last executing test programs: 16.693073603s ago: executing program 2 (id=5906): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000200000086dd6c3709890019840120010000000000000000000000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b3891f8e85d8fd918f4042a4407e2c9dd8f45cea3b183b8ff17cdf941ae1e3df8e6a744687187"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) msgget$private(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000680)={0x2020}, 0x2020) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x50) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), 0x0) 16.691866364s ago: executing program 1 (id=5916): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680)) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r5 = syz_clone3(&(0x7f00000005c0)={0x200000, &(0x7f0000000100), 0x0, &(0x7f0000000240), {0x8}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f00000004c0)=""/245, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_getattr(r5, &(0x7f0000000640)={0x38}, 0x38, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 14.933399666s ago: executing program 2 (id=5911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000bc08c507c6c6843ade7e100c260f442301242f44adcd8d4554378660a76d431396cad75f73170857077edd56ce8a04dbf22dbf3f049ce5b40935fc342f84626f9694f84ab6dbf2dea5883f58fb98bea120855d3841551fde1a8da957e4c8b8d61f96a847fbb4"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80}, 0x0) 14.214294858s ago: executing program 4 (id=5912): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0x2, 0xce20, @empty}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000380)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="5825be06000000000000007ca2746314d178", 0x12}], 0x1}}], 0x2, 0x4080) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r7 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r7}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 13.61806945s ago: executing program 1 (id=5913): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680)) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r5 = syz_clone3(&(0x7f00000005c0)={0x200000, &(0x7f0000000100), 0x0, &(0x7f0000000240), {0x8}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f00000004c0)=""/245, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_getattr(r5, &(0x7f0000000640)={0x38}, 0x38, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 12.525314334s ago: executing program 3 (id=5914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8, 0x10, 0x9, 0x40000000003}, &(0x7f0000000200)=0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0x6, 0x9, 0x800}}]}, {}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.350001509s ago: executing program 2 (id=5917): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680)) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r5 = syz_clone3(&(0x7f00000005c0)={0x200000, &(0x7f0000000100), 0x0, &(0x7f0000000240), {0x8}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f00000004c0)=""/245, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_getattr(r5, &(0x7f0000000640)={0x38}, 0x38, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 12.167348902s ago: executing program 4 (id=5918): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe, 0x0, 0x0, 0x6}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x2, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) fsmount(r6, 0x0, 0x6) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10.673148135s ago: executing program 0 (id=5919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {0x0}], 0x2, &(0x7f0000000280)=""/7, 0x7}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000008c0), 0x0, 0x0) dup2(r3, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x40012100) r5 = socket$netlink(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001e0021002bbd7000000000000a000000050000000000000014"], 0x30}}, 0x0) 10.504044763s ago: executing program 3 (id=5920): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) shutdown(r1, 0x0) 9.635334951s ago: executing program 2 (id=5921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000180)=0x80000004, 0x51) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt(r5, 0x3, 0x1, &(0x7f00000000c0)="c9a13e03", 0x4) sendmmsg$inet(r3, &(0x7f0000001540), 0x0, 0x0) rt_sigpending(&(0x7f0000000140), 0x8) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000740)={r6, 0x58, &(0x7f00000006c0)}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x110}}, 0x40040) r7 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r7, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) 9.300692926s ago: executing program 3 (id=5922): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r7, &(0x7f0000000200)=""/123, 0x9e, 0xc8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x1, 0x2000}}) socket$netlink(0x10, 0x3, 0x0) 9.194486585s ago: executing program 0 (id=5923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000bc08c507c6c6843ade7e100c260f442301242f44adcd8d4554378660a76d431396cad75f73170857077edd56ce8a04dbf22dbf3f049ce5b40935fc342f84626f9694f84ab6dbf2dea5883f58fb98bea120855d3841551fde1a8da957e4c8b8d61f96a847fbb4"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80}, 0x0) 9.187905348s ago: executing program 4 (id=5924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, 0x0, 0x8000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x20000000) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0xfffffffffffffc01, 0x0) tee(r3, r6, 0x60000000000, 0x0) socket(0x1f, 0x3, 0xfa) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 9.052651385s ago: executing program 1 (id=5925): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x158, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0xe8, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x1}}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x4}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7.585630086s ago: executing program 1 (id=5926): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x60, [0x3ff, 0xef8, 0x800, 0x0, 0x5, 0x1], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000300)=""/96}, &(0x7f0000000400)=0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904"], 0x0) r6 = userfaultfd(0x80001) read$FUSE(r6, 0x0, 0x0) 7.11993521s ago: executing program 0 (id=5927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000bc08c507c6c6843ade7e100c260f442301242f44adcd8d4554378660a76d431396cad75f73170857077edd56ce8a04dbf22dbf3f049ce5b40935fc342f84626f9694f84ab6dbf2dea5883f58fb98bea120855d3841551fde1a8da957e4c8b8d61f96a847fbb4"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80}, 0x0) 6.958453578s ago: executing program 3 (id=5928): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, 0x0, 0x8000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) pipe2(0x0, 0x0) r3 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r4, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, r4, 0x60000000000, 0x0) socket(0x1f, 0x3, 0xfa) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 6.419316397s ago: executing program 2 (id=5929): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x3, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x402c5829, 0x0) dup2(r7, r0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.27121464s ago: executing program 4 (id=5930): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x4b63, 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r5, 0x5450) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x400, 0x40, 0x20, 0x1}]}) close_range(r6, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 5.512556026s ago: executing program 0 (id=5931): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680)) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r5 = syz_clone3(&(0x7f00000005c0)={0x200000, &(0x7f0000000100), 0x0, &(0x7f0000000240), {0x8}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f00000004c0)=""/245, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_getattr(r5, &(0x7f0000000640)={0x38}, 0x38, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 4.355393725s ago: executing program 4 (id=5932): syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) syz_clone(0x93f0b91, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c010000100013070000000000000000200100000000000000000000000000000000000000000000000000000000000000000000000000000a0000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x2}, {0x6, 0x0, 0x6, 0x2}]}, 0x8) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4804) sendfile(r5, r5, 0x0, 0xffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x1000000, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.764496509s ago: executing program 1 (id=5933): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) shutdown(r1, 0x0) 3.586552095s ago: executing program 0 (id=5934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000bc08c507c6c6843ade7e100c260f442301242f44adcd8d4554378660a76d431396cad75f73170857077edd56ce8a04dbf22dbf3f049ce5b40935fc342f84626f9694f84ab6dbf2dea5883f58fb98bea120855d3841551fde1a8da957e4c8b8d61f96a847fbb4"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80}, 0x0) 3.569810034s ago: executing program 3 (id=5935): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x60, [0x3ff, 0xef8, 0x800, 0x0, 0x5, 0x1], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000300)=""/96}, &(0x7f0000000400)=0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904"], 0x0) r6 = userfaultfd(0x80001) read$FUSE(r6, 0x0, 0x0) 2.797937921s ago: executing program 4 (id=5936): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f00000003c0)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000884) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0xffff6e84}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf25000000", @ANYRES32=0x0, @ANYBLOB="1c20000035020000140035007465616d5f736c6176655f31000000001800"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080003400000001208000240000000"], 0xd8}}, 0x8090) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) 2.158135512s ago: executing program 1 (id=5937): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.871351768s ago: executing program 2 (id=5938): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) r5 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@empty, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) 1.251706729s ago: executing program 0 (id=5939): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "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"}}}}, 0xfce) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x157) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000440)=""/252) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r4 = gettid() syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4], 0x1}, 0x58) timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x0, @tid=r4}, &(0x7f0000000040)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000006b010000feffffff00000000e6", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) 0s ago: executing program 3 (id=5940): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, 0x0, 0x8000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) pipe2(0x0, 0x0) r3 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r4, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, r4, 0x60000000000, 0x0) socket(0x1f, 0x3, 0xfa) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) kernel console output (not intermixed with test programs): ast peer: 255.255.255.255 [ 2068.457567][T29938] tipc: Enabled bearer , priority 10 [ 2068.472493][T29938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5178'. [ 2068.482530][T29938] tipc: Disabling bearer [ 2070.451500][T29960] tipc: New replicast peer: 255.255.255.255 [ 2070.529360][T29960] tipc: Enabled bearer , priority 10 [ 2070.875457][T29963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5182'. [ 2070.886997][T29963] tipc: Disabling bearer [ 2071.995333][ T5900] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2072.257276][ T5900] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2072.268506][ T5900] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2072.283950][ T5900] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2072.298315][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.366462][T29979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2072.412638][ T5900] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2072.612144][T29979] syz_tun: entered allmulticast mode [ 2072.963189][T29986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5186'. [ 2074.457267][T30001] vivid-004: kernel_thread() failed [ 2074.990384][T29998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5189'. [ 2075.096037][T29999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5189'. [ 2075.114833][T24884] usb 4-1: USB disconnect, device number 19 [ 2077.831446][T30038] 8021q: VLANs not supported on syzkaller1 [ 2078.533700][ T30] audit: type=1326 audit(1764532684.981:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2078.585911][ T30] audit: type=1326 audit(1764532684.981:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2078.586369][T30044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5193'. [ 2078.685434][ T30] audit: type=1326 audit(1764532684.981:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2078.720620][T30052] tipc: New replicast peer: 255.255.255.255 [ 2078.727373][T30052] tipc: Enabled bearer , priority 10 [ 2078.734771][T30052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5198'. [ 2078.743939][T30052] tipc: Disabling bearer [ 2078.855960][ T30] audit: type=1326 audit(1764532684.981:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2078.943635][ T30] audit: type=1326 audit(1764532684.981:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2078.984560][ T30] audit: type=1326 audit(1764532684.981:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2079.295241][ T30] audit: type=1326 audit(1764532684.981:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2079.317856][ C1] vkms_vblank_simulate: vblank timer overrun [ 2079.375406][ T30] audit: type=1326 audit(1764532684.981:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2079.405569][ T30] audit: type=1326 audit(1764532684.981:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2079.758825][ T30] audit: type=1326 audit(1764532685.111:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30045 comm="syz.3.5197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2081.207753][T30078] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5202'. [ 2081.217224][T30078] veth0_to_hsr: left promiscuous mode [ 2082.922841][T30100] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 2082.953754][T30100] IPv6: Can't