkaller1 entered promiscuous mode [ 66.625128][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.911413][ T4311] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 66.993417][ T4311] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 67.082026][ T26] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 67.095120][ T26] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 67.135034][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.181543][ T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.205022][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.228009][ T26] usb 1-1: config 0 descriptor?? [ 67.245957][ T4415] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.267973][ T26] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 67.497443][ T4447] kvm [4446]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc1 data 0x1 [ 67.507159][ T4447] kvm [4446]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0xc2 data 0x1 [ 67.519166][ T4447] kvm [4446]: vcpu0, guest rIP: 0x9131 ignored wrmsr: 0x11e data 0xbe702112 [ 67.534710][ T4447] kvm [4446]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x186 data 0x1 [ 67.544353][ T4447] kvm [4446]: vcpu0, guest rIP: 0x9131 disabled perfctr wrmsr: 0x187 data 0x1 [ 67.559092][ T4447] kvm [4446]: vcpu0, guest rIP: 0x9131 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 67.655115][ T4311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.895139][ T4311] usb 5-1: Using ep0 maxpacket: 16 [ 68.011338][ T4462] devtmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 68.019190][ T4311] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.040672][ T4311] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 68.057690][ T4311] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.071463][ T4311] usb 5-1: config 1 interface 0 has no altsetting 0 [ 68.235140][ T4311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.245423][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.253644][ T4311] usb 5-1: Product: syz [ 68.257989][ T4311] usb 5-1: Manufacturer: syz [ 68.262927][ T4311] usb 5-1: SerialNumber: syz [ 68.415107][ T2347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.537359][ T4311] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 68.655239][ T2347] usb 3-1: Using ep0 maxpacket: 8 [ 68.790845][ T2347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.814817][ T4473] device syzkaller1 entered promiscuous mode [ 68.815109][ T2347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.831895][ T2347] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.841503][ T2347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.878656][ T2347] usb 3-1: config 0 descriptor?? [ 69.019486][ T4187] usb 4-1: USB disconnect, device number 3 [ 69.218763][ T2347] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 69.384461][ T4311] usb 1-1: USB disconnect, device number 3 [ 69.473046][ T4467] iowarrior 3-1:0.0: Error -90 while submitting URB [ 69.565710][ T2347] usb 3-1: USB disconnect, device number 3 [ 69.770330][ T4501] kvm: pic: non byte write [ 70.428240][ T4301] usb 5-1: USB disconnect, device number 2 [ 70.463731][ T4301] usblp1: removed [ 70.539763][ T4252] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 70.783300][ T4531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.997210][ T4252] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 71.038234][ T4252] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 71.181546][ T4252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.376945][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.383792][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.451957][ T4533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.459762][ T4533] IPv6: NLM_F_CREATE should be set when creating new route [ 71.504105][ T4252] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.516961][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.532965][ T4252] usb 3-1: config 0 descriptor?? [ 71.556459][ T4518] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.590367][ T4252] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 71.654140][ T4535] kvm: pic: non byte write [ 71.675177][ T4301] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.885057][ T4187] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 72.045268][ T4301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.055314][ T4301] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.065132][ T4301] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.215119][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.235381][ T4301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 72.244936][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 72.245870][ T4187] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.264195][ T4301] usb 5-1: Product: syz [ 72.268491][ T4301] usb 5-1: Manufacturer: syz [ 72.273106][ T4301] usb 5-1: SerialNumber: syz [ 72.277749][ T4187] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.291359][ T4187] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.301516][ T4187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.475326][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 72.561312][ T4301] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 72.572333][ T4187] usb 2-1: usb_control_msg returned -32 [ 72.578133][ T4187] usbtmc 2-1:16.0: can't read capabilities [ 72.625537][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.636985][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.647878][ T7] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.657226][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.668760][ T7] usb 4-1: config 0 descriptor?? [ 72.763003][ T4301] usb 5-1: USB disconnect, device number 3 [ 72.771426][ T4301] usblp0: removed [ 72.926387][ T7] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 73.134421][ T4552] kvm [4551]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x200 [ 73.148720][ T4552] kvm [4551]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 73.155970][ T4547] iowarrior 4-1:0.0: Error -90 while submitting URB [ 73.162859][ T4552] kvm [4551]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x4600 [ 73.169396][ T7] usb 4-1: USB disconnect, device number 4 [ 73.351342][ T4556] Zero length message leads to an empty skb [ 73.507260][ T4558] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 73.546466][ T4187] usb 3-1: USB disconnect, device number 4 [ 73.593923][ T4560] netlink: 220 bytes leftover after parsing attributes in process `syz.2.91'. [ 73.757507][ T4562] ======================================================= [ 73.757507][ T4562] WARNING: The mand mount option has been deprecated and [ 73.757507][ T4562] and is ignored by this kernel. Remove the mand [ 73.757507][ T4562] option from the mount to silence this warning. [ 73.757507][ T4562] ======================================================= [ 74.462449][ T4594] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 74.615118][ T4311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 74.655401][ T7] usb 2-1: USB disconnect, device number 2 [ 74.905225][ T4252] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 74.995351][ T4311] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 75.005038][ T4301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.024196][ T4311] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 75.045030][ T4311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.074476][ T4311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.093951][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.123560][ T4311] usb 4-1: config 0 descriptor?? [ 75.136576][ T4592] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.158162][ T4311] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 75.165786][ T4252] usb 3-1: Using ep0 maxpacket: 8 [ 75.285034][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 75.295252][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.306790][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.316900][ T4252] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.326114][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.335387][ T4252] usb 3-1: config 0 descriptor?? [ 75.415153][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.426438][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.436841][ T4301] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.446194][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.463546][ T4301] usb 1-1: config 0 descriptor?? [ 75.495128][ T4311] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 75.598477][ T4252] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 75.716186][ T4301] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 75.801328][ T4599] iowarrior 3-1:0.0: Error -90 while submitting URB [ 75.811375][ T1108] usb 3-1: USB disconnect, device number 5 [ 75.865587][ T4311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.875941][ T4311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.885038][ T4311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 75.895048][ T4311] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 75.904082][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.923751][ T4301] usb 1-1: USB disconnect, device number 4 [ 75.926388][ T4611] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 75.946146][ T4311] hub 2-1:1.0: bad descriptor, ignoring hub [ 75.952105][ T4311] hub: probe of 2-1:1.0 failed with error -5 [ 75.960995][ T4311] cdc_wdm 2-1:1.0: skipping garbage [ 75.966671][ T4311] cdc_wdm 2-1:1.0: skipping garbage [ 75.973620][ T4311] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 75.982644][ T4311] cdc_wdm 2-1:1.0: Unknown control protocol [ 76.268503][ T13] cfg80211: failed to load regulatory.db [ 76.726996][ T4609] cdc_wdm 2-1:1.0: Error autopm - -16 [ 76.733922][ T4252] usb 2-1: USB disconnect, device number 3 [ 76.930858][ T4252] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.959456][ T4635] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 77.015098][ T4301] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 77.205224][ T4252] usb 2-1: Using ep0 maxpacket: 8 [ 77.256304][ T4642] binder_alloc: 4641: binder_alloc_buf size 16384 failed, no address space [ 77.266623][ T4642] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 77.335425][ T4252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.360255][ T4252] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.379627][ T4252] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30063, setting to 1024 [ 77.403505][ T4645] block device autoloading is deprecated and will be removed. [ 77.405168][ T4301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.421425][ T4252] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 77.452766][ T4252] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 77.468744][ T4301] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.483259][ T4301] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.498533][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.500747][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.544164][ T4311] usb 4-1: USB disconnect, device number 5 [ 77.575770][ T4611] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.596328][ T4252] hub 2-1:1.0: bad descriptor, ignoring hub [ 77.602350][ T4252] hub: probe of 2-1:1.0 failed with error -5 [ 77.632229][ T4252] cdc_wdm 2-1:1.0: skipping garbage [ 77.645578][ T4252] cdc_wdm 2-1:1.0: skipping garbage [ 77.651405][ T4252] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 77.785256][ T4301] usb 5-1: usb_control_msg returned -32 [ 77.791208][ T4301] usbtmc 5-1:16.0: can't read capabilities [ 77.915206][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.986679][ T13] usb 2-1: USB disconnect, device number 4 [ 78.165046][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 78.285142][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.296529][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.309070][ T1108] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.318658][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.335847][ T1108] usb 1-1: config 0 descriptor?? [ 78.397849][ T4252] usb 5-1: USB disconnect, device number 4 [ 78.424682][ T4664] binder: 4663:4664 unknown command 0 [ 78.431276][ T4664] binder: 4663:4664 ioctl c0306201 200000000080 returned -22 [ 78.440018][ T13] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 78.598156][ T1108] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.803360][ T4652] iowarrior 1-1:0.0: Error -90 while submitting URB [ 78.822916][ T1108] usb 1-1: USB disconnect, device number 5 [ 78.895348][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.975399][ T13] usb 3-1: no configurations [ 78.980155][ T13] usb 3-1: can't read configurations, error -22 [ 78.994316][ T4666] tipc: Started in network mode [ 79.006057][ T4666] tipc: Node identity ac1414aa, cluster identity 4711 [ 79.014521][ T4666] tipc: Enabled bearer , priority 10 [ 79.295420][ T4664] syz.1.129 (4664): drop_caches: 2 [ 79.434869][ T4676] binder_alloc: 4675: binder_alloc_buf size 16384 failed, no address space [ 79.454604][ T4676] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 79.548908][ T4683] block device autoloading is deprecated and will be removed. [ 80.026127][ T7] tipc: Node number set to 2886997162 [ 80.095466][ T2239] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.115152][ T4252] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 80.219449][ T4311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.346932][ T2239] usb 5-1: Using ep0 maxpacket: 8 [ 80.465147][ T2239] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 80.473521][ T2239] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.485994][ T4311] usb 2-1: Using ep0 maxpacket: 8 [ 80.491273][ T2239] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.502404][ T4252] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.514064][ T2239] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.526793][ T4252] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.540334][ T2239] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.553690][ T4252] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.562800][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 80.570597][ T2239] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.580870][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.589391][ T2239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.605190][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.616606][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.626505][ T4311] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.649236][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.668035][ T4311] usb 2-1: config 0 descriptor?? [ 80.865142][ T2239] usb 5-1: usb_control_msg returned -32 [ 80.871090][ T4252] usb 1-1: usb_control_msg returned -32 [ 80.876730][ T4252] usbtmc 1-1:16.0: can't read capabilities [ 80.883715][ T2239] usbtmc 5-1:16.0: can't read capabilities [ 80.928612][ T4311] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 80.939621][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.956684][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.966823][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.980169][ T13] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.989344][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.999385][ T13] usb 3-1: config 0 descriptor?? [ 81.134436][ T4311] usb 2-1: USB disconnect, device number 5 [ 81.470536][ T4187] usb 1-1: USB disconnect, device number 6 [ 81.477236][ T13] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 81.495994][ T13] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 81.722325][ T4732] binder: 4731:4732 ioctl 4018620d 0 returned -22 [ 81.934383][ T4729] netlink: 'syz.3.155': attribute type 13 has an invalid length. [ 81.942511][ T4729] netlink: 'syz.3.155': attribute type 17 has an invalid length. [ 81.955486][ T4729] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 82.095872][ T4729] syz.3.155 (4729) used greatest stack depth: 20416 bytes left [ 82.305117][ T4252] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.555214][ T4252] usb 1-1: Using ep0 maxpacket: 8 [ 82.676410][ T4252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.696459][ T4311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 82.717608][ T4252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.739767][ T4252] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.749770][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.761440][ T4252] usb 1-1: config 0 descriptor?? [ 82.803012][ T4754] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 82.811799][ T4754] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.841828][ T2239] usb 5-1: USB disconnect, device number 5 [ 82.970069][ T4758] kernel read not supported for file /file1 (pid: 4758 comm: syz.4.164) [ 82.994434][ T25] audit: type=1800 audit(1755927590.195:2): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.164" name="file1" dev="mqueue" ino=35970 res=0 errno=0 [ 83.026531][ T4252] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 83.069702][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.103436][ T4311] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.123897][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.146059][ T4311] usb 4-1: config 0 descriptor?? [ 83.171299][ T4763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 83.189964][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 83.207479][ T4763] netlink: 100 bytes leftover after parsing attributes in process `syz.1.166'. [ 83.304771][ T2239] usb 1-1: USB disconnect, device number 7 [ 83.485165][ T4311] usbhid 4-1:0.0: can't add hid device: -71 [ 83.491315][ T4311] usbhid: probe of 4-1:0.0 failed with error -71 [ 83.500809][ T4776] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 83.516518][ T7] usb 3-1: USB disconnect, device number 8 [ 83.538329][ T4311] usb 4-1: USB disconnect, device number 6 [ 83.601101][ T4776] team0: Failed to send options change via netlink (err -105) [ 83.629463][ T4776] team0: Port device dummy0 added [ 83.894765][ T4780] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 83.935832][ T4780] bridge0: port 3(team0) entered blocking state [ 83.955140][ T4311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 83.957630][ T4780] bridge0: port 3(team0) entered disabled state [ 83.986547][ T4780] device team0 entered promiscuous mode [ 83.999041][ T4780] device team_slave_0 entered promiscuous mode [ 84.013753][ T4780] device team_slave_1 entered promiscuous mode [ 84.028230][ T4780] device dummy0 entered promiscuous mode [ 84.044372][ T4780] bridge0: port 3(team0) entered blocking state [ 84.051157][ T4780] bridge0: port 3(team0) entered forwarding state [ 84.195159][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 84.200440][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 84.315595][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.329957][ T4311] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 84.345103][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.363791][ T4311] usb 4-1: config 0 descriptor?? [ 84.417190][ T4311] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.442456][ T4311] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.455162][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 84.484987][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.504989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.518496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 84.702809][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 85.095413][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.098747][ T4187] usb 4-1: USB disconnect, device number 7 [ 85.115158][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.126616][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.132548][ T4187] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 85.140242][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.195080][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.229198][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.525195][ T7] usb 1-1: usb_control_msg returned -32 [ 85.530920][ T7] usbtmc 1-1:16.0: can't read capabilities [ 85.536955][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.825048][ T4301] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 86.125193][ T4301] usb 3-1: Using ep0 maxpacket: 8 [ 86.152075][ T4815] tipc: Started in network mode [ 86.189621][ T4815] tipc: Node identity de97eac80539, cluster identity 4711 [ 86.229370][ T4815] tipc: Enabled bearer , priority 0 [ 86.245663][ T4301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.283858][ T4301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.343258][ T4301] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.648615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.657686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.666775][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.675968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.728988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 86.745192][ T4815] tipc: Resetting bearer [ 86.767458][ T4814] tipc: Disabling bearer [ 86.777352][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.805924][ T4301] usb 3-1: config 0 descriptor?? [ 86.825411][ T13] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.201345][ T4301] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 87.350249][ T4301] usb 3-1: USB disconnect, device number 9 [ 87.488917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 87.514998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 87.617256][ T13] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.627510][ T13] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.636913][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.697243][ T4187] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 87.709716][ T7] usb 1-1: USB disconnect, device number 8 [ 87.715368][ T4187] Bluetooth: hci3: Injecting HCI hardware error event [ 87.728137][ T4201] Bluetooth: hci3: hardware error 0x00 [ 87.745612][ T13] usb 5-1: can't set config #27, error -71 [ 87.780553][ T4828] device lo entered promiscuous mode [ 87.794223][ T13] usb 5-1: USB disconnect, device number 6 [ 87.796957][ T4828] device tunl0 entered promiscuous mode [ 87.808524][ T4828] device gre0 entered promiscuous mode [ 87.815323][ T4828] device gretap0 