last executing test programs: 11m46.457354895s ago: executing program 2 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f20000000800", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x2}, 0x2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x80000000000000a, 0x313e20d7a35df3b9, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001e00010a00000000000000000008006e8004006c80000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r8, 0xfffffffffffffff6, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 11m41.735622516s ago: executing program 2 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0) 11m41.226297423s ago: executing program 2 (id=173): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/193, 0xc1) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 11m38.753288614s ago: executing program 2 (id=178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x63, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r6}]}, 0x34}}, 0x40040d0) recvmmsg(r0, 0x0, 0x0, 0x4022, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r8, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="050000001000030400"/20, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900070000000500010004000000"], 0x44}, 0x1, 0xba01}, 0x0) 11m33.416225714s ago: executing program 2 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) sendmsg(r0, &(0x7f0000000980)={&(0x7f0000000180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000840)=[{0x38, 0x10a, 0x1ff, "62ecd5e38f5549726b4bfd3827de0fc4647f569d7dac2053b2ee6e8ec0acbc189e59f0"}, {0x18, 0x10a, 0x1fffe, "4357b4"}], 0x50}, 0x4000) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 11m33.074978441s ago: executing program 2 (id=188): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x2, 0x21a800) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000001880)=[{&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000680)=""/228, 0xec}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001780)=""/193, 0xc1}, {&(0x7f0000000380)=""/40, 0x28}], 0x5, &(0x7f0000001900)=""/83, 0x53}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000600)=""/44, 0x3c}, {&(0x7f0000001c80)=""/226, 0xe2}], 0x2, &(0x7f0000001ac0)=""/214, 0xd6}, 0x3}], 0x2, 0x10020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000075c000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x841, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1, 0x6}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 11m17.681326379s ago: executing program 32 (id=188): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x2, 0x21a800) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000001880)=[{&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000680)=""/228, 0xec}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/33, 0x21}, {&(0x7f0000001780)=""/193, 0xc1}, {&(0x7f0000000380)=""/40, 0x28}], 0x5, &(0x7f0000001900)=""/83, 0x53}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000600)=""/44, 0x3c}, {&(0x7f0000001c80)=""/226, 0xe2}], 0x2, &(0x7f0000001ac0)=""/214, 0xd6}, 0x3}], 0x2, 0x10020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000075c000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x841, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1, 0x6}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 9m21.878952532s ago: executing program 5 (id=545): r0 = socket(0xa, 0x5, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 9m18.633767694s ago: executing program 5 (id=555): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 9m12.058924756s ago: executing program 5 (id=572): unshare(0xa000680) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4) 9m11.650045309s ago: executing program 5 (id=575): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1836, &(0x7f00000002c0)={0x0, 0x38d2, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r7, r3) 9m7.363345578s ago: executing program 5 (id=581): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 9m5.899324184s ago: executing program 5 (id=586): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) 9m0.403381801s ago: executing program 0 (id=597): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f00000003c0)) 8m59.902004264s ago: executing program 0 (id=599): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000000000002) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/uts\x00') 8m58.402015835s ago: executing program 0 (id=605): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 8m58.036710225s ago: executing program 0 (id=607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) writev(r5, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23ccaba1401d36d3d03d682ba47a8c2e0c5a5a5ed9131f73330e9e04295317ff97adac5549724581ef66f12aab8672659fb2b2b1f47546616b1e6f350a5bab3e49c7e52d6451f736cc13dbaa0792b73eda52278a769ee442ffd157512eae59b17dadfcb93af0a51fef7706dcd70f7d06e5409833e8cd578e5f73661abedacab46e02d12fbe7c3d9e54f068e26a20d338e6cc8316f6ad768c9c3d411dd535434386ccf1a972f547595740eac2b50108a4c2a264267ca6a64dd01a046829db5183c4d36dd8df2ad10f92dacfdebeca046a", 0xd0}], 0x1) close(r3) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x240, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) 8m52.817574693s ago: executing program 0 (id=620): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$can_bcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, &(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @local}}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) recvmmsg(r1, 0x0, 0x0, 0xfc0, 0x0) syz_open_dev$usbmon(&(0x7f0000000480), 0xba, 0x280802) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 8m51.890362411s ago: executing program 0 (id=622): syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) epoll_create1(0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_print_times', 0x12ba82, 0x18d) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x3, 0x0, r0}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 8m50.62444491s ago: executing program 33 (id=586): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) 8m36.00883764s ago: executing program 34 (id=622): syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) epoll_create1(0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_print_times', 0x12ba82, 0x18d) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x3, 0x0, r0}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 18.598158224s ago: executing program 3 (id=1971): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x9, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001940)={0x28, r2, 0x403, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x45}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r9, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='z', 0x4}) recvmsg(r4, 0x0, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.764566298s ago: executing program 7 (id=1984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x66, 0x0, 0x0) 11.513641354s ago: executing program 7 (id=1985): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28143, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_rr_get_interval(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000ba300000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 11.425814742s ago: executing program 3 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}}], 0x2, 0x40088d4) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2000000020000b47, 0x9, 0x8008, 0x20000000, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 10.286693434s ago: executing program 7 (id=1989): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 9.25767294s ago: executing program 6 (id=1992): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 9.257173481s ago: executing program 4 (id=1993): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003ffffffffffffffffffffffff08004500002000002000fc2f907800001fe1e00000018065"], 0x32) 8.341463159s ago: executing program 7 (id=1994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000014c0)="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", 0x21f}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.230803722s ago: executing program 7 (id=1995): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = open(0x0, 0x64842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x3, 0x1, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000), 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) 7.91828779s ago: executing program 6 (id=1996): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 7.854090221s ago: executing program 3 (id=1997): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x9, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001940)={0x28, r2, 0x403, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x45}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r9, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='z', 0x4}) recvmsg(r4, 0x0, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.604569253s ago: executing program 4 (id=1999): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000001900)=0xc, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wg2\x00'}) 6.387073196s ago: executing program 4 (id=2000): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0), 0x0) recvmsg(r0, 0x0, 0x40000103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = dup(r2) write$uinput_user_dev(r3, 0x0, 0x36) 4.624895154s ago: executing program 1 (id=2002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r2, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000000701020000000000000000000000000900010073797a300000000008000540000000038f30b8f358e7a1ebd5d170f4f67fac5df54d3d1bb281d6579b0fe65b5efb9900cb3b6ecc380208e07e79035c57116cf9376086c56a604d1aae395b7a65fb507fb9cfd1aa954539c8519182f17d48163cd248662eb94eb510d222eb66c8cfa05ec1d1897779f427ecca83e98baecf7567f037f28799579c167de20fa344e2"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40)) eventfd(0xe95) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x3, r6, 0x1, 0x6d, 0x6, @remote}, 0x14) 4.478342536s ago: executing program 6 (id=2003): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x3}], 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.706466416s ago: executing program 6 (id=2004): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 2.220009776s ago: executing program 1 (id=2005): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x7, "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"}) 2.070404111s ago: executing program 4 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.914293345s ago: executing program 1 (id=2007): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1}, {0x7, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.908867825s ago: executing program 7 (id=2008): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}}], 0x2, 0x40088d4) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2000000020000b47, 0x9, 0x8008, 0x20000000, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 1.677102359s ago: executing program 1 (id=2009): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003ffffffffffffffffffffffff08004500002000002000fc2f907800001fe1e00000018065"], 0x32) 1.471929861s ago: executing program 4 (id=2010): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) 898.287314ms ago: executing program 3 (id=2011): r0 = io_uring_setup(0x3eae, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 590.646975ms ago: executing program 1 (id=2012): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 550.272049ms ago: executing program 3 (id=2013): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000000)={0x11, 0x4e21, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4044800) 490.361498ms ago: executing program 6 (id=2014): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x3}], 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 366.480692ms ago: executing program 6 (id=2015): syz_open_dev$vim2m(&(0x7f0000000080), 0xba, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r1, 0x0, 0x0, 0x0) 301.623574ms ago: executing program 3 (id=2016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r2, &(0x7f00000025c0)={0xfc, {"a2e3ad1bed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f3b3568030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb62913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab002f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000000701020000000000000000000000000900010073797a300000000008000540000000038f30b8f358e7a1ebd5d170f4f67fac5df54d3d1bb281d6579b0fe65b5efb9900cb3b6ecc380208e07e79035c57116cf9376086c56a604d1aae395b7a65fb507fb9cfd1aa954539c8519182f17d48163cd248662eb94eb510d222eb66c8cfa05ec1d1897779f427ecca83e98baecf7567f037f28799579c167de20fa344e2"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000200)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x3, r6, 0x1, 0x6d, 0x6, @remote}, 0x14) 250.169152ms ago: executing program 1 (id=2017): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000440)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 0s ago: executing program 4 (id=2018): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000006c0)={0x0, 0x2, 0x2, {0x4, @vbi={0x0, 0x0, 0x8, 0x0, [0x0, 0x8000000], [0x8200], 0x2}}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = open(0x0, 0x64842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x9, 0x2) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x3, 0x1, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000), 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) kernel console output (not intermixed with test programs): mpty skb [ 275.309469][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 276.104250][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.209996][ T7787] ubi: mtd0 is already attached to ubi31 [ 276.441834][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.895969][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.257026][ T7829] misc userio: Invalid payload size [ 279.257115][ T7829] misc userio: Invalid payload size [ 279.959505][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.220469][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.787719][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.129122][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.188607][ T7849] ubi: mtd0 is already attached to ubi31 [ 282.026745][ T7869] fuse: Bad value for 'fd' [ 282.443404][ T7875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.776096][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.219004][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.458660][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.971693][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.776383][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.605066][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.034613][ T7916] ubi: mtd0 is already attached to ubi31 [ 288.379682][ T7919] ubi: mtd0 is already attached to ubi31 [ 289.224838][ T7927] dlm: plock device version mismatch: kernel (1.2.0), user (2387897437.763186031.1847236481) [ 290.708396][ T7938] tipc: Enabling of bearer rejected, already enabled [ 291.756438][ T7961] dlm: plock device version mismatch: kernel (1.2.0), user (2387897437.763186031.1847236481) [ 292.830539][ T7966] cgroup: fork rejected by pids controller in /syz5 [ 294.096593][ T8116] ubi: mtd0 is already attached to ubi31 [ 294.687505][ T8129] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 294.807202][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 296.328645][ T8137] ubi: mtd0 is already attached to ubi31 [ 297.466371][ T8146] dlm: plock device version mismatch: kernel (1.2.0), user (2387897437.763186031.1847236481) [ 300.331022][ T992] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 300.637490][ T992] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.637506][ T992] usb 2-1: config 0 has no interface number 0 [ 300.637533][ T992] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 300.637547][ T992] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 300.637570][ T992] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.637581][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.511168][ T992] usb 2-1: config 0 descriptor?? [ 301.512222][ T8169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.563944][ T992] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 301.758240][ T992] usb 2-1: USB disconnect, device number 12 [ 302.526059][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.396810][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.232782][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.630411][ T8204] ubi: mtd0 is already attached to ubi31 [ 305.553867][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.590126][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.003784][ T8217] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 306.003811][ T8217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.003901][ T8217] vhci_hcd vhci_hcd.0: Device attached [ 306.049984][ T8217] loop6: detected capacity change from 0 to 524288000 [ 306.233705][ T8220] loop6: detected capacity change from 524288000 to 1 [ 306.249373][ T8218] vhci_hcd: connection closed [ 306.258115][ T1455] vhci_hcd: stop threads [ 306.258131][ T1455] vhci_hcd: release socket [ 306.260672][ T1455] vhci_hcd: disconnect device [ 306.270919][ T5923] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 306.271026][ T5923] usb 39-1: enqueue for inactive port 0 [ 306.342358][ T5923] vhci_hcd: vhci_device speed not set [ 309.523581][ T5837] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 310.103634][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 310.113194][ T5837] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.113219][ T5837] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 310.113237][ T5837] usb 2-1: config 179 has no interface number 0 [ 310.113283][ T5837] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 310.113309][ T5837] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 310.113349][ T5837] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 310.113371][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.517405][ T989] usb 2-1: USB disconnect, device number 13 [ 312.299878][ T8276] ubi: mtd0 is already attached to ubi31 [ 316.989427][ T8320] process 'syz.3.576' launched './file2' with NULL argv: empty string added [ 317.115345][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115421][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.884739][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 319.185199][ T5860] Bluetooth: hci5: command 0x0406 tx timeout [ 320.922401][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.663055][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.093710][ T8366] syzkaller0: entered promiscuous mode [ 322.093734][ T8366] syzkaller0: entered allmulticast mode [ 323.495992][ T8381] input: syz1 as /devices/virtual/input/input6 [ 323.850155][ T37] audit: type=1326 audit(1757216244.917:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 323.850186][ T37] audit: type=1326 audit(1757216244.917:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 323.850208][ T37] audit: type=1326 audit(1757216244.927:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 323.850229][ T37] audit: type=1326 audit(1757216244.927:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 323.850251][ T37] audit: type=1326 audit(1757216244.927:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 323.850272][ T37] audit: type=1326 audit(1757216244.927:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 324.151781][ T37] audit: type=1326 audit(1757216245.257:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 324.151817][ T37] audit: type=1326 audit(1757216245.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 324.422331][ T37] audit: type=1326 audit(1757216245.497:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 324.422382][ T37] audit: type=1326 audit(1757216245.507:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8378 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa548ebe9 code=0x7ffc0000 [ 325.711145][ T8392] vivid-002: disconnect [ 325.711425][ T8391] vivid-002: reconnect [ 326.250928][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 326.480920][ T5909] usb 4-1: device descriptor read/64, error -71 [ 326.730944][ T5909] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 326.931009][ T5909] usb 4-1: device descriptor read/64, error -71 [ 327.031364][ T5909] usb usb4-port1: attempt power cycle [ 327.321518][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.420933][ T5909] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 327.453881][ T5909] usb 4-1: device descriptor read/8, error -71 [ 327.731704][ T5909] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.757205][ T5909] usb 4-1: device descriptor read/8, error -71 [ 327.867921][ T5909] usb usb4-port1: unable to enumerate USB device [ 328.225135][ T8415] input: syz1 as /devices/virtual/input/input7 [ 328.744254][ T8420] vivid-001: disconnect [ 328.744535][ T8419] vivid-001: reconnect [ 329.270980][ T5923] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 330.678960][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.964062][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.880994][ T989] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 334.061033][ T989] usb 4-1: device descriptor read/64, error -71 [ 334.311057][ T989] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 334.840930][ T989] usb 4-1: device descriptor read/64, error -71 [ 334.961224][ T989] usb usb4-port1: attempt power cycle [ 335.320937][ T989] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 335.343457][ T989] usb 4-1: device descriptor read/8, error -71 [ 335.400968][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 335.554970][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 335.649593][ T31] usb 1-1: config 0 has no interfaces? [ 335.657442][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 335.657458][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.657469][ T31] usb 1-1: Product: syz [ 335.657476][ T31] usb 1-1: Manufacturer: syz [ 335.657484][ T31] usb 1-1: SerialNumber: syz [ 335.709713][ T31] usb 1-1: config 0 descriptor?? [ 335.761007][ T989] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 335.794768][ T989] usb 4-1: device descriptor read/8, error -71 [ 335.923090][ T989] usb usb4-port1: unable to enumerate USB device [ 335.962476][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 337.136414][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.159137][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.161785][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.163021][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.165308][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.251084][ T5166] Bluetooth: hci4: command tx timeout [ 341.341229][ T5166] Bluetooth: hci4: command tx timeout [ 342.538981][ T8526] input: syz1 as /devices/virtual/input/input8 [ 343.410995][ T5166] Bluetooth: hci4: command tx timeout [ 345.492222][ T5166] Bluetooth: hci4: command tx timeout [ 346.202590][ T5217] Dev loop6: unable to read RDB block 1 [ 346.202633][ T5217] loop6: unable to read partition table [ 346.202871][ T5217] loop6: partition table beyond EOD, truncated [ 351.436613][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.450705][ T5860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.460199][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.472290][ T5860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.474385][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.491021][ T5860] Bluetooth: hci6: command tx timeout [ 353.736409][ T5837] usb 1-1: USB disconnect, device number 15 [ 354.299962][ T1455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.288950][ T1455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.571459][ T5860] Bluetooth: hci6: command tx timeout [ 355.705231][ T8607] fuse: Bad value for 'fd' [ 355.778304][ T1455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.474279][ T1455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.835501][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 357.071742][ T8579] chnl_net:caif_netlink_parms(): no params data found [ 357.651224][ T5860] Bluetooth: hci6: command tx timeout [ 358.227931][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.228136][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.228439][ T8487] bridge_slave_0: entered allmulticast mode [ 358.271341][ T8487] bridge_slave_0: entered promiscuous mode [ 358.346588][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.346876][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.347074][ T8487] bridge_slave_1: entered allmulticast mode [ 358.374466][ T8487] bridge_slave_1: entered promiscuous mode [ 358.812070][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.611504][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.731048][ T5860] Bluetooth: hci6: command tx timeout [ 359.920984][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.990860][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.071493][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.321060][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.321205][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.321410][ T8579] bridge_slave_0: entered allmulticast mode [ 360.341056][ T8579] bridge_slave_0: entered promiscuous mode [ 360.366097][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.374407][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.374542][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.374773][ T8579] bridge_slave_1: entered allmulticast mode [ 360.383667][ T8579] bridge_slave_1: entered promiscuous mode [ 360.564074][ T1455] bridge_slave_1: left allmulticast mode [ 360.564095][ T1455] bridge_slave_1: left promiscuous mode [ 360.564250][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.768548][ T1455] bridge_slave_0: left allmulticast mode [ 360.768580][ T1455] bridge_slave_0: left promiscuous mode [ 360.768855][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.160950][ T992] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 361.302687][ T992] usb 2-1: device descriptor read/64, error -71 [ 361.551053][ T992] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 361.681619][ T992] usb 2-1: device descriptor read/64, error -71 [ 361.792464][ T992] usb usb2-port1: attempt power cycle [ 362.191769][ T992] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 362.990930][ T992] usb 2-1: device descriptor read/8, error -71 [ 363.251753][ T992] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 363.276835][ T992] usb 2-1: device descriptor read/8, error -71 [ 363.382274][ T992] usb usb2-port1: unable to enumerate USB device [ 364.748474][ T8671] netlink: 'syz.1.679': attribute type 8 has an invalid length. [ 365.038494][ T1455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.093591][ T1455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.119823][ T1455] bond0 (unregistering): Released all slaves [ 365.179862][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.465149][ T8673] input: syz1 as /devices/virtual/input/input11 [ 365.560944][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.692621][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.083288][ T8579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.615501][ T8579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.740590][ T8487] team0: Port device team_slave_0 added [ 366.913282][ T8487] team0: Port device team_slave_1 added [ 367.684782][ T8579] team0: Port device team_slave_0 added [ 367.814014][ T8579] team0: Port device team_slave_1 added [ 367.814938][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.814947][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.814960][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.401522][ T1455] hsr_slave_0: left promiscuous mode [ 368.421344][ T1455] hsr_slave_1: left promiscuous mode [ 368.427312][ T1455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.427340][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.498787][ T1455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.498808][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.677100][ T1455] veth1_macvtap: left promiscuous mode [ 368.677224][ T1455] veth0_macvtap: left promiscuous mode [ 368.703710][ T1455] veth1_vlan: left promiscuous mode [ 368.703952][ T1455] veth0_vlan: left promiscuous mode [ 371.397787][ T8709] input: syz1 as /devices/virtual/input/input12 [ 371.970873][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.067433][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.931634][ T1455] team0 (unregistering): Port device team_slave_1 removed [ 373.121714][ T1455] team0 (unregistering): Port device team_slave_0 removed [ 375.117799][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.117809][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.117824][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.378719][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.378735][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.378760][ T8579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.519948][ T8579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.519964][ T8579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.519996][ T8579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.664704][ T8724] fuse: Bad value for 'fd' [ 376.039292][ T8487] hsr_slave_0: entered promiscuous mode [ 376.040690][ T8487] hsr_slave_1: entered promiscuous mode [ 376.089633][ T8487] debugfs: 'hsr0' already exists in 'hsr' [ 376.089662][ T8487] Cannot create hsr debugfs directory [ 376.511245][ T8579] hsr_slave_0: entered promiscuous mode [ 376.518611][ T8579] hsr_slave_1: entered promiscuous mode [ 376.534719][ T8579] debugfs: 'hsr0' already exists in 'hsr' [ 376.534745][ T8579] Cannot create hsr debugfs directory [ 378.540563][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.540608][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.219313][ T1455] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.327442][ T1455] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.612529][ T1455] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.063023][ T1455] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.315577][ T8487] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.336900][ T8487] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.387210][ T8487] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.440901][ T8487] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.186533][ T1455] bridge_slave_1: left allmulticast mode [ 383.186565][ T1455] bridge_slave_1: left promiscuous mode [ 383.186828][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.268618][ T1455] bridge_slave_0: left allmulticast mode [ 383.268648][ T1455] bridge_slave_0: left promiscuous mode [ 383.268907][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.343400][ T8821] cgroup: fork rejected by pids controller in /syz1 [ 387.755301][ T1455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.815831][ T1455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.837280][ T1455] bond0 (unregistering): Released all slaves [ 387.946020][ T8579] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 388.132538][ T8579] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 388.275146][ T1455] tipc: Disabling bearer [ 388.301014][ T1455] tipc: Left network mode [ 388.324548][ T8579] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 388.368233][ T9009] netlink: 'syz.1.725': attribute type 8 has an invalid length. [ 388.442056][ T8579] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 389.051395][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.148653][ T1455] hsr_slave_0: left promiscuous mode [ 390.183843][ T1455] hsr_slave_1: left promiscuous mode [ 390.185138][ T1455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.185167][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.262004][ T1455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.262035][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.566468][ T1455] veth1_macvtap: left promiscuous