replace route, no match found [ 2084.591081][T30078] bond3: (slave macvlan2): Releasing active interface [ 2085.618935][T30078] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 2085.658886][T30078] bond0 (unregistering): Released all slaves [ 2085.816021][T30085] syzkaller1: entered promiscuous mode [ 2085.821603][T30085] syzkaller1: entered allmulticast mode [ 2086.979471][T30137] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2088.880118][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5212'. [ 2088.951932][T30163] random: crng reseeded on system resumption [ 2090.523167][T30182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2090.529288][T30182] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2092.656783][T30215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5226'. [ 2093.035298][T19107] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 2095.547721][T19107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2095.557498][T19107] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2095.565073][T19107] usb 5-1: can't read configurations, error -71 [ 2097.900004][T30267] fuse: Unknown parameter '0x0000000000000008' [ 2097.945250][T11041] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 2099.165877][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.172228][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.360975][T11041] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2099.375634][T11041] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2099.416632][T11041] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2099.816877][T11041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.345416][T11041] usb 3-1: usb_control_msg returned -32 [ 2100.351101][T11041] usbtmc 3-1:16.0: can't read capabilities [ 2100.587837][T30291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5233'. [ 2103.015339][T25068] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 2103.060105][ T5900] usb 3-1: USB disconnect, device number 25 [ 2103.165524][T19102] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2103.885258][T19102] usb 2-1: Using ep0 maxpacket: 8 [ 2103.897435][T19102] usb 2-1: config index 0 descriptor too short (expected 29970, got 18) [ 2103.917421][T19102] usb 2-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 2104.015349][T19102] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 2104.064019][T19102] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 2104.073352][T19102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.116503][T19102] usb 2-1: Product: syz [ 2104.144907][T19102] usb 2-1: Manufacturer: syz [ 2104.155462][T19102] usb 2-1: SerialNumber: syz [ 2104.169853][T19102] usb 2-1: config 0 descriptor?? [ 2104.194141][T19102] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 2104.212024][T19102] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input93 [ 2104.417768][T11041] usb 2-1: USB disconnect, device number 26 [ 2106.645325][T25068] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2106.836136][T30335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5246'. [ 2106.959588][T25068] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2106.986712][T25068] usb 4-1: can't read configurations, error -71 [ 2107.159642][T30340] netlink: 'syz.3.5248': attribute type 4 has an invalid length. [ 2109.820056][T30371] tipc: New replicast peer: 255.255.255.255 [ 2109.841312][T30371] tipc: Enabled bearer , priority 10 [ 2109.892042][T30379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5254'. [ 2110.067630][T30379] tipc: Disabling bearer [ 2110.964423][T30385] tipc: New replicast peer: 255.255.255.255 [ 2110.972315][T30385] tipc: Enabled bearer , priority 10 [ 2110.979644][T30385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5255'. [ 2110.988972][T30385] tipc: Disabling bearer [ 2113.647550][T30417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'. [ 2113.668230][T30417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'. [ 2115.669381][T30432] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 2117.166622][T30446] tipc: New replicast peer: 255.255.255.255 [ 2117.173296][T30446] tipc: Enabled bearer , priority 10 [ 2117.180705][T30446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5269'. [ 2117.225596][T30446] tipc: Disabling bearer [ 2119.915404][ T5900] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2119.950688][T30481] program syz.2.5272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2120.326608][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2120.336885][ T5900] usb 4-1: config 0 has no interfaces? [ 2120.344988][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2120.354499][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2120.365308][ T5900] usb 4-1: Product: syz [ 2120.378226][ T5900] usb 4-1: Manufacturer: syz [ 2120.385622][ T5900] usb 4-1: SerialNumber: syz [ 2120.396527][ T5900] usb 4-1: config 0 descriptor?? [ 2122.496053][T30508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5277'. [ 2122.834231][T25068] usb 4-1: USB disconnect, device number 22 [ 2122.905517][T30495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5277'. [ 2123.203538][T30515] tipc: New replicast peer: 255.255.255.255 [ 2123.212398][T30515] tipc: Enabled bearer , priority 10 [ 2123.245953][T19107] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2123.318919][T30515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5281'. [ 2123.328270][T30515] tipc: Disabling bearer [ 2123.581898][T19107] usb 1-1: Using ep0 maxpacket: 16 [ 2124.235854][T30525] netlink: 'syz.1.5280': attribute type 2 has an invalid length. [ 2124.378502][T30525] !: entered promiscuous mode [ 2124.569059][T30524] sg_write: process 4364 (syz.3.5282) changed security contexts after opening file descriptor, this is not allowed. [ 2124.598170][T30525] netlink: 'syz.1.5280': attribute type 2 has an invalid length. [ 2124.675783][T30525] !: left promiscuous mode [ 2126.466797][T30547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5285'. [ 2127.466647][T19107] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2127.477569][T19107] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2127.486794][T19107] usb 1-1: can't read configurations, error -71 [ 2128.335240][T19107] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2128.547561][T30560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5288'. [ 2128.959200][T19107] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2129.076803][T19107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.139897][T19107] usb 1-1: Product: syz [ 2129.146991][T19107] usb 1-1: Manufacturer: syz [ 2129.157164][T19107] usb 1-1: SerialNumber: syz [ 2129.182888][T19107] usb 1-1: config 0 descriptor?? [ 2129.411486][T19107] hso 1-1:0.0: Failed to find BULK IN ep [ 2129.426224][T19107] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2129.702530][T30573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5289'. [ 2129.852438][T19107] usb 1-1: USB disconnect, device number 9 [ 2130.263975][T30585] tipc: New replicast peer: 255.255.255.255 [ 2130.287069][T30585] tipc: Enabled bearer , priority 10 [ 2130.319118][T30585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5294'. [ 2130.352767][T30585] tipc: Disabling bearer [ 2131.936352][T30607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5298'. [ 2131.949664][T30607] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5298'. [ 2132.266902][T19107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2132.602164][T24884] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2132.738497][T19107] usb 5-1: Using ep0 maxpacket: 8 [ 2132.775071][T19107] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2132.809384][T24884] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2132.820895][T19107] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2132.831440][T24884] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2132.850015][T19107] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2132.870946][T24884] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2132.892514][T24884] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2132.929151][T24884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.938341][T19107] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2132.987767][T24884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2133.015236][T19107] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2133.071971][T19107] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2133.117296][T19107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.165741][T30620] tipc: New replicast peer: 255.255.255.255 [ 2133.173604][T30620] tipc: Enabled bearer , priority 10 [ 2133.181508][T30620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5300'. [ 2133.330680][T30620] tipc: Disabling bearer [ 2133.403910][T24884] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2133.548335][T19107] usb 5-1: GET_CAPABILITIES returned 0 [ 2133.562947][T19107] usbtmc 5-1:16.0: can't read capabilities [ 2133.993759][T30607] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 2134.265427][T19107] usb 5-1: USB disconnect, device number 6 [ 2135.338235][T30635] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5302'. [ 2135.558731][T30643] netlink: 'syz.2.5304': attribute type 1 has an invalid length. [ 2135.609052][T19107] usb 2-1: USB disconnect, device number 27 [ 2135.635941][T30643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2138.775480][T24884] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2139.385284][T24884] usb 3-1: Using ep0 maxpacket: 16 [ 2139.498654][T24884] usb 3-1: config 0 has no interfaces? [ 2139.756673][T24884] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2139.772264][T24884] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2139.851119][T24884] usb 3-1: Manufacturer: syz [ 2139.991410][T24884] usb 3-1: config 0 descriptor?? [ 2140.391768][T30679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.529913][T30679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.844067][T24884] usb 3-1: USB disconnect, device number 26 [ 2142.013487][T30707] tipc: New replicast peer: 255.255.255.255 [ 2142.052165][T30707] tipc: Enabled bearer , priority 10 [ 2142.194382][T30714] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2142.234350][T30707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5316'. [ 2142.257215][T30707] tipc: Disabling bearer [ 2143.801812][T25068] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2144.243881][T25068] usb 2-1: Using ep0 maxpacket: 16 [ 2146.533649][T25068] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2146.575552][T25068] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2146.603119][T25068] usb 2-1: can't read configurations, error -71 [ 2146.866316][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5323'. [ 2147.805420][T19107] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2147.997347][T19107] usb 5-1: Using ep0 maxpacket: 16 [ 2148.016106][T19107] usb 5-1: config 0 has no interfaces? [ 2148.022623][T19107] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2148.042774][T19107] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2148.196599][T19107] usb 5-1: Manufacturer: syz [ 2148.216313][T19107] usb 5-1: config 0 descriptor?? [ 2148.245420][T30785] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 2148.443732][T30778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5326'. [ 2148.881340][T30771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.900165][T30771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.234891][T24884] usb 5-1: USB disconnect, device number 7 [ 2150.295824][T30807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5332'. [ 2150.307027][T30807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5332'. [ 2153.762803][T30840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2154.205314][T19107] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2154.515488][T19107] usb 3-1: Using ep0 maxpacket: 16 [ 2155.299455][T30864] tipc: New replicast peer: 255.255.255.255 [ 2155.306401][T30864] tipc: Enabled bearer , priority 10 [ 2155.312835][T30855] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5342'. [ 2155.323249][T30864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5343'. [ 2155.376918][T30864] tipc: Disabling bearer [ 2157.397104][T30879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5345'. [ 2157.727130][T19107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2157.741928][T19107] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2157.786228][T19107] usb 3-1: can't read configurations, error -71 [ 2158.125016][ T5900] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2158.125048][T25068] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2158.343162][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 2158.476039][ T5900] usb 2-1: config 0 has no interfaces? [ 2158.610001][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2158.630764][T25068] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2158.642129][T25068] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2158.652039][T25068] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2158.662660][T25068] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2158.672119][T25068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.693547][T25068] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2158.774402][ T5900] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2158.802950][ T5900] usb 2-1: Manufacturer: syz [ 2158.869005][ T5900] usb 2-1: config 0 descriptor?? [ 2159.050759][T25068] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2159.756040][T30888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.764688][T30888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.653808][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.662572][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.303064][ T5900] usb 5-1: USB disconnect, device number 8 [ 2162.343337][T25068] usb 2-1: USB disconnect, device number 30 [ 2162.676856][T30942] tipc: New replicast peer: 255.255.255.255 [ 2162.695848][T30944] fuse: Bad value for 'fd' [ 2162.709933][T30942] tipc: Enabled bearer , priority 10 [ 2163.435362][T30951] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2163.487900][T30949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5356'. [ 2163.535302][T30949] tipc: Disabling bearer [ 2165.288533][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2165.288545][ T30] audit: type=1326 audit(1764532771.881:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.367539][T30969] netlink: 'syz.3.5365': attribute type 1 has an invalid length. [ 2165.379850][T30966] hub 1-0:1.0: USB