entered promiscuous mode [ 87.822302][ T4828] device erspan0 entered promiscuous mode [ 87.834582][ T4828] device ip_vti0 entered promiscuous mode [ 87.841463][ T4828] device ip6_vti0 entered promiscuous mode [ 87.848655][ T4828] device sit0 entered promiscuous mode [ 87.855438][ T4828] device ip6tnl0 entered promiscuous mode [ 87.862031][ T4828] device ip6gre0 entered promiscuous mode [ 87.869496][ T4828] device syz_tun entered promiscuous mode [ 87.876810][ T4828] device ip6gretap0 entered promiscuous mode [ 87.888748][ T4828] device bridge0 entered promiscuous mode [ 87.896599][ T4828] device vcan0 entered promiscuous mode [ 87.903734][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.911597][ T4828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.923171][ T4828] device bond0 entered promiscuous mode [ 87.937227][ T4828] device bond_slave_0 entered promiscuous mode [ 87.950022][ T4828] device bond_slave_1 entered promiscuous mode [ 87.961373][ T4828] device nlmon0 entered promiscuous mode [ 87.975152][ T4828] device caif0 entered promiscuous mode [ 87.994601][ T4828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.135441][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.465111][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 88.666117][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.800642][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.060971][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.072840][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.088586][ T7] usb 1-1: config 0 descriptor?? [ 89.365241][ T7] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.568110][ T4230] usb 1-1: USB disconnect, device number 9 [ 89.665172][ T4301] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 89.915373][ T4881] comedi: No check for data length of config insn id 3 is implemented [ 89.925202][ T4301] usb 4-1: Using ep0 maxpacket: 8 [ 89.938411][ T4881] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 89.953103][ T4881] comedi: Assuming n=15 is correct [ 90.045235][ T4301] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 90.074327][ T4301] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.095214][ T4301] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.115271][ T4301] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.125630][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.195022][ T4301] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.234626][ T4301] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.270741][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.341380][ T4896] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 90.385350][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 90.505815][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.592200][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.335759][ T4301] usb 4-1: usb_control_msg returned -32 [ 91.342014][ T4301] usbtmc 4-1:16.0: can't read capabilities [ 91.855048][ T1108] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 91.924029][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.006070][ T1108] usb 5-1: config 0 descriptor?? [ 92.272963][ T1108] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 92.385207][ T4909] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 92.480485][ T4230] usb 5-1: USB disconnect, device number 7 [ 92.625806][ T1108] usb 4-1: USB disconnect, device number 8 [ 93.523824][ T4934] 9pnet_virtio: no channels available for device syz [ 93.795293][ T4230] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 93.971346][ T4954] input: syz0 as /devices/virtual/input/input6 [ 94.065229][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 94.225285][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.248880][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.280170][ T4230] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.300427][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.335333][ T4230] usb 3-1: config 0 descriptor?? [ 94.362834][ T4971] block device autoloading is deprecated and will be removed. [ 94.598115][ T4230] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 94.801516][ T4230] usb 3-1: USB disconnect, device number 10 [ 99.283010][ T5059] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.246'. [ 99.435092][ T4301] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.122301][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 101.275505][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.305382][ T4301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.317528][ T4301] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.330803][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.360910][ T4301] usb 1-1: config 0 descriptor?? [ 101.687227][ T4301] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 101.973858][ T5083] input: syz1 as /devices/virtual/input/input7 [ 102.595416][ T4301] usb 1-1: USB disconnect, device number 10 [ 103.060346][ T5101] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.181848][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.215735][ T5113] 9pnet_virtio: no channels available for device syz [ 103.437205][ T5120] device syzkaller1 entered promiscuous mode [ 103.565418][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 103.592866][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.625644][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.635646][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.678255][ T7] usb 5-1: config 0 descriptor?? [ 103.727478][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 103.934432][ T5127] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 103.965080][ T5127] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.080925][ T5131] kvm: pic: non byte read [ 104.122883][ T5134] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.145962][ T5134] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.375284][ T4311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.409836][ T5140] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.424339][ T5140] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 104.645057][ T4311] usb 4-1: Using ep0 maxpacket: 16 [ 105.045488][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.338158][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.375034][ T4311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.422714][ T4311] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 105.453538][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.480317][ T4311] usb 4-1: config 0 descriptor?? [ 105.554267][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 105.916631][ T7] usb 5-1: USB disconnect, device number 8 [ 106.043676][ T4311] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 106.558091][ T4311] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 106.624083][ T4311] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 106.651315][ T4311] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 106.674557][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 106.693930][ T4311] hid-generic 0003:0955:7214.0003: unknown main item tag 0x0 [ 106.709842][ T4311] hid-generic 0003:0955:7214.0003: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 106.742615][ T4311] usb 4-1: USB disconnect, device number 9 [ 107.816669][ T5174] fido_id[5174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 108.855335][ T4311] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 108.994597][ T5199] 9pnet_virtio: no channels available for device syz [ 109.105408][ T4311] usb 3-1: Using ep0 maxpacket: 8 [ 109.245767][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.321218][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.519875][ T4311] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.709080][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.835461][ T5208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.286'. [ 109.922710][ T4311] usb 3-1: config 0 descriptor?? [ 110.274444][ T4311] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.533111][ T4311] usb 3-1: USB disconnect, device number 11 [ 111.439666][ T5206] netlink: 14 bytes leftover after parsing attributes in process `syz.3.286'. [ 111.920151][ T5206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.011576][ T5206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.043094][ T5206] bond0 (unregistering): Released all slaves [ 112.080286][ T5219] tipc: Started in network mode [ 112.111765][ T5219] tipc: Node identity 4a4e3a5e7c4b, cluster identity 4711 [ 112.120986][ T5219] tipc: Enabled bearer , priority 0 [ 112.138104][ T5225] device syzkaller0 entered promiscuous mode [ 112.151896][ T5230] device syzkaller1 entered promiscuous mode [ 112.236616][ T5219] tipc: Resetting bearer [ 112.248822][ T5235] overlayfs: failed to set xattr on upper [ 112.255981][ T4311] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 112.265302][ T5235] overlayfs: ...falling back to index=off,metacopy=off. [ 112.283190][ T5218] tipc: Resetting bearer [ 112.304641][ T5218] tipc: Disabling bearer [ 112.563634][ T5245] 9pnet_virtio: no channels available for device syz [ 112.645030][ T4311] usb 3-1: Using ep0 maxpacket: 8 [ 113.485125][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.502694][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.521909][ T4311] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.532009][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.567379][ T4311] usb 3-1: config 0 descriptor?? [ 113.845530][ T4311] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 114.050256][ T4311] usb 3-1: USB disconnect, device number 12 [ 114.236917][ T5275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.306'. [ 119.236823][ T5303] loop6: detected capacity change from 0 to 7 [ 119.316347][ T5305] kvm: pic: non byte read [ 119.344387][ T5303] loop6: [POWERTEC] p1 p2 p3 [ 119.380836][ T5303] loop6: p1 start 1969583473 is beyond EOD, truncated [ 119.491876][ T5303] loop6: p3 start 1819148288 is beyond EOD, truncated [ 119.540792][ T5309] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 119.552274][ T5309] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 119.689179][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 119.875075][ T4230] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.137015][ T5344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.327'. [ 120.146249][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 120.258021][ T5341] netlink: 14 bytes leftover after parsing attributes in process `syz.0.327'. [ 120.267741][ T4230] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.285020][ T4230] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.314998][ T4230] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.346728][ T4230] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.380448][ T4230] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.410772][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.509575][ T5341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.588797][ T5341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.688479][ T5341] bond0 (unregistering): Released all slaves [ 120.709696][ T4230] usb 3-1: GET_CAPABILITIES returned 0 [ 120.716634][ T4230] usbtmc 