mode [ 390.566588][ T1455] veth0_macvtap: left promiscuous mode [ 390.566894][ T1455] veth1_vlan: left promiscuous mode [ 390.567101][ T1455] veth0_vlan: left promiscuous mode [ 392.314423][ T7255] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 392.434302][ T7255] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.881831][ T1455] team0 (unregistering): Port device team_slave_1 removed [ 397.141951][ T5166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.161048][ T5166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.164243][ T5166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.165497][ T5166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.166481][ T5166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.263299][ T1455] team0 (unregistering): Port device team_slave_0 removed [ 399.239585][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.252924][ T5166] Bluetooth: hci1: command tx timeout [ 399.409725][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.691565][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.246792][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.342566][ T5166] Bluetooth: hci1: command tx timeout [ 401.676033][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.706806][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.698174][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 402.751212][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.411093][ T5166] Bluetooth: hci1: command tx timeout [ 405.245870][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 405.433425][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.433441][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.435258][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.435274][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.435284][ T10] usb 2-1: Product: syz [ 405.435292][ T10] usb 2-1: Manufacturer: syz [ 405.435299][ T10] usb 2-1: SerialNumber: syz [ 405.490942][ T5166] Bluetooth: hci1: command tx timeout [ 405.875202][ T10] usb 2-1: 0:2 : does not exist [ 406.194036][ T8579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.196354][ T10] usb 2-1: USB disconnect, device number 19 [ 406.396320][ T8579] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.619550][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.621696][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.709054][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.709203][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.270949][ T7255] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 407.430999][ T7255] usb 2-1: Using ep0 maxpacket: 8 [ 407.448623][ T7255] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 407.448648][ T7255] usb 2-1: config 2 has no interface number 0 [ 407.448696][ T7255] usb 2-1: config 2 interface 31 has no altsetting 0 [ 407.457579][ T7255] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 407.457607][ T7255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.457627][ T7255] usb 2-1: Product: syz [ 407.457641][ T7255] usb 2-1: Manufacturer: syz [ 407.457655][ T7255] usb 2-1: SerialNumber: syz [ 407.960894][ T9135] chnl_net:caif_netlink_parms(): no params data found [ 408.492654][ T7255] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 410.058180][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.058263][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.058396][ T9135] bridge_slave_0: entered allmulticast mode [ 410.060079][ T9135] bridge_slave_0: entered promiscuous mode [ 410.386898][ T9151] Set syz1 is full, maxelem 65536 reached [ 410.507891][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.508105][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.508326][ T9135] bridge_slave_1: entered allmulticast mode [ 410.554679][ T9135] bridge_slave_1: entered promiscuous mode [ 410.876289][ T5937] usb 2-1: USB disconnect, device number 20 [ 411.114700][ T9223] input: syz1 as /devices/virtual/input/input13 [ 411.638980][ T9135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.690962][ T5937] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 411.836504][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 411.864827][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 411.870716][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 411.888777][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.888801][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.904853][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.934782][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.953696][ T5937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.953723][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.953742][ T5937] usb 4-1: Product: syz [ 411.953757][ T5937] usb 4-1: Manufacturer: syz [ 411.953772][ T5937] usb 4-1: SerialNumber: syz [ 412.958873][ T9135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.023273][ T9249] netlink: 'syz.4.781': attribute type 27 has an invalid length. [ 413.082916][ T5937] usb 4-1: 0:2 : does not exist [ 413.112521][ T7255] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 413.234324][ T5937] usb 4-1: USB disconnect, device number 17 [ 413.267899][ T7255] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 413.319982][ T7255] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 413.320020][ T7255] usb 2-1: can't read configurations, error -61 [ 413.455640][ T9181] udevd[9181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.471113][ T7255] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 413.623269][ T7255] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 413.628633][ T7255] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 413.628668][ T7255] usb 2-1: can't read configurations, error -61 [ 413.630398][ T7255] usb usb2-port1: attempt power cycle [ 413.990949][ T7255] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 414.024522][ T7255] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 414.082936][ T7255] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 414.082959][ T7255] usb 2-1: can't read configurations, error -61 [ 414.182117][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.182732][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.226387][ T9249] batman_adv: batadv0: Interface deactivated: dummy0 [ 414.260941][ T7255] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 414.342694][ T7255] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 414.348756][ T7255] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 414.348777][ T7255] usb 2-1: can't read configurations, error -61 [ 414.351128][ T7255] usb usb2-port1: unable to enumerate USB device [ 414.937069][ T5860] Bluetooth: hci4: command tx timeout [ 415.948186][ T9249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.050188][ T9249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.021401][ T5860] Bluetooth: hci4: command tx timeout [ 418.295247][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 418.295770][ T9279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.301122][ T1381] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.083997][ T1381] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.085430][ T9135] team0: Port device team_slave_0 added [ 419.086902][ T1381] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.088140][ T1381] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.095931][ T5860] Bluetooth: hci4: command tx timeout [ 419.144299][ T9135] team0: Port device team_slave_1 added [ 419.951137][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.951148][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.951162][ T9135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.027923][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.027935][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.027948][ T9135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.168559][ T9135] hsr_slave_0: entered promiscuous mode [ 421.171066][ T5860] Bluetooth: hci4: command tx timeout [ 421.178113][ T9135] hsr_slave_1: entered promiscuous mode [ 422.294197][ T1455] bridge_slave_1: left allmulticast mode [ 422.294230][ T1455] bridge_slave_1: left promiscuous mode [ 422.294918][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.344901][ T1455] bridge_slave_0: left allmulticast mode [ 422.344930][ T1455] bridge_slave_0: left promiscuous mode [ 422.345215][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.764510][ T1455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.872339][ T1455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.966277][ T1455] bond0 (unregistering): Released all slaves [ 426.773325][ T1455] hsr_slave_0: left promiscuous mode [ 426.875073][ T1455] hsr_slave_1: left promiscuous mode [ 426.876034][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.943536][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.892010][ T5166] Bluetooth: hci4: command 0x0405 tx timeout [ 428.081808][ T1455] team0 (unregistering): Port device team_slave_1 removed [ 428.213611][ T1455] team0 (unregistering): Port device team_slave_0 removed [ 428.885993][ T9354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.891056][ T9354] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 429.006879][ T9354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.006980][ T9354] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 429.013905][ T9239] chnl_net:caif_netlink_parms(): no params data found [ 429.125276][ T9354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.125801][ T9354] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 429.226199][ T9354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.226335][ T9354] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 429.344690][ T9354] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 429.442056][ T9354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 429.442154][ T9354] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 429.523602][ T9354] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 430.173610][ T9239] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.173755][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.173985][ T9239] bridge_slave_0: entered allmulticast mode [ 430.179593][ T9239] bridge_slave_0: entered promiscuous mode [ 430.194565][ T9239] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.194764][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.194934][ T9239] bridge_slave_1: entered allmulticast mode [ 430.220751][ T9239] bridge_slave_1: entered promiscuous mode [ 430.697088][ T9239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.714797][ T9239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.931090][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 431.011411][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 431.171542][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 431.247120][ T9239] team0: Port device team_slave_0 added [ 431.251990][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 431.491149][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 431.529768][ T9239] team0: Port device team_slave_1 added [ 433.011177][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 433.091107][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 433.256328][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 433.331710][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 433.551046][ T992] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 433.572369][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 433.704727][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.704743][ T992] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.706968][ T992] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.706984][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.707000][ T992] usb 4-1: Product: syz [ 433.707008][ T992] usb 4-1: Manufacturer: syz [ 433.707015][ T992] usb 4-1: SerialNumber: syz [ 433.855846][ T9239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.855857][ T9239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.855870][ T9239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.027830][ T9239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.027842][ T9239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.027856][ T9239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.124488][ T992] usb 4-1: 0:2 : does not exist [ 434.221520][ T992] usb 4-1: USB disconnect, device number 18 [ 434.318821][ T9181] udevd[9181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.537782][ T9135] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 434.684511][ T9135] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 435.332093][ T9135] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.411064][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 435.472179][ T9239] hsr_slave_0: entered promiscuous mode [ 435.475987][ T9239] hsr_slave_1: entered promiscuous mode [ 435.486762][ T9239] debugfs: 'hsr0' already exists in 'hsr' [ 435.486785][ T9239] Cannot create hsr debugfs directory [ 435.504951][ T9135] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 435.633910][ T9429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.634134][ T9429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 435.634320][ T9429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 435.634503][ T9429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.634693][ T9429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.651007][ T5166] Bluetooth: hci4: command 0x0405 tx timeout [ 437.651043][ T5166] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.651069][ T5166] Bluetooth: hci3: command 0x0406 tx timeout [ 437.651095][ T5166] Bluetooth: hci2: command 0x0406 tx timeout [ 437.651120][ T5166] Bluetooth: hci0: command 0x0406 tx timeout [ 438.754286][ T992] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 438.796804][ T992] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.298894][ T1455] bridge_slave_1: left allmulticast mode [ 439.298926][ T1455] bridge_slave_1: left promiscuous mode [ 439.299172][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.487146][ T1455] bridge_slave_0: left allmulticast mode [ 439.487167][ T1455] bridge_slave_0: left promiscuous mode [ 439.487322][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.981809][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.981886][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.274825][ T9496] PKCS7: Unknown OID: [5] (bad) [ 440.274842][ T9496] PKCS7: Only support pkcs7_signedData type [ 441.041156][ T5909] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 441.210950][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 441.213365][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 441.216320][ T5909] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 441.216347][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.216367][ T5909] usb 2-1: Product: syz [ 441.216381][ T5909] usb 2-1: Manufacturer: syz [ 441.216396][ T5909] usb 2-1: SerialNumber: syz [ 441.224031][ T5909] usb 2-1: config 0 descriptor?? [ 441.238605][ T5909] usb 2-1: no audio or video endpoints found [ 441.542796][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'. [ 442.194529][ T1455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.275965][ T1455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.295895][ T1455] bond0 (unregistering): Released all slaves [ 442.451343][ T9490] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 442.459251][ T9490] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 442.792658][ T1455] hsr_slave_0: left promiscuous mode [ 442.821770][ T1455] hsr_slave_1: left promiscuous mode [ 442.822723][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.848504][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.851229][ T992] usb 2-1: USB disconnect, device number 25 [ 444.734279][ T1455] team0 (unregistering): Port device team_slave_1 removed [ 444.982115][ T1455] team0 (unregistering): Port device team_slave_0 removed [ 