last executing test programs: 8m48.839955108s ago: executing program 2 (id=1048): mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x4004, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="13000000428d0459704c82e700010f00000000fd"], 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) syz_pidfd_open(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000009, 0x8e}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 8m46.881513565s ago: executing program 2 (id=1052): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb}) add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b000602000000", 0x11, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) 8m46.636737248s ago: executing program 2 (id=1053): socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0xc000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m46.36936978s ago: executing program 2 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32, @ANYBLOB="080004007f00"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="480deed3000000000000000000000000369b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 8m42.700713668s ago: executing program 2 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000000c00000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m42.330607568s ago: executing program 2 (id=1067): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) poll(&(0x7f00000000c0)=[{r0, 0x4022}], 0x1, 0xe13) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 8m27.123882826s ago: executing program 32 (id=1067): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) poll(&(0x7f00000000c0)=[{r0, 0x4022}], 0x1, 0xe13) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 3m48.519240871s ago: executing program 1 (id=1618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m46.369597644s ago: executing program 1 (id=1621): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) 3m43.430994359s ago: executing program 1 (id=1625): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3m42.949235187s ago: executing program 1 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3m41.70448848s ago: executing program 1 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m40.721327606s ago: executing program 1 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 3m25.550662458s ago: executing program 33 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m44.950707568s ago: executing program 3 (id=1716): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}], 0x1, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c1eb37479342c7600725007f31d2853cd6435366b2bd8a4"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2m43.051467294s ago: executing program 3 (id=1718): r0 = socket$nl_generic(0x11, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002062) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 2m42.568832608s ago: executing program 3 (id=1720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000000c00000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.215767526s ago: executing program 3 (id=1722): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000340)='team67\xab\x16\xfb\a\x00\x1f1S\x86sha\xe6e_0\x92l|(\xe9r,\v\x87&\\DZh\x00\x00\x00\x00\xe8H)\xe3\xe7h?\xd8C\x1b\x95\xb4i\xa26\x13/\xbc1\n`\b0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x200480d4) 2m39.942394038s ago: executing program 3 (id=1726): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendto$packet(r4, &(0x7f00000004c0)='7\n\x00\x00', 0x4, 0x20000050, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x10, 0x6, @broadcast}, 0x14) 2m38.466640171s ago: executing program 3 (id=1728): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00') syz_emit_ethernet(0x42, &(0x7f0000000140)={@random="99177fa54f29", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x7, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x0, @void}}}}}}}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}], 0x2) preadv(r0, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) unlinkat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) socket(0x2a, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000004c0)={0x6, 0xe6, 0x81, 0x0, 0x1, "ca41ce7564cad8a4"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x2}, 0x90) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 2m22.294698725s ago: executing program 34 (id=1728): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00') syz_emit_ethernet(0x42, &(0x7f0000000140)={@random="99177fa54f29", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x7, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x0, @void}}}}}}}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}], 0x2) preadv(r0, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) unlinkat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) socket(0x2a, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000004c0)={0x6, 0xe6, 0x81, 0x0, 0x1, "ca41ce7564cad8a4"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x2}, 0x90) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 29.567575041s ago: executing program 5 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 28.014381609s ago: executing program 5 (id=1924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x480000, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x7fffffff, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000500)="a32dade3cd860e07dfa8149b964cba080b5dceceb1d44fa6fb711f46d5ebb2d0525bdbb3ddeb1ec5c97ee03a644553527cbfeb7f8bb9fa196ce4", 0x3a}], 0x2}}], 0x1, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @ioapic={0xd000, 0xfffffbff, 0x2, 0x9, 0x0, [{0x3, 0x6}, {0x6, 0xf8, 0xb, '\x00', 0xda}, {0xff, 0x9, 0x3, '\x00', 0xe2}, {0x5, 0xe, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4, '\x00', 0x40}, {0x9, 0x5, 0xd, '\x00', 0xea}, {0x9, 0x68, 0x4, '\x00', 0xe}, {0x26, 0x8, 0xa0, '\x00', 0x56}, {0x3, 0x7, 0x4, '\x00', 0x4}, {0x13, 0x10, 0x9d, '\x00', 0x1}, {0x0, 0xc2, 0x38, '\x00', 0x6}, {0x5, 0x1, 0x5, '\x00', 0x4}, {0x7, 0x2, 0x1}, {0xe, 0x0, 0x8, '\x00', 0x8}, {0xa, 0xb, 0x9, '\x00', 0x7}, {0x7f, 0x2, 0x80, '\x00', 0x65}, {0x9c, 0x3, 0x8, '\x00', 0xe}, {0x6, 0x1, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x1, '\x00', 0xb}, {0x4, 0x81, 0x9}, {0x2f, 0xf, 0x1c, '\x00', 0x2}, {0x6, 0x1, 0xf, '\x00', 0xfc}, {0xff, 0x1, 0x4, '\x00', 0x7}, {0x81, 0x3, 0x1, '\x00', 0x9}]}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x39, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) recvmsg(r3, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x40010022) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r5, 0xb11, 0x0, 0x25dfdbfe, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000805) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 24.9904575s ago: executing program 5 (id=1929): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) 24.631747496s ago: executing program 5 (id=1930): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x22020400) recvmsg(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/67, 0x43}, {0x0}, {&(0x7f0000001800)=""/14, 0xe}, {&(0x7f0000001840)=""/40, 0x28}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001ac0)=""/102, 0x66}, 0x22) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000000c0)=@multiplanar_userptr={0x9000000, 0x8, 0x4, 0x400, 0x8, {}, {0x1, 0x9, 0xb, 0x4, 0x81, 0x9, "9cbc85f8"}, 0xe2e, 0x2, {0x0}, 0x3}) r5 = socket(0x1, 0x803, 0xa) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$rxrpc(0x21, 0x2, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x403, 0x300}, 0x20}}, 0x8000) 23.720784313s ago: executing program 5 (id=1931): syz_usb_connect$midi(0x6, 0x2b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150020000003230144b474000010203"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x8c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.551228379s ago: executing program 5 (id=1933): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00') syz_emit_ethernet(0x42, &(0x7f0000000140)={@random="99177fa54f29", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x7, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x0, @void}}}}}}}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}], 0x2) preadv(r0, &(0x7f0000000000), 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) unlinkat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) socket(0x2a, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000004c0)={0x6, 0xe6, 0x81, 0x0, 0x1, "ca41ce7564cad8a4"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 21.184202696s ago: executing program 6 (id=1935): socket$inet_tcp(0x2, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000440)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 19.186135098s ago: executing program 6 (id=1937): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, 0x0, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0xffe0, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x5, 0x5, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10000, 0x2, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x6, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0x3, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x21, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x7, 0x5, 0x4aa0, 0x4003217, 0x1, 0x0, 0x4, 0x4, 0x8, 0x6, 0x6, 0x5, 0xb005, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x2, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x9, 0x1ff, 0x2d0, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x100, 0x3, 0x1, 0x5, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x80000001) accept4(r6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) 14.67894364s ago: executing program 6 (id=1941): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a38460009"], 0x0) 12.193609953s ago: executing program 6 (id=1944): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x480000, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x7fffffff, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000500)="a32dade3cd860e07dfa8149b964cba080b5dceceb1d44fa6fb711f46d5ebb2d0525bdbb3ddeb1ec5c97ee03a644553527cbfeb7f8bb9fa196ce4", 0x3a}], 0x2}}], 0x1, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @ioapic={0xd000, 0xfffffbff, 0x2, 0x9, 0x0, [{0x3, 0x6}, {0x6, 0xf8, 0xb, '\x00', 0xda}, {0xff, 0x9, 0x3, '\x00', 0xe2}, {0x5, 0xe, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4, '\x00', 0x40}, {0x9, 0x5, 0xd, '\x00', 0xea}, {0x9, 0x68, 0x4, '\x00', 0xe}, {0x26, 0x8, 0xa0, '\x00', 0x56}, {0x3, 0x7, 0x4, '\x00', 0x4}, {0x13, 0x10, 0x9d, '\x00', 0x1}, {0x0, 0xc2, 0x38, '\x00', 0x6}, {0x5, 0x1, 0x5, '\x00', 0x4}, {0x7, 0x2, 0x1}, {0xe, 0x0, 0x8, '\x00', 0x8}, {0xa, 0xb, 0x9, '\x00', 0x7}, {0x7f, 0x2, 0x80, '\x00', 0x65}, {0x9c, 0x3, 0x8, '\x00', 0xe}, {0x6, 0x1, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x1, '\x00', 0xb}, {0x4, 0x81, 0x9}, {0x2f, 0xf, 0x1c, '\x00', 0x2}, {0x6, 0x1, 0xf, '\x00', 0xfc}, {0xff, 0x1, 0x4, '\x00', 0x7}, {0x81, 0x3, 0x1, '\x00', 0x9}]}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x20, 0x15, 0x4, "6936c47b"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x39, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) recvmsg(r3, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x40010022) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_usb_control_io$hid(r2, 0x0, 0x0) 8.801332669s ago: executing program 4 (id=1948): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000001fc0)=""/4105, 0x1009}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000080)=""/7, 0x7}], 0x8}}], 0x1, 0x0, 0x0) 7.913260942s ago: executing program 0 (id=1949): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 7.766004575s ago: executing program 4 (id=1950): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 6.616753026s ago: executing program 4 (id=1951): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10002, 0x1000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6.555938819s ago: executing program 6 (id=1952): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, 0x0, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0xffe0, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x1, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x2, 0x5, 0x5, 0x5, 0x2, 0x2, 0x1, 0x0, 0xffffffff, 0x469, 0x8, 0x5, 0x5, 0x40, 0x8, 0x6, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x5, 0x2, 0x7, 0x7, 0x4, 0x2, 0x7, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x3e0, 0x505, 0x3, 0x1cb, 0x10000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10000, 0x2, 0x6, 0x1, 0x8, 0xefb, 0xffffffc0, 0x4, 0x6, 0x4, 0x6, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x4, 0x3, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0x8001, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x21, 0x1b2, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x7, 0x5, 0x4aa0, 0x4003217, 0x1, 0x0, 0x4, 0x4, 0x8, 0x6, 0x6, 0x5, 0xb005, 0x10000, 0x8, 0x6, 0x7, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x4, 0x9, 0x3ff, 0x7b82eae2, 0x200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x2, 0x4, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff9, 0x4, 0x0, 0x0, 0x80000001, 0x3, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x3, 0xfffffffd, 0x9, 0xfff, 0x6, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x1, 0x51c7, 0x40, 0x0, 0x0, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0xa4a, 0xaa, 0x9, 0x1ff, 0x2d0, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x100, 0x3, 0x1, 0x5, 0x8, 0x2a47, 0x5, 0xffffffff, 0xd4a, 0x7, 0x7, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x80000001) accept4(r6, 0x0, 0x0, 0x0) io_setup(0x800, &(0x7f00000003c0)) 6.242883924s ago: executing program 35 (id=1933): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00') syz_emit_ethernet(0x42, &(0x7f0000000140)={@random="99177fa54f29", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x7, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x0, @void}}}}}}}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}], 0x2) preadv(r0, &(0x7f0000000000), 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @none, 0x1}, 0xe) unlinkat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) socket(0x2a, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000004c0)={0x6, 0xe6, 0x81, 0x0, 0x1, "ca41ce7564cad8a4"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) 6.22967467s ago: executing program 4 (id=1954): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac00018010000600fa010000060000000900000018000c8014000100930a0000f602000005000000810000000c000700e60000000900000068000c80140001"], 0xec}}, 0x4000844) 6.170296427s ago: executing program 0 (id=1955): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001880)=@newtfilter={0x1044, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xffe0, 0xfff3}, {0x10, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x1018, 0x2, [@TCA_U32_POLICE={0x1014, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1d, 0x7fff, 0x10001, 0x80000001, 0x4, 0x8, 0x3, 0x6069, 0x0, 0x6, 0x6, 0x6, 0x1ff, 0x4, 0x7fffffff, 0x5, 0x0, 0x4, 0x800, 0x401, 0x8, 0x7, 0x2, 0xd6, 0x7fffffff, 0x2, 0xbc, 0xfffffffe, 0x1df0, 0x2, 0xd9, 0xc1d7, 0xfffffff7, 0x80000001, 0x3, 0x0, 0x41c, 0x1, 0x9, 0xc, 0xfffffffc, 0x10001, 0x7, 0x1, 0x5, 0xffffffff, 0x100, 0xcd, 0x2fa7, 0x2, 0xfffffa8f, 0x2d, 0x1, 0xfffffff9, 0x5, 0xc6, 0x0, 0x1, 0x9, 0x4c4, 0x5, 0x3, 0x7fd4, 0x8, 0x7, 0x2, 0x80000000, 0x81, 0x0, 0x76, 0x0, 0x10000, 0x9, 0xa, 0x5, 0x3, 0x400, 0x9, 0x5, 0x93258362, 0x5, 0x7, 0xd89e, 0x7, 0x6, 0xffff, 0x3, 0x3, 0x4, 0x100, 0x8001, 0x8001, 0x0, 0x5, 0x10001, 0x4a, 0x6d, 0x6, 0x5, 0x8001, 0x2, 0x3, 0x8, 0x0, 0x4, 0x7, 0x4, 0x3943, 0xda, 0x7fffffff, 0x8, 0x6, 0x9, 0x5, 0xfffffff7, 0x4, 0x6ee37613, 0x1, 0x8000, 0x0, 0xffff, 0x5, 0x4, 0x7996, 0x500, 0x3ff, 0x8, 0x2, 0x68, 0xffffffff, 0x7, 0x8001, 0x0, 0xa, 0x3, 0x9fa, 0x0, 0x9, 0x5, 0xac, 0xbd, 0xd, 0x4, 0x4, 0xffffff4b, 0x8001, 0x755e, 0x8, 0x9, 0x6, 0xc07d, 0x7, 0x38, 0x9, 0x8, 0x8, 0x101, 0xffff0000, 0x1, 0xe, 0x5, 0x5, 0x101, 0xd8, 0x40, 0x9c, 0x1, 0x22e, 0xff, 0x81, 0x4, 0xff, 0x8, 0x6, 0x6, 0x7, 0x6, 0x10001, 0x10, 0x5, 0x10000, 0x6, 0x7, 0x3, 0x7ff, 0xa, 0x40, 0x4, 0x0, 0x1000, 0x5, 0x6, 0xd4c4, 0x1bcc, 0x6, 0x8, 0x2, 0x0, 0xfffffff7, 0x0, 0x10, 0x1, 0x7, 0x20c4, 0x1000, 0x8, 0x9, 0x4, 0x2, 0x7, 0x8, 0x5, 0x9, 0x2, 0xe, 0x4, 0x10000, 0x9, 0xffffc5c5, 0x2, 0x0, 0x5, 0x9, 0x10001, 0x0, 0x6, 0x0, 0x10001, 0x20, 0xf, 0x10001, 0x7, 0x167, 0x7, 0xe86a, 0x1e, 0x9, 0x10001, 0x8001, 0x3, 0x2, 0x32, 0x800, 0x8, 0x4, 0x3, 0xfffffff9, 0x6a, 0xd, 0x3, 0x0, 0x0, 0x1, 0x1, 0x9, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x0, 0x5, 0xc0000000, 0x8, 0x1, 0x9, 0x7, 0x1, 0x1000, 0xf, 0x1da, 0x7f, 0x7ac, 0x4, 0x6, 0x6c84, 0x9, 0x2, 0x8, 0x1, 0xfff, 0x9cd, 0x9fff, 0xd9c, 0xe9, 0x7, 0x7, 0x4, 0x95, 0x6, 0x4, 0xa26, 0x3, 0x1, 0x3, 0x0, 0x1, 0xfff, 0x4, 0x4, 0xd, 0xfffffff6, 0xffff7fff, 0x0, 0x1, 0x4, 0xffffff82, 0x5d, 0x3, 0xfffffffc, 0x200, 0x3, 0x2, 0x7fff8000, 0x6, 0xe, 0x3f5a7cf7, 0x5, 0x2, 0xf4, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x400, 0x2, 0xc8a9, 0x200, 0xffffffff, 0xa, 0x1, 0xf11, 0x6, 0x7, 0x2, 0x8c7, 0x1, 0x9, 0x8, 0x800, 0x4, 0x3, 0x200, 0x400, 0x8, 0x4, 0x4, 0x40, 0xe0, 0x6, 0x9, 0x7, 0x7, 0x9, 0x40567059, 0x5, 0x8, 0x1, 0x7a, 0x4, 0x8b4, 0x5, 0xef, 0x400, 0x9, 0x8, 0x9, 0x6, 0x2, 0xff, 0xfff, 0x2, 0x4a000, 0x4, 0x7, 0x5, 0xa, 0xe, 0x3, 0x20000, 0x7, 0x2, 0x7, 0xd53, 0x100, 0x8, 0x7, 0x5, 0x9, 0x4, 0x0, 0xffffffff, 0x80000000, 0x1, 0x100, 0x0, 0xf1, 0x1, 0x4, 0x2, 0x2, 0x6, 0x8, 0x800, 0x15b, 0x6, 0x9, 0x5, 0x5, 0xbaac, 0x0, 0x2, 0x3, 0xaf, 0x3, 0x0, 0x5a7a, 0x4, 0x7, 0xe584, 0x6, 0xd0f, 0x1, 0x10000, 0x2, 0x0, 0x3ff, 0x9, 0x0, 0xfffffff3, 0x7, 0xffffffff, 0x1, 0xc, 0x200, 0x62, 0x6bb5, 0xff, 0x5, 0xbb05, 0x4, 0x3, 0x10001, 