3-1:16.0: can't read capabilities [ 120.937487][ T4230] usb 3-1: USB disconnect, device number 13 [ 121.418760][ T5359] device geneve2 entered promiscuous mode [ 121.680987][ T5365] device wlan0 entered promiscuous mode [ 121.880980][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.131130][ T7] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 122.320944][ T13] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 122.335002][ T13] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.371533][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.555382][ T13] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.572058][ T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 122.585007][ T7] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.604999][ T13] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.613557][ T13] usb 2-1: Product: syz [ 122.618255][ T7] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 122.635007][ T13] usb 2-1: Manufacturer: syz [ 122.645290][ T13] usb 2-1: SerialNumber: syz [ 122.657888][ T13] usb 2-1: config 0 descriptor?? [ 122.708439][ T13] hub 2-1:0.0: bad descriptor, ignoring hub [ 122.722586][ T13] hub: probe of 2-1:0.0 failed with error -5 [ 122.743039][ T13] usb 2-1: selecting invalid altsetting 0 [ 122.750315][ T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 122.760818][ T7] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.815775][ T7] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 122.925164][ T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 122.937786][ T7] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 122.960112][ T7] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 123.255341][ T7] usb 3-1: string descriptor 0 read error: -22 [ 123.263193][ T7] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.280843][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.362494][ T7] adutux 3-1:168.0: interrupt endpoints not found [ 123.564246][ T7] usb 3-1: USB disconnect, device number 14 [ 123.781273][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 123.792194][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:6 Not tainted 5.15.189-syzkaller #0 [ 123.800823][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.810900][ T4201] Workqueue: hci1 hci_rx_work [ 123.815678][ T4201] Call Trace: [ 123.819074][ T4201] [ 123.822232][ T4201] dump_stack_lvl+0x168/0x230 [ 123.826918][ T4201] ? show_regs_print_info+0x20/0x20 [ 123.832121][ T4201] ? load_image+0x3b0/0x3b0 [ 123.836632][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 123.841745][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 123.846777][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 123.851702][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 123.857255][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 123.862463][ T4201] ? process_one_work+0x863/0x1000 [ 123.867572][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 123.872864][ T4201] kobject_add_internal+0x662/0xd00 [ 123.878250][ T4201] kobject_add+0x152/0x210 [ 123.882684][ T4201] ? kobject_init+0x1d0/0x1d0 [ 123.887362][ T4201] ? klist_children_get+0x50/0x50 [ 123.892476][ T4201] ? get_device_parent+0x121/0x3f0 [ 123.897681][ T4201] device_add+0x483/0xfb0 [ 123.902034][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 123.907171][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 123.912651][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 123.917773][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 123.923520][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 123.928486][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 123.933771][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 123.938966][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 123.944027][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 123.950117][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 123.955764][ T4201] ? mark_lock+0x94/0x320 [ 123.960309][ T4201] ? mutex_unlock+0x10/0x10 [ 123.964809][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 123.970962][ T4201] ? lock_chain_count+0x20/0x20 [ 123.975907][ T4201] ? __rwlock_init+0x140/0x140 [ 123.980672][ T4201] hci_event_packet+0xe05/0x12f0 [ 123.985626][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 123.990828][ T4201] ? rcu_lock_release+0x20/0x20 [ 123.995865][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 124.001261][ T4201] hci_rx_work+0x255/0xa10 [ 124.005699][ T4201] process_one_work+0x863/0x1000 [ 124.010653][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 124.016811][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 124.022197][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 124.027227][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 124.032775][ T4201] ? wq_worker_running+0x97/0x170 [ 124.037899][ T4201] worker_thread+0xaa8/0x12a0 [ 124.042774][ T4201] kthread+0x436/0x520 [ 124.046842][ T4201] ? rcu_lock_release+0x20/0x20 [ 124.051694][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 124.056281][ T4201] ret_from_fork+0x1f/0x30 [ 124.060815][ T4201] [ 124.063896][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.075322][ T4201] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.090856][ T4201] Bluetooth: hci1: failed to register connection device [ 124.226643][ T5387] device geneve2 entered promiscuous mode [ 124.245728][ T5385] device syzkaller1 entered promiscuous mode [ 124.621422][ T5407] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 124.636005][ T5407] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 124.878728][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.888113][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.185029][ T4251] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.435037][ T4251] usb 5-1: Using ep0 maxpacket: 8 [ 125.555232][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.575223][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.601717][ T4251] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.625208][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.655411][ T4251] usb 5-1: config 0 descriptor?? [ 125.788364][ T5398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.834009][ T5398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.938851][ T4251] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.161170][ T4251] usb 5-1: USB disconnect, device number 9 [ 126.809418][ T5398] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.822376][ T5398] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.840374][ T5398] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.851182][ T5398] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.866858][ T5398] device geneve2 left promiscuous mode [ 127.004699][ T5434] device geneve2 entered promiscuous mode [ 127.245103][ T5429] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 127.515763][ T5429] usb 1-1: Using ep0 maxpacket: 8 [ 127.594004][ T4187] usb 2-1: USB disconnect, device number 6 [ 127.655269][ T5429] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.674409][ T5429] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 127.704782][ T5429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.758878][ T5429] usb 1-1: config 0 descriptor?? [ 128.264090][ T5429] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 128.307549][ T5429] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 128.334454][ T5429] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 128.372802][ T5429] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 128.398630][ T5429] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 128.427073][ T5429] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 128.749890][ T5429] usb 1-1: USB disconnect, device number 11 [ 129.115029][ T4251] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 129.355231][ T4251] usb 3-1: Using ep0 maxpacket: 8 [ 129.475392][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.519310][ T4251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.550175][ T4251] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.585703][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.640254][ T4251] usb 3-1: config 0 descriptor?? [ 129.970262][ T4251] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 130.244316][ T4251] usb 3-1: USB disconnect, device number 15 [ 130.530982][ T5429] Bluetooth: hci1: command 0x0406 tx timeout [ 130.605095][ T5418] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.112296][ T5418] usb 5-1: Using ep0 maxpacket: 8 [ 131.245407][ T5418] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.263914][ T5418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.294121][ T5418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.324192][ T5418] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.355442][ T5418] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.374348][ T5418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.655352][ T5418] usb 5-1: GET_CAPABILITIES returned 0 [ 131.660988][ T5418] usbtmc 5-1:16.0: can't read capabilities [ 132.317898][ T5425] usb 5-1: USB disconnect, device number 10 [ 132.783874][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.790929][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225781][ T5539] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.710296][ T4251] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.955031][ T4251] usb 5-1: Using ep0 maxpacket: 8 [ 134.956241][ T5425] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.075798][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.221786][ T4251] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.239134][ T4251] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.263308][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.307401][ T4251] usb 5-1: config 0 descriptor?? [ 135.345053][ T5425] usb 2-1: Using ep0 maxpacket: 8 [ 135.627493][ T4251] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.670953][ T4251] usb 5-1: USB disconnect, device number 11 [ 135.825743][ T5425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.906821][ T5425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.995301][ T5425] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.071049][ T5425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.236448][ T5425] usb 2-1: config 0 descriptor?? [ 136.582998][ T5425] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.894463][ T5425] usb 2-1: USB disconnect, device number 7 [ 142.885264][ T5429] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.385317][ T5429] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.394338][ T5429] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.420182][ T5429] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.434420][ T5429] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 143.454634][ T5429] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 143.621375][ T5429] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.640100][ T5429] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.691961][ T5429] usb 1-1: Product: syz [ 143.708306][ T5429] usb 1-1: Manufacturer: syz [ 144.556342][ T5429] cdc_wdm 1-1:1.0: skipping garbage [ 144.561848][ T5429] cdc_wdm 1-1:1.0: skipping garbage [ 144.619144][ T5429] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 144.642527][ T5429] cdc_wdm 1-1:1.0: Unknown control protocol [ 144.997620][ T4301] usb 1-1: USB disconnect, device number 12 [ 145.015666][ T5621] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 146.975313][ T4301] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.363258][ T5682] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 147.463501][ T5682] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 147.473645][ T4301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.495106][ T4301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.584539][ T4301] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 147.755727][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.766291][ T4301] usb 4-1: config 0 descriptor?? [ 148.341560][ T4301] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 148.349760][ T4301] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 148.365284][ T4301] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 148.373061][ T4301] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 148.412492][ T4301] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 148.426221][ T4301] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 148.457779][ T4301] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 149.534201][ T5429] usb 4-1: USB disconnect, device number 10 [ 151.764359][ T5743] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 151.781713][ T5743] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 151.798486][ T5747] block device autoloading is deprecated and will be removed. [ 151.822597][ T5746] md2: error: bitmap file must be a regular file [ 151.997205][ T5752] device geneve2 entered promiscuous mode [ 152.265409][ T4187] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.132519][ T4301] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.425866][ T4187] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.426069][ T4187] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.426171][ T4187] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.426288][ T4187] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 153.426314][ T4187] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 153.695500][ T4301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.713395][ T4301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.726253][ T4187] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.744014][ T4301] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 153.755733][ T4187] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.764286][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.777414][ T4187] usb 1-1: Product: syz [ 153.781949][ T4187] usb 1-1: Manufacturer: syz [ 153.832251][ T4301] usb 2-1: config 0 descriptor?? [ 153.939529][ T4187] cdc_wdm 1-1:1.0: skipping garbage [ 153.955152][ T4187] cdc_wdm 1-1:1.0: skipping garbage [ 153.971743][ T4187] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 153.978048][ T4187] cdc_wdm 1-1:1.0: Unknown control protocol [ 154.228576][ T5418] usb 1-1: USB disconnect, device number 13 [ 154.245008][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 154.252190][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 154.258470][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 154.267949][ T5754] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 154.470721][ T4301] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 154.488144][ T4301] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 154.495817][ T4301] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 154.503238][ T4301] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 154.510958][ T4301] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 154.519136][ T4301] cm6533_jd 0003:0D8C:0022.0006: No inputs registered, leaving [ 154.539097][ T4301] cm6533_jd 0003:0D8C:0022.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 154.718931][ T5424] usb 2-1: USB disconnect, device number 8 [ 155.235153][ T5424] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 155.565409][ T5424] usb 4-1: Using ep0 maxpacket: 8 [ 155.697836][ T5424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.860587][ T5424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 156.049872][ T5424] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.059915][ T5424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.072660][ T5424] usb 4-1: config 0 descriptor?? [ 156.272124][ T5803] device geneve2 entered promiscuous mode [ 156.376406][ T5424] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.673588][ T5424] usb 4-1: USB disconnect, device number 11 [ 161.022335][ T4251] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 162.165929][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.264336][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.309044][ T4251] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.340458][ T4251] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.354462][ T4251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.446727][ T4251] usb 1-1: config 0 descriptor?? [ 162.528868][ T5424] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 162.786927][ T5424] usb 3-1: Using ep0 maxpacket: 8 [ 162.906465][ T5424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.924735][ T5424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.927255][ T4251] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 162.967395][ T4251] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 163.002699][ T5424] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.048224][ T5424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.099066][ T5424] usb 3-1: config 0 descriptor?? [ 163.356182][ T5424] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 165.307734][ T5893] fuse: Bad value for 'fd' [ 165.376644][ T4301] usb 3-1: USB disconnect, device number 16 [ 165.444935][ C0] sched: RT throttling activated [ 166.696021][ T4251] usb 1-1: USB disconnect, device number 14 [ 169.224754][ T5930] tipc: Enabled bearer , priority 0 [ 169.256557][ T5930] device syzkaller0 entered promiscuous mode [ 169.295821][ T5930] tipc: Resetting bearer [ 169.335951][ T5927] tipc: Resetting bearer [ 169.388361][ T5927] tipc: Disabling bearer [ 169.765032][ T5429] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 170.157725][ T5418] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 170.195169][ T5429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.226103][ T5429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.312201][ T5429] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.347076][ T5429] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.347109][ T5429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.408257][ T5429] usb 5-1: config 0 descriptor?? [ 170.439645][ T5418] usb 1-1: Using ep0 maxpacket: 8 [ 170.831412][ T5418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.899420][ T5418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.937408][ T5418] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.957870][ T5418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.004155][ T5418] usb 1-1: config 0 descriptor?? [ 171.017613][ T5429] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 171.043136][ T5429] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 172.595786][ T5418] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 172.766874][ T4301] usb 5-1: USB disconnect, device number 12 [ 173.088697][ T5418] usb 1-1: USB disconnect, device number 15 [ 178.663950][ T6020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.465257][ T5425] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 179.725065][ T5425] usb 3-1: Using ep0 maxpacket: 8 [ 179.845663][ T5425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.895468][ T5425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.980179][ T5425] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.057256][ T5425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.171453][ T5425] usb 3-1: config 0 descriptor?? [ 180.498668][ T5425] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.718528][ T6022] iowarrior 3-1:0.0: Error -90 while submitting URB [ 180.745200][ T5425] Bluetooth: hci2: command 0x0406 tx timeout [ 180.774040][ T5425] Bluetooth: hci0: command 0x0406 tx timeout [ 180.797580][ T4251] usb 3-1: USB disconnect, device number 17 [ 180.815393][ T5425] Bluetooth: hci1: command 0x0406 tx timeout [ 180.846617][ T5425] Bluetooth: hci4: command 0x0406 tx timeout [ 184.091508][ T6069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.550'. [ 184.117510][ T6069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.550'. [ 184.435179][ T5424] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.695061][ T5424] usb 2-1: Using ep0 maxpacket: 8 [ 186.125865][ T5424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.212547][ T5424] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.282311][ T5424] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.322320][ T5424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.368178][ T5424] usb 2-1: config 0 descriptor?? [ 187.270819][ T5424] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 187.379488][ T5424] usb 2-1: USB disconnect, device number 9 [ 189.383354][ T6120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.565'. [ 189.395550][ T6120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.565'. [ 191.870730][ T5424] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 194.030464][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.063193][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.132393][ T6167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.580'. [ 196.132550][ T6167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.580'. [ 198.565066][ T5425] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.675040][ T5425] usb 2-1: Using ep0 maxpacket: 8 [ 199.819593][ T5425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.851053][ T5425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.881998][ T5425] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.944456][ T5425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.113316][ T5425] usb 2-1: config 0 descriptor?? [ 200.629919][ T5425] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 200.685220][ T5425] usb 2-1: USB disconnect, device number 10 [ 208.751766][ T6302] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 215.140394][ T6334] 9pnet: Insufficient options for proto=fd [ 215.148889][ T6334] fuse: Bad value for 'fd' [ 216.980058][ T6367] 9pnet: Insufficient options for proto=fd [ 216.989367][ T6367] fuse: Bad value for 'fd' [ 223.162086][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 226.045208][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 226.799683][ T6418] 9pnet: Insufficient options for proto=fd [ 226.806837][ T6418] fuse: Bad value for 'fd' [ 228.319761][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 234.388707][ T6466] 9pnet: Insufficient options for proto=fd [ 238.189530][ T6483] tipc: Enabled bearer , priority 0 [ 238.225325][ T6483] device syzkaller0 entered promiscuous mode [ 238.286057][ T6483] tipc: Resetting bearer [ 238.327471][ T6482] tipc: Resetting bearer [ 238.382434][ T6482] tipc: Disabling bearer [ 238.867314][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 239.315039][ T6498] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 241.984665][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 243.428114][ T6545] fuse: Bad value for 'fd' [ 244.308701][ T6558] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 245.601122][ T6567] fuse: Bad value for 'fd' [ 249.216349][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 255.491334][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.519851][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.005060][ T6685] tipc: Enabled bearer , priority 0 [ 265.024992][ T6685] device syzkaller0 entered promiscuous mode [ 265.131031][ T6685] tipc: Resetting bearer [ 266.719232][ T4301] tipc: Node number set to 3685673672 [ 266.735633][ T6684] tipc: Resetting bearer [ 266.783855][ T6684] tipc: Disabling bearer [ 268.244142][ T6719] 9pnet: Insufficient options for proto=fd [ 270.682891][ T6748] tipc: Started in network mode [ 270.692583][ T6748] tipc: Node identity 6671952b7863, cluster identity 4711 [ 270.737383][ T6748] tipc: Enabled bearer , priority 0 [ 271.626642][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 271.786639][ T4301] tipc: Node number set to 504534315 [ 272.427330][ T6766] fuse: Bad value for 'fd' [ 273.180383][ T6760] tipc: Disabling bearer [ 273.459008][ T6775] 9pnet: Insufficient options for proto=fd [ 279.193318][ T6818] fuse: Bad value for 'fd' [ 280.145259][ T6824] tipc: Enabling of bearer rejected, failed to enable media [ 280.406890][ T6834] 9pnet: Insufficient options for proto=fd [ 281.219667][ T6844] tipc: Enabled bearer , priority 0 [ 281.230335][ T6830] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 281.278121][ T6847] device syzkaller0 entered promiscuous mode [ 281.337717][ T6844] tipc: Resetting bearer [ 281.593139][ T6841] tipc: Resetting bearer [ 281.828119][ T6841] tipc: Disabling bearer [ 284.088556][ T6873] 9pnet: Insufficient options for proto=fd [ 284.098908][ T6873] fuse: Bad value for 'fd' [ 284.955357][ T6888] 9pnet: Insufficient options for proto=fd [ 285.424996][ T4295] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 285.619016][ T6896] tipc: Enabled bearer , priority 0 [ 285.715757][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 285.757760][ T6895] tipc: Disabling bearer [ 285.835283][ T4295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.889136][ T4295] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.956376][ T4295] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.971166][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.007872][ T4295] usb 3-1: config 0 descriptor?? [ 286.126476][ T4295] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 286.412464][ T5078] usb 3-1: USB disconnect, device number 19 [ 290.754188][ T6942] 9pnet: Insufficient options for proto=fd [ 291.518534][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.795'. [ 291.566411][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.795'. [ 292.725059][ T5425] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 292.994967][ T5425] usb 4-1: Using ep0 maxpacket: 8 [ 293.115295][ T5425] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.180473][ T5425] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.270388][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 293.336845][ T5425] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.433403][ T5425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.604151][ T5425] usb 4-1: config 0 descriptor?? [ 293.741127][ T5425] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 294.039840][ T5425] usb 4-1: USB disconnect, device number 12 [ 294.340608][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 300.838638][ T6988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.387940][ T6996] tipc: Enabled bearer , priority 0 [ 301.500559][ T6996] device syzkaller0 entered promiscuous mode [ 302.495486][ T5424] tipc: Node number set to 2631791496 [ 302.605135][ T4301] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.762690][ T6992] tipc: Resetting bearer [ 302.864961][ T4301] usb 4-1: Using ep0 maxpacket: 8 [ 302.893275][ T6992] tipc: Disabling bearer [ 304.305200][ T4301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.449303][ T4301] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.495005][ T4301] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 306.505436][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.516240][ T4301] usb 4-1: config 0 descriptor?? [ 306.541886][ T4301] usb 4-1: can't set config #0, error -71 [ 306.549622][ T4301] usb 4-1: USB disconnect, device number 13 [ 307.048404][ T7027] 9pnet: Insufficient options for proto=fd [ 307.059244][ T7027] fuse: Bad value for 'fd' [ 307.135272][ T4301] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 307.415007][ T4301] usb 4-1: Using ep0 maxpacket: 8 [ 307.535524][ T4301] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 307.655611][ T4301] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.835831][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.881345][ T4301] usb 4-1: config 0 descriptor?? [ 308.065020][ T4301] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 310.193325][ T5425] usb 4-1: USB disconnect, device number 14 [ 311.194984][ T7046] 9pnet: Insufficient options for proto=fd [ 311.202922][ T7046] fuse: Bad value for 'fd' [ 314.340873][ T7074] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 314.376656][ T7074] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 316.906978][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.948237][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.198966][ T7166] 9pnet: Insufficient options for proto=fd [ 326.209197][ T7166] fuse: Bad value for 'fd' [ 332.084024][ T7203] 9pnet: Insufficient options for proto=fd [ 332.094496][ T7203] fuse: Bad value for 'fd' [ 333.279516][ T7216] 9pnet: Insufficient options for proto=fd [ 333.291220][ T7216] fuse: Bad value for 'fd' [ 335.507266][ T7228] tipc: Enabled bearer , priority 0 [ 335.707447][ T7239] tipc: Disabling bearer [ 338.257780][ T7266] MPTCP: kernel_bind error, err=-98 [ 338.496460][ T4295] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 338.593162][ T7276] tipc: Enabled bearer , priority 0 [ 338.780242][ T7280] device syzkaller0 entered promiscuous mode [ 338.805239][ T4295] usb 1-1: Using ep0 maxpacket: 8 [ 338.965909][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.028595][ T4295] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 339.246646][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.267809][ T7276] tipc: Resetting bearer [ 339.313573][ T4295] usb 1-1: config 0 descriptor?? [ 339.333523][ T7275] tipc: Resetting bearer [ 339.368745][ T7275] tipc: Disabling bearer [ 339.396525][ T4295] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 339.725882][ T4295] usb 1-1: USB disconnect, device number 16 [ 341.304513][ T7293] tipc: Enabled bearer , priority 0 [ 341.387064][ T7293] device syzkaller0 entered promiscuous mode [ 341.673601][ T7293] tipc: Resetting bearer [ 343.294655][ T7291] tipc: Resetting bearer [ 343.336862][ T7291] tipc: Disabling bearer [ 344.514489][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 345.665284][ T4295] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 346.972959][ T4295] usb 5-1: Using ep0 maxpacket: 8 [ 347.285980][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.333174][ T4295] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 347.394391][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.533569][ T4295] usb 5-1: config 0 descriptor?? [ 347.885095][ T4295] usb 5-1: can't set config #0, error -71 [ 347.915200][ T4295] usb 5-1: USB disconnect, device number 13 [ 349.230282][ T7360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.685294][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 352.732962][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 352.765203][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 352.774315][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 352.870411][ T7390] tipc: Enabling of bearer rejected, failed to enable media [ 358.937984][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'. [ 359.012933][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 359.531922][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'. [ 359.579237][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 359.784305][ T7455] tipc: Enabled bearer , priority 0 [ 359.813878][ T7455] device syzkaller0 entered promiscuous mode [ 359.861665][ T7455] tipc: Resetting bearer [ 359.872853][ T7462] tipc: Enabled bearer , priority 0 [ 359.910171][ T7454] tipc: Resetting bearer [ 359.958852][ T7454] tipc: Disabling bearer [ 360.065108][ T7462] device syzkaller0 entered promiscuous mode [ 360.203403][ T7467] tipc: Resetting bearer [ 360.407975][ T7456] tipc: Resetting bearer [ 360.465698][ T7456] tipc: Disabling bearer [ 362.444448][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 364.366394][ T7495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.791137][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.945'. [ 364.876205][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 364.983856][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.945'. [ 364.993279][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 366.066485][ T7516] 9pnet: Insufficient options for proto=fd [ 371.330837][ T7552] tipc: Enabling of bearer rejected, failed to enable media [ 371.397465][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 371.408131][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 371.514592][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 371.524344][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 378.350498][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.356538][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 378.366700][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 378.471574][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.104544][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 380.206648][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 380.368035][ T7644] 9pnet: Insufficient options for proto=fd [ 381.587459][ T7657] 9pnet: Insufficient options for proto=fd [ 386.765412][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 404.480983][ T7834] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1028'. [ 404.510336][ T7834] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1028'. [ 404.792982][ T7862] tipc: Enabled bearer , priority 0 [ 404.870358][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 404.883902][ T7862] device syzkaller0 entered promiscuous mode [ 404.931806][ T7862] tipc: Resetting bearer [ 404.965316][ T7858] tipc: Resetting bearer [ 405.018631][ T7858] tipc: Disabling bearer [ 405.705329][ T5424] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 406.895025][ T5424] usb 3-1: Using ep0 maxpacket: 8 [ 407.355386][ T5424] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.463977][ T5424] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 408.361561][ T5424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.388791][ T5424] usb 3-1: config 0 descriptor?? [ 