447.929276][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.225726][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.473653][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.474595][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.506829][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.506916][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.638798][ T9135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.638814][ T9135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.938952][ T9239] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 450.005679][ T9135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.007474][ T9239] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 450.093819][ T9239] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 450.223553][ T9239] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 451.734413][ T9239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.769269][ T9135] veth0_vlan: entered promiscuous mode [ 451.921398][ T9135] veth1_vlan: entered promiscuous mode [ 451.975008][ T9239] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.058598][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.058778][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.090065][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.090164][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.367351][ T9135] veth0_macvtap: entered promiscuous mode [ 452.405792][ T9135] veth1_macvtap: entered promiscuous mode [ 452.843137][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.884088][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.904786][ T159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.906220][ T159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.906498][ T159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.906730][ T159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.283345][ T9615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.063058][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.063075][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.428337][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.428357][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.554361][ T9239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.175665][ T9635] fuse: Bad value for 'fd' [ 457.294157][ T9239] veth0_vlan: entered promiscuous mode [ 457.340605][ T9239] veth1_vlan: entered promiscuous mode [ 457.652699][ T9239] veth0_macvtap: entered promiscuous mode [ 457.669932][ T9239] veth1_macvtap: entered promiscuous mode [ 457.832495][ T9239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.878778][ T9239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.021554][ T1688] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.061361][ T1688] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.062560][ T1688] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.103472][ T1688] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.927153][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.927167][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.206011][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.206030][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.211084][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 459.361034][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 459.364205][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 459.392438][ T31] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 459.392464][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.392474][ T31] usb 4-1: Product: syz [ 459.392482][ T31] usb 4-1: Manufacturer: syz [ 459.392489][ T31] usb 4-1: SerialNumber: syz [ 459.400113][ T31] usb 4-1: config 0 descriptor?? [ 459.494228][ T31] usb 4-1: no audio or video endpoints found [ 461.794771][ T9714] fuse: Bad value for 'fd' [ 462.070864][ T989] usb 4-1: USB disconnect, device number 19 [ 463.253845][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 465.513830][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.451921][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.456880][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.802456][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 472.840329][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.059558][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.330021][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.482903][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.842652][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.320333][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.911'. [ 476.126245][ T9861] fuse: Bad value for 'fd' [ 483.831697][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.660503][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.933032][ T9984] fuse: Bad value for 'fd' [ 487.711898][ T9990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.166245][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 488.462110][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.636696][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.224982][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.044043][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.507835][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.224619][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.388378][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 496.955670][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.178803][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.262089][T10081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.884165][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.561599][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.009065][T10097] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 500.016998][T10097] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 500.017107][T10097] vhci_hcd vhci_hcd.0: Device attached [ 500.572533][T10099] vhci_hcd: connection closed [ 500.599459][ T1384] vhci_hcd: stop threads [ 500.599472][ T1384] vhci_hcd: release socket [ 500.599491][ T1384] vhci_hcd: disconnect device [ 501.255044][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.467867][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.749013][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.749086][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.696403][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.247714][ T5996] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 503.355633][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.380299][ T5996] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 504.653589][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.899017][T10147] block nbd7: shutting down sockets [ 509.353014][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.506514][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.035329][T10190] syz.3.988 (10190) used greatest stack depth: 17928 bytes left [ 510.188154][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.253143][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 510.619441][ T992] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 510.675997][ T992] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.905794][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.856807][T10213] block nbd1: shutting down sockets [ 515.976227][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.028756][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.104406][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.301984][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.894794][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.633226][T10273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 519.637852][T10273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 519.638159][T10273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 519.639785][T10273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 519.763849][T10273] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 521.280956][ T7255] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 521.480949][ T7255] usb 7-1: Using ep0 maxpacket: 16 [ 521.482614][ T7255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.482634][ T7255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.482645][ T7255] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 521.482669][ T7255] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 521.482681][ T7255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.493800][ T7255] usb 7-1: config 0 descriptor?? [ 521.650929][T10282] Bluetooth: hci1: command 0x0c1a tx timeout [ 521.650967][T10282] Bluetooth: hci3: command 0x0406 tx timeout [ 521.650994][T10282] Bluetooth: hci2: command 0x0406 tx timeout [ 521.651020][T10282] Bluetooth: hci0: command 0x0406 tx timeout [ 521.811037][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 522.034434][ T7255] HID 045e:07da: Invalid code 65791 type 1 [ 522.143247][ T7255] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input14 [ 522.249114][ T7255] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 522.340447][ T7255] usb 7-1: USB disconnect, device number 2 [ 523.445175][T10317] fido_id[10317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 524.041876][ T5996] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 525.027141][ T5996] usb 2-1: device descriptor read/64, error -71 [ 525.410936][ T5996] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 525.540980][ T5996] usb 2-1: device descriptor read/64, error -71 [ 525.720938][ T5996] usb usb2-port1: attempt power cycle [ 526.241746][ T5996] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 526.261799][ T5996] usb 2-1: device descriptor read/8, error -71 [ 526.520964][ T5996] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 527.677847][ T5996] usb 2-1: device descriptor read/8, error -71 [ 527.781725][ T5996] usb usb2-port1: unable to enumerate USB device [ 528.290677][ T989] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 528.461046][ T989] usb 4-1: device descriptor read/64, error -71 [ 528.710949][ T989] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 528.970959][ T989] usb 4-1: device descriptor read/64, error -71 [ 529.081147][ T989] usb usb4-port1: attempt power cycle [ 530.450969][ T989] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 530.679667][ T989] usb 4-1: device descriptor read/8, error -71 [ 530.910920][ T989] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 531.701003][ T5937] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 531.831007][ T5937] usb 2-1: device descriptor read/64, error -71 [ 531.964734][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1055'. [ 532.071033][ T5937] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 532.210982][ T5937] usb 2-1: device descriptor read/64, error -71 [ 532.324157][ T5937] usb usb2-port1: attempt power cycle [ 532.441021][ T5909] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 532.571178][ T5909] usb 7-1: device descriptor read/64, error -71 [ 532.681454][ T5937] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 532.702067][ T5937] usb 2-1: device descriptor read/8, error -71 [ 532.824279][ T5909] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 532.960993][ T5909] usb 7-1: device descriptor read/64, error -71 [ 533.000949][ T5937] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 533.003159][T10402] fuse: Bad value for 'fd' [ 533.024541][ T5937] usb 2-1: device descriptor read/8, error -71 [ 533.071209][ T5909] usb usb7-port1: attempt power cycle [ 533.131256][ T5937] usb usb2-port1: unable to enumerate USB device [ 533.407641][ T989] usb 4-1: device descriptor read/8, error -71 [ 533.420961][ T5909] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 533.442079][ T5909] usb 7-1: device descriptor read/8, error -71 [ 533.511315][ T989] usb usb4-port1: unable to enumerate USB device [ 533.741041][ T5909] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 533.773337][ T5909] usb 7-1: device descriptor read/8, error -71 [ 533.882671][ T5909] usb usb7-port1: unable to enumerate USB device [ 537.095246][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 537.315866][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'. [ 538.022690][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 538.227923][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.228668][ T7255] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 538.301040][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 538.301780][ T31] usb 8-1: no configurations [ 538.301796][ T31] usb 8-1: can't read configurations, error -22 [ 538.381858][ T7255] usb 2-1: Using ep0 maxpacket: 32 [ 539.293529][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.301059][ T7255] usb 2-1: no configurations [ 539.301069][ T7255] usb 2-1: can't read configurations, error -22 [ 539.518597][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.519543][ T7255] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 539.519692][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 539.700908][ T7255] usb 2-1: Using ep0 maxpacket: 32 [ 539.701058][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 539.722047][ T31] usb 8-1: no configurations [ 539.722064][ T31] usb 8-1: can't read configurations, error -22 [ 539.731250][ T31] usb usb8-port1: attempt power cycle [ 539.749947][ T7255] usb 2-1: no configurations [ 539.749963][ T7255] usb 2-1: can't read configurations, error -22 [ 539.751312][ T7255] usb usb2-port1: attempt power cycle [ 540.111010][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 540.114014][ T7255] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 540.202439][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 540.202670][ T7255] usb 2-1: Using ep0 maxpacket: 32 [ 540.203601][ T7255] usb 2-1: no configurations [ 540.203615][ T7255] usb 2-1: can't read configurations, error -22 [ 540.204525][ T31] usb 8-1: no configurations [ 540.204539][ T31] usb 8-1: can't read configurations, error -22 [ 540.390345][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.424573][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.541575][ T7255] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 540.551847][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 540.905468][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.041860][ T7255] usb 2-1: Using ep0 maxpacket: 32 [ 541.043050][ T7255] usb 2-1: no configurations [ 541.043067][ T7255] usb 2-1: can't read configurations, error -22 [ 541.045981][ T7255] usb usb2-port1: unable to enumerate USB device [ 541.260394][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 541.414364][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 541.462919][ T31] usb 8-1: device descriptor read/8, error -71 [ 541.571801][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.573923][ T31] usb usb8-port1: unable to enumerate USB device [ 541.828600][T10488] fuse: Bad value for 'fd' [ 542.981089][ T7255] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 543.122864][ T5937] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 543.143034][ T7255] usb 7-1: Using ep0 maxpacket: 16 [ 543.145419][ T7255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.145448][ T7255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.145471][ T7255] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.145513][ T7255] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 543.145536][ T7255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.150656][ T7255] usb 7-1: config 0 descriptor?? [ 543.271512][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 543.272557][ T5937] usb 4-1: no configurations [ 543.272573][ T5937] usb 4-1: can't read configurations, error -22 [ 543.401891][ T5937] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 543.731014][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 543.733562][ T7255] HID 045e:07da: Invalid code 65791 type 1 [ 543.737020][ T5937] usb 4-1: no configurations [ 543.737035][ T5937] usb 4-1: can't read configurations, error -22 [ 543.737403][ T5937] usb usb4-port1: attempt power cycle [ 543.773963][ T7255] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0007/input/input15 [ 543.939641][ T7255] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 543.995963][ T7255] usb 7-1: USB disconnect, device number 7 [ 544.098231][T10516] fido_id[10516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 544.119889][ T5937] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 544.141722][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 544.142583][ T5937] usb 4-1: no configurations [ 544.142598][ T5937] usb 4-1: can't read configurations, error -22 [ 544.270952][ T5937] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 544.294111][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 544.295589][ T5937] usb 4-1: no configurations [ 544.295604][ T5937] usb 4-1: can't read configurations, error -22 [ 544.295965][ T5937] usb usb4-port1: unable to enumerate USB device [ 544.860937][ T7255] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 545.030966][ T7255] usb 7-1: Using ep0 maxpacket: 32 [ 545.032932][ T7255] usb 7-1: no configurations [ 545.032948][ T7255] usb 7-1: can't read configurations, error -22 [ 545.160934][ T7255] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 545.322108][ T7255] usb 7-1: Using ep0 maxpacket: 32 [ 545.325228][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 545.326658][ T7255] usb 7-1: no configurations [ 545.326674][ T7255] usb 7-1: can't read configurations, error -22 [ 545.327071][ T7255] usb usb7-port1: attempt power cycle [ 545.681092][ T7255] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 545.708926][ T7255] usb 7-1: Using ep0 maxpacket: 32 [ 545.709441][ T7255] usb 7-1: no configurations [ 545.709450][ T7255] usb 7-1: can't read configurations, error -22 [ 545.841015][ T7255] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 545.863811][ T7255] usb 7-1: Using ep0 maxpacket: 32 [ 545.864717][ T7255] usb 7-1: no configurations [ 545.864733][ T7255] usb 7-1: can't read configurations, error -22 [ 545.865145][ T7255] usb usb7-port1: unable to enumerate USB device [ 546.372151][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 546.561052][ T7255] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 546.711047][ T7255] usb 8-1: Using ep0 maxpacket: 16 [ 546.715851][ T7255] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.715868][ T7255] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.715880][ T7255] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.715904][ T7255] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 546.715916][ T7255] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.719168][ T7255] usb 8-1: config 0 descriptor?? [ 547.177953][ T7255] HID 045e:07da: Invalid code 65791 type 1 [ 547.223711][ T7255] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0008/input/input16 [ 547.429221][ T7255] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 547.474332][ T7255] usb 8-1: USB disconnect, device number 6 [ 547.716647][T10553] netlink: 'syz.6.1104': attribute type 8 has an invalid length. [ 547.738899][T10551] fido_id[10551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 547.999489][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1105'. [ 549.600976][ T5937] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 549.774057][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 549.774762][ T5937] usb 8-1: no configurations [ 549.774772][ T5937] usb 8-1: can't read configurations, error -22 [ 549.900938][ T5937] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 550.060865][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 550.061725][ T5937] usb 8-1: no configurations [ 550.061741][ T5937] usb 8-1: can't read configurations, error -22 [ 550.062078][ T5937] usb usb8-port1: attempt power cycle [ 550.400922][ T5937] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 550.431481][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 550.432286][ T5937] usb 8-1: no configurations [ 550.432296][ T5937] usb 8-1: can't read configurations, error -22 [ 550.561273][ T5937] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 550.581644][ T5937] usb 8-1: Using ep0 maxpacket: 32 [ 550.582204][ T5937] usb 8-1: no configurations [ 550.582212][ T5937] usb 8-1: can't read configurations, error -22 [ 550.582516][ T5937] usb usb8-port1: unable to enumerate USB device [ 550.968676][T10599] openvswitch: netlink: Missing valid actions attribute. [ 550.968698][T10599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.900404][T10609] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 553.201125][T10608] mmap: syz.6.1122 (10608) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 554.670154][T10638] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 554.704976][T10639] openvswitch: netlink: Missing valid actions attribute. [ 554.704994][T10639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.836610][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 554.978293][T10648] fuse: Bad value for 'fd' [ 557.634903][T10670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.729948][T10713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.210616][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1159'. [ 562.921637][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.921722][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.911319][T10757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.223791][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.561145][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.009370][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.073300][ T5923] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 567.223978][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.780374][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.043436][ T5923] usb 2-1: device descriptor read/64, error -71 [ 568.281097][T10783] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1178'. [ 568.281749][T10783] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1178'. [ 568.292378][ T5923] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 568.440962][ T5923] usb 2-1: device descriptor read/64, error -71 [ 568.555791][ T5923] usb usb2-port1: attempt power cycle [ 568.901035][ T5923] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 569.111034][ T5923] usb 2-1: device not accepting address 40, error -71 [ 569.487250][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.680571][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.905156][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.253706][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.070956][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.395178][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.493079][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.690494][T10831] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1195'. [ 572.697389][T10831] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1195'. [ 573.314092][T10842] fuse: Bad value for 'fd' [ 573.440947][ T992] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 573.570926][ T992] usb 2-1: device descriptor read/64, error -71 [ 573.821072][ T992] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 573.952623][ T992] usb 2-1: device descriptor read/64, error -71 [ 574.063463][ T992] usb usb2-port1: attempt power cycle [ 574.424582][ T992] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 574.443300][ T992] usb 2-1: device descriptor read/8, error -71 [ 574.741045][ T992] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 574.761802][ T992] usb 2-1: device descriptor read/8, error -71 [ 574.875313][ T992] usb usb2-port1: unable to enumerate USB device [ 576.229364][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.422703][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.475929][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.225010][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.349425][T10878] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1208'. [ 579.350023][T10878] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1208'. [ 580.230698][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.320988][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.084328][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.306361][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.773625][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.970018][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.219606][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.506854][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.721272][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 582.861183][ T10] usb 2-1: device descriptor read/64, error -71 [ 582.997255][T10912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.076828][T10914] PKCS7: Unknown OID: [5] (bad) [ 583.076845][T10914] PKCS7: Only support pkcs7_signedData type [ 583.210966][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 583.291205][T10916] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1219'. [ 583.291983][T10916] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1219'. [ 583.341034][ T10] usb 2-1: device descriptor read/64, error -71 [ 583.461455][ T10] usb usb2-port1: attempt power cycle [ 583.844069][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 583.872262][ T10] usb 2-1: device descriptor read/8, error -71 [ 584.125444][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 584.141698][ T10] usb 2-1: device descriptor read/8, error -71 [ 584.251633][ T10] usb usb2-port1: unable to enumerate USB device [ 585.031084][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.217549][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.344238][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.827369][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 585.877116][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.953987][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.305982][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.247265][T10954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.732691][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.542599][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 588.870973][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 588.872701][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.872716][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.872736][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 588.872749][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.875723][ T10] usb 8-1: config 0 descriptor?? [ 588.920905][ T992] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 589.066793][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.510918][ T992] usb 7-1: device descriptor read/64, error -71 [ 589.961970][ T992] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 590.292302][ T992] usb 7-1: device descriptor read/64, error -71 [ 590.410453][ T992] usb usb7-port1: attempt power cycle [ 590.971017][ T992] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 590.984687][ T7255] usb 8-1: USB disconnect, device number 11 [ 590.991860][ T992] usb 7-1: device descriptor read/8, error -71 [ 591.240989][ T992] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 591.264016][ T992] usb 7-1: device descriptor read/8, error -71 [ 591.371425][ T992] usb usb7-port1: unable to enumerate USB device [ 591.883238][T10992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.594822][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.098964][T11000] tipc: Started in network mode [ 593.098996][T11000] tipc: Node identity 66674a02f89b, cluster identity 4711 [ 593.099664][T11000] tipc: Enabled bearer , priority 0 [ 593.127816][T11000] syzkaller0: entered promiscuous mode [ 593.127844][T11000] syzkaller0: entered allmulticast mode [ 593.216185][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.604627][T11011] netlink: 'syz.3.1248': attribute type 2 has an invalid length. [ 593.659739][T10999] tipc: Resetting bearer [ 593.836876][T10999] tipc: Disabling bearer [ 593.841540][ T7255] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 594.001139][ T7255] usb 2-1: Using ep0 maxpacket: 32 [ 594.003596][ T7255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 594.009768][ T7255] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 594.009795][ T7255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.009815][ T7255] usb 2-1: Product: syz [ 594.009830][ T7255] usb 2-1: Manufacturer: syz [ 594.009843][ T7255] usb 2-1: SerialNumber: syz [ 594.033135][ T7255] usb 2-1: config 0 descriptor?? [ 594.067829][ T7255] usb 2-1: no audio or video endpoints found [ 594.316762][ T989] usb 2-1: USB disconnect, device number 50 [ 594.977072][ T989] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 595.162913][ T989] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 595.162942][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.162960][ T989] usb 7-1: Product: syz [ 595.162973][ T989] usb 7-1: Manufacturer: syz [ 595.162987][ T989] usb 7-1: SerialNumber: syz [ 595.176733][ T989] usb 7-1: config 0 descriptor?? [ 595.451787][ T989] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 595.463114][ T989] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 595.505499][ T989] usb 7-1: USB disconnect, device number 16 [ 595.513713][T10861] udevd[10861]: setting mode of /dev/bus/usb/007/016 to 020664 failed: No such file or directory [ 595.515043][T10861] udevd[10861]: setting owner of /dev/bus/usb/007/016 to uid=0, gid=0 failed: No such file or directory [ 596.065352][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.109732][T11041] fuse: Bad value for 'fd' [ 596.215602][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.876110][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.214378][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.563569][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.705102][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.162789][ T989] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 600.330887][ T989] usb 2-1: Using ep0 maxpacket: 32 [ 600.333499][ T989] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.333539][ T989] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 600.333562][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.339256][ T989] usb 2-1: config 0 descriptor?? [ 601.216534][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.310280][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.575427][T11088] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 601.917673][ T7255] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 601.957066][ T7255] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 602.917015][ T989] usb 2-1: USB disconnect, device number 51 [ 603.214906][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.621996][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.140506][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.794234][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.215111][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.369688][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.654876][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.876918][T11148] netlink: 'syz.6.1293': attribute type 29 has an invalid length. [ 605.876937][T11148] netlink: 'syz.6.1293': attribute type 3 has an invalid length. [ 605.876950][T11148] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1293'. [ 606.628592][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.841703][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.124346][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.130257][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.517071][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.835890][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1301'. [ 607.836078][T11164] vlan0: entered allmulticast mode [ 607.836103][T11164] veth0_vlan: entered allmulticast mode [ 609.179562][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.579426][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 609.760672][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.769242][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 