hub found [ 2165.399093][ T30] audit: type=1326 audit(1764532771.951:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.421021][ C1] vkms_vblank_simulate: vblank timer overrun [ 2165.421676][T30966] hub 1-0:1.0: 1 port detected [ 2165.429893][ T30] audit: type=1326 audit(1764532771.951:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.454526][ C1] vkms_vblank_simulate: vblank timer overrun [ 2165.472568][ T30] audit: type=1326 audit(1764532771.951:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.533308][ T30] audit: type=1326 audit(1764532771.951:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.554240][T30971] syz.4.5364(30971): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2165.555622][ T30] audit: type=1326 audit(1764532771.951:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.590684][ T30] audit: type=1326 audit(1764532771.971:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.615385][ T30] audit: type=1326 audit(1764532771.971:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.637627][ T30] audit: type=1800 audit(1764532771.981:2311): pid=30971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5364" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 2165.664866][ T30] audit: type=1326 audit(1764532771.991:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30970 comm="syz.4.5364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2165.708319][T30969] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2166.100555][T30986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2166.227732][T19107] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2166.399065][T19107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2166.430596][T19107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2166.477696][T19107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2166.579996][T19107] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2166.736814][T19107] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2166.757403][T19107] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2166.766112][T19107] usb 2-1: Manufacturer: syz [ 2166.783307][T19107] usb 2-1: config 0 descriptor?? [ 2167.212302][T30984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2167.225309][T19107] rc_core: IR keymap rc-hauppauge not found [ 2167.231601][T19107] Registered IR keymap rc-empty [ 2167.265779][T30984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2167.278326][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.316209][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.456564][T19107] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2167.470663][T19107] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input94 [ 2167.492094][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.535535][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.625356][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.655575][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.817129][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2167.880520][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2168.019895][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2168.045480][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2168.054782][T31017] tipc: Enabling of bearer rejected, failed to enable media [ 2168.078768][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2168.106205][T19107] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2168.247818][T19107] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2168.265246][T19107] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2168.787839][T19107] usb 2-1: USB disconnect, device number 31 [ 2170.390234][T31046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5378'. [ 2170.555463][ T5900] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2170.604185][T31044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5377'. [ 2170.723368][ T5900] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.757322][ T5900] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2170.871296][ T5900] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2170.935313][ T5900] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2170.969178][ T5900] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2170.995344][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.051043][ T5900] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2171.309210][T25068] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2171.366575][ T5900] usb 3-1: invalid MIDI out EP 0 [ 2171.384898][T31059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5376'. [ 2171.552800][T25068] usb 5-1: Using ep0 maxpacket: 8 [ 2171.668742][T25068] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2171.691047][T25068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.707081][T25068] usb 5-1: Product: syz [ 2171.715387][T25068] usb 5-1: Manufacturer: syz [ 2171.732509][T25068] usb 5-1: SerialNumber: syz [ 2172.182790][T25068] usb 5-1: config 0 descriptor?? [ 2172.187912][ T5900] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2172.223946][T25068] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2172.865669][T19102] usb 3-1: USB disconnect, device number 29 [ 2173.349433][T31072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5383'. [ 2174.286873][T25068] gspca_m5602: Failed to find a sensor [ 2174.295295][T25068] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 2174.320059][T25068] usb 5-1: USB disconnect, device number 9 [ 2175.025641][T31088] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 2175.640656][T31064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5381'. [ 2176.216705][ T5900] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2177.570638][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2177.581835][ T5900] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2177.591899][ T5900] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2177.784195][ T5900] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2177.803852][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.887763][ T5900] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2177.917477][ T5900] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2178.000165][T27499] udevd[27499]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2178.722452][T31126] batadv_slave_1: entered promiscuous mode [ 2178.749767][T31126] batadv_slave_1: left promiscuous mode [ 2179.718531][T24884] usb 1-1: USB disconnect, device number 10 [ 2179.942963][T31138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5396'. [ 2180.298501][T24884] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2180.465882][T24884] usb 4-1: Using ep0 maxpacket: 8 [ 2180.480877][T24884] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2180.605497][T24884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.622074][T24884] usb 4-1: Product: syz [ 2180.629895][T24884] usb 4-1: Manufacturer: syz [ 2180.637158][T24884] usb 4-1: SerialNumber: syz [ 2180.705402][T24884] usb 4-1: config 0 descriptor?? [ 2180.722702][T24884] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2180.900573][T31149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5407'. [ 2181.232903][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2181.232922][ T30] audit: type=1800 audit(1764532787.811:2346): pid=31149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5407" name="bus" dev="tmpfs" ino=1228 res=0 errno=0 [ 2182.197611][T26700] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2182.393648][T26700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.404119][T26700] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2182.419086][T26700] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2182.429154][T26700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2182.438140][T26700] usb 2-1: SerialNumber: syz [ 2182.781815][T24884] gspca_m5602: Failed to find a sensor [ 2182.787682][T24884] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 2182.832338][T24884] usb 4-1: USB disconnect, device number 23 [ 2183.957252][T26700] usb 2-1: 0:2 : does not exist [ 2183.964199][T31166] tipc: New replicast peer: 255.255.255.255 [ 2183.988414][T31166] tipc: Enabled bearer , priority 10 [ 2184.062727][T26700] usb 2-1: USB disconnect, device number 32 [ 2184.063900][T31168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5399'. [ 2184.118824][T31168] tipc: Disabling bearer [ 2184.188659][T23227] udevd[23227]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2184.824603][T31184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5400'. [ 2186.303362][T31210] tipc: New replicast peer: 255.255.255.255 [ 2186.311446][T31210] tipc: Enabled bearer , priority 10 [ 2186.323438][T31210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5409'. [ 2186.432742][T31210] tipc: Disabling bearer [ 2186.784444][ T30] audit: type=1326 audit(1764532793.351:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2187.125568][ T30] audit: type=1326 audit(1764532793.351:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2187.147752][ C1] vkms_vblank_simulate: vblank timer overrun [ 2187.235274][ T30] audit: type=1326 audit(1764532793.351:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2187.493924][ T30] audit: type=1326 audit(1764532793.351:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2187.565439][ T30] audit: type=1326 audit(1764532793.351:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2187.659228][ T30] audit: type=1326 audit(1764532793.351:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2187.681314][ C1] vkms_vblank_simulate: vblank timer overrun [ 2187.842023][ T30] audit: type=1326 audit(1764532793.351:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2187.864129][ C1] vkms_vblank_simulate: vblank timer overrun [ 2188.047984][ T30] audit: type=1326 audit(1764532793.351:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2188.116486][ T30] audit: type=1326 audit(1764532793.351:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2188.445266][T26700] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2188.499860][ T30] audit: type=1326 audit(1764532793.351:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31213 comm="syz.4.5410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2188.715357][T26700] usb 1-1: Using ep0 maxpacket: 8 [ 2188.724448][T26700] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2188.733720][T26700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.759026][T31238] netlink: 320 bytes leftover after parsing attributes in process `syz.3.5413'. [ 2188.844718][T26700] usb 1-1: Product: syz [ 2188.850462][T26700] usb 1-1: Manufacturer: syz [ 2188.864836][T26700] usb 1-1: SerialNumber: syz [ 2189.616179][T26700] usb 1-1: config 0 descriptor?? [ 2189.647596][T26700] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2189.686497][T31243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5411'. [ 2190.426701][T31251] tipc: New replicast peer: 255.255.255.255 [ 2190.434275][T31251] tipc: Enabled bearer , priority 10 [ 2190.441776][T31251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5415'. [ 2190.456913][T31251] tipc: Disabling bearer [ 2191.132041][T26700] gspca_m5602: Failed to find a sensor [ 2191.139869][T26700] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 2191.293772][T26700] usb 1-1: USB disconnect, device number 11 [ 2191.485384][T25068] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2191.828392][T25068] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.845607][T25068] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2191.891052][T25068] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2191.900329][T25068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2191.908805][T25068] usb 4-1: SerialNumber: syz [ 2192.880608][T31276] tipc: New replicast peer: 255.255.255.255 [ 2192.887684][T31276] tipc: Enabled bearer , priority 10 [ 2192.894341][T31277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5420'. [ 2192.917680][T31277] tipc: Disabling bearer [ 2193.892785][T25068] usb 4-1: 0:2 : does not exist [ 2194.064080][T25068] usb 4-1: USB disconnect, device number 24 [ 2194.205455][T23227] udevd[23227]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 2194.347963][T31266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5419'. [ 2197.126458][T31311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2197.666085][T31318] tipc: New replicast peer: 255.255.255.255 [ 2197.678996][T31318] tipc: Enabled bearer , priority 10 [ 2197.696115][T31318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5428'. [ 2197.727949][T31319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5427'. [ 2197.783576][T31318] tipc: Disabling bearer [ 2197.818188][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2197.818206][ T30] audit: type=1800 audit(1764532804.411:2390): pid=31319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5427" name="bus" dev="tmpfs" ino=5659 res=0 errno=0 [ 2198.817859][T31330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5431'. [ 2198.973449][T31333] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2200.714722][T31330] team0: Port device dummy0 removed [ 2200.721200][T31330] batman_adv: batadv0: Adding interface: dummy0 [ 2200.727925][T31330] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.783910][T31323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5429'. [ 2200.795515][T31323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5429'. [ 2200.825523][T31330] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2201.947499][T31361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5435'. [ 2202.035435][ T30] audit: type=1800 audit(1764532808.611:2391): pid=31362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5435" name="nullb0" dev="devtmpfs" ino=4232 res=0 errno=0 [ 2202.143393][T31357] tipc: New replicast peer: 255.255.255.255 [ 2202.181640][T31357] tipc: Enabled bearer , priority 10 [ 2202.195729][T31359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5433'. [ 2202.206303][T31359] tipc: Disabling bearer [ 2202.484697][T31353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5434'. [ 2203.189867][T31380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5438'. [ 2203.235309][ T5900] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 2203.450085][ T5900] usb 4-1: not running at top speed; connect to a high speed hub [ 2203.468747][ T5900] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2203.495473][ T5900] usb 4-1: config 1 has no interface number 1 [ 2203.501789][ T5900] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2203.533293][ T5900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2203.542693][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.561259][ T5900] usb 4-1: Product: syz [ 2203.571439][ T5900] usb 4-1: Manufacturer: syz [ 2203.577116][ T5900] usb 4-1: SerialNumber: syz [ 2203.585520][T19107] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2203.612730][ T30] audit: type=1326 audit(1764532810.201:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2203.744281][ T30] audit: type=1326 audit(1764532810.231:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2204.043864][T19107] usb 5-1: Using ep0 maxpacket: 16 [ 2204.258962][T31391] tipc: New replicast peer: 255.255.255.255 [ 2204.295753][ T30] audit: type=1326 audit(1764532810.231:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2204.322120][T31391] tipc: Enabled bearer , priority 10 [ 2204.330600][T31392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5442'. [ 2204.503855][T31392] tipc: Disabling bearer [ 2204.527847][ T30] audit: type=1326 audit(1764532810.231:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2204.583441][ T30] audit: type=1326 audit(1764532810.231:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2204.782271][ T30] audit: type=1326 audit(1764532810.231:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2204.806146][ T5900] usb 4-1: failed to enable PITCH for EP 0x82 [ 2204.851756][ T5900] usb 4-1: USB disconnect, device number 25 [ 2204.897730][ T30] audit: type=1326 audit(1764532810.231:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2205.004721][ T30] audit: type=1326 audit(1764532810.231:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2205.026930][ C1] vkms_vblank_simulate: vblank timer overrun [ 2205.095824][ T30] audit: type=1326 audit(1764532810.231:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2205.239267][ T30] audit: type=1326 audit(1764532810.231:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31377 comm="syz.2.5440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2205.261395][ C1] vkms_vblank_simulate: vblank timer overrun [ 2205.318425][T31399] tipc: New replicast peer: 255.255.255.255 [ 2205.333167][T31399] tipc: Enabled bearer , priority 10 [ 2205.366479][T31399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5444'. [ 2205.375659][T31399] tipc: Disabling bearer [ 2205.443033][T31401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2205.885587][T25068] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2206.285339][T25068] usb 1-1: Using ep0 maxpacket: 32 [ 2206.317989][T25068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2206.758860][T19107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2207.003347][T25068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2207.013536][T25068] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2207.025748][T19107] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2207.033332][T19107] usb 5-1: can't read configurations, error -71 [ 2207.040532][T25068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2207.135342][T25068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2207.424230][T25068] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2207.434516][T25068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.964593][T25068] usb 1-1: Product: syz [ 2207.975385][T25068] usb 1-1: Manufacturer: syz [ 2207.980036][T25068] usb 1-1: SerialNumber: syz [ 2208.067287][T25068] usb 1-1: config 0 descriptor?? [ 2208.075988][T31406] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2208.091680][T25068] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input96 [ 2208.202983][T23480] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2208.280553][ T5183] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2208.494896][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 2208.605485][ T5183] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2208.680364][ T5183] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2208.734370][ T5183] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2208.831233][ T5183] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2208.857856][ T5183] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2209.595330][T24884] usb 1-1: USB disconnect, device number 12 [ 2210.715020][T31458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5450'. [ 2210.850028][T31459] tipc: New replicast peer: 255.255.255.255 [ 2210.871161][T31459] tipc: Enabled bearer , priority 10 [ 2211.028076][T31467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5453'. [ 2211.092984][T31467] tipc: Disabling bearer [ 2214.071466][T31497] tipc: New replicast peer: 255.255.255.255 [ 2214.090686][T31497] tipc: Enabled bearer , priority 10 [ 2214.111795][T31497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5458'. [ 2214.138908][T31497] tipc: Disabling bearer [ 2214.271937][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5469'. [ 2215.276782][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5462'. [ 2215.922945][T31525] 8021q: adding VLAN 0 to HW filter on device .` [ 2216.029228][T31525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2216.245398][T25068] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2216.415659][T25068] usb 2-1: Using ep0 maxpacket: 32 [ 2216.439459][T25068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2216.471278][T25068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2216.496632][T25068] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2216.514246][T25068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2216.530370][T25068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2216.551039][T25068] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2216.560766][T25068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.569004][T25068] usb 2-1: Product: syz [ 2216.573578][T25068] usb 2-1: Manufacturer: syz [ 2216.578244][T25068] usb 2-1: SerialNumber: syz [ 2216.645389][T25068] usb 2-1: config 0 descriptor?? [ 2216.680507][T31531] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2216.694915][T25068] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input97 [ 2216.730486][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2216.970422][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2216.991243][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2217.002939][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2217.174162][T23480] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2217.302223][T31509] batman_adv: batadv0: Adding interface: dummy0 [ 2217.309900][T31509] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 2217.364763][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2217.399315][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2217.415936][T31509] batman_adv: batadv0: Interface activated: dummy0 [ 2217.437938][ T5183] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2217.508906][T31512] batadv0: mtu less than device minimum [ 2217.540309][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2217.552354][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2217.563639][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2217.574817][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2217.586019][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2217.597169][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2217.608336][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2217.619477][T31512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2218.028287][T31544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5466'. [ 2218.731745][T31550] tipc: New replicast peer: 255.255.255.255 [ 2218.738588][T31550] tipc: Enabled bearer , priority 10 [ 2218.791771][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5467'. [ 2218.801487][T31550] tipc: Disabling bearer [ 2218.931972][T25068] usb 2-1: USB disconnect, device number 33 [ 2221.247251][T31572] tipc: New replicast peer: 255.255.255.255 [ 2221.271404][T31572] tipc: Enabled bearer , priority 10 [ 2221.282136][T31573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5474'. [ 2221.302005][T31573] tipc: Disabling bearer [ 2221.847614][T31587] tipc: New replicast peer: 255.255.255.255 [ 2221.854049][T31587] tipc: Enabled bearer , priority 10 [ 2221.878069][T31587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5476'. [ 2221.887319][T31587] tipc: Disabling bearer [ 2221.923876][T31588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5470'. [ 2221.933280][T31588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5470'. [ 2221.977615][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.984616][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.183759][T31609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5480'. [ 2223.596480][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5480'. [ 2225.007346][T31627] tipc: New replicast peer: 255.255.255.255 [ 2225.017129][T31627] tipc: Enabled bearer , priority 10 [ 2225.031430][T31627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5485'. [ 2225.505580][T31627] tipc: Disabling bearer [ 2228.030662][T31651] tipc: New replicast peer: 255.255.255.255 [ 2228.040941][T31651] tipc: Enabled bearer , priority 10 [ 2228.048919][T31651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5488'. [ 2228.059516][T31651] tipc: Disabling bearer [ 2229.405269][T25068] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2229.605421][T25068] usb 3-1: Using ep0 maxpacket: 8 [ 2229.616223][T25068] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2229.625846][T25068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.634140][T25068] usb 3-1: Product: syz [ 2229.666357][T31674] tipc: New replicast peer: 255.255.255.255 [ 2229.676421][T31674] tipc: Enabled bearer , priority 10 [ 2229.688885][T25068] usb 3-1: Manufacturer: syz [ 2229.695604][T25068] usb 3-1: SerialNumber: syz [ 2229.703307][T25068] usb 3-1: config 0 descriptor?? [ 2229.720689][T31674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5493'. [ 2229.732401][T31674] tipc: Disabling bearer [ 2229.744013][T25068] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2231.245292][T31698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5492'. [ 2231.254682][T31698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5492'. [ 2231.510122][T19107] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2231.935654][T25068] gspca_m5602: Failed to find a sensor [ 2231.942438][T25068] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 2232.145254][T19107] usb 2-1: Using ep0 maxpacket: 8 [ 2232.179956][T25068] usb 3-1: USB disconnect, device number 30 [ 2232.303204][T19107] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2232.330221][T19107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.362958][T19107] usb 2-1: Product: syz [ 2232.380011][T19107] usb 2-1: Manufacturer: syz [ 2232.412703][T19107] usb 2-1: SerialNumber: syz [ 2232.435458][T19107] usb 2-1: config 0 descriptor?? [ 2232.449902][T19107] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2233.841568][T19107] gspca_m5602: Failed to find a sensor [ 2233.870364][T19107] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 2233.911178][T19107] usb 2-1: USB disconnect, device number 34 [ 2234.849267][T31722] tipc: New replicast peer: 255.255.255.255 [ 2234.857540][T31722] tipc: Enabled bearer , priority 10 [ 2234.865363][T31722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5502'. [ 2234.942649][T31722] tipc: Disabling bearer [ 2235.241372][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5503'. [ 2235.355568][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2235.355589][ T30] audit: type=1800 audit(1764532841.931:2434): pid=31733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5503" name="nullb0" dev="devtmpfs" ino=4232 res=0 errno=0 [ 2236.349110][T31741] tipc: New replicast peer: 255.255.255.255 [ 2236.360249][T31742] x_tables: duplicate underflow at hook 3 [ 2236.386075][T31741] tipc: Enabled bearer , priority 10 [ 2236.393267][T31741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5507'. [ 2236.721670][T31741] tipc: Disabling bearer [ 2239.175379][T31777] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2241.463411][T31798] tipc: New replicast peer: 255.255.255.255 [ 2241.470987][T31798] tipc: Enabled bearer , priority 10 [ 2241.478869][T31798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5518'. [ 2241.487982][T31798] tipc: Disabling bearer [ 2241.684262][T31802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5517'. [ 2243.293359][T31815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5521'. [ 2243.760385][T31820] tipc: New replicast peer: 255.255.255.255 [ 2243.789090][T31820] tipc: Enabled bearer , priority 10 [ 2243.796614][T31822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5522'. [ 2243.806236][T31822] tipc: Disabling bearer [ 2244.008974][T31826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5519'. [ 2244.692702][T31829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5523'. [ 2244.737824][T31829] : entered promiscuous mode [ 2245.700350][T31833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5524'. [ 2247.965704][T11041] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2248.078404][T31859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5525'. [ 2248.375645][ T5900] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2248.600225][T11041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.610499][T11041] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2248.642754][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 2248.646266][T11041] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2248.696375][T11041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2248.735546][ T5900] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2248.735723][T11041] usb 5-1: SerialNumber: syz [ 2248.744649][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.800090][ T5900] usb 1-1: Product: syz [ 2248.807781][ T5900] usb 1-1: Manufacturer: syz [ 2248.831062][ T5900] usb 1-1: SerialNumber: syz [ 2248.888568][ T5900] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2248.894889][ T5900] r8152-cfgselector 1-1: config 0 descriptor?? [ 2249.225347][ T5900] r8152-cfgselector 1-1: Needed 1 retries to read version [ 2249.235479][ T5900] r8152-cfgselector 1-1: Unknown version 0x2460 [ 2249.250207][ T5900] r8152-cfgselector 1-1: bad CDC descriptors [ 2249.447280][T24884] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2249.548127][T11041] usb 5-1: 0:2 : does not exist [ 2249.553404][T11041] usb 5-1: unit 255 not found! [ 2249.570109][T11041] usb 5-1: USB disconnect, device number 12 [ 2249.626226][T23227] udevd[23227]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2249.689684][T31858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5529'. [ 