408.415002][ T5424] usb 3-1: can't set config #0, error -71 [ 408.422924][ T5424] usb 3-1: USB disconnect, device number 20 [ 411.141799][ T7926] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1053'. [ 411.195142][ T7926] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1053'. [ 411.329631][ T7937] tipc: Enabled bearer , priority 0 [ 411.380341][ T7937] device syzkaller0 entered promiscuous mode [ 411.575584][ T7937] tipc: Resetting bearer [ 411.610710][ T7935] tipc: Resetting bearer [ 411.642118][ T7935] tipc: Disabling bearer [ 411.938102][ T5424] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 412.214214][ T5424] usb 2-1: Using ep0 maxpacket: 8 [ 412.269962][ T7952] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1058'. [ 412.724325][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 414.235270][ T5424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.275022][ T5424] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 414.378319][ T7966] 9pnet: Insufficient options for proto=fd [ 414.389136][ T7966] fuse: Unknown parameter './file0' [ 416.235731][ T5424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.701901][ T5424] usb 2-1: config 0 descriptor?? [ 416.825662][ T5424] usb 2-1: can't set config #0, error -71 [ 416.896256][ T5424] usb 2-1: USB disconnect, device number 11 [ 419.446214][ T5424] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 419.574750][ T8009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1070'. [ 419.615258][ T8009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1070'. [ 419.765225][ T5424] usb 2-1: Using ep0 maxpacket: 8 [ 420.215534][ T5424] usb 2-1: device descriptor read/all, error -71 [ 422.892546][ T8033] 9pnet: Insufficient options for proto=fd [ 422.901453][ T8033] fuse: Bad value for 'fd' [ 429.294950][ T4187] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 429.535004][ T4187] usb 3-1: Using ep0 maxpacket: 8 [ 430.755146][ T4187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.827760][ T4187] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.872449][ T4187] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 430.897617][ T4187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.066153][ T4187] usb 3-1: config 0 descriptor?? [ 431.415425][ T4187] usb 3-1: can't set config #0, error -71 [ 431.460014][ T4187] usb 3-1: USB disconnect, device number 21 [ 435.934944][ T4301] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 436.295349][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 436.436981][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.636058][ T4301] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.756740][ T1499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.824929][ T4301] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 436.843913][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.877442][ T4187] Bluetooth: hci4: command 0x0409 tx timeout [ 436.940708][ T4301] usb 5-1: config 0 descriptor?? [ 438.100958][ T4301] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 438.111735][ T8119] chnl_net:caif_netlink_parms(): no params data found [ 438.173817][ T4301] usb 5-1: USB disconnect, device number 14 [ 438.302376][ T1499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.985099][ T5425] Bluetooth: hci4: command 0x041b tx timeout [ 439.788475][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.795277][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.280183][ T1499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.386224][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.403832][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.422068][ T8119] device bridge_slave_0 entered promiscuous mode [ 440.459584][ T1499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.474459][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.481829][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.508391][ T8119] device bridge_slave_1 entered promiscuous mode [ 441.075058][ T5418] Bluetooth: hci4: command 0x040f tx timeout [ 442.193477][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.261365][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.445083][ T4251] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 442.553710][ T8119] team0: Port device team_slave_0 added [ 442.587303][ T8119] team0: Port device team_slave_1 added [ 442.694923][ T4251] usb 5-1: Using ep0 maxpacket: 8 [ 442.871794][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.891708][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.924667][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.938663][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.947663][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.974886][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.986359][ T4251] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 443.005186][ T4251] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 443.014689][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.025749][ T4251] usb 5-1: config 0 descriptor?? [ 443.070514][ T4251] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 443.118166][ T1499] tipc: Left network mode [ 443.155593][ T5418] Bluetooth: hci4: command 0x0419 tx timeout [ 443.276945][ T8119] device hsr_slave_0 entered promiscuous mode [ 443.296727][ T8119] device hsr_slave_1 entered promiscuous mode [ 443.336385][ T8119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.344083][ T8119] Cannot create hsr debugfs directory [ 443.932182][ T8217] tipc: Enabled bearer , priority 0 [ 444.123725][ T8217] tipc: Disabling bearer [ 444.604307][ T8119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 444.717364][ T8119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.853420][ T8119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 445.802227][ T4301] usb 5-1: USB disconnect, device number 15 [ 446.211077][ T8119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 447.426249][ T8271] tipc: Enabled bearer , priority 0 [ 447.456435][ T8271] device syzkaller0 entered promiscuous mode [ 447.614750][ T8281] tipc: Resetting bearer [ 448.196281][ T8269] tipc: Resetting bearer [ 448.331288][ T8269] tipc: Disabling bearer [ 448.360806][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.469235][ T8296] device syzkaller0 entered promiscuous mode [ 449.380778][ T8292] tipc: Enabled bearer , priority 0 [ 449.433309][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.555541][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.578677][ T8119] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.662780][ T8292] tipc: Resetting bearer [ 449.755392][ T8316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.844989][ T4230] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 450.070778][ T8292] tipc: Disabling bearer [ 450.712560][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.725156][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 450.726677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.763138][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.770622][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.794744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.815867][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.853771][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 450.873715][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.879309][ T4230] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.880891][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.896425][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.247080][ T4230] usb 2-1: config 0 descriptor?? [ 451.416647][ T4230] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 451.637465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.668674][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 451.679122][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 452.437137][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 452.472345][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 452.483885][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 452.498539][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 452.507681][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 452.551217][ T8343] netlink: 'syz.0.1149': attribute type 2 has an invalid length. [ 452.606087][ T8343] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1149'. [ 452.945157][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 452.990625][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.219145][ T1499] device hsr_slave_0 left promiscuous mode [ 453.347673][ T1499] device hsr_slave_1 left promiscuous mode [ 453.443003][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.554946][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.926620][ T4237] usb 2-1: USB disconnect, device number 14 [ 454.673927][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.714942][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.868559][ T1499] device bridge_slave_1 left promiscuous mode [ 456.980695][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.138728][ T8362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.203295][ T1499] device bridge_slave_0 left promiscuous mode [ 459.218505][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.300518][ T1499] device veth1_macvtap left promiscuous mode [ 459.319934][ T1499] device veth0_macvtap left promiscuous mode [ 459.361415][ T1499] device veth1_vlan left promiscuous mode [ 459.381678][ T1499] device veth0_vlan left promiscuous mode [ 460.547082][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 460.672476][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 461.571991][ T8119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.583523][ T8119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 461.593432][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.604249][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.622722][ T8373] tipc: Enabled bearer , priority 0 [ 461.736909][ T8373] tipc: Disabling bearer [ 461.795060][ T4301] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 462.114911][ T4301] usb 2-1: Using ep0 maxpacket: 8 [ 462.245466][ T4301] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 462.316490][ T4301] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 462.373481][ T8399] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1163'. [ 462.453892][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.734713][ T4301] usb 2-1: config 0 descriptor?? [ 462.899175][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 462.909803][ T4301] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 463.501304][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.565399][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.611707][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.004640][ T8429] syz.4.1169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 464.099788][ T8437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.069530][ T5425] usb 2-1: USB disconnect, device number 15 [ 466.076088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 466.141684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.237030][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.274867][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.312576][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.338795][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.413718][ T8119] device veth0_vlan entered promiscuous mode [ 466.477386][ T8119] device veth1_vlan entered promiscuous mode [ 466.627472][ T8119] device veth0_macvtap entered promiscuous mode [ 466.665660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 466.694157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 466.726538][ T8476] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1178'. [ 466.849402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.020309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.639953][ T8119] device veth1_macvtap entered promiscuous mode [ 468.669743][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 468.749195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 468.773554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 468.814052][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.851617][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.877654][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.914824][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.951429][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.972510][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.100741][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.135617][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.175572][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.190788][ T8493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.415376][ T5425] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 469.664978][ T5425] usb 3-1: Using ep0 maxpacket: 8 [ 470.106828][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.152170][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.177447][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.202890][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.213466][ T5425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.233846][ T5425] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 470.254111][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.274947][ T5425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.297339][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.330391][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.341431][ T5425] usb 3-1: config 0 descriptor?? [ 470.354945][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.390812][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.469820][ T5425] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 471.066357][ T8503] device syzkaller0 entered promiscuous mode [ 471.205454][ T8119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.214384][ T8119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.244941][ T8119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.263424][ T8119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.961649][ T4251] usb 3-1: USB disconnect, device number 22 [ 475.237044][ T8520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1191'. [ 475.254869][ T8520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1191'. [ 475.619611][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.701853][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.861043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 476.027644][ T4798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.162719][ T4798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.479241][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.770826][ T4187] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 478.976700][ T8572] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1205'. [ 479.104873][ T4187] usb 3-1: Using ep0 maxpacket: 8 [ 479.108926][ T8572] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1205'. [ 482.864855][ T4187] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 482.872623][ T4187] usb 3-1: can't read configurations, error -71 [ 483.107588][ T8606] tipc: Enabled bearer , priority 0 [ 483.243945][ T8605] tipc: Disabling bearer [ 487.794079][ T8644] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1221'. [ 487.870412][ T8644] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1221'. [ 488.035036][ T4251] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 489.625100][ T4251] usb 6-1: Using ep0 maxpacket: 8 [ 491.284972][ T4251] usb 6-1: device descriptor read/all, error -71 [ 491.968510][ T8674] tipc: Started in network mode [ 492.105519][ T8674] tipc: Node identity a204067f93ee, cluster identity 4711 [ 492.521177][ T8674] tipc: Enabled bearer , priority 0 [ 492.730209][ T8674] tipc: Resetting bearer [ 492.781349][ T8672] tipc: Disabling bearer [ 492.813054][ T8692] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1235'. [ 492.865242][ T8692] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1235'. [ 494.054032][ T8707] device syzkaller0 entered promiscuous mode [ 497.253568][ T8747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1248'. [ 497.403957][ T8747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1248'. [ 501.295243][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.301772][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.470862][ T8771] 9pnet: Insufficient options for proto=fd [ 501.480112][ T8771] fuse: Bad value for 'fd' [ 504.015504][ T8796] device syzkaller0 entered promiscuous mode [ 505.922680][ T8822] 9pnet: Insufficient options for proto=fd [ 505.931867][ T8822] fuse: Bad value for 'fd' [ 511.411625][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1276'. [ 512.937917][ T8867] device syzkaller0 entered promiscuous mode [ 513.245008][ T8876] 9pnet: Insufficient options for proto=fd [ 513.253961][ T8876] fuse: Bad value for 'fd' [ 520.031227][ T8936] binder: 8912:8936 ioctl c0306201 200000000240 returned -11 [ 521.667807][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1295'. [ 521.716450][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1295'. [ 522.473130][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1295'. [ 523.143370][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1295'. [ 523.816800][ T8978] device syzkaller0 entered promiscuous mode [ 530.174352][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1314'. [ 530.274546][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1314'. [ 530.395020][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1314'. [ 530.404074][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1314'. [ 531.959289][ T9052] 9pnet: Insufficient options for proto=fd [ 531.969320][ T9052] fuse: Bad value for 'fd' [ 532.506461][ T9060] device syzkaller0 entered promiscuous mode [ 535.183215][ T9103] 9pnet: Insufficient options for proto=fd [ 535.192119][ T9103] fuse: Bad value for 'fd' [ 535.829514][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1332'. [ 535.982545][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 536.713166][ T9119] device syzkaller0 entered promiscuous mode [ 536.800475][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1332'. [ 536.826791][ T9127] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 536.830958][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 536.838561][ T9127] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 536.838584][ T9127] CPU: 0 PID: 9127 Comm: syz.5.1338 Not tainted 5.15.189-syzkaller #0 [ 536.838601][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.838611][ T9127] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 536.838635][ T9127] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6d 7d 4a fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c 7d 4a fa 4d 8b 24 24 48 83 c3 [ 536.838651][ T9127] RSP: 0018:ffffc90003e6fa78 EFLAGS: 00010206 [ 536.906957][ T9127] RAX: 0000000000000005 RBX: ffff88805c8db680 RCX: 0000000000080000 [ 536.915391][ T9127] RDX: ffffc90016d84000 RSI: 0000000000000422 RDI: 0000000000000423 [ 536.923907][ T9127] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005407c26 [ 536.931926][ T9127] R10: ffffed1005407c26 R11: 1ffff11005407c25 R12: 0000000000000028 [ 536.940100][ T9127] R13: dffffc0000000000 R14: ffff88802a03e000 R15: dffffc0000000000 [ 536.948472][ T9127] FS: 00007f9bdf7276c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 536.957610][ T9127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.964487][ T9127] CR2: 00007f9be13a03c0 CR3: 000000007dce9000 CR4: 00000000003506f0 [ 536.972656][ T9127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.980733][ T9127] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 536.988808][ T9127] Call Trace: [ 536.992203][ T9127] [ 536.995156][ T9127] pcl818_detach+0x62/0xd0 [ 536.999695][ T9127] comedi_device_detach+0x12d/0x6e0 [ 537.005185][ T9127] comedi_unlocked_ioctl+0xbd0/0xe90 [ 537.010774][ T9127] ? comedi_poll+0x8b0/0x8b0 [ 537.015677][ T9127] ? bpf_lsm_file_ioctl+0x5/0x10 [ 537.020776][ T9127] ? security_file_ioctl+0x7c/0xa0 [ 537.026341][ T9127] ? comedi_poll+0x8b0/0x8b0 [ 537.031042][ T9127] __se_sys_ioctl+0xfa/0x170 [ 537.035749][ T9127] do_syscall_64+0x4c/0xa0 [ 537.040190][ T9127] ? clear_bhb_loop+0x30/0x80 [ 537.044885][ T9127] ? clear_bhb_loop+0x30/0x80 [ 537.049578][ T9127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 537.055577][ T9127] RIP: 0033:0x7f9be14bfbe9 [ 537.060181][ T9127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.080415][ T9127] RSP: 002b:00007f9bdf727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.088956][ T9127] RAX: ffffffffffffffda RBX: 00007f9be16e6fa0 RCX: 00007f9be14bfbe9 [ 537.097135][ T9127] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 537.105119][ T9127] RBP: 00007f9be1542e19 R08: 0000000000000000 R09: 0000000000000000 [ 537.113371][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.121494][ T9127] R13: 00007f9be16e7038 R14: 00007f9be16e6fa0 R15: 00007ffeb6b87808 [ 537.129498][ T9127] [ 537.132533][ T9127] Modules linked in: [ 537.799071][ T9127] ---[ end trace d7058c5289cd0bb9 ]--- [ 537.804600][ T9127] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 537.810555][ T9127] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6d 7d 4a fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c 7d 4a fa 4d 8b 24 24 48 83 c3 [ 537.831213][ T9127] RSP: 0018:ffffc90003e6fa78 EFLAGS: 00010206 [ 537.837493][ T9127] RAX: 0000000000000005 RBX: ffff88805c8db680 RCX: 0000000000080000 [ 537.845646][ T9127] RDX: ffffc90016d84000 RSI: 0000000000000422 RDI: 0000000000000423 [ 537.853666][ T9127] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005407c26 [ 537.862098][ T9127] R10: ffffed1005407c26 R11: 1ffff11005407c25 R12: 0000000000000028 [ 537.875781][ T9127] R13: dffffc0000000000 R14: ffff88802a03e000 R15: dffffc0000000000 [ 537.895096][ T9127] FS: 00007f9bdf7276c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 537.904456][ T9127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.911163][ T9127] CR2: 00007f1549258e9c CR3: 000000007dce9000 CR4: 00000000003506e0 [ 537.937831][ T9127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.946120][ T9127] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 537.986844][ T9127] Kernel panic - not syncing: Fatal exception [ 537.993313][ T9127] Kernel Offset: disabled [ 537.997730][ T9127] Rebooting in 86400 seconds..