609.769256][ T37] audit: type=1800 audit(1757216530.867:19): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1311" name="SYSV798dd826" dev="tmpfs" ino=0 res=0 errno=0 [ 609.882255][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.060480][T11195] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1313'. [ 617.126009][T11229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1328'. [ 619.645408][T11264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1340'. [ 619.671005][ T5937] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 619.820931][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 619.823387][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 619.827735][ T5937] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 619.827762][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.827782][ T5937] usb 2-1: Product: syz [ 619.827796][ T5937] usb 2-1: Manufacturer: syz [ 619.827811][ T5937] usb 2-1: SerialNumber: syz [ 619.882535][ T5937] usb 2-1: config 0 descriptor?? [ 619.890355][ T5937] usb 2-1: no audio or video endpoints found [ 622.711704][ T989] usb 2-1: USB disconnect, device number 52 [ 623.669555][T11309] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1352'. [ 624.691362][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.691436][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.009461][T11312] sp0: Synchronizing with TNC [ 626.622990][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 626.852502][T11334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1359'. [ 627.966909][ T7255] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 628.091515][ T5837] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 628.111043][ T7255] usb 7-1: Using ep0 maxpacket: 32 [ 628.113691][ T7255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 628.115879][ T7255] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 628.115905][ T7255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.115925][ T7255] usb 7-1: Product: syz [ 628.115939][ T7255] usb 7-1: Manufacturer: syz [ 628.115952][ T7255] usb 7-1: SerialNumber: syz [ 628.137181][ T7255] usb 7-1: config 0 descriptor?? [ 629.145545][ T5837] usb 2-1: device descriptor read/64, error -71 [ 629.153660][ T7255] usb 7-1: no audio or video endpoints found [ 629.419754][ T5837] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 629.562115][ T5837] usb 2-1: device descriptor read/64, error -71 [ 629.671314][ T5837] usb usb2-port1: attempt power cycle [ 630.051988][ T5837] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 630.072658][ T5837] usb 2-1: device descriptor read/8, error -71 [ 630.210984][ T5996] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 630.303879][ T5937] usb 7-1: USB disconnect, device number 17 [ 630.370954][ T5996] usb 8-1: device descriptor read/64, error -71 [ 630.631007][ T5996] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 630.832346][ T5996] usb 8-1: device descriptor read/64, error -71 [ 630.969326][ T5996] usb usb8-port1: attempt power cycle [ 632.014232][ T5996] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 632.141866][ T5996] usb 8-1: device descriptor read/8, error -71 [ 632.170474][T11373] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1370'. [ 632.400929][ T5996] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 632.445691][ T5996] usb 8-1: device descriptor read/8, error -71 [ 632.551372][ T5996] usb usb8-port1: unable to enumerate USB device [ 634.292330][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.652725][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.420410][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.479550][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.151029][ T5837] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 636.341000][ T5837] usb 4-1: device descriptor read/64, error -71 [ 636.590934][ T5837] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 636.986923][ T5837] usb 4-1: device descriptor read/64, error -71 [ 637.091779][ T5837] usb usb4-port1: attempt power cycle [ 637.450990][ T5837] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 637.479875][ T5837] usb 4-1: device descriptor read/8, error -71 [ 637.711323][ T5837] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 637.732487][ T5837] usb 4-1: device descriptor read/8, error -71 [ 637.841418][ T5837] usb usb4-port1: unable to enumerate USB device [ 637.966285][T11409] warning: `syz.6.1381' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 638.078320][T11399] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 640.691138][ T5837] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 640.731399][ T989] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 640.841074][ T5837] usb 7-1: device descriptor read/64, error -71 [ 640.880974][ T989] usb 4-1: Using ep0 maxpacket: 32 [ 640.882890][ T989] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 640.882906][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.886545][ T989] usb 4-1: config 0 descriptor?? [ 641.080998][ T5837] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 641.100418][ T989] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 641.210940][ T5837] usb 7-1: device descriptor read/64, error -71 [ 641.311917][ T989] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 641.311981][ T989] dib0700: firmware download failed at 7 with -22 [ 641.338789][ T5837] usb usb7-port1: attempt power cycle [ 641.391362][ T989] usb 4-1: USB disconnect, device number 32 [ 641.711040][ T5837] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 641.757701][ T5837] usb 7-1: device descriptor read/8, error -71 [ 642.021356][ T5837] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 642.041658][ T5837] usb 7-1: device descriptor read/8, error -71 [ 642.151445][ T5837] usb usb7-port1: unable to enumerate USB device [ 644.040079][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.662759][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.826907][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.489962][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1407'. [ 645.601141][ T5837] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 645.751299][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 645.757044][ T5837] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 645.757060][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.784825][ T5837] usb 4-1: config 0 descriptor?? [ 646.154465][ T5837] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 646.176410][ T5837] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 646.176459][ T5837] dib0700: firmware download failed at 7 with -22 [ 646.205815][ T5837] usb 4-1: USB disconnect, device number 33 [ 646.940654][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.932762][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.553727][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.836221][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.165068][T11558] netlink: 'syz.6.1421': attribute type 10 has an invalid length. [ 651.165084][T11558] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1421'. [ 651.165374][T11558] team0: entered promiscuous mode [ 651.165386][T11558] team_slave_0: entered promiscuous mode [ 651.165527][T11558] team_slave_1: entered promiscuous mode [ 651.165657][T11558] team0: entered allmulticast mode [ 651.165664][T11558] team_slave_0: entered allmulticast mode [ 651.165675][T11558] team_slave_1: entered allmulticast mode [ 651.166216][T11558] bridge0: port 3(team0) entered blocking state [ 651.169353][T11558] bridge0: port 3(team0) entered disabled state [ 651.247771][T11558] bridge0: port 3(team0) entered blocking state [ 651.247930][T11558] bridge0: port 3(team0) entered forwarding state [ 651.283847][T11558] netlink: 'syz.6.1421': attribute type 10 has an invalid length. [ 651.283866][T11558] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1421'. [ 651.324536][T11558] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 651.324752][T11558] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 651.336489][T11558] team0: Port device virt_wifi0 added [ 652.689687][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1425'. [ 654.863435][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.645850][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.493284][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.039623][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.409573][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.080396][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.277957][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.522781][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.969685][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 661.011396][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 661.397307][T11642] tipc: Enabled bearer , priority 10 [ 662.609916][ T7255] tipc: Node number set to 2667334146 [ 662.851120][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 666.211679][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.999646][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.487149][ T992] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 667.640950][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 667.643451][ T992] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 667.643479][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.688658][ T992] usb 2-1: config 0 descriptor?? [ 667.894914][ T992] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 667.896167][ T992] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 667.896194][ T992] dib0700: firmware download failed at 7 with -22 [ 668.133921][ T5996] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 668.144937][ T992] usb 2-1: USB disconnect, device number 57 [ 668.160292][ T5996] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 669.486096][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.723128][T11716] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1473'. [ 669.965989][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.161794][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.350693][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.388217][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.769592][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.985173][T11745] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1482'. [ 673.313946][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1485'. [ 674.020446][T11763] block nbd1: shutting down sockets [ 674.364311][ T992] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 674.385323][ T992] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 674.640092][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.772377][ T5937] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 674.931560][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 674.934166][ T5937] usb 4-1: config 0 has an invalid interface number: 26 but max is 0 [ 674.934198][ T5937] usb 4-1: config 0 has no interface number 0 [ 674.934234][ T5937] usb 4-1: config 0 interface 26 has no altsetting 0 [ 674.937166][ T5937] usb 4-1: New USB device found, idVendor=12d1, idProduct=7d1e, bcdDevice=e8.4a [ 674.937193][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.937212][ T5937] usb 4-1: Product: syz [ 674.937227][ T5937] usb 4-1: Manufacturer: syz [ 674.937242][ T5937] usb 4-1: SerialNumber: syz [ 675.013523][ T5937] usb 4-1: config 0 descriptor?? [ 675.580570][ T5937] option 4-1:0.26: GSM modem (1-port) converter detected [ 675.639695][ T5937] usb 4-1: USB disconnect, device number 34 [ 675.655686][ T5937] option 4-1:0.26: device disconnected [ 675.844605][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1500'. [ 676.096242][T11793] block nbd6: shutting down sockets [ 676.175052][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.084059][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1511'. [ 677.340254][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'. [ 677.662230][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.753270][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.786034][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.295541][T11830] block nbd1: shutting down sockets [ 679.357008][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.657391][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.063720][ T5937] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 680.080588][ T5937] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 680.305051][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.416395][T11849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1523'. [ 681.113869][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.583984][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.024533][T11711] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 682.401920][T11711] usb 7-1: Using ep0 maxpacket: 16 [ 682.666140][T11711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.666168][T11711] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 682.666205][T11711] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 682.666229][T11711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.682294][T11711] usb 7-1: config 0 descriptor?? [ 683.434495][T11877] block nbd1: shutting down sockets [ 684.637909][ T992] usb 7-1: USB disconnect, device number 22 [ 684.719480][T11898] fuse: Bad value for 'fd' [ 685.085309][T11900] PKCS7: Unknown OID: [5] (bad) [ 685.085326][T11900] PKCS7: Only support pkcs7_signedData type [ 685.753206][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.753285][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.345712][ T5923] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 686.361701][ T5923] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 688.112283][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.806967][T11938] block nbd6: shutting down sockets [ 692.096129][T11959] fuse: Bad value for 'fd' [ 692.480091][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.723554][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.483890][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 693.672731][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.789758][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1558'. [ 694.405495][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.824887][T11985] block nbd6: shutting down sockets [ 696.473421][T12003] PKCS7: Unknown OID: [5] (bad) [ 696.473455][T12003] PKCS7: Only support pkcs7_signedData type [ 696.793758][T12006] syzkaller0: entered promiscuous mode [ 696.793839][T12006] syzkaller0: entered allmulticast mode [ 697.212699][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.918050][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.891621][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.224810][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.142548][T12023] fuse: Bad value for 'fd' [ 700.443926][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 700.808142][T12031] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1574'. [ 701.686630][T12034] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1576'. [ 703.800041][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.865804][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.998427][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.410944][ T989] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 705.562193][ T989] usb 7-1: Using ep0 maxpacket: 32 [ 705.563758][ T989] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 705.563775][ T989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.632682][ T989] usb 7-1: config 0 descriptor?? [ 705.844823][ T989] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 705.846029][ T989] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 705.846056][ T989] dib0700: firmware download failed at 7 with -22 [ 706.048620][ T989] usb 7-1: USB disconnect, device number 23 [ 706.676932][T12081] PKCS7: Unknown OID: [5] (bad) [ 706.676943][T12081] PKCS7: Only support