2249.700856][T24884] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.834289][T24884] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2249.933083][T24884] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2250.133458][T11041] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 2250.162192][T24884] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2250.235391][T24884] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2250.297095][T24884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.326816][T24884] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2250.336316][T24884] usb 4-1: invalid MIDI out EP 0 [ 2250.450041][T19107] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2250.592337][T24884] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2250.739118][T19107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2250.839059][T19107] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2250.879390][T19107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.900427][T19107] usb 2-1: Product: syz [ 2250.909486][T19107] usb 2-1: Manufacturer: syz [ 2250.919061][T19107] usb 2-1: SerialNumber: syz [ 2250.944446][T19107] usb 2-1: config 0 descriptor?? [ 2252.111561][T31875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2252.120550][T31875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2252.240235][T19107] usb 4-1: USB disconnect, device number 26 [ 2252.674380][T31884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5535'. [ 2253.257815][ T30] audit: type=1800 audit(1764532859.851:2435): pid=31900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5537" name="nullb0" dev="devtmpfs" ino=4232 res=0 errno=0 [ 2253.695399][T24884] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2253.966811][T11041] usb 2-1: USB disconnect, device number 35 [ 2253.988599][T24884] usb 5-1: Using ep0 maxpacket: 8 [ 2254.024076][T31903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5536'. [ 2254.168788][T24884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.194643][T24884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2254.207269][T24884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2254.255891][T31913] tipc: New replicast peer: 255.255.255.255 [ 2254.262231][T31913] tipc: Enabled bearer , priority 10 [ 2254.295127][T31913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5538'. [ 2254.297310][T24884] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 2254.314734][T31913] tipc: Disabling bearer [ 2254.314860][T24884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.330733][T24884] usb 5-1: Product: syz [ 2254.335118][T24884] usb 5-1: Manufacturer: syz [ 2254.348389][T24884] usb 5-1: SerialNumber: syz [ 2254.361027][T24884] usb 5-1: config 0 descriptor?? [ 2254.373560][T24884] radioshark 5-1:0.0: Invalid radioSHARK device [ 2254.382777][T24884] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 2254.392446][T24884] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2254.400918][ T5900] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2254.555448][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 2254.564560][ T5900] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2254.575505][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.583835][ T5900] usb 1-1: Product: syz [ 2254.589418][ T5900] usb 1-1: Manufacturer: syz [ 2254.594941][ T5900] usb 1-1: SerialNumber: syz [ 2254.604034][ T5900] usb 1-1: config 0 descriptor?? [ 2254.623066][ T5900] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2254.829015][ T5900] gspca_m5602: Failed to find a sensor [ 2254.834646][ T5900] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 2254.845041][ T5900] usb 1-1: USB disconnect, device number 14 [ 2255.586603][T19107] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 2255.596913][T19107] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2256.637885][T11041] usb 5-1: USB disconnect, device number 13 [ 2257.792159][T31941] binder: 31934:31941 ioctl c018620c 80000380 returned -22 [ 2259.035304][T31954] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2259.098128][T31957] netlink: 'syz.3.5546': attribute type 10 has an invalid length. [ 2259.157552][T31958] tipc: New replicast peer: 255.255.255.255 [ 2259.165498][T31958] tipc: Enabled bearer , priority 10 [ 2259.172975][T31958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5555'. [ 2259.182353][T31958] tipc: Disabling bearer [ 2260.600667][T31968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5548'. [ 2261.405318][T24884] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2261.685262][T24884] usb 2-1: Using ep0 maxpacket: 8 [ 2261.693904][T24884] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2261.722510][T24884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.737359][T24884] usb 2-1: Product: syz [ 2261.741534][T24884] usb 2-1: Manufacturer: syz [ 2261.757327][T24884] usb 2-1: SerialNumber: syz [ 2261.772745][T24884] usb 2-1: config 0 descriptor?? [ 2261.789981][T24884] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2262.007040][T24884] gspca_m5602: Failed to find a sensor [ 2262.012560][T24884] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 2262.025490][T24884] usb 2-1: USB disconnect, device number 36 [ 2262.203782][T31982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5552'. [ 2262.242970][T31982] : entered promiscuous mode [ 2263.118062][T31991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5549'. [ 2263.578830][T31996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5554'. [ 2263.665669][T31996] libceph: resolve '0..' (ret=-3): failed [ 2264.014268][T32005] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5557'. [ 2264.667213][T32005] syz.4.5557 (32005): drop_caches: 2 [ 2265.158955][T32004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5556'. [ 2266.002777][T32027] tipc: New replicast peer: 255.255.255.255 [ 2266.115694][T32027] tipc: Enabled bearer , priority 10 [ 2266.154772][T32030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5561'. [ 2266.255994][T32030] tipc: Disabling bearer [ 2267.709235][T32032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5560'. [ 2270.898292][T32080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5569'. [ 2271.474980][T32080] : entered promiscuous mode [ 2272.133104][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5570'. [ 2272.293930][T32098] EXT4-fs: Conflicting test_dummy_encryption options [ 2274.768005][T32130] tipc: New replicast peer: 255.255.255.255 [ 2274.779668][T32130] tipc: Enabled bearer , priority 10 [ 2274.789210][T32131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5577'. [ 2274.798305][T32131] tipc: Disabling bearer [ 2275.147909][T32136] tipc: New replicast peer: 255.255.255.255 [ 2275.165994][T32136] tipc: Enabled bearer , priority 10 [ 2275.239719][T32137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5578'. [ 2275.466995][T32137] tipc: Disabling bearer [ 2277.146776][T32138] syz.1.5579 (32138): drop_caches: 1 [ 2277.146906][T32135] syz.1.5579 (32135): drop_caches: 1 [ 2277.255078][T32147] futex_wake_op: syz.2.5581 tries to shift op by 32; fix this program [ 2278.045663][T32135] syz.1.5579 (32135): drop_caches: 1 [ 2281.090408][T32201] netlink: 'syz.4.5591': attribute type 10 has an invalid length. [ 2281.195285][ T30] audit: type=1326 audit(1764532887.771:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2281.253176][ T30] audit: type=1326 audit(1764532887.771:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2281.277081][ C0] vkms_vblank_simulate: vblank timer overrun [ 2281.955260][ T30] audit: type=1326 audit(1764532887.771:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2281.977416][ C0] vkms_vblank_simulate: vblank timer overrun [ 2282.115251][ T30] audit: type=1326 audit(1764532887.771:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2282.266114][T32203] loop7: detected capacity change from 16383 to 0 [ 2282.275406][ T30] audit: type=1326 audit(1764532887.771:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2282.303263][ C0] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 23 prio class 2 [ 2282.338947][ T30] audit: type=1326 audit(1764532887.781:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2282.361032][ C0] vkms_vblank_simulate: vblank timer overrun [ 2282.378642][ T30] audit: type=1326 audit(1764532887.781:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2282.406387][ T30] audit: type=1326 audit(1764532887.781:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2282.428480][ C0] vkms_vblank_simulate: vblank timer overrun [ 2282.435384][ T30] audit: type=1326 audit(1764532887.781:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2282.457808][ T30] audit: type=1326 audit(1764532887.781:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32200 comm="syz.0.5592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2282.479871][ C0] vkms_vblank_simulate: vblank timer overrun [ 2283.268931][T32193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5590'. [ 2283.452117][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.458584][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2286.740448][T32264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5598'. [ 2286.749631][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5598'. [ 2287.591404][T32270] tipc: New replicast peer: 255.255.255.255 [ 2287.654160][T32270] tipc: Enabled bearer , priority 10 [ 2287.683503][T32275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5603'. [ 2287.734600][T32275] tipc: Disabling bearer [ 2288.133254][T32283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5606'. [ 2289.469670][T32302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5605'. [ 2289.876146][T32305] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2289.882688][T32305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2290.436519][T32317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5610'. [ 2290.659193][T32305] vhci_hcd vhci_hcd.0: Device attached [ 2290.966625][T32306] vhci_hcd: connection closed [ 2290.994736][ T60] vhci_hcd: stop threads [ 2291.003822][ T60] vhci_hcd: release socket [ 2291.008535][ T60] vhci_hcd: disconnect device [ 2291.771520][T32328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'. [ 2292.682738][T32332] syz.0.5615 (32332): drop_caches: 1 [ 2292.843405][T32333] syz.0.5615 (32333): drop_caches: 1 [ 2293.385690][T19107] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 2293.403192][T32332] syz.0.5615 (32332): drop_caches: 1 [ 2294.108157][T32358] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.5621' sets config #1 [ 2295.996217][T32374] tipc: New replicast peer: 255.255.255.255 [ 2296.003809][T32374] tipc: Enabled bearer , priority 10 [ 2296.013288][T32374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5622'. [ 2296.022643][T32374] tipc: Disabling bearer [ 2296.435577][T19107] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2296.505248][T19107] usb 5-1: can't read configurations, error -71 [ 2296.906573][T11041] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 2297.167756][T11041] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 2297.187328][T11041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 is Bulk; changing to Interrupt [ 2297.275073][T11041] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2297.579884][T11041] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2297.866275][T11041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.906754][T11041] usb 4-1: config 0 descriptor?? [ 2297.960030][T32383] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2298.002571][T32383] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2298.083937][T11041] metro_usb 4-1:0.0: Metrologic USB to Serial converter detected [ 2298.134050][T11041] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 2298.542906][T32405] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2300.123393][T32415] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5631'. [ 2300.132822][T32415] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5631'. [ 2300.148581][T32415] netlink: 'syz.0.5631': attribute type 3 has an invalid length. [ 2300.156846][T32415] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5631'. [ 2300.927910][T32422] netlink: 'syz.2.5634': attribute type 27 has an invalid length. [ 2300.939714][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5634'. [ 2300.951975][T32422] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 2301.068106][T32426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5633'. [ 2301.159953][T29731] usb 4-1: USB disconnect, device number 27 [ 2301.170368][T29731] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 2301.213937][T29731] metro_usb 4-1:0.0: device disconnected [ 2302.238021][T32439] net_ratelimit: 11 callbacks suppressed [ 2302.238066][T32439] openvswitch: netlink: Message has 1 unknown bytes. [ 2302.250781][T32439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2303.182160][T32453] tipc: New replicast peer: 255.255.255.255 [ 2303.197370][T32453] tipc: Enabled bearer , priority 10 [ 2303.204742][T32453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5638'. [ 2303.276451][T32453] tipc: Disabling bearer [ 2303.289639][T32454] tipc: New replicast peer: 255.255.255.255 [ 2303.296748][T32454] tipc: Enabled bearer , priority 10 [ 2303.304029][T32454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5639'. [ 2303.313620][T32454] tipc: Disabling bearer [ 2305.394300][T32486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5644'. [ 2305.619158][T32492] x_tables: duplicate underflow at hook 3 [ 2306.516381][T32493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5643'. [ 2307.122501][T32490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5640'. [ 2308.410858][T32518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5647'. [ 2308.526094][T32520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5648'. [ 2308.611972][T32519] tipc: New replicast peer: 255.255.255.255 [ 2308.620136][T32519] tipc: Enabled bearer , priority 10 [ 2308.634267][T32519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5649'. [ 2308.683013][T32519] tipc: Disabling bearer [ 2308.852135][T32526] tipc: New replicast peer: 255.255.255.255 [ 2308.867232][T32526] tipc: Enabled bearer , priority 10 [ 2308.874288][T32526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5651'. [ 2308.887398][T32526] tipc: Disabling bearer [ 2310.406752][T32540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5652'. [ 2310.748784][T32549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5656'. [ 2310.778030][T32543] syz.3.5655 (32543): drop_caches: 1 [ 2310.786474][T32549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5656'. [ 