0xb0, 0x0, 0x200000, 0x10000, 0x7, 0x9, 0x34, 0x7f, 0x8, 0x1ff, 0x7, 0xe, 0x6, 0x9, 0x0, 0x7, 0x9, 0x5, 0x7f, 0x1, 0x7f, 0x7f, 0xffffffff, 0xe, 0x41, 0x8000, 0xd, 0x2, 0x1, 0x574, 0x0, 0x8, 0x0, 0x5, 0x5, 0x1, 0x6, 0x9, 0x1, 0x0, 0x2, 0x9, 0x7ff, 0xff, 0x3ff, 0xfffffffd, 0xabc, 0x3, 0x5, 0x0, 0x4800000, 0x0, 0x9, 0x8, 0x1, 0x5, 0xe, 0x4, 0x6, 0x6, 0x1, 0x0, 0xc51d, 0x4, 0xfb4, 0x7fff, 0x7f, 0x1, 0x0, 0xff, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7c5b, 0x7f, 0x101, 0x9, 0xfffffffc, 0x80000000, 0xb, 0xffffffff, 0x7, 0x800, 0x8, 0x2, 0xfe48, 0x0, 0x81, 0x4, 0x0, 0x100, 0x2, 0x400, 0x7fff, 0x4, 0xfffffffa, 0xffffff47, 0x9, 0x0, 0x8, 0x400, 0x6, 0xd9, 0x8000, 0x10, 0x3, 0x9, 0x7, 0x7, 0x10001, 0x7fffffff, 0x1, 0x9, 0xfff, 0x8, 0xa71, 0x80000001, 0x8001, 0x7, 0x1, 0xb2, 0x2, 0x3, 0x7, 0x80, 0x7, 0x2, 0x9, 0x3, 0xb0, 0x1000, 0xfffffffe, 0x4, 0x5, 0x2, 0x7e, 0xff, 0xd6, 0x2, 0x6, 0x9, 0xae, 0x19, 0x8, 0x4, 0x4, 0xffffffff, 0x9ddb, 0x6, 0xe380, 0x4c, 0x400, 0xfffffff9, 0x0, 0x6, 0xff, 0x2, 0x7ff, 0x3, 0xb, 0x200, 0x2, 0x1, 0x3, 0x8, 0x200, 0xd, 0x4, 0x4, 0x3, 0x8, 0xe99, 0x10, 0xdd, 0x3, 0x5, 0x7fff, 0xb, 0x9, 0x6, 0xfffffffe, 0x4, 0x4, 0xf, 0x0, 0x566, 0x401, 0xa9ae, 0x4, 0xfffffffc, 0x8, 0x8, 0x8001, 0xb9, 0xffffffff, 0x7, 0x8, 0x2, 0x9, 0x101, 0x40, 0x400000, 0x6, 0x6, 0x5, 0x30000000, 0x8, 0x6, 0x6, 0x5, 0x3, 0x6, 0x3, 0x5, 0x8e8, 0x8, 0xc6, 0xb, 0x6, 0x1, 0x6, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1, 0x800, 0x9, 0x80, 0xb, 0x1, 0x48, 0x5, 0xf0, 0x2, 0x4, 0x7ff, 0x3, 0x3ff, 0xe4a, 0x7ff, 0x5, 0x4, 0x0, 0x6, 0x6, 0x6, 0xf, 0x3, 0xf848, 0x5, 0x0, 0x9, 0x0, 0x79d9, 0x5, 0x6, 0x0, 0x4, 0x3, 0x1, 0xa0, 0xa, 0xaded, 0x9, 0x400004, 0x1, 0x5, 0x40, 0x5, 0x2, 0xf, 0x6, 0x2c, 0x45a, 0x0, 0x1, 0x4, 0x1438, 0x7f, 0x3, 0xce24, 0x6, 0x5, 0x80, 0x767, 0x7, 0x5, 0xd, 0x20080, 0x2, 0x4a7d, 0x5, 0x2, 0x87, 0x7f, 0x6, 0x174a, 0xa7, 0xac, 0x6, 0xb, 0x1, 0x6, 0x81, 0x2, 0x200, 0x3, 0x10, 0x0, 0x1, 0x0, 0x0, 0xe4, 0xff, 0x5, 0x8, 0x5, 0xc0f0, 0x9, 0x3, 0xe, 0x2, 0x8, 0x9, 0x1, 0x76]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1d55, 0x9, 0xa2f, 0x8, 0x101, 0x0, 0x1ff, 0x7, 0x8, 0x0, 0x0, 0x8, 0x7b67, 0x5, 0x2, 0x7f, 0x0, 0x7, 0x3, 0x7, 0x8, 0xa, 0x5, 0x4, 0x80000000, 0x209, 0x2000, 0x8, 0x100, 0x8, 0x7, 0xe504, 0x8, 0x4, 0x5, 0x998a, 0x4a3, 0x9, 0x100, 0x7fff, 0x3, 0xc4, 0x7, 0x0, 0x1, 0x0, 0x1000, 0xffffffff, 0x4071, 0x800, 0x2, 0xfffffffb, 0x7, 0x200, 0xb5, 0xd, 0x9, 0xff, 0x0, 0xfffffff8, 0x1, 0x2, 0x808, 0x5a5b, 0xc, 0x1, 0x8bf9, 0x9, 0x7ff, 0x7fffffff, 0x2, 0x7, 0x8, 0xa, 0x6, 0x8472, 0xa, 0x4, 0x7, 0x7, 0x8, 0x71e, 0x200, 0x0, 0x3ba, 0x280000, 0x7, 0x40, 0x9, 0x7fffffff, 0x8550, 0x3, 0x2, 0x0, 0x8, 0xe78, 0x0, 0x1, 0x2, 0x2, 0xd5, 0xe, 0xca, 0x1, 0x0, 0x6, 0x401, 0x0, 0x5, 0x8001, 0x2, 0x10000, 0x1, 0x3ff, 0x3, 0x6, 0xce93, 0xcb, 0x82f, 0x72000000, 0x9, 0x3b64, 0x80000001, 0x7, 0x287, 0xfffffffb, 0x4, 0x80000000, 0x7fff, 0x855a, 0x1, 0x5, 0x1, 0x6, 0xe, 0xe, 0x3, 0x1000, 0x6, 0x4722, 0x8001, 0x5704, 0x7ff, 0x3, 0xffff, 0x2, 0xfffffff9, 0x0, 0x5, 0x4, 0x2, 0x8, 0x0, 0xd, 0x6d, 0x6, 0x964, 0x9, 0x9, 0x0, 0xfffffffd, 0xffffff80, 0xb833, 0x4, 0x1, 0x7, 0x8, 0x7, 0x6, 0x1, 0x889, 0x8, 0x2, 0xfffffffa, 0x5, 0x7, 0xc, 0x8, 0x8, 0x5, 0xffff0000, 0x1, 0x401, 0x40, 0x2, 0xc540000, 0x400, 0x8, 0x26573425, 0x42, 0x2, 0xa4, 0xc3, 0xae9f, 0x8, 0xcb99, 0x7bf, 0x2, 0x40, 0xef, 0x7f, 0x56000000, 0x2, 0x80000001, 0x9d, 0xfffffffe, 0x6, 0x1ffdf442, 0xfffffffe, 0x9, 0x0, 0x3, 0x9, 0x2, 0xfffffffa, 0x0, 0x5, 0x81, 0x101, 0x7, 0x562, 0x8, 0x4, 0x8, 0x40, 0x0, 0xba8d, 0x1000, 0x2, 0x3, 0x25, 0x6, 0x8, 0x8, 0x5, 0xffff7fff, 0xfffffff8, 0x8, 0x81c, 0x6, 0x100, 0x1ff, 0x400, 0x8, 0x3, 0xfcfa, 0x7ff, 0xfffff000, 0x4, 0x10001, 0x4, 0x480000, 0x9, 0xf, 0x7f, 0x7]}]}]}}]}, 0x1044}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x1c, 0x0, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}]}) io_setup(0x7, &(0x7f00000008c0)=0x0) r3 = openat$zero(0xffffff9c, &(0x7f0000000900), 0x800, 0x0) io_submit(r2, 0x1, &(0x7f0000001100)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0xfff, r3, &(0x7f0000000940)="42bb9a93c63f", 0x6, 0x4}]) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 4.416106934s ago: executing program 0 (id=1956): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x54000) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10f2c0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000940)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44095}, 0x44030) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r8, 0x0, 0xc) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x314}], 0x1}, 0x800) 3.694845577s ago: executing program 4 (id=1957): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) recvfrom$inet(r1, &(0x7f0000001640)=""/4096, 0x1000, 0x0, 0x0, 0x0) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 3.25885241s ago: executing program 0 (id=1958): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}], 0x1, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2.1326485s ago: executing program 4 (id=1959): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000092403000303", @ANYRES8=0x0], 0x0) r7 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000}) r8 = socket(0x1e, 0x5, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000002c0)=0x10001) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{0x0}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10022, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 1.942424649s ago: executing program 6 (id=1960): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000092403000303", @ANYRES8=0x0], 0x0) r7 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000}) r8 = socket(0x1e, 0x5, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000002c0)=0x10001) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{0x0}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10022, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 326.692126ms ago: executing program 0 (id=1961): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x7f) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0xffff) sendfile(r1, r0, 0x0, 0xf03a0005) 0s ago: executing program 0 (id=1962): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10002, 0x1000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) kernel console output (not intermixed with test programs): ected cc 0x1001 length: 249 > 9 [ 444.805544][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 444.816145][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.171385][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.432639][ T9282] netlink: 'syz.0.1197': attribute type 10 has an invalid length. [ 447.027282][ T5610] Bluetooth: hci1: command tx timeout [ 447.199582][ T200] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 448.079037][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.080358][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.410361][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 449.088879][ T5610] Bluetooth: hci1: command tx timeout [ 449.529624][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 449.561826][ T9303] 9pnet_virtio: no channels available for device syz [ 451.168849][ T5610] Bluetooth: hci1: command tx timeout [ 453.178903][ T200] usb 2-1: unable to get BOS descriptor or descriptor too short [ 453.182224][ T200] usb 2-1: no configurations [ 453.182244][ T200] usb 2-1: can't read configurations, error -22 [ 453.248687][ T5610] Bluetooth: hci1: command tx timeout [ 453.338764][ T200] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 454.479283][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'. [ 454.479322][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'. [ 457.238850][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 457.389296][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 457.395586][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.395620][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.395644][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.395689][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.395713][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.499638][ T9] usb 4-1: config 0 descriptor?? [ 457.764122][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 458.025142][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 458.025190][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 458.025224][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 458.025257][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 458.025289][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 458.025334][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 458.127965][ T9] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 458.128003][ T9] microsoft 0003:045E:07DA.0002: no inputs found [ 458.128018][ T9] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 458.213015][ T9] usb 4-1: USB disconnect, device number 17 [ 458.362968][ T9387] fido_id[9387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 459.454601][ T5707] IPVS: starting estimator thread 0... [ 459.549348][ T9400] IPVS: using max 7 ests per chain, 16800 per kthread [ 461.839407][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 463.618761][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 463.781211][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.781240][ T31] usb 1-1: config 0 has no interfaces? [ 463.781271][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.781296][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.930465][ T31] usb 1-1: config 0 descriptor?? [ 464.448526][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.635697][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.884204][ T31] usb 1-1: USB disconnect, device number 16 [ 464.885631][ T9250] bridge_slave_0: entered allmulticast mode [ 464.931243][ T9250] bridge_slave_0: entered promiscuous mode [ 465.016142][ T5710] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 465.016190][ T5710] hid-generic 0000:0000:0000.0003: unexpected long global item [ 465.074421][ T5710] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 465.096711][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.096860][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.097106][ T9250] bridge_slave_1: entered allmulticast mode [ 465.142211][ T9250] bridge_slave_1: entered promiscuous mode [ 467.031403][ T200] IPVS: starting estimator thread 0... [ 467.129349][ T9479] IPVS: using max 8 ests per chain, 19200 per kthread [ 467.839931][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.000674][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.208545][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 473.352892][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'. [ 473.352972][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 476.380559][ T9250] team0: Port device team_slave_0 added [ 476.552796][ T9250] team0: Port device team_slave_1 added [ 476.914857][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1257'. [ 476.966284][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.966304][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.966337][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.049513][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.049528][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.049549][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.469969][ T49] bridge_slave_1: left allmulticast mode [ 479.470009][ T49] bridge_slave_1: left promiscuous mode [ 479.470329][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.811241][ T49] bridge_slave_0: left allmulticast mode [ 479.811283][ T49] bridge_slave_0: left promiscuous mode [ 479.811572][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.917898][ T9595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1271'. [ 483.260844][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.302131][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.321603][ T49] bond0 (unregistering): Released all slaves [ 483.423972][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 483.465933][ T9250] hsr_slave_0: entered promiscuous mode [ 483.475711][ T9250] hsr_slave_1: entered promiscuous mode [ 483.487206][ T9250] debugfs: 'hsr0' already exists in 'hsr' [ 483.487235][ T9250] Cannot create hsr debugfs directory [ 487.050128][ T49] hsr_slave_0: left promiscuous mode [ 487.089001][ T49] hsr_slave_1: left promiscuous mode [ 487.090057][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.217322][ T9629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.241346][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.268241][ T9636] netlink: 'syz.4.1282': attribute type 2 has an invalid length. [ 487.268260][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 489.908636][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 489.908953][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 492.808792][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 492.910449][ T49] team0 (unregistering): Port device team_slave_1 removed [ 492.962227][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 492.963643][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.963672][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 492.966373][ T9] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 492.966395][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.966411][ T9] usb 5-1: Product: syz [ 492.966423][ T9] usb 5-1: Manufacturer: syz [ 492.966435][ T9] usb 5-1: SerialNumber: syz [ 493.029022][ T49] team0 (unregistering): Port device team_slave_0 removed [ 493.267151][ T5710] usb 5-1: USB disconnect, device number 19 [ 494.717113][ T9684] netlink: 'syz.4.1293': attribute type 2 has an invalid length. [ 494.717136][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 501.342383][ T9759] netlink: 'syz.1.1307': attribute type 2 has an invalid length. [ 501.342405][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 501.708293][ T9765] nfs: Deprecated parameter 'nointr' [ 503.405575][ T9786] binder: 9780:9786 ioctl c00c6211 0 returned -14 [ 505.835274][ T9809] netlink: 'syz.1.1316': attribute type 10 has an invalid length. [ 506.779885][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.141121][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.256999][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.280333][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.349279][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.350350][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.440090][ T5602] Bluetooth: hci5: command tx timeout [ 509.744471][ T9835] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 509.757550][ T9835] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 509.757572][ T9835] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1322'. [ 509.838115][ T9837] binder: 9834:9837 ioctl c00c6211 0 returned -14 [ 512.449977][ T5602] Bluetooth: hci5: command tx timeout [ 513.162304][ T9865] binder: 9864:9865 ioctl c00c6211 0 returned -14 [ 514.017267][ T9877] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 514.668758][ T5610] Bluetooth: hci5: command tx timeout [ 514.841054][ T9185] bridge_slave_1: left allmulticast mode [ 514.841093][ T9185] bridge_slave_1: left promiscuous mode [ 514.841357][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.295703][ T9185] bridge_slave_0: left allmulticast mode [ 515.295741][ T9185] bridge_slave_0: left promiscuous mode [ 515.296012][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.453558][ T9185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.532287][ T9185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.632492][ T9185] bond0 (unregistering): Released all slaves [ 516.693826][ T5610] Bluetooth: hci5: command tx timeout [ 517.741476][ T9904] binder: 9898:9904 ioctl c00c6211 0 returned -14 [ 518.673345][ T9910] netlink: 'syz.0.1337': attribute type 29 has an invalid length. [ 518.682385][ T9910] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 518.682408][ T9910] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1337'. [ 522.658825][ T9185] hsr_slave_0: left promiscuous mode [ 522.704202][ T9185] hsr_slave_1: left promiscuous mode [ 522.708421][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.755338][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.300724][ T9185] team0 (unregistering): Port device team_slave_1 removed [ 524.474015][ T9185] team0 (unregistering): Port device team_slave_0 removed [ 533.645437][T10007] binder: 10001:10007 ioctl c00c6211 0 returned -14 [ 537.464813][T10035] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 538.147847][T10035] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 538.491799][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.492053][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.492253][ T9812] bridge_slave_0: entered allmulticast mode [ 538.521291][ T9812] bridge_slave_0: entered promiscuous mode [ 538.535841][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.536073][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.536301][ T9812] bridge_slave_1: entered allmulticast mode [ 538.569930][ T9812] bridge_slave_1: entered promiscuous mode [ 538.647262][ T9812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.662510][ T9812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.716640][ T9812] team0: Port device team_slave_0 added [ 538.726264][ T9812] team0: Port device team_slave_1 added [ 538.781025][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.781053][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.781084][ T9812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.784994][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.785011][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.785043][ T9812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.932036][T10046] binder: 10044:10046 ioctl c00c6211 0 returned -14 [ 540.668756][ T5710] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 540.828978][ T5710] usb 1-1: device descriptor read/64, error -71 [ 541.011650][ T9812] hsr_slave_0: entered promiscuous mode [ 541.109214][ T5710] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 541.129425][ T9812] hsr_slave_1: entered promiscuous mode [ 541.134174][ T9812] debugfs: 'hsr0' already exists in 'hsr' [ 541.134205][ T9812] Cannot create hsr debugfs directory [ 541.255385][ T5710] usb 1-1: device descriptor read/64, error -71 [ 541.369533][ T5710] usb usb1-port1: attempt power cycle [ 542.323226][ T5710] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 542.339592][ T5710] usb 1-1: device descriptor read/8, error -71 [ 544.178713][T10081] binder: 10078:10081 ioctl c00c6211 0 returned -14 [ 551.093703][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 551.093721][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 551.274409][ T9812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 551.368857][ T5735] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 551.522911][ T5735] usb 2-1: not running at top speed; connect to a high speed hub [ 551.524880][ T5735] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.524899][ T5735] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 551.566955][ T5735] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 551.566989][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.567011][ T5735] usb 2-1: Product: syz [ 551.567028][ T5735] usb 2-1: Manufacturer: syz [ 551.567057][ T5735] usb 2-1: SerialNumber: syz [ 551.684813][ T9812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.699796][ T9812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 551.809144][ T9812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.893745][ T9812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 551.959145][ T5728] usb 2-1: USB disconnect, device number 17 [ 552.193327][ T9812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.195741][ T9812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 552.570652][ T9812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.318084][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.595656][ T9812] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.616758][T10169] program syz.0.1408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.758397][T10175] nfs: Unknown parameter 'noi' [ 557.994027][T10177] JFS: discard option not supported on device [ 557.994390][T10177] Mount JFS Failure: -22 [ 557.994403][T10177] jfs_mount failed w/return code = -22 [ 558.342223][T10185] netlink: 'syz.4.1410': attribute type 10 has an invalid length. [ 559.207527][T10192] binder: 10187:10192 ioctl c00c6211 0 returned -14 [ 559.303405][ T9184] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.330646][ T9184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.357637][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.357782][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.231253][T10196] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1415'. [ 560.778980][ T127] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 560.948194][T10212] JFS: discard option not supported on device [ 561.030609][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 561.151975][ T127] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 561.152196][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.192921][T10212] Mount JFS Failure: -22 [ 561.192941][T10212] jfs_mount failed w/return code = -22 [ 562.070316][ T127] usb 5-1: config 0 descriptor?? [ 562.574632][ T127] as10x_usb: device has been detected [ 562.578391][ T127] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 562.717469][ T127] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 562.916545][T10219] nfs: Deprecated parameter 'nointr' [ 563.147028][T10226] binder: 10222:10226 ioctl c00c6211 0 returned -14 [ 563.192900][ T127] as10x_usb: error during firmware upload part1 [ 563.193643][ T127] Registered device nBox DVB-T Dongle [ 563.230856][ T127] usb 5-1: USB disconnect, device number 20 [ 563.316364][ T127] Unregistered device nBox DVB-T Dongle [ 563.324383][ T127] as10x_usb: device has been disconnected [ 565.128848][T10240] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1430'. [ 565.129525][T10240] bridge_slave_0: left allmulticast mode [ 565.129547][T10240] bridge_slave_0: left promiscuous mode [ 565.129728][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.329831][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 565.329858][ T9] hid-generic 0000:0000:0000.0004: unexpected long global item [ 565.336630][ T9] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 565.491580][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.504714][ T1255] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 565.590321][T10244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 565.596571][T10244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 565.598365][T10244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 565.603275][T10244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.871818][ T1255] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.871848][ T1255] usb 5-1: config 0 has no interfaces? [ 565.871879][ T1255] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.871904][ T1255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.895360][ T1255] usb 5-1: config 0 descriptor?? [ 566.161327][ T1255] usb 5-1: USB disconnect, device number 21 [ 566.292095][T10259] JFS: discard option not supported on device [ 566.292366][T10259] Mount JFS Failure: -22 [ 566.292379][T10259] jfs_mount failed w/return code = -22 [ 566.458168][T10263] nfs: Deprecated parameter 'nointr' [ 566.661981][T10270] binder: 10269:10270 ioctl c00c6211 0 returned -14 [ 567.098459][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 567.098488][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 567.654504][T10244] Bluetooth: hci1: command tx timeout [ 568.286159][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.688803][ T5728] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 568.715445][T10285] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1442'. [ 568.750573][T10285] bridge_slave_0: left allmulticast mode [ 568.750607][T10285] bridge_slave_0: left promiscuous mode [ 568.753392][T10285] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.858900][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 568.862678][ T5728] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 568.862708][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.901353][ T5728] usb 2-1: config 0 descriptor?? [ 568.950448][T10288] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 568.950465][T10288] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1443'. [ 568.994161][ T5728] as10x_usb: device has been detected [ 568.995176][ T5728] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 569.091939][T10286] netlink: 'syz.3.1443': attribute type 29 has an invalid length. [ 569.260519][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.325332][ T5728] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 569.536750][ T5728] as10x_usb: error during firmware upload part1 [ 569.537165][ T5728] Registered device nBox DVB-T Dongle [ 569.566031][ T5728] usb 2-1: USB disconnect, device number 18 [ 569.728872][T10244] Bluetooth: hci1: command tx timeout [ 570.255505][T10300] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 571.163241][T10303] nfs: Deprecated parameter 'nointr' [ 571.186250][T10300] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 571.482452][ T5728] Unregistered device nBox DVB-T Dongle [ 571.498985][ T5728] as10x_usb: device has been disconnected [ 571.756322][T10314] binder: 10311:10314 ioctl c00c6211 0 returned -14 [ 571.808812][T10244] Bluetooth: hci1: command tx timeout [ 573.888767][T10244] Bluetooth: hci1: command tx timeout [ 574.206755][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 574.246838][T10338] netlink: 'syz.0.1457': attribute type 1 has an invalid length. [ 574.246872][T10338] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1457'. [ 574.388942][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 574.434055][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 574.434087][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.485661][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 574.485777][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 574.522771][ T9] usb 4-1: config 0 descriptor?? [ 575.504404][ T9] as10x_usb: device has been detected [ 575.564247][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 578.647841][T10346] netlink: 'syz.0.1457': attribute type 29 has an invalid length. [ 578.697959][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 578.786799][ T9] as10x_usb: error during firmware upload part1 [ 578.787431][ T9] Registered device nBox DVB-T Dongle [ 578.798042][ T9] usb 4-1: USB disconnect, device number 18 [ 578.815504][ T9308] udevd[9308]: setting owner of /dev/dvb/adapter1/frontend0 to uid=0, gid=28 failed: No such file or directory [ 579.012021][ T9] Unregistered device nBox DVB-T Dongle [ 579.022559][ T9] as10x_usb: device has been disconnected [ 580.970687][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.973770][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.821181][T10242] bridge_slave_0: entered allmulticast mode [ 581.828377][T10242] bridge_slave_0: entered promiscuous mode [ 581.920408][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.937092][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.937370][T10242] bridge_slave_1: entered allmulticast mode [ 581.954048][T10242] bridge_slave_1: entered promiscuous mode [ 582.753768][T10242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.770725][T10242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.959910][T10242] team0: Port device team_slave_0 added [ 582.966706][T10242] team0: Port device team_slave_1 added [ 583.115530][T10242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.115549][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.115582][T10242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.204133][T10406] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 586.055827][T10242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.055846][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.055877][T10242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.506050][T10442] random: crng reseeded on system resumption [ 587.787682][T10242] hsr_slave_0: entered promiscuous mode [ 587.794716][T10242] hsr_slave_1: entered promiscuous mode [ 587.799365][T10242] debugfs: 'hsr0' already exists in 'hsr' [ 587.799393][T10242] Cannot create hsr debugfs directory [ 588.522923][T10453] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 589.811621][T10464] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 592.377366][ T12] bridge_slave_1: left allmulticast mode [ 592.377401][ T12] bridge_slave_1: left promiscuous mode [ 592.377665][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.592696][T10495] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 594.459635][T10495] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 594.459654][T10495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1502'. [ 594.459855][ T12] bridge_slave_0: left allmulticast mode [ 594.459881][ T12] bridge_slave_0: left promiscuous mode [ 594.460068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.778722][ T5707] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 599.870248][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.929611][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.936425][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.958087][ T12] bond0 (unregistering): Released all slaves [ 599.964461][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.040524][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 600.257726][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 603.886840][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 603.886867][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 604.092346][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short [ 604.097181][ T5707] usb 1-1: no configurations [ 604.097199][ T5707] usb 1-1: can't read configurations, error -22 [ 606.973681][ T12] hsr_slave_0: left promiscuous mode [ 607.023088][ T12] hsr_slave_1: left promiscuous mode [ 607.027953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.345080][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.257567][T10579] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 608.621506][T10582] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 608.621857][T10582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1518'. [ 610.023371][ T12] team0 (unregistering): Port device team_slave_1 removed [ 610.922447][ T12] team0 (unregistering): Port device team_slave_0 removed [ 612.607882][T10582] bridge0: port 1(dummy0) entered blocking state [ 612.607979][T10582] bridge0: port 1(dummy0) entered disabled state [ 612.608108][T10582] dummy0: entered allmulticast mode [ 612.629749][T10582] dummy0: entered promiscuous mode [ 612.653123][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 613.158720][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 613.358970][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.360095][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.693612][T10624] netlink: 'syz.3.1527': attribute type 10 has an invalid length. [ 616.372181][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 616.373222][ T9] usb 5-1: no configurations [ 616.373241][ T9] usb 5-1: can't read configurations, error -22 [ 616.559584][T10651] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 616.598726][ T5707] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 616.698711][ T5710] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 616.701022][T10651] netlink: 'syz.4.1535': attribute type 10 has an invalid length. [ 616.701045][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1535'. [ 616.733213][ T5707] usb 1-1: device descriptor read/64, error -71 [ 616.936000][ T5710] usb 4-1: not running at top speed; connect to a high speed hub [ 616.938161][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.938187][ T5710] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 616.943642][ T5710] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 616.943672][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.943695][ T5710] usb 4-1: Product: syz [ 616.943715][ T5710] usb 4-1: Manufacturer: syz [ 616.943726][ T5710] usb 4-1: SerialNumber: syz [ 617.028663][ T5707] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 617.081768][T10651] bridge0: port 3(dummy0) entered blocking state [ 617.081856][T10651] bridge0: port 3(dummy0) entered disabled state [ 617.081974][T10651] dummy0: entered allmulticast mode [ 617.083816][T10651] dummy0: entered promiscuous mode [ 617.158732][ T5707] usb 1-1: device descriptor read/64, error -71 [ 617.254375][ T5721] usb 4-1: USB disconnect, device number 19 [ 617.277354][ T5707] usb usb1-port1: attempt power cycle [ 617.668738][ T5707] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 617.689527][ T5707] usb 1-1: device descriptor read/8, error -71 [ 617.694282][T10669] binder: 10665:10669 ioctl c00c6211 0 returned -14 [ 617.932170][ T5707] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 617.949616][ T5707] usb 1-1: device descriptor read/8, error -71 [ 618.059059][ T5707] usb usb1-port1: unable to enumerate USB device [ 618.101331][T10680] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1541'. [ 622.268761][ T1255] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 622.308334][T10722] binder: 10718:10722 ioctl c00c6211 0 returned -14 [ 622.929578][ T1255] usb 5-1: not running at top speed; connect to a high speed hub [ 623.155526][ T1255] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.155558][ T1255] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 623.188210][ T1255] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 623.188244][ T1255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.188283][ T1255] usb 5-1: Product: syz [ 623.188300][ T1255] usb 5-1: Manufacturer: syz [ 623.188316][ T1255] usb 5-1: SerialNumber: syz [ 623.360940][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 623.360968][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 624.193707][T10733] netlink: 'syz.1.1553': attribute type 10 has an invalid length. [ 625.230459][T10733] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 627.086161][ T1255] usb 5-1: can't set config #1, error -71 [ 627.264439][ T1255] usb 5-1: USB disconnect, device number 24 [ 627.742674][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.795591][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 627.806260][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 627.844873][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 627.846634][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 628.751773][T10755] netlink: 'syz.3.1558': attribute type 10 has an invalid length. [ 629.529796][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.763484][ T127] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 629.898727][ T127] usb 1-1: device descriptor read/64, error -71 [ 630.141822][T10244] Bluetooth: hci5: command tx timeout [ 630.330212][ T127] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 630.618001][ T127] usb 1-1: device descriptor read/64, error -71 [ 631.583128][ T127] usb usb1-port1: attempt power cycle [ 632.142940][ T127] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 632.366500][ T127] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 632.546565][T10244] Bluetooth: hci5: command tx timeout [ 633.175179][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 633.175259][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 634.102416][T10798] netlink: 'syz.3.1566': attribute type 10 has an invalid length. [ 635.799493][T10244] Bluetooth: hci5: command tx timeout [ 636.200237][ T127] usb 1-1: device descriptor read/8, error -71 [ 636.309192][ T127] usb usb1-port1: unable to enumerate USB device [ 637.368935][T10244] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 637.808669][T10244] Bluetooth: hci5: command tx timeout [ 638.482336][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 638.482480][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 638.981432][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 640.833728][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 640.833754][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 642.808920][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 642.808947][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 644.878215][T10907] netlink: 'syz.3.1586': attribute type 10 has an invalid length. [ 645.706437][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.706524][T10743] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.706682][T10743] bridge_slave_0: entered allmulticast mode [ 645.757376][T10743] bridge_slave_0: entered promiscuous mode [ 645.777237][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.777384][T10743] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.777533][T10743] bridge_slave_1: entered allmulticast mode [ 645.804494][T10743] bridge_slave_1: entered promiscuous mode [ 646.207890][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 646.207964][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 648.121381][T10743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.200157][T10743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.563649][ T9305] bridge_slave_1: left allmulticast mode [ 648.563678][ T9305] bridge_slave_1: left promiscuous mode [ 648.563923][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.649538][T10935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.722909][ T9305] bridge_slave_0: left allmulticast mode [ 648.722938][ T9305] bridge_slave_0: left promiscuous mode [ 648.725492][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.369544][ T31] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 649.369582][ T31] hid-generic 0000:0000:0000.0005: unexpected long global item [ 649.370248][ T31] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 649.538697][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 649.541353][ T9305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.669685][ T9305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.706708][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.706728][ T31] usb 5-1: config 0 has no interfaces? [ 649.706752][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.706768][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.745266][ T9305] bond0 (unregistering): Released all slaves [ 649.747863][ T31] usb 5-1: config 0 descriptor?? [ 649.894250][T10743] team0: Port device team_slave_0 added [ 649.898136][T10743] team0: Port device team_slave_1 added [ 649.999916][ T5721] usb 5-1: USB disconnect, device number 25 [ 650.155953][T10743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.155975][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.156007][T10743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.236500][T10743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.236520][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.236553][T10743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.597328][ T9305] hsr_slave_0: left promiscuous mode [ 650.885949][ T9305] hsr_slave_1: left promiscuous mode [ 650.886989][ T9305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.929680][ T9305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.032244][T10956] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 652.471518][T10966] netlink: 'syz.4.1600': attribute type 10 has an invalid length. [ 653.549480][ T9305] team0 (unregistering): Port device team_slave_1 removed [ 653.599482][ T9305] team0 (unregistering): Port device team_slave_0 removed [ 654.578427][T10990] random: crng reseeded on system resumption [ 654.689023][T10743] hsr_slave_0: entered promiscuous mode [ 654.692142][T10743] hsr_slave_1: entered promiscuous mode [ 654.696003][T10743] debugfs: 'hsr0' already exists in 'hsr' [ 654.696050][T10743] Cannot create hsr debugfs directory [ 655.306625][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 655.377059][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 655.377086][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 657.945327][T11041] binder: 11037:11041 ioctl c00c6211 0 returned -14 [ 660.745075][T11061] netlink: 'syz.4.1616': attribute type 10 has an invalid length. [ 661.551999][T11067] random: crng reseeded on system resumption [ 661.750655][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 661.988850][ T1255] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 662.838727][ T1255] usb 1-1: Using ep0 maxpacket: 32 [ 663.080909][ T1255] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.080942][ T1255] usb 1-1: config 0 has no interfaces? [ 663.137285][ T1255] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 663.137396][ T1255] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 663.137469][ T1255] usb 1-1: Product: syz [ 663.137519][ T1255] usb 1-1: Manufacturer: syz [ 663.137568][ T1255] usb 1-1: SerialNumber: syz [ 664.981460][ T1255] usb 1-1: config 0 descriptor?? [ 665.073727][ T1255] usb 1-1: can't set config #0, error -71 [ 665.137366][ T1255] usb 1-1: USB disconnect, device number 31 [ 665.731052][T11087] binder: 11086:11087 ioctl c00c6211 0 returned -14 [ 666.861656][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.157972][T11113] random: crng reseeded on system resumption [ 668.148700][ T1255] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 668.619251][ T1255] usb 4-1: Using ep0 maxpacket: 32 [ 668.648111][ T1255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.648169][ T1255] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 668.769719][ T1255] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 668.769755][ T1255] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 668.769782][ T1255] usb 4-1: Product: syz [ 668.769799][ T1255] usb 4-1: Manufacturer: syz [ 668.769817][ T1255] usb 4-1: SerialNumber: syz [ 668.821370][ T1255] usb 4-1: config 0 descriptor?? [ 668.920758][ T1255] hub 4-1:0.0: bad descriptor, ignoring hub [ 668.920806][ T1255] hub 4-1:0.0: probe with driver hub failed with error -5 [ 672.391651][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 672.417040][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 672.441468][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 672.463724][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 672.485472][T11140] 9pnet_virtio: no channels available for device syz [ 672.583607][ T5735] usb 4-1: USB disconnect, device number 20 [ 673.377447][T11145] netlink: 'syz.3.1638': attribute type 10 has an invalid length. [ 674.350750][T10743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 675.674907][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.691072][T10743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 675.868599][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.223011][T10743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 677.282594][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.405683][T10743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 677.480119][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.547319][T11159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.868728][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 678.007999][T10743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.043459][T10743] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.048340][T11177] random: crng reseeded on system resumption [ 678.093309][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.093523][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.133375][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.142119][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.834528][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 681.834701][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 682.696064][T10743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.718662][ T31] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 682.876355][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 682.877738][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.877763][ T31] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 682.889315][ T31] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 682.889349][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.889372][ T31] usb 5-1: Product: syz [ 682.889387][ T31] usb 5-1: Manufacturer: syz [ 682.889403][ T31] usb 5-1: SerialNumber: syz [ 683.068624][ T5707] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 683.129797][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'. [ 683.129958][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 683.292432][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 683.292480][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 683.292556][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 683.292624][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 683.435225][ T5707] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 683.435267][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.435329][ T5707] usb 4-1: Product: syz [ 683.435346][ T5707] usb 4-1: Manufacturer: syz [ 683.435420][ T5707] usb 4-1: SerialNumber: syz [ 683.814340][ T31] usb 5-1: USB disconnect, device number 26 [ 683.996421][ T5707] usb 4-1: config 0 descriptor?? [ 685.283032][ T5707] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 685.487380][ T5707] usb 4-1: USB disconnect, device number 21 [ 686.004239][T10743] veth0_vlan: entered promiscuous mode [ 686.020192][T10743] veth1_vlan: entered promiscuous mode [ 686.108236][T10743] veth0_macvtap: entered promiscuous mode [ 686.140043][T10743] veth1_macvtap: entered promiscuous mode [ 686.215986][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 686.522581][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 686.811537][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 686.815197][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 686.816142][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 687.914328][T11280] binder: 11273:11280 ioctl c00c6211 0 returned -14 [ 688.794964][T10244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 688.823123][T11283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.003202][T10244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.015037][ T5615] Bluetooth: hci1: command tx timeout [ 689.033030][T10244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.138205][T10244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.197651][T10244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 690.954578][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.089120][ T5610] Bluetooth: hci1: command tx timeout [ 691.246177][T11316] netlink: 'syz.3.1665': attribute type 1 has an invalid length. [ 691.246197][T11316] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1665'. [ 691.331102][ T5610] Bluetooth: hci5: command tx timeout [ 691.624829][T11321] binder: 11319:11321 ioctl c00c6211 0 returned -14 [ 691.834100][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.834232][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.834441][T11254] bridge_slave_0: entered allmulticast mode [ 691.863568][T11254] bridge_slave_0: entered promiscuous mode [ 691.888009][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.888096][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.888285][T11254] bridge_slave_1: entered allmulticast mode [ 691.916157][T11254] bridge_slave_1: entered promiscuous mode [ 692.054493][ T5728] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 692.054521][ T5728] hid-generic 0000:0000:0000.0006: unexpected long global item [ 692.054965][ T5728] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 692.308687][ T5707] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 692.354386][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.373681][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.428663][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 692.461495][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.461524][ T5707] usb 4-1: config 0 has no interfaces? [ 692.461555][ T5707] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.461580][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.538906][T11254] team0: Port device team_slave_0 added [ 692.546496][ T5707] usb 4-1: config 0 descriptor?? [ 692.580723][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 692.603574][ T31] usb 5-1: config 0 has no interfaces? [ 692.606006][ T31] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 692.606037][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.606058][ T31] usb 5-1: Product: syz [ 692.606074][ T31] usb 5-1: Manufacturer: syz [ 692.606089][ T31] usb 5-1: SerialNumber: syz [ 692.606328][T11254] team0: Port device team_slave_1 added [ 692.674141][ T31] usb 5-1: config 0 descriptor?? [ 692.773296][ T9] usb 4-1: USB disconnect, device number 22 [ 692.888719][ T5707] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 692.944608][ T5728] usb 5-1: USB disconnect, device number 27 [ 693.003314][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.003328][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.003349][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.054492][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 693.054527][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 693.054557][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 693.054577][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 693.071032][ T5707] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 693.071132][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.071222][ T5707] usb 1-1: Product: syz [ 693.071267][ T5707] usb 1-1: Manufacturer: syz [ 693.071306][ T5707] usb 1-1: SerialNumber: syz [ 693.123463][ T5707] usb 1-1: config 0 descriptor?? [ 693.154956][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.154975][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.155012][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.180516][ T5610] Bluetooth: hci1: command tx timeout [ 693.376600][ T5707] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 693.408664][ T5610] Bluetooth: hci5: command tx timeout [ 693.571177][ T5721] usb 1-1: USB disconnect, device number 32 [ 693.762389][T11254] hsr_slave_0: entered promiscuous mode [ 693.763882][T11254] hsr_slave_1: entered promiscuous mode [ 693.764945][T11254] debugfs: 'hsr0' already exists in 'hsr' [ 693.764971][T11254] Cannot create hsr debugfs directory [ 694.316500][T11344] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 695.248828][ T5610] Bluetooth: hci1: command tx timeout [ 695.488688][ T5610] Bluetooth: hci5: command tx timeout [ 696.222052][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.222260][T11278] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.222464][T11278] bridge_slave_0: entered allmulticast mode [ 696.230208][T11278] bridge_slave_0: entered promiscuous mode [ 696.418924][ T5707] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 696.570520][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 696.615408][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.615493][ T5707] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 696.815856][ T5707] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 696.815920][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 696.815988][ T5707] usb 4-1: Product: syz [ 696.816063][ T5707] usb 4-1: Manufacturer: syz [ 696.816080][ T5707] usb 4-1: SerialNumber: syz [ 697.025777][ T5707] usb 4-1: config 0 descriptor?? [ 697.406038][T11356] bridge0: port 1(dummy0) entered blocking state [ 697.406146][T11356] bridge0: port 1(dummy0) entered forwarding state [ 697.476962][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.486231][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.581142][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.594858][ T5610] Bluetooth: hci5: command tx timeout [ 698.200048][T11358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.200949][T11358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.304617][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.327861][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.395650][T11368] 9p: Bad value for 'version' [ 698.411253][T11356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.411281][T11356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.506142][ T5728] usb 4-1: USB disconnect, device number 23 [ 698.603192][T11356] veth1_vlan: left promiscuous mode [ 698.663374][T11356] veth0_vlan: left promiscuous mode [ 698.750537][T11356] veth0_vlan: entered promiscuous mode [ 698.890104][T11356] veth1_vlan: entered promiscuous mode [ 699.437241][T11356] veth1_macvtap: left promiscuous mode [ 699.446338][T11356] veth0_macvtap: left