pkcs7_signedData type [ 712.725862][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.915906][T12146] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1611'. [ 713.915931][T12146] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1611'. [ 713.915945][T12146] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1611'. [ 715.523502][T12162] tipc: Started in network mode [ 715.523520][T12162] tipc: Node identity 5ef3bdd2e506, cluster identity 4711 [ 715.523637][T12162] tipc: Enabled bearer , priority 0 [ 715.524298][T12162] syzkaller0: entered promiscuous mode [ 715.524314][T12162] syzkaller0: entered allmulticast mode [ 715.661843][T12160] tipc: Resetting bearer [ 715.816482][T12160] tipc: Disabling bearer [ 716.070350][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.247317][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.739783][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.108943][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.389724][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.008827][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.430993][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.718906][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.913499][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.362624][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.445651][T12210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 722.716636][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.794288][T12210] syz.3.1631 (12210) used greatest stack depth: 17456 bytes left [ 722.855356][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 723.716326][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.092329][T12226] tipc: Started in network mode [ 724.092347][T12226] tipc: Node identity 56d852594d03, cluster identity 4711 [ 724.092509][T12226] tipc: Enabled bearer , priority 0 [ 724.093067][T12226] syzkaller0: entered promiscuous mode [ 724.093082][T12226] syzkaller0: entered allmulticast mode [ 724.371685][T12225] tipc: Resetting bearer [ 724.778379][T12225] tipc: Disabling bearer [ 724.903870][T12223] netlink: 'syz.7.1636': attribute type 1 has an invalid length. [ 725.339968][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 725.850936][ T7255] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 725.995206][ T7255] usb 4-1: device descriptor read/64, error -71 [ 726.301249][ T7255] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 726.715070][ T7255] usb 4-1: device descriptor read/64, error -71 [ 726.838470][ T7255] usb usb4-port1: attempt power cycle [ 727.510980][ T7255] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 727.531709][ T7255] usb 4-1: device descriptor read/8, error -71 [ 728.771232][ T7255] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 728.971483][T12275] tipc: Enabled bearer , priority 0 [ 728.979280][T12275] syzkaller0: entered promiscuous mode [ 728.979308][T12275] syzkaller0: entered allmulticast mode [ 728.998618][ T7255] usb 4-1: device not accepting address 38, error -71 [ 728.999042][ T7255] usb usb4-port1: unable to enumerate USB device [ 729.080077][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 729.634859][T12271] tipc: Resetting bearer [ 729.885218][T12271] tipc: Disabling bearer [ 730.077718][ T7255] tipc: Node number set to 3153444306 [ 730.192428][T12294] tipc: Started in network mode [ 730.192447][T12294] tipc: Node identity 7f000001, cluster identity 4711 [ 730.192483][T12294] tipc: Enabling of bearer rejected, failed to enable media [ 730.546292][T12292] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 732.355172][T12313] tipc: New replicast peer: 255.255.255.255 [ 732.356716][T12313] tipc: Enabled bearer , priority 10 [ 733.272754][T12322] block nbd3: shutting down sockets [ 733.470998][ T7255] tipc: Node number set to 467358297 [ 735.312082][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1665'. [ 735.638981][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.671197][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.714688][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.817235][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.896495][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.115733][T12350] tipc: Enabled bearer , priority 0 [ 736.116235][T12350] syzkaller0: entered promiscuous mode [ 736.116250][T12350] syzkaller0: entered allmulticast mode [ 736.183122][T12350] tipc: Resetting bearer [ 736.388558][T12344] tipc: Resetting bearer [ 736.644152][T12344] tipc: Disabling bearer [ 736.675702][T12356] block nbd7: shutting down sockets [ 739.747614][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 740.241192][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.309685][T12406] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1689'. [ 741.594948][T12408] tipc: Started in network mode [ 741.594978][T12408] tipc: Node identity 7f000001, cluster identity 4711 [ 741.596736][T12408] tipc: Enabled bearer , priority 10 [ 741.633433][T12408] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 741.636148][T12408] tipc: Enabled bearer , priority 10 [ 741.715852][T12411] block nbd3: shutting down sockets [ 742.519266][T12421] tipc: Enabling of bearer rejected, already enabled [ 742.730936][T11711] tipc: Node number set to 2130706433 [ 743.648026][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.765668][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.435903][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.869210][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.192628][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.192705][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.403440][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.877575][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.023686][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.438137][ T992] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 749.448598][ T992] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 749.703517][T12496] fido_id[12496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 750.111516][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.227953][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.414619][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.932685][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.251245][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.239150][T12539] block nbd3: shutting down sockets [ 755.371402][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1732'. [ 755.925648][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.820964][ T989] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 757.157946][ T989] usb 8-1: Using ep0 maxpacket: 16 [ 757.165380][ T989] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 757.165429][ T989] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 757.165452][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.176791][ T989] usb 8-1: config 0 descriptor?? [ 757.272706][ T989] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 758.274903][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.714820][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.957929][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.484987][ T989] usb 8-1: USB disconnect, device number 16 [ 760.081187][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.140936][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.904406][T12596] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1745'. [ 762.576604][T12604] tipc: New replicast peer: 255.255.255.255 [ 762.577110][T12604] tipc: Enabled bearer , priority 10 [ 763.591017][ T992] tipc: Node number set to 2130706433 [ 764.061095][ T5937] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 764.211017][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 764.220057][ T5937] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 764.220086][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.220108][ T5937] usb 2-1: Product: syz [ 764.220123][ T5937] usb 2-1: Manufacturer: syz [ 764.220138][ T5937] usb 2-1: SerialNumber: syz [ 764.283011][ T5937] usb 2-1: config 0 descriptor?? [ 764.325903][ T5937] usb 2-1: no audio or video endpoints found [ 764.501046][ T992] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 764.554655][T12626] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1754'. [ 764.651029][ T992] usb 7-1: Using ep0 maxpacket: 16 [ 764.656158][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.656836][ T992] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 764.656878][ T992] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 764.656891][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.722822][ T992] usb 7-1: config 0 descriptor?? [ 764.806479][ T992] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 766.318678][T12645] tipc: Enabling of bearer rejected, already enabled [ 766.401901][T12647] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1760'. [ 766.686971][T12649] syz.3.1761 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 766.688561][T12649] ptrace attach of "./syz-executor exec"[5856] was attempted by " [ 766.732632][ T5837] usb 2-1: USB disconnect, device number 58 [ 767.539431][ T5837] usb 7-1: USB disconnect, device number 24 [ 767.885712][T12666] tipc: Enabled bearer , priority 10 [ 767.891892][T12666] tipc: Enabling of bearer rejected, failed to enable media [ 769.686155][T12680] Set syz1 is full, maxelem 65536 reached [ 774.329921][T12729] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1784'. [ 775.482868][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.542331][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.647307][T12743] tipc: Enabling of bearer rejected, already enabled [ 777.167028][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.251103][ T7255] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 777.380994][ T7255] usb 7-1: device descriptor read/64, error -71 [ 777.666225][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.671195][ T7255] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 778.009204][ T7255] usb 7-1: device descriptor read/64, error -71 [ 778.994051][ T7255] usb usb7-port1: attempt power cycle [ 784.434079][T12834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1820'. [ 785.872204][T12856] tipc: Enabling of bearer rejected, already enabled [ 787.418727][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.989542][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.064601][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.737870][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.895085][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.634921][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.004424][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.205320][T12894] tipc: Enabling of bearer rejected, already enabled [ 791.449941][T12894] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 791.450432][T12894] tipc: Enabled bearer , priority 10 [ 791.644153][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.540992][T11711] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 796.710970][T11711] usb 2-1: Using ep0 maxpacket: 32 [ 796.713647][T11711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 796.715508][T11711] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 796.715524][T11711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.715535][T11711] usb 2-1: Product: syz [ 796.715542][T11711] usb 2-1: Manufacturer: syz [ 796.715550][T11711] usb 2-1: SerialNumber: syz [ 796.792312][T11711] usb 2-1: config 0 descriptor?? [ 796.798211][T11711] usb 2-1: no audio or video endpoints found [ 797.593023][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.346039][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.866194][T12956] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1854'. [ 799.514549][ T5997] usb 2-1: USB disconnect, device number 59 [ 799.525260][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.539543][T12960] netlink: 'syz.4.1856': attribute type 10 has an invalid length. [ 799.660114][T12960] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 799.767234][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.775032][T12968] tipc: Enabling of bearer rejected, already enabled [ 799.800531][T12968] tipc: Enabling of bearer rejected, already enabled [ 800.795169][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.074673][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.264487][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.707638][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.873241][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.031112][ T5837] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 803.220974][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 803.224521][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 803.241597][ T5837] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 803.241625][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.241646][ T5837] usb 8-1: Product: syz [ 803.241660][ T5837] usb 8-1: Manufacturer: syz [ 803.241674][ T5837] usb 8-1: SerialNumber: syz [ 803.300211][ T5837] usb 8-1: config 0 descriptor?? [ 803.316119][ T5837] usb 8-1: no audio or video endpoints found [ 803.803035][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.944839][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.575206][ T5837] usb 8-1: USB disconnect, device number 17 [ 805.833240][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.161720][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.821547][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.091124][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.117359][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.117466][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.124089][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.310373][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1884'. [ 809.518132][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1884'. [ 810.738086][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.865089][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.182564][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.858641][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.076729][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.148896][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.588207][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.857416][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.580892][T13096] tipc: Enabled bearer , priority 0 [ 814.646270][T13096] syzkaller0: entered promiscuous mode [ 814.646299][T13096] syzkaller0: entered allmulticast mode [ 814.873065][T13095] tipc: Resetting bearer [ 815.054660][T13095] tipc: Disabling bearer [ 817.242784][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1910'. [ 819.727508][ C0] vkms_vblank_simulate: vblank timer overrun [ 819.818317][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.818289][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.003797][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.719113][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.139485][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.753376][T13170] block nbd6: shutting down sockets [ 829.779523][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.555838][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.773902][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.580421][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.897630][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.922177][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 832.614727][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.647346][ T5837] kernel write not supported for file /686/gid_map (pid: 5837 comm: kworker/1:3) [ 832.821131][T13215] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1934'. [ 833.097061][T13228] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 833.098569][T13229] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 