2310.795997][T32549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5656'. [ 2310.866847][T32551] tipc: New replicast peer: 255.255.255.255 [ 2310.881893][T32551] tipc: Enabled bearer , priority 10 [ 2311.065088][T32551] tipc: Disabling bearer [ 2311.434751][T32547] syz.3.5655 (32547): drop_caches: 1 [ 2311.692891][T32543] syz.3.5655 (32543): drop_caches: 1 [ 2313.352368][T32556] __nla_validate_parse: 1 callbacks suppressed [ 2313.352381][T32556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5657'. [ 2314.165991][T29731] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2314.460086][T32598] tipc: New replicast peer: 255.255.255.255 [ 2314.467673][T32598] tipc: Enabled bearer , priority 10 [ 2314.474383][T29731] usb 5-1: Using ep0 maxpacket: 8 [ 2314.521947][T29731] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2314.608448][T29731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.625245][T29731] usb 5-1: Product: syz [ 2314.629529][T29731] usb 5-1: Manufacturer: syz [ 2314.663181][T32601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5665'. [ 2314.721926][T32601] tipc: Disabling bearer [ 2314.872388][T29731] usb 5-1: SerialNumber: syz [ 2315.445006][T29731] usb 5-1: config 0 descriptor?? [ 2315.479394][T29731] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2316.048305][T32612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5662'. [ 2316.299882][T32615] tipc: New replicast peer: 255.255.255.255 [ 2316.307120][T32615] tipc: Enabled bearer , priority 10 [ 2316.655802][T32616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5667'. [ 2316.664861][T32616] tipc: Disabling bearer [ 2317.438320][T29731] gspca_m5602: Failed to find a sensor [ 2317.443875][T29731] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 2317.466765][T29731] usb 5-1: USB disconnect, device number 16 [ 2318.339092][T32637] tipc: New replicast peer: 255.255.255.255 [ 2318.367280][T32637] tipc: Enabled bearer , priority 10 [ 2318.452929][T32637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5671'. [ 2318.466794][T32637] tipc: Disabling bearer [ 2318.854507][T32651] tipc: New replicast peer: 255.255.255.255 [ 2318.862238][T32651] tipc: Enabled bearer , priority 10 [ 2318.872757][T32651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5674'. [ 2318.881984][T32651] tipc: Disabling bearer [ 2318.946710][T11041] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2319.107948][T11041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2319.119562][T11041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2319.130276][T11041] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 2319.151395][T11041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.190589][T11041] usb 3-1: config 0 descriptor?? [ 2319.659775][T11041] itetech 0003:06CB:73F5.002F: collection stack underflow [ 2319.684470][T11041] itetech 0003:06CB:73F5.002F: item 0 0 0 12 parsing failed [ 2319.716348][T11041] itetech 0003:06CB:73F5.002F: probe with driver itetech failed with error -22 [ 2319.864203][T11041] usb 3-1: USB disconnect, device number 31 [ 2321.428193][T32678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5679'. [ 2321.441609][T32678] netlink: 'syz.2.5679': attribute type 13 has an invalid length. [ 2321.595911][T32654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5675'. [ 2322.282869][T32659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 2322.363237][T32678] batman_adv: batadv0: Interface activated: dummy0 [ 2322.380443][T32678] batadv0: mtu less than device minimum [ 2322.395691][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.406946][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.418313][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.429481][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.440681][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.451881][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.463031][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.474218][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2322.485471][T32678] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2323.605697][T32709] tipc: New replicast peer: 255.255.255.255 [ 2323.615268][T32709] tipc: Enabled bearer , priority 10 [ 2323.622686][T32709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5683'. [ 2323.632826][T32709] tipc: Disabling bearer [ 2324.883418][T32726] tipc: New replicast peer: 255.255.255.255 [ 2324.890743][T32726] tipc: Enabled bearer , priority 10 [ 2324.898602][T32726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5687'. [ 2324.908186][T32726] tipc: Disabling bearer [ 2326.651957][T32753] tipc: New replicast peer: 255.255.255.255 [ 2326.677080][T32753] tipc: Enabled bearer , priority 10 [ 2326.685010][T32753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5701'. [ 2326.695459][T32753] tipc: Disabling bearer [ 2329.516601][ T312] net_ratelimit: 11 callbacks suppressed [ 2329.516622][ T312] netlink: zone id is out of range [ 2329.618438][ T314] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5697'. [ 2329.627649][ T314] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5697'. [ 2329.636835][ T314] netlink: 'syz.2.5697': attribute type 3 has an invalid length. [ 2329.644596][ T314] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5697'. [ 2329.739987][ T312] netlink: set zone limit has 4 unknown bytes [ 2329.914705][ T319] : renamed from bridge_slave_0 (while UP) [ 2331.385668][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5702'. [ 2332.449897][ T355] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5706'. [ 2332.812064][T11041] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2333.036114][ T365] tipc: New replicast peer: 255.255.255.255 [ 2333.046221][ T365] tipc: Enabled bearer , priority 10 [ 2333.054711][ T365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5707'. [ 2333.064664][ T365] tipc: Disabling bearer [ 2333.082481][T11041] usb 5-1: Using ep0 maxpacket: 32 [ 2333.097383][T11041] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 2333.108563][T11041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.125272][T11041] usb 5-1: Product: syz [ 2333.135882][T11041] usb 5-1: Manufacturer: syz [ 2333.143840][T11041] usb 5-1: SerialNumber: syz [ 2333.185314][T11041] usb 5-1: config 0 descriptor?? [ 2333.549549][T11041] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 2333.568510][T11041] b3 c1 69 eb 50 3d 29 15 [ 2333.599223][T11041] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 2333.971286][T11041] usb 5-1: USB disconnect, device number 17 [ 2334.520145][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5712'. [ 2335.660870][ T393] netlink: zone id is out of range [ 2335.792366][ T393] netlink: set zone limit has 4 unknown bytes [ 2335.810489][ T395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5714'. [ 2336.855737][T11041] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2337.015890][T11041] usb 4-1: Using ep0 maxpacket: 8 [ 2337.059706][T11041] usb 4-1: config 0 has no interfaces? [ 2337.195279][T11041] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 2337.204415][T11041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.249828][T11041] usb 4-1: Product: syz [ 2337.254296][T11041] usb 4-1: Manufacturer: syz [ 2337.295594][T25068] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2337.313898][T11041] usb 4-1: SerialNumber: syz [ 2337.327967][T11041] usb 4-1: config 0 descriptor?? [ 2337.501043][T25068] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2337.513367][T25068] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2337.558781][T25068] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2337.570146][T25068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.579538][T25068] usb 3-1: Product: syz [ 2337.587831][T25068] usb 3-1: Manufacturer: syz [ 2337.592686][T25068] usb 3-1: SerialNumber: syz [ 2337.764720][T11041] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2337.829453][T19107] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2337.876935][T25068] cdc_ncm 3-1:1.0: skipping garbage [ 2337.921588][T25068] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 2337.931414][T25068] cdc_ncm 3-1:1.0: bind() failure [ 2337.937981][T11041] usb 1-1: Using ep0 maxpacket: 32 [ 2337.949499][T11041] usb 1-1: config 0 has an invalid interface number: 169 but max is 0 [ 2337.990915][T25068] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2338.004405][T11041] usb 1-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 2338.016083][T19107] usb 2-1: Using ep0 maxpacket: 8 [ 2338.021233][T25068] cdc_ncm 3-1:1.1: bind() failure [ 2338.079099][ T409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5718'. [ 2338.151715][T19107] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2338.166871][T11041] usb 1-1: config 0 has no interface number 0 [ 2338.173863][T19107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.183968][T11041] usb 1-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2338.198111][T19107] usb 2-1: Product: syz [ 2338.202371][T19107] usb 2-1: Manufacturer: syz [ 2338.207677][T11041] usb 1-1: config 0 interface 169 has no altsetting 0 [ 2338.227688][T19107] usb 2-1: SerialNumber: syz [ 2338.500398][T11041] usb 1-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 2338.527444][T19107] usb 2-1: config 0 descriptor?? [ 2338.565853][T11041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.810623][T11041] usb 1-1: Product: syz [ 2338.815957][T11041] usb 1-1: Manufacturer: syz [ 2338.820714][T11041] usb 1-1: SerialNumber: syz [ 2338.829760][T19107] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2338.867489][T11041] usb 1-1: config 0 descriptor?? [ 2338.889050][T11041] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2339.087522][T11041] snd-usb-audio 1-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 2339.095529][ T417] netlink: 'syz.0.5720': attribute type 21 has an invalid length. [ 2339.108171][ T417] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5720'. [ 2339.137324][ T417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5720'. [ 2339.195824][ T5900] usb 4-1: USB disconnect, device number 28 [ 2339.209287][T32428] udevd[32428]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2339.436224][ T5900] usb 1-1: USB disconnect, device number 15 [ 2339.536784][ T434] tipc: New replicast peer: 255.255.255.255 [ 2339.544988][ T434] tipc: Enabled bearer , priority 10 [ 2339.553412][ T434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5722'. [ 2339.563839][ T434] tipc: Disabling bearer [ 2340.116595][T29731] usb 3-1: USB disconnect, device number 32 [ 2340.630201][T19107] gspca_m5602: Failed to find a sensor [ 2340.636923][T19107] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 2340.651723][T19107] usb 2-1: USB disconnect, device number 37 [ 2343.989106][ T475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5730'. [ 2344.783163][ T506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5736'. [ 2344.875877][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.882178][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.208453][ T512] syzkaller0: entered promiscuous mode [ 2347.831511][ T544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5745'. [ 2348.461263][ T550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5746'. [ 2349.846325][ T564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2350.689805][ T573] vivid-006: disconnect [ 2351.708964][ T577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5748'. [ 2351.812665][ T573] vivid-006: reconnect [ 2352.074606][ T588] program syz.3.5753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2352.887514][ T596] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 2352.996848][ T596] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2353.276207][ T603] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[603] [ 2353.315885][ T601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2353.505943][ T605] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2353.573345][ T603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2354.510884][ T611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5766'. [ 2356.865821][T25068] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2357.055692][T25068] usb 4-1: Using ep0 maxpacket: 8 [ 2357.064239][T25068] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2357.075133][T25068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.092649][T25068] usb 4-1: Product: syz [ 2357.116447][T25068] usb 4-1: Manufacturer: syz [ 2357.131945][T25068] usb 4-1: SerialNumber: syz [ 2357.184921][T25068] usb 4-1: config 0 descriptor?? [ 2357.203150][ T640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5761'. [ 2357.260737][T25068] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2359.355879][T25068] gspca_m5602: Failed to find a sensor [ 2359.361481][T25068] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 2359.382149][T25068] usb 4-1: USB disconnect, device number 29 [ 2359.595800][ T665] program syz.1.5767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2359.725778][ T665] syz.1.5767 (665): drop_caches: 2 [ 2360.150683][ T672] tipc: New replicast peer: 255.255.255.255 [ 2360.580525][ T672] tipc: Enabled bearer , priority 10 [ 2360.709054][ T673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5769'. [ 2360.838470][ T673] tipc: Disabling bearer [ 2360.989261][ T652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5764'. [ 2362.777154][ T701] loop2: detected capacity change from 0 to 7 [ 2362.786087][ T701] Dev loop2: unable to read RDB block 7 [ 2362.791676][ T701] loop2: AHDI p1 p2 p3 [ 2362.796674][ T701] loop2: partition table partially beyond EOD, truncated [ 2362.831685][ T701] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2362.883586][ T701] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2362.977651][ T707] fuse: Bad value for 'fd' [ 2363.435625][ T712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5776'. [ 2364.137521][ T721] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[721] [ 2364.160533][ T721] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5778'. [ 2364.260421][ T723] batadv1: entered promiscuous mode [ 2364.270809][ T723] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2364.585657][T19107] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2364.836242][T19107] usb 2-1: Using ep0 maxpacket: 8 [ 2364.880217][T19107] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2364.889995][T19107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.035807][T19107] usb 2-1: Product: syz [ 2365.060482][T19107] usb 2-1: Manufacturer: syz [ 2365.065086][T19107] usb 2-1: SerialNumber: syz [ 2365.073319][T19107] usb 2-1: config 0 descriptor?? [ 2365.118502][T19107] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2366.122643][ T738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5783'. [ 2366.164875][ T738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5783'. [ 2366.358119][ T740] openvswitch: netlink: Message has 1 unknown bytes. [ 2366.365354][ T740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2367.332096][T19107] gspca_m5602: Failed to find a sensor [ 2367.385880][T19107] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 2367.408695][ T755] tipc: New replicast peer: 255.255.255.255 [ 2367.416257][ T755] tipc: Enabled bearer , priority 10 [ 2367.433138][T19107] usb 2-1: USB disconnect, device number 38 [ 2367.513275][ T755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5786'. [ 2367.522927][ T753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5785'. [ 2367.532735][ T755] tipc: Disabling bearer [ 2368.283830][ T761] input: syz0 as /devices/virtual/input/input100 [ 2368.489179][ T744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5784'. [ 2369.159409][ T775] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[775] [ 2369.445791][T19107] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2369.477384][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2369.477401][ T30] audit: type=1326 audit(1764532976.021:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2369.548052][ T30] audit: type=1326 audit(1764532976.021:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2369.695903][T19107] usb 5-1: Using ep0 maxpacket: 16 [ 2369.703581][T19107] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 2369.712384][T19107] usb 5-1: config 0 has no interface number 0 [ 2369.725885][T19107] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2369.739287][ T30] audit: type=1326 audit(1764532976.021:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2369.782034][T19107] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2369.921193][T19107] usb 5-1: config 0 interface 41 has no altsetting 0 [ 2369.935868][ T30] audit: type=1326 audit(1764532976.021:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2369.978725][T19107] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2369.989066][T19107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.025890][T19107] usb 5-1: Product: syz [ 2370.030702][ T30] audit: type=1326 audit(1764532976.021:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2370.053863][T19107] usb 5-1: Manufacturer: syz [ 2370.060424][T19107] usb 5-1: SerialNumber: syz [ 2370.069001][ T30] audit: type=1326 audit(1764532976.031:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2370.092751][T19107] usb 5-1: config 0 descriptor?? [ 2370.099181][ T775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2370.108002][ T775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2370.118144][ T30] audit: type=1326 audit(1764532976.031:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2370.164308][ T30] audit: type=1326 audit(1764532976.031:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2370.429289][ T775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2370.479082][ T775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2370.503977][ T30] audit: type=1326 audit(1764532976.051:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2370.588600][ T30] audit: type=1326 audit(1764532976.051:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=776 comm="syz.0.5791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2370.777605][ T792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2370.998548][ T796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5789'. [ 2371.807954][T19107] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2374.833176][ T828] tipc: New replicast peer: 255.255.255.255 [ 2374.844583][ T828] tipc: Enabled bearer , priority 10 [ 2374.864538][ T828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5799'. [ 2374.903726][ T828] tipc: Disabling bearer [ 2375.234127][T19107] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 2375.266042][T19107] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 2375.282139][T19107] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 2375.329899][T19107] usb 5-1: USB disconnect, device number 18 [ 2375.435896][T25068] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2375.667786][T25068] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2375.717279][T25068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2375.922406][T25068] usb 3-1: config 0 descriptor?? [ 2375.946018][T25068] cp210x 3-1:0.0: cp210x converter detected [ 2376.164555][T25068] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2376.538516][ T831] fuse: Bad value for 'fd' [ 2376.977228][ T848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.046320][ T848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2377.073540][ T848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.092896][ T848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2377.289450][ T841] veth1_macvtap: left allmulticast mode [ 2377.482790][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5804'. [ 2378.119050][ T841] tipc: Resetting bearer [ 2378.282748][T29731] usb 3-1: USB disconnect, device number 33 [ 2378.317379][T29731] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2378.336033][T25068] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2378.338446][T29731] cp210x 3-1:0.0: device disconnected [ 2378.577588][T25068] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 2378.615817][T25068] usb 4-1: config 0 has no interface number 0 [ 2378.622058][T25068] usb 4-1: config 0 interface 122 has no altsetting 0 [ 2378.808216][T25068] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 2378.831618][T25068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.885045][T25068] usb 4-1: Product: syz [ 2378.904553][T25068] usb 4-1: Manufacturer: syz [ 2378.918670][T25068] usb 4-1: SerialNumber: syz [ 2378.948206][T25068] usb 4-1: config 0 descriptor?? [ 2379.947047][ T883] tipc: New replicast peer: 255.255.255.255 [ 2379.963093][ T883] tipc: Enabled bearer , priority 10 [ 2379.974045][ T884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5808'. [ 2379.997388][ T884] tipc: Disabling bearer [ 2380.628689][ T877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5809'. [ 2381.119910][T29731] usb 4-1: USB disconnect, device number 30 [ 2381.131174][T29731] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 2381.945781][T29731] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2382.200946][T29731] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2382.231714][T29731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.516295][T29731] usb 4-1: Product: syz [ 2382.521017][T29731] usb 4-1: Manufacturer: syz [ 2382.799666][ T935] program syz.4.5816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2382.865524][T29731] usb 4-1: SerialNumber: syz [ 2383.097635][ T938] syz.4.5816 (938): drop_caches: 2 [ 2383.182019][ T929] tipc: New replicast peer: 255.255.255.255 [ 2383.199232][ T929] tipc: Enabled bearer , priority 10 [ 2383.206148][ T932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5815'. [ 2383.226262][T29731] usb 4-1: config 0 descriptor?? [ 2383.276049][ T932] tipc: Disabling bearer [ 2383.657634][T29731] hso 4-1:0.0: Failed to find INT IN ep [ 2383.749299][T29731] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2384.871427][ T960] tipc: New replicast peer: 255.255.255.255 [ 2384.882652][ T960] tipc: Enabled bearer , priority 10 [ 2384.895774][ T960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'. [ 2384.909267][ T960] tipc: Disabling bearer [ 2384.994002][T26700] usb 4-1: USB disconnect, device number 31 [ 2385.172365][ T959] tipc: New replicast peer: 255.255.255.255 [ 2385.186631][ T959] tipc: Enabled bearer , priority 10 [ 2385.256551][ T959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5818'. [ 2385.266640][ T959] tipc: Disabling bearer [ 2385.882653][ T974] tipc: New replicast peer: 255.255.255.255 [ 2385.893115][ T974] tipc: Enabled bearer , priority 10 [ 2385.901187][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5821'. [ 2385.910897][ T974] tipc: Disabling bearer [ 2387.886658][ T995] delete_channel: no stack [ 2389.375596][ T1012] netlink: 'syz.1.5831': attribute type 1 has an invalid length. [ 2389.488313][ T985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5827'. [ 2389.540934][ T1013] tipc: New replicast peer: 255.255.255.255 [ 2389.564291][ T1013] tipc: Enabled bearer , priority 10 [ 2389.577015][ T1013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5830'. [ 2389.605829][ T1013] tipc: Disabling bearer [ 2390.325931][T26700] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2390.407796][ T1029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5833'. [ 2390.419037][ T1029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5833'. [ 2390.560890][T26700] usb 5-1: Using ep0 maxpacket: 8 [ 2390.886142][T26700] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2390.952012][T26700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.969847][T26700] usb 5-1: Product: syz [ 2390.984307][T26700] usb 5-1: Manufacturer: syz [ 2390.989232][T26700] usb 5-1: SerialNumber: syz [ 2391.016597][T26700] usb 5-1: config 0 descriptor?? [ 2391.028745][T26700] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2391.589991][ T1052] tipc: New replicast peer: 255.255.255.255 [ 2391.597646][ T1052] tipc: Enabled bearer , priority 10 [ 2391.605426][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5836'. [ 2391.620529][ T1052] tipc: Disabling bearer [ 2391.631999][ T1043] tipc: New replicast peer: 255.255.255.255 [ 2391.645720][ T1043] tipc: Enabled bearer , priority 10 [ 2391.659862][ T1043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5835'. [ 2391.671960][ T1043] tipc: Disabling bearer [ 2392.211436][ T1057] tipc: New replicast peer: 255.255.255.255 [ 2392.220616][ T1057] tipc: Enabled bearer , priority 10 [ 2392.237398][ T1057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5837'. [ 2392.405900][ T1057] tipc: Disabling bearer [ 2393.595877][T26700] gspca_m5602: Failed to find a sensor [ 2393.604006][T26700] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 2393.640199][T26700] usb 5-1: USB disconnect, device number 19 [ 2396.941548][ T1105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5846'. [ 2397.892108][ T1091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5844'. [ 2398.528636][ T1121] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5848'. [ 2399.920384][ T1131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5850'. [ 2401.566141][ T1148] program syz.2.5852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2401.814032][ T1154] tipc: New replicast peer: 255.255.255.255 [ 2401.821760][ T1154] tipc: Enabled bearer , priority 10 [ 2401.829128][ T1154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5853'. [ 2401.838856][ T1154] tipc: Disabling bearer [ 2402.659879][ T1158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5863'. [ 2402.720002][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5863'. [ 2403.720022][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2403.720047][ T30] audit: type=1326 audit(1764533010.271:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2403.855948][ T30] audit: type=1326 audit(1764533010.271:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2403.955576][ T30] audit: type=1326 audit(1764533010.271:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2404.087201][ T30] audit: type=1326 audit(1764533010.271:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2404.156039][ T30] audit: type=1326 audit(1764533010.271:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2404.178970][ T30] audit: type=1326 audit(1764533010.271:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2404.217466][ T30] audit: type=1326 audit(1764533010.271:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2404.239482][ C1] vkms_vblank_simulate: vblank timer overrun [ 2404.246925][ T30] audit: type=1326 audit(1764533010.271:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2404.358332][ T30] audit: type=1326 audit(1764533010.281:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2404.876019][ T30] audit: type=1326 audit(1764533010.281:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1163 comm="syz.1.5856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 2405.568646][ T1199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5864'. [ 2406.319853][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.326561][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.387455][ T1176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5859'. [ 2407.214833][ T1211] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2409.400501][ T1236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5869'. [ 2410.569356][ T1253] vivid-007: ================= START STATUS ================= [ 2410.577644][ T1253] vivid-007: Enable Output Cropping: true [ 2410.584366][ T1253] vivid-007: Enable Output Composing: true [ 2410.590897][ T1253] vivid-007: Enable Output Scaler: true [ 2410.597036][ T1253] vivid-007: Tx RGB Quantization Range: Automatic [ 2410.603494][ T1253] vivid-007: Transmit Mode: HDMI [ 2410.609066][ T1253] vivid-007: Hotplug Present: 0x00000000 [ 2410.614838][ T1253] vivid-007: RxSense Present: 0x00000000 [ 2410.621060][ T1253] vivid-007: EDID Present: 0x00000000 [ 2410.626932][ T1253] vivid-007: ================== END STATUS ================== [ 2410.866983][ T1254] vivid-004: kernel_thread() failed [ 2411.130958][ T1250] syzkaller0: entered promiscuous mode [ 2411.153642][ T1250] syzkaller0: entered allmulticast mode [ 2414.093262][ T1287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5877'. [ 2415.995864][ T421] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2416.155921][ T421] usb 3-1: Using ep0 maxpacket: 8 [ 2416.172699][ T421] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2416.182407][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.193807][ T421] usb 3-1: Product: syz [ 2416.200028][ T421] usb 3-1: Manufacturer: syz [ 2416.209016][ T421] usb 3-1: SerialNumber: syz [ 2416.225269][ T421] usb 3-1: config 0 descriptor?? [ 2416.247246][ T421] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2418.920067][ T421] gspca_m5602: Failed to find a sensor [ 2418.935932][ T421] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 2418.953917][ T421] usb 3-1: USB disconnect, device number 34 [ 2419.987790][ T1326] input: syz1 as /devices/virtual/input/input101 [ 2420.488824][ T1331] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5885'. [ 