promiscuous mode [ 699.464828][T11356] veth0_macvtap: entered promiscuous mode [ 699.476082][T11356] veth1_macvtap: entered promiscuous mode [ 699.554270][T11356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.580280][T11356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.583934][T11356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.617360][T11356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.799121][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.799361][T11278] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.799508][T11278] bridge_slave_1: entered allmulticast mode [ 699.801972][T11278] bridge_slave_1: entered promiscuous mode [ 699.874656][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.874763][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.950259][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 699.951744][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.156226][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.575353][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.943236][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1682'. [ 700.943270][T11381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1682'. [ 700.981021][T11278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.992935][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.053368][T11278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.108664][ T5728] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 701.259138][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 701.306316][ T5728] usb 4-1: config 0 has no interfaces? [ 701.405607][ T5728] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 701.405692][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.405757][ T5728] usb 4-1: Product: syz [ 701.405775][ T5728] usb 4-1: Manufacturer: syz [ 701.405850][ T5728] usb 4-1: SerialNumber: syz [ 701.549243][T10359] bridge_slave_1: left allmulticast mode [ 701.549329][T10359] bridge_slave_1: left promiscuous mode [ 701.648419][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.158411][ T5728] usb 4-1: config 0 descriptor?? [ 702.449890][ T127] usb 4-1: USB disconnect, device number 24 [ 702.610425][T10359] bridge_slave_0: left allmulticast mode [ 702.610454][T10359] bridge_slave_0: left promiscuous mode [ 702.610647][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.226675][T11408] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 705.939470][T10359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.999477][T10359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.022165][T10359] bond0 (unregistering): Released all slaves [ 706.167234][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 706.466924][T11278] team0: Port device team_slave_0 added [ 706.501902][T11278] team0: Port device team_slave_1 added [ 706.764465][ T5707] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 706.764502][ T5707] hid-generic 0000:0000:0000.0007: unexpected long global item [ 706.765164][ T5707] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 706.855311][T11420] binder: 11416:11420 ioctl c00c6211 0 returned -14 [ 706.879138][T10359] hsr_slave_0: left promiscuous mode [ 706.968382][T10359] hsr_slave_1: left promiscuous mode [ 706.999439][T10359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.019537][T10359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.108781][ T5707] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 707.133985][T10359] veth1_macvtap: left promiscuous mode [ 707.135084][T10359] veth0_macvtap: left promiscuous mode [ 707.136196][T10359] veth1_vlan: left promiscuous mode [ 707.136638][T10359] veth0_vlan: left promiscuous mode [ 707.261543][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.261573][ T5707] usb 4-1: config 0 has no interfaces? [ 707.261605][ T5707] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 707.261630][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.286651][ T5707] usb 4-1: config 0 descriptor?? [ 707.511914][ T1255] usb 4-1: USB disconnect, device number 25 [ 708.886211][T11426] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 708.901829][T10359] team0 (unregistering): Port device team_slave_1 removed [ 708.969306][T10359] team0 (unregistering): Port device team_slave_0 removed [ 709.827660][T11434] netlink: 'syz.3.1693': attribute type 10 has an invalid length. [ 710.445269][T11278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.445288][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.445319][T11278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.809372][T11278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.809387][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.809411][T11278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.293590][T11278] hsr_slave_0: entered promiscuous mode [ 711.296363][T11278] hsr_slave_1: entered promiscuous mode [ 711.297234][T11278] debugfs: 'hsr0' already exists in 'hsr' [ 711.297256][T11278] Cannot create hsr debugfs directory [ 711.405072][T11441] binder: 11439:11441 ioctl c00c6211 0 returned -14 [ 712.054165][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1697'. [ 712.054220][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 714.539156][ T9457] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 714.699046][ T9457] usb 4-1: Using ep0 maxpacket: 8 [ 714.743047][ T9457] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 714.743087][ T9457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.743164][ T9457] usb 4-1: Product: syz [ 714.743242][ T9457] usb 4-1: Manufacturer: syz [ 714.743328][ T9457] usb 4-1: SerialNumber: syz [ 715.285066][ T9457] usb 4-1: config 0 descriptor?? [ 715.316671][ T9457] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 715.613301][ T9457] gspca_sonixj: reg_w1 err -71 [ 715.613526][ T9457] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 715.643330][ T9457] usb 4-1: USB disconnect, device number 26 [ 715.868363][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 715.868397][ T9] hid-generic 0000:0000:0000.0008: unexpected long global item [ 715.884692][ T9] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 716.135132][T11254] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 716.176304][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.191248][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 716.250605][T11254] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 716.306168][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.318117][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 716.341669][T11254] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 716.358334][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.358355][ T9] usb 5-1: config 0 has no interfaces? [ 716.358377][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.358395][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.430732][ T9] usb 5-1: config 0 descriptor?? [ 716.473179][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.498347][T11254] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 716.535077][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.636961][ T1255] usb 5-1: USB disconnect, device number 28 [ 717.429066][T11498] 9pnet_fd: Insufficient options for proto=fd [ 717.604668][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.336321][T11512] netlink: 'syz.4.1706': attribute type 10 has an invalid length. [ 719.317831][T11514] 9p: Bad value for 'version' [ 719.936839][T11519] netlink: 'syz.3.1707': attribute type 10 has an invalid length. [ 720.694475][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 721.169797][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.756463][T11539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.100759][T11536] XFS (nullb0): Invalid superblock magic number [ 722.712590][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.712944][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.013770][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.016002][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.388900][ T9457] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 723.538684][ T9457] usb 5-1: Using ep0 maxpacket: 32 [ 723.541542][ T9457] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 723.541573][ T9457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.573916][ T9457] usb 5-1: config 0 descriptor?? [ 723.652303][ T9457] as10x_usb: device has been detected [ 723.653041][ T9457] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 723.739856][ T9457] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 723.873461][ T9457] as10x_usb: error during firmware upload part1 [ 723.874173][ T9457] Registered device nBox DVB-T Dongle [ 723.907022][ T9457] usb 5-1: USB disconnect, device number 29 [ 725.202087][ T9457] Unregistered device nBox DVB-T Dongle [ 725.239267][ T9457] as10x_usb: device has been disconnected [ 725.728360][T11581] binder: 11577:11581 ioctl c00c6211 0 returned -14 [ 726.430300][T11590] netlink: 'syz.4.1719': attribute type 10 has an invalid length. [ 727.981745][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.047850][T11278] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.081023][T11278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.084134][T11278] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 728.164383][T11278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.167050][T11278] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 728.326451][T11278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.337282][T11278] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 728.364949][T11278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.832632][T11278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.922118][T11278] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.979388][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.979550][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.063522][ T9184] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.063680][ T9184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.327414][T11648] program syz.3.1728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 730.351001][T11649] netlink: 'syz.0.1727': attribute type 1 has an invalid length. [ 730.351027][T11649] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1727'. [ 730.449122][T11254] veth0_vlan: entered promiscuous mode [ 730.572297][T11254] veth1_vlan: entered promiscuous mode [ 730.751840][T11659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1729'. [ 730.901620][T11254] veth0_macvtap: entered promiscuous mode [ 730.934977][T11254] veth1_macvtap: entered promiscuous mode [ 731.203870][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.239760][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.312903][ T4307] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.327594][ T4307] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.334250][ T4307] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.356199][ T4307] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.105862][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.105878][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.170528][T11278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.310601][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.310625][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.375946][T11734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1738'. [ 737.482291][T11278] veth0_vlan: entered promiscuous mode [ 737.659270][T11278] veth1_vlan: entered promiscuous mode [ 737.796899][T11278] veth0_macvtap: entered promiscuous mode [ 737.843137][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.860695][T11278] veth1_macvtap: entered promiscuous mode [ 738.462890][T11747] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 739.410514][T11278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.524502][T11278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.578844][ T9184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.583216][ T9184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.583702][ T9184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.586487][ T9184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.057555][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.057578][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.421550][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.421567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.468644][ T5707] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 743.618690][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 743.641218][ T5707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.641244][ T5707] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.723233][ T5707] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 743.723265][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.723287][ T5707] usb 1-1: Product: syz [ 743.723302][ T5707] usb 1-1: Manufacturer: syz [ 743.723318][ T5707] usb 1-1: SerialNumber: syz [ 743.766335][ T5707] usb 1-1: config 0 descriptor?? [ 743.995022][ T1255] usb 1-1: USB disconnect, device number 33 [ 744.543767][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1748'. [ 745.393962][T11789] netlink: 'syz.0.1749': attribute type 10 has an invalid length. [ 748.465023][T10244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 748.553794][T10244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 748.556983][T10244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 748.570914][T10244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 748.574986][T10244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 749.400109][T11816] netlink: 'syz.4.1756': attribute type 10 has an invalid length. [ 750.768816][ T5610] Bluetooth: hci6: command tx timeout [ 751.490527][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1758'. [ 751.490605][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 752.967065][ T5610] Bluetooth: hci6: command tx timeout [ 753.732164][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.015537][ T5610] Bluetooth: hci6: command tx timeout [ 755.028697][T11839] binder: 11837:11839 ioctl c00c6211 0 returned -14 [ 755.628673][T11758] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 755.813900][T11758] usb 6-1: Using ep0 maxpacket: 32 [ 756.957479][T11758] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 756.957514][T11758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.024962][T11758] usb 6-1: config 0 descriptor?? [ 757.045021][T11758] as10x_usb: device has been detected [ 757.045943][T11758] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 757.086934][T11758] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 757.088959][ T5610] Bluetooth: hci6: command tx timeout [ 757.142073][T11848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.222462][T11758] as10x_usb: error during firmware upload part1 [ 757.224802][T11758] Registered device nBox DVB-T Dongle [ 757.283162][ T5710] usb 6-1: USB disconnect, device number 2 [ 758.728382][ T5710] Unregistered device nBox DVB-T Dongle [ 758.774888][ T5710] as10x_usb: device has been disconnected [ 759.730692][T11869] netlink: 'syz.6.1768': attribute type 10 has an invalid length. [ 759.746267][T11869] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 760.238142][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1769'. [ 760.238190][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1769'. [ 761.551408][T11879] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 761.555177][T11879] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1770'. [ 762.973159][T11877] netlink: 'syz.4.1770': attribute type 29 has an invalid length. [ 764.686552][T11805] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.702022][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.704920][T11805] bridge_slave_0: entered allmulticast mode [ 764.726507][T11805] bridge_slave_0: entered promiscuous mode [ 764.958055][T11805] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.958190][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.961452][T11899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.969116][T11758] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 764.983675][T11805] bridge_slave_1: entered allmulticast mode [ 764.994601][T11805] bridge_slave_1: entered promiscuous mode [ 766.018614][T11758] usb 7-1: Using ep0 maxpacket: 32 [ 766.021119][T11758] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 766.021149][T11758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.165077][T11758] usb 7-1: config 0 descriptor?? [ 766.468029][T11917] netlink: 'syz.4.1781': attribute type 10 has an invalid length. [ 766.557802][T11758] as10x_usb: device has been detected [ 766.560481][T11758] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 767.603797][ T5788] IPVS: starting estimator thread 0... [ 767.638104][T11758] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 767.771184][T11758] as10x_usb: error during firmware upload part1 [ 767.771862][T11758] Registered device nBox DVB-T Dongle [ 767.842257][T11924] IPVS: using max 7 ests per chain, 16800 per kthread [ 767.844633][T11805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.862058][T11758] usb 7-1: USB disconnect, device number 2 [ 767.915760][T11805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.172333][T11758] Unregistered device nBox DVB-T Dongle [ 768.178092][T11758] as10x_usb: device has been disconnected [ 770.685023][T11805] team0: Port device team_slave_0 added [ 770.738580][ T5707] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 770.769271][T11805] team0: Port device team_slave_1 added [ 771.110524][ T5707] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 771.110557][ T5707] usb 7-1: config 0 has no interface number 0 [ 771.117068][ T5707] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 771.117163][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.117185][ T5707] usb 7-1: Product: syz [ 771.117199][ T5707] usb 7-1: Manufacturer: syz [ 771.117213][ T5707] usb 7-1: SerialNumber: syz [ 771.127513][ T5707] usb 7-1: config 0 descriptor?? [ 771.522127][ T5707] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 771.611578][ T5707] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 771.611870][ T5707] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 771.612031][ T5707] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 771.854021][ T5707] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 771.953742][T11805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.953757][T11805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.953778][T11805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.072570][T11805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.072585][T11805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.072607][T11805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.658107][T11758] usb 7-1: USB disconnect, device number 3 [ 772.718075][T11758] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 772.730345][T11758] keyspan 7-1:0.133: device disconnected [ 772.952710][T11805] hsr_slave_0: entered promiscuous mode [ 772.955619][T11805] hsr_slave_1: entered promiscuous mode [ 772.959794][T11805] debugfs: 'hsr0' already exists in 'hsr' [ 772.959820][T11805] Cannot create hsr debugfs directory [ 774.140547][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069073400: rx timeout, send abort [ 774.158285][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888069073400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 774.302461][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1793'. [ 774.302480][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'. [ 775.154278][T11973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1796'. [ 777.713883][T11984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.161047][T11992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'. [ 779.709523][T11805] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 779.753563][T11805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.754871][T11805] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 780.582481][T11805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.682803][T11805] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 781.236153][T11805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.237401][T11805] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 781.400611][T11805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.885596][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1805'. [ 783.225466][ T5788] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 783.608843][ T5788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.609036][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.945124][ T5788] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 783.945158][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.945179][ T5788] usb 1-1: Product: syz [ 783.945194][ T5788] usb 1-1: Manufacturer: syz [ 783.945210][ T5788] usb 1-1: SerialNumber: syz [ 784.161969][ T5788] usb 1-1: config 0 descriptor?? [ 784.424963][ T5788] hub 1-1:0.0: bad descriptor, ignoring hub [ 784.424990][ T5788] hub 1-1:0.0: probe with driver hub failed with error -5 [ 784.591082][ T5788] usb 1-1: USB disconnect, device number 34 [ 785.045626][T12034] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1810'. [ 786.534012][T11805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.574898][T11805] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.594999][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.595215][T12002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.811031][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.813587][T12002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.983313][ T5707] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 786.987253][ T5707] hid-generic 0000:0000:0000.0009: unexpected long global item [ 786.988968][ T5707] hid-generic 0000:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 787.118768][ T5788] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 787.274426][ T5788] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 787.274472][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.274495][ T5788] usb 5-1: Product: syz [ 787.274511][ T5788] usb 5-1: Manufacturer: syz [ 787.274527][ T5788] usb 5-1: SerialNumber: syz [ 787.308829][ T5728] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 787.338850][ T5788] usb 5-1: config 0 descriptor?? [ 787.436503][ T5788] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 787.500653][ T5728] usb 7-1: no configurations [ 787.500715][ T5728] usb 7-1: can't read configurations, error -22 [ 787.719433][ T5728] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 787.869376][ T5728] usb 7-1: no configurations [ 787.869392][ T5728] usb 7-1: can't read configurations, error -22 [ 787.869799][ T5728] usb usb7-port1: attempt power cycle [ 788.077576][ T5788] gspca_sunplus: reg_w_riv err -71 [ 788.077682][ T5788] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 788.096987][ T5788] usb 5-1: USB disconnect, device number 30 [ 788.238770][ T5728] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 788.268833][ T5728] usb 7-1: no configurations [ 788.268854][ T5728] usb 7-1: can't read configurations, error -22 [ 788.399662][ T5728] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 788.439115][ T5728] usb 7-1: no configurations [ 788.439136][ T5728] usb 7-1: can't read configurations, error -22 [ 788.439494][ T5728] usb usb7-port1: unable to enumerate USB device [ 789.739540][T11805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.174887][ T200] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 790.318858][ T200] usb 6-1: Using ep0 maxpacket: 32 [ 790.321630][ T200] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.321668][ T200] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 790.321686][ T200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.508410][ T200] usb 6-1: config 0 descriptor?? [ 794.496125][ T200] hub 6-1:0.0: USB hub found [ 794.841052][ T200] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 795.032343][ T200] usbhid 6-1:0.0: can't add hid device: -71 [ 795.032436][ T200] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 795.273219][ T200] usb 6-1: USB disconnect, device number 3 [ 795.823116][T11805] veth0_vlan: entered promiscuous mode [ 796.102513][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1825'. [ 797.665261][T11805] veth1_vlan: entered promiscuous mode [ 798.446900][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 798.447062][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1827'. [ 799.318829][T11805] veth0_macvtap: entered promiscuous mode [ 800.294908][T11805] veth1_macvtap: entered promiscuous mode [ 800.401151][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 800.401169][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 800.439461][T11805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.926737][T11805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.028080][T10359] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.029892][T10359] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.036624][T10359] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.037457][T10359] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.508782][ T5788] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 803.667878][ T200] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 803.667916][ T200] hid-generic 0000:0000:0000.000A: unexpected long global item [ 803.691544][ T200] hid-generic 0000:0000:0000.000A: probe with driver hid-generic failed with error -22 [ 803.701832][ T5788] usb 5-1: Using ep0 maxpacket: 32 [ 803.707268][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.707317][ T5788] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 803.707343][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.812196][ T5788] usb 5-1: config 0 descriptor?? [ 804.538335][T12152] netlink: 'syz.5.1834': attribute type 10 has an invalid length. [ 805.268314][ T5788] hub 5-1:0.0: USB hub found [ 805.279054][ T5788] hub 5-1:0.0: 1 port detected [ 805.659812][ T5707] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 805.691032][ T5735] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 805.859721][ T5707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.859749][ T5707] usb 1-1: config 0 has no interfaces? [ 805.859782][ T5707] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.859807][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.897547][T12152] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 805.904296][ T9184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.904318][ T9184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.951023][ T5735] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 805.951055][ T5735] usb 7-1: config 0 has no interface number 0 [ 805.956549][ T5735] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 805.956580][ T5735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.956604][ T5735] usb 7-1: Product: syz [ 805.956620][ T5735] usb 7-1: Manufacturer: syz [ 805.956636][ T5735] usb 7-1: SerialNumber: syz [ 806.057856][ T5707] usb 1-1: config 0 descriptor?? [ 806.064836][ T5735] usb 7-1: config 0 descriptor?? [ 806.285347][ T5707] usb 1-1: USB disconnect, device number 35 [ 806.288571][ T5735] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 806.460703][ T5735] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 806.460867][ T5735] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 806.461019][ T5735] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 806.666691][ T5735] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 806.673158][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.673179][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.851205][ T5788] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 806.919832][ T31] usb 5-1: USB disconnect, device number 31 [ 807.024486][ T5735] usb 7-1: USB disconnect, device number 8 [ 807.258135][ T5735] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 807.287794][ T5735] keyspan 7-1:0.133: device disconnected [ 807.723883][T10244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 807.730934][T10244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 807.735758][T10244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 807.758908][T10244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 807.766365][T10244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 808.013838][ T1255] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 808.176121][ T1255] usb 1-1: Using ep0 maxpacket: 32 [ 808.237875][ T1255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.237970][ T1255] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 808.238032][ T1255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.389005][T11758] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 808.680444][T11758] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 808.680576][T11758] usb 6-1: config 0 has no interface number 0 [ 808.847631][T11758] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 808.847662][T11758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.847681][T11758] usb 6-1: Product: syz [ 808.847695][T11758] usb 6-1: Manufacturer: syz [ 808.847709][T11758] usb 6-1: SerialNumber: syz [ 809.226295][ T1255] usb 1-1: config 0 descriptor?? [ 809.399926][T11758] usb 6-1: config 0 descriptor?? [ 809.973320][ T5610] Bluetooth: hci7: command tx timeout [ 810.848722][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 812.048742][ T5610] Bluetooth: hci7: command tx timeout [ 812.123902][ T1255] hub 1-1:0.0: USB hub found [ 812.706514][T11758] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 812.801011][T11758] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 812.801172][T11758] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 812.801493][T11758] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 812.884997][T11758] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 813.021682][ T1255] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 813.132594][ T1255] usbhid 1-1:0.0: can't add hid device: -71 [ 813.132724][ T1255] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 813.157623][T11758] usb 6-1: USB disconnect, device number 4 [ 813.184517][ T1255] usb 1-1: USB disconnect, device number 36 [ 813.223329][T11758] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 813.225807][T11758] keyspan 6-1:0.133: device disconnected [ 813.332449][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1845'. [ 813.870506][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.160045][T10244] Bluetooth: hci7: command tx timeout [ 815.046556][T12199] binder: 12196:12199 ioctl c00c6211 0 returned -14 [ 815.633487][T12187] netlink: 'syz.5.1844': attribute type 29 has an invalid length. [ 815.993808][T12212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.227862][T10244] Bluetooth: hci7: command tx timeout [ 816.638621][T11758] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 816.789113][T11758] usb 1-1: Using ep0 maxpacket: 16 [ 816.802531][T11758] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.802625][T11758] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 817.137395][T11758] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 817.137469][T11758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.137538][T11758] usb 1-1: Product: syz [ 817.137555][T11758] usb 1-1: Manufacturer: syz [ 817.137572][T11758] usb 1-1: SerialNumber: syz [ 817.184543][ T5735] IPVS: starting estimator thread 0... [ 817.452442][T12221] IPVS: using max 7 ests per chain, 16800 per kthread [ 818.021969][T11758] usb 1-1: 0:2 : does not exist [ 818.519746][ T4307] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.600499][T11758] usb 1-1: USB disconnect, device number 37 [ 820.016270][T12249] random: crng reseeded on system resumption [ 820.423333][ T4307] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.247585][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.258260][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.258303][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.258330][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.258359][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.258386][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.258413][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.329464][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.329502][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.329531][T11758] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 821.438182][T11758] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.03 Device [syz1] on syz1 [ 821.468562][ T5735] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 821.673648][ T5735] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.673678][ T5735] usb 6-1: config 0 has no interfaces? [ 821.673712][ T5735] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 821.673738][ T5735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.759667][ T5735] usb 6-1: config 0 descriptor?? [ 821.787336][ T4307] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.974542][ T5788] usb 6-1: USB disconnect, device number 5 [ 823.284679][ T4307] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.887276][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.888105][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.670705][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.709960][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.280021][T12332] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 828.938565][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.939380][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.234933][T12342] binder: 12340:12342 ioctl c00c6211 0 returned -14 [ 829.326043][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.340455][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.248884][T12182] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.296694][T12182] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.341776][T12182] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.343075][T12182] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.343180][T12182] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.343221][T12182] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.343276][T12182] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.343314][T12182] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.059494][T12156] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 831.090738][ T5728] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 831.208645][T12156] usb 1-1: Using ep0 maxpacket: 32 [ 831.214196][T12156] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 831.214223][T12156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.214240][T12156] usb 1-1: Product: syz [ 831.214252][T12156] usb 1-1: Manufacturer: syz [ 831.214264][T12156] usb 1-1: SerialNumber: syz [ 831.238552][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 831.241886][ T5728] usb 6-1: config 0 has no interfaces? [ 831.268653][ T5728] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 831.268686][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.268708][ T5728] usb 6-1: Product: syz [ 831.268724][ T5728] usb 6-1: Manufacturer: syz [ 831.268740][ T5728] usb 6-1: SerialNumber: syz [ 831.309742][T12156] usb 1-1: config 0 descriptor?? [ 831.315750][ T5728] usb 6-1: config 0 descriptor?? [ 831.344930][T12156] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 831.582749][T12286] usb 6-1: USB disconnect, device number 6 [ 832.145235][ T4307] bridge_slave_1: left allmulticast mode [ 832.145680][ T4307] bridge_slave_1: left promiscuous mode [ 832.171454][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.259898][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 833.260058][T12156] gspca_ov534_9: reg_r err -32 [ 833.264882][ T4307] bridge_slave_0: left allmulticast mode [ 833.264917][ T4307] bridge_slave_0: left promiscuous mode [ 833.265174][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.409170][T12375] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 833.713630][T12156] gspca_ov534_9: Unknown sensor 0000 [ 833.713830][T12156] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 833.739526][T12156] usb 1-1: USB disconnect, device number 38 [ 834.178558][T12286] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 834.348594][T12286] usb 6-1: Using ep0 maxpacket: 32 [ 834.350979][T12286] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 834.351005][T12286] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 834.351026][T12286] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.351045][T12286] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 834.351066][T12286] usb 6-1: config 1 has no interface number 0 [ 834.351120][T12286] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 834.351144][T12286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.456800][T12286] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 835.599603][ T4307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.660889][ T4307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.702474][ T4307] bond0 (unregistering): Released all slaves [ 835.867505][T12372] netlink: 'syz.4.1876': attribute type 29 has an invalid length. [ 836.320283][T12168] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.320494][T12168] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.320769][T12168] bridge_slave_0: entered allmulticast mode [ 836.323841][T12168] bridge_slave_0: entered promiscuous mode [ 836.327368][T12168] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.327574][T12168] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.327770][T12168] bridge_slave_1: entered allmulticast mode [ 836.335489][T12168] bridge_slave_1: entered promiscuous mode [ 836.368717][T12292] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 836.431381][T12286] snd_usb_pod 6-1:1.1: set_interface failed [ 836.432826][T12286] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 836.433041][T12286] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 836.462921][T12286] usb 6-1: USB disconnect, device number 7 [ 836.638559][T12292] usb 5-1: Using ep0 maxpacket: 32 [ 836.643369][T12292] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 836.643398][T12292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.643417][T12292] usb 5-1: Product: syz [ 836.643431][T12292] usb 5-1: Manufacturer: syz [ 836.643445][T12292] usb 5-1: SerialNumber: syz [ 836.654947][T12292] usb 5-1: config 0 descriptor?? [ 836.703177][T12292] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 837.167128][T12168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.196637][T12168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.276038][T12168] team0: Port device team_slave_0 added [ 837.306858][T12168] team0: Port device team_slave_1 added [ 837.793366][T12168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.793386][T12168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.793475][T12168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.829281][T12168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.829354][T12168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.829398][T12168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.916759][T12292] gspca_ov534_9: reg_w failed -71 [ 839.998565][T12292] gspca_ov534_9: Unknown sensor 0000 [ 839.998663][T12292] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 840.047762][T12292] usb 5-1: USB disconnect, device number 32 [ 841.330361][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 841.383653][T12168] hsr_slave_0: entered promiscuous mode [ 841.384783][T12168] hsr_slave_1: entered promiscuous mode [ 841.385492][T12168] debugfs: 'hsr0' already exists in 'hsr' [ 841.385511][T12168] Cannot create hsr debugfs directory [ 841.448758][T12056] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 841.448951][ T5728] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 841.558811][ T5707] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 841.589291][ T4307] hsr_slave_0: left promiscuous mode [ 841.598760][T12056] usb 6-1: Using ep0 maxpacket: 16 [ 841.599249][ T5728] usb 7-1: Using ep0 maxpacket: 32 [ 841.617737][T12056] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.617774][T12056] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 841.618307][ T5728] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.618352][ T5728] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 841.618377][ T5728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.642202][ T4307] hsr_slave_1: left promiscuous mode [ 841.684152][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.684308][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.687429][T12056] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 841.687451][T12056] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.687465][T12056] usb 6-1: Product: syz [ 841.687476][T12056] usb 6-1: Manufacturer: syz [ 841.687487][T12056] usb 6-1: SerialNumber: syz [ 841.737417][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 841.744763][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.744810][ T5707] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 841.744827][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.801488][ T5728] usb 7-1: config 0 descriptor?? [ 841.804655][ T5707] usb 1-1: config 0 descriptor?? [ 841.806289][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.806317][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.843569][ T5728] hub 7-1:0.0: USB hub found [ 841.865851][ T5707] hub 1-1:0.0: USB hub found [ 841.937983][T12056] usb 6-1: 0:2 : does not exist [ 841.963603][ T4307] veth1_macvtap: left promiscuous mode [ 841.963694][ T4307] veth0_macvtap: left promiscuous mode [ 841.963914][ T4307] veth1_vlan: left promiscuous mode [ 841.990424][ T4307] veth0_vlan: left promiscuous mode [ 842.009616][ T5728] hub 7-1:0.0: 1 port detected [ 842.026795][ T5707] hub 1-1:0.0: 1 port detected [ 842.501385][ T5707] usb 1-1: USB disconnect, device number 39 [ 843.117462][T12292] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 843.178686][ T5721] usb 7-1: USB disconnect, device number 9 [ 843.367909][T12286] usb 6-1: USB disconnect, device number 8 [ 843.786214][T12481] binder: 12474:12481 ioctl c00c6211 0 returned -14 [ 844.738772][T12286] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 844.888748][T12286] usb 5-1: Using ep0 maxpacket: 32 [ 844.895969][T12286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.896006][T12286] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 844.896024][T12286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.926356][ T4307] team0 (unregistering): Port device team_slave_1 removed [ 844.954286][T12286] usb 5-1: config 0 descriptor?? [ 844.985295][T12286] hub 5-1:0.0: USB hub found [ 845.036071][ T4307] team0 (unregistering): Port device team_slave_0 removed [ 845.166911][T12286] hub 5-1:0.0: 1 port detected [ 846.215461][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 846.445844][T12286] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 846.629943][T10244] Bluetooth: hci5: command 0x0406 tx timeout [ 846.662340][T12292] usb 5-1: USB disconnect, device number 33 [ 846.692156][T12327] usb 5-1: Failed to suspend device, error -71 [ 849.768611][ T5707] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 849.953336][ T5707] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 849.953365][ T5707] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 849.953385][ T5707] usb 6-1: config 0 has no interface number 0 [ 849.953401][ T5707] usb 6-1: config 0 has no interface number 1 [ 849.953447][ T5707] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 849.953470][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.113731][ T5707] usb 6-1: config 0 descriptor?? [ 850.231093][ T5707] usb 6-1: unknown number of interfaces: 2 [ 850.409033][T12286] usb 6-1: USB disconnect, device number 9 [ 850.888592][ T5721] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 851.051317][ T5721] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 851.051348][ T5721] usb 5-1: config 0 has no interface number 0 [ 851.058066][ T5721] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 851.058097][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.058117][ T5721] usb 5-1: Product: syz [ 851.058131][ T5721] usb 5-1: Manufacturer: syz [ 851.058145][ T5721] usb 5-1: SerialNumber: syz [ 851.147564][ T5721] usb 5-1: config 0 descriptor?? [ 851.214483][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 851.220671][ T5728] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 851.370231][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 851.373174][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.373225][ T5728] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 851.373252][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.376850][ T5721] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 851.453357][ T5721] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 851.453514][ T5721] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 851.453665][ T5721] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 851.458572][T12292] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 851.506769][ T5728] usb 1-1: config 0 descriptor?? [ 851.517627][ T5728] hub 1-1:0.0: USB hub found [ 851.559964][ T5721] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 851.608833][T12292] usb 6-1: Using ep0 maxpacket: 32 [ 851.643324][T12292] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 851.643414][T12292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.643437][T12292] usb 6-1: Product: syz [ 851.643452][T12292] usb 6-1: Manufacturer: syz [ 851.643467][T12292] usb 6-1: SerialNumber: syz [ 851.798706][ T5728] hub 1-1:0.0: 1 port detected [ 851.831356][T12292] usb 6-1: config 0 descriptor?? [ 851.890467][T12056] usb 5-1: USB disconnect, device number 34 [ 851.920461][T12292] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 852.117390][T12056] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 852.120793][T12056] keyspan 5-1:0.133: device disconnected [ 852.639345][ T5728] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 852.774926][ T5728] usb 1-1: USB disconnect, device number 40 [ 852.775596][T12235] usb 1-1: Failed to suspend device, error -71 [ 853.148829][ T5721] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 853.320101][ T5721] usb 5-1: Using ep0 maxpacket: 32 [ 853.334824][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.334876][ T5721] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 853.334903][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.403899][ T5721] usb 5-1: config 0 descriptor?? [ 853.432125][ T5721] hub 5-1:0.0: USB hub found [ 853.669818][ T5721] hub 5-1:0.0: 1 port detected [ 853.762562][T12292] gspca_ov534_9: reg_r err -71 [ 854.019446][T12292] gspca_ov534_9: Unknown sensor 0000 [ 854.019551][T12292] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 854.023755][T12292] usb 6-1: USB disconnect, device number 10 [ 854.078574][ T5707] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 854.228668][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 854.235936][ T5707] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 854.235967][ T5707] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 854.235991][ T5707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.236012][ T5707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 854.236036][ T5707] usb 1-1: config 1 has no interface number 0 [ 854.236083][ T5707] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 854.236114][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.374170][ T5707] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 854.824788][ T5721] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 854.831617][T12292] usb 5-1: USB disconnect, device number 35 [ 860.087845][ T5707] snd_usb_pod 1-1:1.1: set_interface failed [ 860.417616][ T5707] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 860.417847][ T5707] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -110 [ 860.754551][ T5721] usb 1-1: USB disconnect, device number 41 [ 861.200111][T11759] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 861.288565][ T5707] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 861.368581][T11759] usb 6-1: Using ep0 maxpacket: 32 [ 861.374957][T11759] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.375007][T11759] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 861.375028][T11759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.427193][T11759] usb 6-1: config 0 descriptor?? [ 861.493144][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 861.501549][T11759] hub 6-1:0.0: USB hub found [ 861.505837][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.505903][ T5707] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 861.505928][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.551139][ T5707] usb 1-1: config 0 descriptor?? [ 861.568325][ T5707] hub 1-1:0.0: USB hub found [ 861.666021][T11759] hub 6-1:0.0: 1 port detected [ 861.783554][ T5707] hub 1-1:0.0: 1 port detected [ 861.821610][T12649] process 'syz.4.1927' launched './file1' with NULL argv: empty string added [ 862.520272][ T5707] usb 1-1: USB disconnect, device number 42 [ 862.797901][T11759] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 862.812951][ T5707] usb 6-1: USB disconnect, device number 11 [ 862.823030][ T9185] usb 6-1: Failed to suspend device, error -19 [ 863.538756][ T5707] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 863.688580][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 863.690856][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.690891][ T5707] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 863.690908][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.838871][ T5707] usb 1-1: config 0 descriptor?? [ 863.940022][ T5707] hub 1-1:0.0: USB hub found [ 864.051478][ T5707] hub 1-1:0.0: 1 port detected [ 865.265244][ T5728] usb 1-1: USB disconnect, device number 43 [ 865.265414][ T5707] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 865.909879][T12168] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 865.958141][T12168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.969322][T12168] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 867.258757][T12168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.329094][T12168] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 867.784384][T12168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 867.790470][T12697] program syz.5.1933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.567819][T10244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 869.589469][T10244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 869.617108][T10244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 869.627452][T10244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 869.638003][T10244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 871.818911][ T5610] Bluetooth: hci6: command tx timeout [ 873.888604][ T5610] Bluetooth: hci6: command tx timeout [ 873.908906][ T5728] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 874.058611][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 874.060501][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.060525][ T5728] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.060560][ T5728] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 874.060581][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.107653][ T5728] usb 1-1: config 0 descriptor?? [ 874.386088][T12747] random: crng reseeded on system resumption [ 875.267889][T12283] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 875.279871][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.414521][T12702] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.414710][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.414882][T12702] bridge_slave_0: entered allmulticast mode [ 875.417017][T12702] bridge_slave_0: entered promiscuous mode [ 875.446789][T12702] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.446935][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.447125][T12702] bridge_slave_1: entered allmulticast mode [ 875.470976][T12283] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 875.471005][T12283] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 875.471027][T12283] usb 7-1: config 0 has no interface number 0 [ 875.471045][T12283] usb 7-1: config 0 has no interface number 1 [ 875.471105][T12283] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 875.471131][T12283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.475647][T12283] usb 7-1: config 0 descriptor?? [ 875.476583][T12702] bridge_slave_1: entered promiscuous mode [ 