833.100279][T13231] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 833.102578][T13232] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 833.123743][T13234] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 4 [ 833.154758][T13235] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 5 [ 833.155740][T13236] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 6 [ 833.162732][T13237] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 7 [ 833.185059][T13241] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 10 [ 833.185110][T13240] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 9 [ 833.185153][T13239] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 8 [ 833.186363][T13242] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 11 [ 833.187532][T13243] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 12 [ 833.189240][T13244] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 13 [ 833.200563][T13245] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 14 [ 833.205385][T13247] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 16 [ 833.205949][T13246] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 15 [ 833.213441][T13248] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 17 [ 833.215676][T13249] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 18 [ 833.217371][T13250] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 19 [ 833.221352][T13251] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 20 [ 833.221401][T13252] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 21 [ 833.224741][T13253] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 22 [ 833.230309][T13254] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 23 [ 833.234491][T13255] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 24 [ 833.235537][T13256] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 25 [ 833.237783][T13257] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 26 [ 833.239390][T13258] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 27 [ 833.241569][T13259] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 28 [ 833.244464][T13260] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 29 [ 833.248098][T13261] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 30 [ 833.249634][T13262] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 31 [ 833.252968][T13263] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 32 [ 833.258332][T13264] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 33 [ 833.260552][T13265] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 34 [ 833.268782][T13266] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 35 [ 833.273888][T13267] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 36 [ 833.278392][T13269] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 37 [ 833.279082][T13270] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 38 [ 833.285989][T13271] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 39 [ 833.287977][T13272] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 40 [ 833.292239][T13273] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 41 [ 833.297487][T13274] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 42 [ 833.308092][T13275] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 43 [ 833.312970][T13276] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 44 [ 833.315255][T13277] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 45 [ 833.322038][T13278] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 46 [ 833.324878][T13279] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 47 [ 833.328017][T13280] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 48 [ 833.329888][T13281] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 49 [ 833.343386][T13282] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 50 [ 833.345778][T13283] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 51 [ 833.357467][T13284] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 52 [ 833.359801][T13285] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 53 [ 833.362365][T13286] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 54 [ 833.364662][T13287] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 55 [ 833.366917][T13288] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 56 [ 833.371676][T13289] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 57 [ 833.380349][T13290] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 58 [ 833.382121][T13291] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 59 [ 833.391774][T13293] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 61 [ 833.391819][T13292] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 60 [ 833.397755][T13294] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 62 [ 833.404657][T13295] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 63 [ 834.072156][T13268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 834.072363][T13268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 834.072548][T13268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 834.072741][T13268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 835.202604][T13268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 835.248095][T13315] capability: warning: `syz.7.1941' uses 32-bit capabilities (legacy support in use) [ 835.903677][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.005470][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.400525][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 836.400565][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 836.400593][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 836.400657][T10282] Bluetooth: hci1: command 0x0c1a tx timeout [ 836.446001][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.510000][T11711] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 836.635168][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.711585][T11711] usb 7-1: device descriptor read/64, error -71 [ 836.950953][T11711] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 837.435593][T13326] Bluetooth: hci4: command 0x0405 tx timeout [ 837.627012][T13340] tipc: Enabled bearer , priority 0 [ 837.675993][T13344] syzkaller0: entered promiscuous mode [ 837.676012][T13344] syzkaller0: entered allmulticast mode [ 837.914776][T13334] tipc: Resetting bearer [ 838.122061][T13334] tipc: Disabling bearer [ 840.221943][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.624587][T13298] Bluetooth: hci4: command 0x0405 tx timeout [ 848.931574][T13298] Bluetooth: hci4: command 0x0405 tx timeout [ 849.089701][T13426] fuse: Bad value for 'fd' [ 849.335577][T13393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 849.335880][T13393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 849.336159][T13393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 849.336433][T13393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 849.614469][T13393] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 851.331482][T13298] Bluetooth: hci0: command 0x0406 tx timeout [ 851.420987][T13298] Bluetooth: hci4: command 0x0405 tx timeout [ 851.421030][T13298] Bluetooth: hci3: command 0x0406 tx timeout [ 851.421074][T13298] Bluetooth: hci2: command 0x0406 tx timeout [ 851.702916][T10282] Bluetooth: hci1: command 0x0c1a tx timeout [ 856.921043][ T992] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 857.111095][ T992] usb 8-1: Using ep0 maxpacket: 16 [ 857.112697][ T992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.112715][ T992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.112727][ T992] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 857.112750][ T992] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 857.112763][ T992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.196412][ T992] usb 8-1: config 0 descriptor?? [ 857.564068][T13496] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 857.564402][T13496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 857.565660][T13496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 857.566135][T13496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 857.566295][T13496] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 857.688101][T13496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 857.809197][ T992] usbhid 8-1:0.0: can't add hid device: -71 [ 857.809322][ T992] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 857.827380][ T992] usb 8-1: USB disconnect, device number 18 [ 858.912051][T13520] block nbd7: shutting down sockets [ 859.165820][T13522] lo: entered allmulticast mode [ 859.575174][T13326] Bluetooth: hci1: command 0x0c1a tx timeout [ 859.575195][T10282] Bluetooth: hci3: command 0x0406 tx timeout [ 859.575216][T13326] Bluetooth: hci2: command 0x0406 tx timeout [ 859.575233][T10282] Bluetooth: hci0: command 0x0406 tx timeout [ 859.759103][T13326] Bluetooth: hci4: command 0x0405 tx timeout [ 860.752807][T13521] lo: left allmulticast mode [ 861.244961][ C1] vkms_vblank_simulate: vblank timer overrun [ 861.991547][ C1] vkms_vblank_simulate: vblank timer overrun [ 861.996666][T13326] Bluetooth: hci1: command 0x0c1a tx timeout [ 864.810987][ T5923] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 864.934351][T13557] tipc: Enabling of bearer rejected, already enabled [ 864.975253][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 864.986355][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.986385][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.986397][ T5923] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 864.986421][ T5923] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 864.986434][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.992333][ T5923] usb 7-1: config 0 descriptor?? [ 865.653435][ T5923] usbhid 7-1:0.0: can't add hid device: -71 [ 865.653577][ T5923] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 865.680322][ T5923] usb 7-1: USB disconnect, device number 30 [ 866.002201][T13568] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 866.002432][T13568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 866.002637][T13568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 866.072353][T13568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 866.077657][T13568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 866.381575][ T5837] kernel write not supported for file /1513/gid_map (pid: 5837 comm: kworker/1:3) [ 868.638521][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 868.640331][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 868.643115][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 868.643115][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 868.643444][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 868.912526][T13326] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006a: 0000 [#1] SMP KASAN PTI [ 868.912551][T13326] KASAN: null-ptr-deref in range [0x0000000000000350-0x0000000000000357] [ 868.912587][T13326] CPU: 0 UID: 0 PID: 13326 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 868.912611][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 868.912623][T13326] Workqueue: hci1 hci_rx_work [ 868.912656][T13326] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 868.912682][T13326] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 ec dc 08 cc 66 66 66 66 66 66 2e [ 868.912697][T13326] RSP: 0018:ffffc90018307308 EFLAGS: 00010206 [ 868.912711][T13326] RAX: dffffc0000000000 RBX: ffffffff88d7711e RCX: 9e52478b1c721c00 [ 868.912724][T13326] RDX: 0000000000000000 RSI: ffffffff88d7711e RDI: 000000000000006a [ 868.912736][T13326] RBP: ffffffff8a00aa15 R08: 0000000000000001 R09: 0000000000000000 [ 868.912747][T13326] R10: dffffc0000000000 R11: ffffffff8a00a9d0 R12: 0000000000000000 [ 868.912759][T13326] R13: 0000000000000350 R14: 0000000000000350 R15: 0000000000000001 [ 868.912769][T13326] FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 868.912784][T13326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.912795][T13326] CR2: 000000110c3c25c6 CR3: 000000003a8a6000 CR4: 00000000003526f0 [ 868.912810][T13326] Call Trace: [ 868.912816][T13326] [ 868.912822][T13326] __kasan_check_byte+0x12/0x40 [ 868.912843][T13326] lock_acquire+0x8d/0x360 [ 868.912864][T13326] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.912887][T13326] ? __cancel_work+0x254/0x2e0 [ 868.912912][T13326] lock_sock_nested+0x3e/0x130 [ 868.912931][T13326] ? l2cap_sock_ready_cb+0x45/0x140 [ 868.912948][T13326] l2cap_sock_ready_cb+0x45/0x140 [ 868.912965][T13326] l2cap_le_start+0xb0d/0x13b0 [ 868.912987][T13326] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 868.913011][T13326] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.913033][T13326] ? __pfx_l2cap_le_start+0x10/0x10 [ 868.913054][T13326] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 868.913077][T13326] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 868.913100][T13326] ? l2cap_global_fixed_chan+0x2ee/0x380 [ 868.913126][T13326] ? mutex_lock_nested+0x154/0x1d0 [ 868.913143][T13326] ? l2cap_connect_cfm+0x679/0x1040 [ 868.913167][T13326] l2cap_connect_cfm+0x6be/0x1040 [ 868.913193][T13326] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 868.913216][T13326] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 868.913239][T13326] ? hci_connect_cfm+0x86/0x140 [ 868.913260][T13326] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 868.913284][T13326] hci_connect_cfm+0x92/0x140 [ 868.913305][T13326] le_conn_complete_evt+0xcd3/0x1220 [ 868.913331][T13326] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 868.913353][T13326] ? irqentry_exit+0x74/0x90 [ 868.913375][T13326] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.913397][T13326] ? skb_pull_data+0xfb/0x200 [ 868.913415][T13326] hci_le_conn_complete_evt+0x187/0x450 [ 868.913438][T13326] hci_event_packet+0x78f/0x1200 [ 868.913457][T13326] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 868.913477][T13326] ? __pfx_hci_event_packet+0x10/0x10 [ 868.913494][T13326] ? __pfx_migrate_enable+0x10/0x10 [ 868.913520][T13326] ? __rcu_read_unlock+0x84/0xe0 [ 868.913541][T13326] ? hci_send_to_monitor+0xe2/0x570 [ 868.913565][T13326] hci_rx_work+0x46a/0xe80 [ 868.913585][T13326] ? process_scheduled_works+0x9ef/0x17b0 [ 868.913605][T13326] process_scheduled_works+0xade/0x17b0 [ 868.913633][T13326] ? __pfx_process_scheduled_works+0x10/0x10 [ 868.913658][T13326] worker_thread+0x8a0/0xda0 [ 868.913679][T13326] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 868.913704][T13326] ? __kthread_parkme+0x7b/0x200 [ 868.913728][T13326] kthread+0x70e/0x8a0 [ 868.913751][T13326] ? __pfx_worker_thread+0x10/0x10 [ 868.913770][T13326] ? __pfx_kthread+0x10/0x10 [ 868.913794][T13326] ? __pfx_kthread+0x10/0x10 [ 868.913817][T13326] ret_from_fork+0x3f9/0x770 [ 868.913838][T13326] ? __pfx_ret_from_fork+0x10/0x10 [ 868.913859][T13326] ? __switch_to_asm+0x39/0x70 [ 868.913874][T13326] ? __switch_to_asm+0x33/0x70 [ 868.913887][T13326] ? __pfx_kthread+0x10/0x10 [ 868.913910][T13326] ret_from_fork_asm+0x1a/0x30 [ 868.913930][T13326] [ 868.913939][T13326] Modules linked in: [ 868.913958][T13326] ---[ end trace 0000000000000000 ]--- [ 868.913970][T13326] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 868.913999][T13326] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 ec dc 08 cc 66 66 66 66 66 66 2e [ 868.914018][T13326] RSP: 0018:ffffc90018307308 EFLAGS: 00010206 [ 868.914036][T13326] RAX: dffffc0000000000 RBX: ffffffff88d7711e RCX: 9e52478b1c721c00 [ 868.914053][T13326] RDX: 0000000000000000 RSI: ffffffff88d7711e RDI: 000000000000006a [ 868.914067][T13326] RBP: ffffffff8a00aa15 R08: 0000000000000001 R09: 0000000000000000 [ 868.914082][T13326] R10: dffffc0000000000 R11: ffffffff8a00a9d0 R12: 0000000000000000 [ 868.914097][T13326] R13: 0000000000000350 R14: 0000000000000350 R15: 0000000000000001 [ 868.914111][T13326] FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 868.914129][T13326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.914145][T13326] CR2: 000000110c3c25c6 CR3: 000000003a8a6000 CR4: 00000000003526f0 [ 868.914165][T13326] Kernel panic - not syncing: Fatal exception [ 868.914426][T13326] Kernel Offset: disabled