875.541500][T12283] usb 7-1: unknown number of interfaces: 2 [ 875.668718][ T5721] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 875.727402][ T5728] usb 7-1: USB disconnect, device number 10 [ 875.851835][ T5721] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 875.851866][ T5721] usb 5-1: config 0 has no interface number 0 [ 875.854443][ T5721] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 875.854472][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.854495][ T5721] usb 5-1: Product: syz [ 875.854510][ T5721] usb 5-1: Manufacturer: syz [ 875.854526][ T5721] usb 5-1: SerialNumber: syz [ 875.867825][T12702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.873782][T12702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.930835][ T5721] usb 5-1: config 0 descriptor?? [ 875.968568][ T5610] Bluetooth: hci6: command tx timeout [ 876.000297][T12702] team0: Port device team_slave_0 added [ 876.005603][T12702] team0: Port device team_slave_1 added [ 876.065255][T12702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.065274][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.065327][T12702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.067730][T12702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.067745][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.067773][T12702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.218977][ T5721] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 876.221778][ T5721] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 876.221871][ T5721] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 876.221957][ T5721] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 876.264085][T12702] hsr_slave_0: entered promiscuous mode [ 876.267555][T12702] hsr_slave_1: entered promiscuous mode [ 876.272013][T12702] debugfs: 'hsr0' already exists in 'hsr' [ 876.273726][T12702] Cannot create hsr debugfs directory [ 876.293222][ T5721] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 876.321096][ T5721] usb 5-1: USB disconnect, device number 36 [ 876.341778][ T5721] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 876.343797][ T5721] keyspan 5-1:0.133: device disconnected [ 876.665126][T12294] usb 1-1: USB disconnect, device number 44 [ 876.778594][ T5728] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 877.004033][ T5728] usb 7-1: Using ep0 maxpacket: 32 [ 877.200550][ T5728] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.200606][ T5728] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 877.200631][ T5728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.928382][ T5728] usb 7-1: config 0 descriptor?? [ 877.947834][ T5728] hub 7-1:0.0: USB hub found [ 878.049758][ T5610] Bluetooth: hci6: command tx timeout [ 878.158620][ T5728] hub 7-1:0.0: 1 port detected [ 880.724261][ T5728] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 880.728221][T12283] usb 7-1: USB disconnect, device number 11 [ 880.738330][ T1288] usb 7-1: Failed to suspend device, error -19 [ 882.496306][T12235] bridge_slave_1: left allmulticast mode [ 882.496349][T12235] bridge_slave_1: left promiscuous mode [ 882.496655][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.616800][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 882.881156][T10244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 882.912228][ T5707] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 882.966763][T10244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 882.984359][T10244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 882.987060][T10244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 883.008947][T10244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 883.064134][ T5707] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 883.064157][ T5707] usb 1-1: config 0 has no interface number 0 [ 883.068204][ T5707] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 883.068225][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.068239][ T5707] usb 1-1: Product: syz [ 883.068250][ T5707] usb 1-1: Manufacturer: syz [ 883.068260][ T5707] usb 1-1: SerialNumber: syz [ 883.133366][ T5707] usb 1-1: config 0 descriptor?? [ 883.210822][T12235] bridge_slave_0: left allmulticast mode [ 883.210861][T12235] bridge_slave_0: left promiscuous mode [ 883.211232][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.529607][ T5707] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 883.549923][ T5707] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 883.550020][ T5707] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 883.550106][ T5707] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 883.594100][ T5707] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 883.616051][ T5707] usb 1-1: USB disconnect, device number 45 [ 883.642638][ T5707] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 883.666565][ T5707] keyspan 1-1:0.133: device disconnected [ 884.490188][T12235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.611839][T12235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.680885][T12235] bond0 (unregistering): Released all slaves [ 884.741120][T12794] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 884.741852][T12794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.742523][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1954'. [ 884.745453][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 884.756620][T12812] netlink: 'syz.0.1956': attribute type 29 has an invalid length. [ 885.408640][ T5610] Bluetooth: hci7: command tx timeout [ 886.687854][T12235] hsr_slave_0: left promiscuous mode [ 886.724317][T12235] hsr_slave_1: left promiscuous mode [ 886.725545][T12235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.781123][T12235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.148665][T12283] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 887.308723][T12283] usb 5-1: Using ep0 maxpacket: 16 [ 887.312207][T12283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.312234][T12283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.314665][T12283] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 887.314696][T12283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.314711][T12283] usb 5-1: Product: syz [ 887.314722][T12283] usb 5-1: Manufacturer: syz [ 887.314732][T12283] usb 5-1: SerialNumber: syz [ 887.338985][T12235] team0 (unregistering): Port device team_slave_1 removed [ 887.358966][ T5721] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 887.414208][T12283] usb 5-1: 0:2 : does not exist [ 887.469531][T12235] team0 (unregistering): Port device team_slave_0 removed [ 887.488611][ T5610] Bluetooth: hci7: command tx timeout [ 887.538560][ T5721] usb 7-1: Using ep0 maxpacket: 16 [ 887.540571][ T5721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.540597][ T5721] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.544090][ T5721] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 887.544119][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.544140][ T5721] usb 7-1: Product: syz [ 887.544156][ T5721] usb 7-1: Manufacturer: syz [ 887.544172][ T5721] usb 7-1: SerialNumber: syz [ 887.766901][ T5721] usb 7-1: 0:2 : does not exist [ 888.418327][ T5721] usb 7-1: USB disconnect, device number 12 [ 888.676600][T12283] usb 5-1: USB disconnect, device number 37 [ 888.690692][ T38] INFO: task syz.3.1728:11648 blocked for more than 143 seconds. [ 888.690721][ T38] Tainted: G L syzkaller #0 [ 888.690733][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 888.690744][ T38] task:syz.3.1728 state:D stack:26168 pid:11648 tgid:11645 ppid:5597 task_flags:0x400140 flags:0x00080002 [ 888.690811][ T38] Call Trace: [ 888.690819][ T38] [ 888.690833][ T38] __schedule+0x16dc/0x5500 [ 888.690887][ T38] ? __pfx___schedule+0x10/0x10 [ 888.690914][ T38] ? irqentry_exit+0x218/0x8f0 [ 888.690940][ T38] ? trace_irq_disable+0x3b/0x140 [ 888.691067][ T38] ? __pfx___schedule+0x10/0x10 [ 888.691097][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 888.691151][ T38] rt_mutex_schedule+0x76/0xf0 [ 888.691225][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 888.691270][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 888.691310][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 888.691349][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 888.691385][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 888.691433][ T38] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 888.691553][ T38] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 888.691585][ T38] mutex_lock_nested+0x168/0x1d0 [ 888.691627][ T38] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 888.691663][ T38] genl_family_rcv_msg_doit+0x233/0x340 [ 888.691788][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 888.691839][ T38] ? bpf_lsm_capable+0x9/0x20 [ 888.691911][ T38] ? security_capable+0x7e/0x2c0 [ 888.692076][ T38] genl_rcv_msg+0x614/0x7a0 [ 888.692128][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 888.692164][ T38] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 888.692214][ T38] netlink_rcv_skb+0x226/0x4a0 [ 888.692246][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 888.692284][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 888.692327][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.692357][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.692391][ T38] genl_rcv+0x28/0x40 [ 888.692424][ T38] netlink_unicast+0x7f5/0x990 [ 888.692463][ T38] netlink_sendmsg+0x813/0xb40 [ 888.692505][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.692538][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 888.692609][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.692638][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 888.692735][ T38] ____sys_sendmsg+0x565/0x870 [ 888.692765][ T38] ? __might_fault+0xaf/0x130 [ 888.692841][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.692881][ T38] ? import_iovec+0x73/0xa0 [ 888.692954][ T38] ___sys_sendmsg+0x2a5/0x360 [ 888.692982][ T38] ? __lock_acquire+0x683/0x2ce0 [ 888.693037][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.693070][ T38] ? futex_wait+0x2a2/0x390 [ 888.693176][ T38] ? __fget_files+0x2a/0x420 [ 888.693247][ T38] ? __fget_files+0x3a8/0x420 [ 888.693274][ T38] __x64_sys_sendmsg+0x1b7/0x290 [ 888.693300][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.693337][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.693565][ T38] do_syscall_64+0x174/0x580 [ 888.693684][ T38] ? trace_irq_disable+0x3b/0x140 [ 888.693706][ T38] ? clear_bhb_loop+0x40/0x90 [ 888.693729][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.693758][ T38] RIP: 0033:0x7f185da5de99 [ 888.693781][ T38] RSP: 002b:00007f185bcb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.693802][ T38] RAX: ffffffffffffffda RBX: 00007f185dce5fa0 RCX: 00007f185da5de99 [ 888.693816][ T38] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 000000000000000a [ 888.693816][ T38] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 000000000000000a [ 888.693827][ T38] RBP: 00007f185daf3eaf R08: 0000000000000000 R09: 0000000000000000 [ 888.693838][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.693849][ T38] R13: 00007f185dce6038 R14: 00007f185dce5fa0 R15: 00007ffda0917808 [ 888.693875][ T38] [ 888.693958][ T38] [ 888.693958][ T38] Showing all locks held in the system: [ 888.693972][ T38] 1 lock held by khungtaskd/38: [ 888.693984][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 888.694067][ T38] 2 locks held by dhcpcd/5258: [ 888.694078][ T38] #0: ffff888037132928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 888.694135][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 888.694249][ T38] 2 locks held by getty/5351: [ 888.694262][ T38] #0: ffff8880327490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 888.694392][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 888.694487][ T38] 8 locks held by kworker/0:5/5721: [ 888.694504][ T38] 2 locks held by syz.1.1634/11122: [ 888.694517][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 888.694578][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0 [ 888.694643][ T38] 2 locks held by syz.3.1728/11648: [ 888.694654][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 888.694714][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 888.694777][ T38] 5 locks held by kworker/u8:23/12235: [ 888.694790][ T38] 6 locks held by kworker/0:12/12283: [ 888.694802][ T38] #0: ffff88801eea5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 888.694860][ T38] #1: ffffc90003eefc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 888.694915][ T38] #2: ffff888029c60210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 888.695026][ T38] #3: ffff888039048210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 888.695119][ T38] #4: ffff888035a2c1d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 888.695979][ T38] #5: ffffffff8f517dd8 (register_mutex#7){+.+.}-{4:4}, at: usb_audio_disconnect+0x72/0x540 [ 888.696171][ T38] 2 locks held by syz.5.1933/12697: [ 888.696184][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 888.696246][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 888.696381][ T38] 7 locks held by syz-executor/12702: [ 888.696400][ T38] #0: ffff888035af2500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 888.696533][ T38] #1: ffff888061731478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 888.696597][ T38] #2: ffff8880295442d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 888.696664][ T38] #3: ffffffff8ee26d18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 888.696749][ T38] #4: ffff88805fb81160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 888.696814][ T38] #5: ffff88803ae48310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 888.696899][ T38] #6: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 888.697023][ T38] 1 lock held by syz-executor/12797: [ 888.697037][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 888.697104][ T38] 1 lock held by syz.4.1959/12825: [ 888.697117][ T38] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 888.697257][ T38] 1 lock held by syz.6.1960/12831: [ 888.697272][ T38] [ 888.697279][ T38] ============================================= [ 888.697279][ T38] [ 888.697295][ T38] NMI backtrace for cpu 1 [ 888.697314][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 888.697344][ T38] Tainted: [L]=SOFTLOCKUP [ 888.697351][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 888.697364][ T38] Call Trace: [ 888.697377][ T38] [ 888.697386][ T38] dump_stack_lvl+0xe8/0x150 [ 888.697422][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 888.697477][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 888.697574][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 888.697614][ T38] sys_info+0x135/0x170 [ 888.697645][ T38] watchdog+0xfd7/0x1030 [ 888.697701][ T38] ? watchdog+0x1c7/0x1030 [ 888.697729][ T38] kthread+0x388/0x470 [ 888.697763][ T38] ? __pfx_watchdog+0x10/0x10 [ 888.697782][ T38] ? __pfx_kthread+0x10/0x10 [ 888.697818][ T38] ret_from_fork+0x514/0xb70 [ 888.697857][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 888.697892][ T38] ? __switch_to+0xc89/0x1420 [ 888.697925][ T38] ? __pfx_kthread+0x10/0x10 [ 888.697962][ T38] ret_from_fork_asm+0x1a/0x30 [ 888.698001][ T38] [ 888.698037][ T38] Sending NMI from CPU 1 to CPUs 0: [ 888.698067][ C0] NMI backtrace for cpu 0 [ 888.698086][ C0] CPU: 0 UID: 0 PID: 4963 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 888.698113][ C0] Tainted: [L]=SOFTLOCKUP [ 888.698120][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 888.698131][ C0] RIP: 0033:0x55b408b6071d [ 888.698148][ C0] Code: eb 23 0f 1f 00 42 8d 5c 25 00 4c 89 f7 d1 eb 89 d8 49 8b 44 c5 00 48 8b 70 18 e8 0e 73 fd ff 85 c0 79 1a 89 dd 41 39 ec 72 db <44> 89 e0 f7 d0 5b 5d 41 5c 41 5d 41 5e c3 0f 1f 44 00 00 74 06 44 [ 888.698165][ C0] RSP: 002b:00007ffe4cb5d170 EFLAGS: 00000246 [ 888.698180][ C0] RAX: 00000000fffffff0 RBX: 0000000000000002 RCX: 0000000000000055 [ 888.698193][ C0] RDX: 0000000000000000 RSI: 000055b40b1935c0 RDI: 000055b408b68b9b [ 888.698206][ C0] RBP: 0000000000000002 R08: 0000000000000075 R09: 0000000000000000 [ 888.698217][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 [ 888.698227][ C0] R13: 000055b40b18bf60 R14: 000055b408b68b9b R15: 000055b40b18bf60 [ 888.698241][ C0] FS: 00007fa6abde7880 GS: 0000000000000000 [ 889.047074][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 889.047100][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 889.047127][ T38] Tainted: [L]=SOFTLOCKUP [ 889.047134][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 889.047145][ T38] Call Trace: [ 889.047155][ T38] [ 889.047164][ T38] vpanic+0x56c/0xa60 [ 889.047188][ T38] ? __pfx___schedule+0x10/0x10 [ 889.047210][ T38] ? __pfx_vpanic+0x10/0x10 [ 889.047236][ T38] panic+0xc5/0xd0 [ 889.047252][ T38] ? __pfx_panic+0x10/0x10 [ 889.047267][ T38] ? preempt_schedule_common+0x82/0xd0 [ 889.047288][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 889.047312][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 889.047344][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 889.047379][ T38] watchdog+0x1030/0x1030 [ 889.047404][ T38] ? watchdog+0x1c7/0x1030 [ 889.047427][ T38] kthread+0x388/0x470 [ 889.047457][ T38] ? __pfx_watchdog+0x10/0x10 [ 889.047472][ T38] ? __pfx_kthread+0x10/0x10 [ 889.047500][ T38] ret_from_fork+0x514/0xb70 [ 889.047532][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 889.047560][ T38] ? __switch_to+0xc89/0x1420 [ 889.047587][ T38] ? __pfx_kthread+0x10/0x10 [ 889.047616][ T38] ret_from_fork_asm+0x1a/0x30 [ 889.047658][ T38] [ 889.061381][ T38] Kernel Offset: disabled