2420.714138][ T1331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5885'. [ 2420.723739][ T1331] netlink: 91 bytes leftover after parsing attributes in process `syz.2.5885'. [ 2423.253365][ T1353] netlink: 'syz.4.5890': attribute type 4 has an invalid length. [ 2423.519652][ T1360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5889'. [ 2423.623013][ T1360] netlink: 320 bytes leftover after parsing attributes in process `syz.2.5889'. [ 2423.633450][ T1346] vivid-007: ================= START STATUS ================= [ 2423.657018][ T1361] netlink: 'syz.4.5890': attribute type 4 has an invalid length. [ 2423.776032][ T1346] vivid-007: Enable Output Cropping: true [ 2423.787111][ T1346] vivid-007: Enable Output Composing: true [ 2423.797521][ T1346] vivid-007: Enable Output Scaler: true [ 2423.815925][ T1346] vivid-007: Tx RGB Quantization Range: Automatic [ 2423.843166][ T1346] vivid-007: Transmit Mode: HDMI [ 2423.943221][ T1346] vivid-007: Hotplug Present: 0x00000000 [ 2424.216948][ T1346] vivid-007: RxSense Present: 0x00000000 [ 2424.232603][ T1346] vivid-007: EDID Present: 0x00000000 [ 2424.258768][ T1346] vivid-007: ================== END STATUS ================== [ 2425.579684][ T1379] delete_channel: no stack [ 2426.151235][ T1382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5893'. [ 2426.163805][ T1382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5893'. [ 2426.346340][ T421] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2426.580677][ T421] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2426.603791][ T421] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2426.618295][ T421] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2426.628780][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2426.649610][ T1381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2426.944214][ T1379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2427.072642][ T1379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2427.096260][T26700] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2427.113098][ T421] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2427.292596][T26700] usb 1-1: Using ep0 maxpacket: 32 [ 2427.304839][T26700] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 2427.324555][T26700] usb 1-1: config 0 has no interface number 0 [ 2427.358101][T26700] usb 1-1: config 0 interface 12 has no altsetting 0 [ 2427.683139][T26700] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2427.693507][T26700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.702201][T26700] usb 1-1: Product: syz [ 2427.707212][T26700] usb 1-1: Manufacturer: syz [ 2427.711884][T26700] usb 1-1: SerialNumber: syz [ 2427.723365][T26700] usb 1-1: config 0 descriptor?? [ 2428.040922][ T1399] tipc: New replicast peer: 255.255.255.255 [ 2428.052728][ T1399] tipc: Enabled bearer , priority 10 [ 2428.061045][ T1399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5897'. [ 2428.076126][ T1399] tipc: Disabling bearer [ 2428.517225][ T421] usb 2-1: USB disconnect, device number 39 [ 2429.369589][ T1386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5895'. [ 2430.110141][ T1417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5901'. [ 2431.556072][T26700] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2431.563740][T26700] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 2431.583931][T26700] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2431.653448][T26700] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 2431.684732][T26700] usb 1-1: USB disconnect, device number 16 [ 2432.830117][ T1447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5916'. [ 2433.187027][ T1446] vivid-007: ================= START STATUS ================= [ 2433.194799][ T1446] vivid-007: Enable Output Cropping: true [ 2433.201188][ T1446] vivid-007: Enable Output Composing: true [ 2433.207602][ T1446] vivid-007: Enable Output Scaler: true [ 2433.213270][ T1446] vivid-007: Tx RGB Quantization Range: Automatic [ 2433.220286][ T1446] vivid-007: Transmit Mode: HDMI [ 2433.225843][ T1446] vivid-007: Hotplug Present: 0x00000000 [ 2433.231526][ T1446] vivid-007: RxSense Present: 0x00000000 [ 2433.237853][ T1446] vivid-007: EDID Present: 0x00000000 [ 2433.243273][ T1446] vivid-007: ================== END STATUS ================== [ 2434.258600][ T853] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2434.470144][ T853] usb 1-1: Using ep0 maxpacket: 8 [ 2434.677456][ T853] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2434.706534][ T853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.843068][ T853] usb 1-1: Product: syz [ 2434.848964][ T853] usb 1-1: Manufacturer: syz [ 2434.853618][ T853] usb 1-1: SerialNumber: syz [ 2435.069753][ T853] usb 1-1: config 0 descriptor?? [ 2435.106469][ T853] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2435.113177][ T1471] tipc: New replicast peer: 255.255.255.255 [ 2435.122603][ T1471] tipc: Enabled bearer , priority 10 [ 2435.132135][ T1470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5911'. [ 2435.142271][ T1470] tipc: Disabling bearer [ 2436.789631][ T853] gspca_m5602: Failed to find a sensor [ 2436.810121][ T853] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 2436.888603][ T853] usb 1-1: USB disconnect, device number 17 [ 2437.225814][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2437.225832][ T30] audit: type=1326 audit(1764533043.811:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2437.430996][ T1498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2437.537338][ T30] audit: type=1326 audit(1764533043.811:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2437.650311][ T30] audit: type=1326 audit(1764533043.811:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2437.674618][ T30] audit: type=1326 audit(1764533043.811:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2437.718272][ T30] audit: type=1326 audit(1764533043.811:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2437.795107][ T1502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5914'. [ 2437.806816][ T1502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5914'. [ 2438.110178][ T30] audit: type=1326 audit(1764533043.811:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2438.168836][ T1504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5913'. [ 2438.255897][ T30] audit: type=1326 audit(1764533043.811:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2438.410759][ T30] audit: type=1326 audit(1764533043.811:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2438.434121][ T30] audit: type=1326 audit(1764533043.811:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2438.471294][ T30] audit: type=1326 audit(1764533044.051:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1486 comm="syz.0.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2438.750330][ T1516] netlink: 'syz.0.5919': attribute type 29 has an invalid length. [ 2438.762867][ T1517] netlink: 'syz.0.5919': attribute type 29 has an invalid length. [ 2440.498334][ T1539] hub 9-0:1.0: USB hub found [ 2440.505912][ T1539] hub 9-0:1.0: 1 port detected [ 2440.528181][ T1538] tipc: New replicast peer: 255.255.255.255 [ 2440.613789][ T1538] tipc: Enabled bearer , priority 10 [ 2440.620784][ T1543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5923'. [ 2440.642800][ T1543] tipc: Disabling bearer [ 2442.085901][ T853] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2442.255873][ T853] usb 2-1: Using ep0 maxpacket: 8 [ 2442.696445][ T1557] tipc: New replicast peer: 255.255.255.255 [ 2442.704344][ T1557] tipc: Enabled bearer , priority 10 [ 2442.712075][ T1557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5927'. [ 2442.721422][ T1557] tipc: Disabling bearer [ 2442.759351][ T853] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2442.782784][ T853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.823439][ T853] usb 2-1: Product: syz [ 2442.843857][ T853] usb 2-1: Manufacturer: syz [ 2442.874000][ T853] usb 2-1: SerialNumber: syz [ 2442.934539][ T853] usb 2-1: config 0 descriptor?? [ 2442.961275][ T853] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2443.461000][ T50] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2443.470812][ T50] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2443.481029][ T50] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2443.549082][ T50] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2445.464934][ T853] gspca_m5602: Failed to find a sensor [ 2445.475803][ T853] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 2445.597788][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2445.597806][ T30] audit: type=1800 audit(1764533052.131:2610): pid=1587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5932" name="nullb0" dev="devtmpfs" ino=4232 res=0 errno=0 [ 2445.631945][ T853] usb 2-1: USB disconnect, device number 40 [ 2446.185583][ T853] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2446.335804][ T853] usb 4-1: Using ep0 maxpacket: 8 [ 2446.347621][ T853] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2446.357318][ T853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.365730][ T853] usb 4-1: Product: syz [ 2446.369883][ T853] usb 4-1: Manufacturer: syz [ 2446.374454][ T853] usb 4-1: SerialNumber: syz [ 2446.388955][ T853] usb 4-1: config 0 descriptor?? [ 2446.406500][ T853] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2446.497794][ T1601] tipc: New replicast peer: 255.255.255.255 [ 2446.509487][ T1601] tipc: Enabled bearer , priority 10 [ 2446.516469][ T1602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5934'. [ 2446.526150][ T1602] tipc: Disabling bearer [ 2447.078339][ T1608] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5936'. [ 2447.536173][T11041] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2447.695875][T11041] usb 5-1: Using ep0 maxpacket: 32 [ 2447.707716][T11041] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 2447.716128][T11041] usb 5-1: config 0 has no interface number 0 [ 2447.734248][T11041] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 2447.745837][T11041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.753959][T11041] usb 5-1: Product: syz [ 2447.783681][T11041] usb 5-1: Manufacturer: syz [ 2447.828737][T11041] usb 5-1: SerialNumber: syz [ 2447.876455][ T1613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5937'. [ 2447.897303][ T1613] netlink: 320 bytes leftover after parsing attributes in process `syz.1.5937'. [ 2448.087603][T11041] usb 5-1: config 0 descriptor?? [ 2448.892269][ T1624] netlink: 'syz.2.5938': attribute type 4 has an invalid length. [ 2448.994338][ T1625] netlink: 'syz.2.5938': attribute type 4 has an invalid length. [ 2449.176200][ T31] INFO: task kworker/1:0:24884 blocked for more than 143 seconds. [ 2449.184315][ T31] Not tainted syzkaller #0 [ 2449.193405][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2449.222353][ T31] task:kworker/1:0 state:D stack:20776 pid:24884 tgid:24884 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2449.401491][ T31] Workqueue: usb_hub_wq hub_event [ 2449.415287][ T31] Call Trace: [ 2449.421556][ T853] gspca_m5602: Failed to find a sensor [ 2449.428228][ T31] [ 2449.439118][ T853] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 2449.448778][ T31] __schedule+0x1798/0x4cc0 [ 2449.472446][ T853] usb 4-1: USB disconnect, device number 32 [ 2449.825966][ T31] ? __pfx___schedule+0x10/0x10 [ 2449.830934][ T31] ? schedule+0x91/0x360 [ 2449.835874][ T31] schedule+0x165/0x360 [ 2449.851383][ T31] schedule_preempt_disabled+0x13/0x30 [ 2449.879152][ T31] __mutex_lock+0x7e6/0x1350 [ 2449.938562][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2449.943411][ T31] ? hub_event+0x21e5/0x4a20 [ 2449.996563][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2450.012732][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2450.031434][ T31] hub_event+0x21e5/0x4a20 [ 2450.048164][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2450.073610][ T31] ? __pfx_hub_event+0x10/0x10 [ 2450.098682][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2450.125315][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2450.156825][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2450.167589][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2450.177416][ T31] process_scheduled_works+0xae1/0x17b0 [ 2450.183704][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2450.192444][ T31] worker_thread+0x8a0/0xda0 [ 2450.212313][ T31] kthread+0x711/0x8a0 [ 2450.218715][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2450.224525][ T31] ? __pfx_kthread+0x10/0x10 [ 2450.231139][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2450.237762][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2450.243595][ T31] ? __pfx_kthread+0x10/0x10 [ 2450.249808][ T31] ret_from_fork+0x4bc/0x870 [ 2450.255407][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2450.263264][ T31] ? __switch_to_asm+0x39/0x70 [ 2450.269509][ T31] ? __switch_to_asm+0x33/0x70 [ 2450.274642][ T31] ? __pfx_kthread+0x10/0x10 [ 2450.280526][ T31] ret_from_fork_asm+0x1a/0x30 [ 2450.286907][ T31] [ 2450.290930][ T31] [ 2450.290930][ T31] Showing all locks held in the system: [ 2450.304788][ T31] 1 lock held by khungtaskd/31: [ 2450.310968][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2450.325838][ T31] 2 locks held by getty/5588: [ 2450.332129][ T31] #0: ffff8880334650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2450.345493][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2450.358141][ T31] 5 locks held by kworker/0:10/11041: [ 2450.364944][ T31] #0: ffff888143af2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2450.378937][ T31] #1: ffffc9000b5dfba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2450.393403][ T31] #2: ffff888145382198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2450.403738][ T31] #3: ffff88807be6d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2450.578602][ T31] #4: ffff8881442a1278 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 2450.661298][T11041] cp210x 5-1:0.79: cp210x converter detected [ 2450.692781][T11041] cp210x 5-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 2450.716501][ T31] 5 locks held by kworker/1:0/24884: [ 2450.751321][ T31] #0: ffff888143af2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2450.812999][T11041] cp210x 5-1:0.79: querying part number failed [ 2450.870831][T11041] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2450.878176][ T31] #1: ffffc9001c117ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2450.919030][T11041] usb 5-1: USB disconnect, device number 20 [ 2450.937462][ T31] #2: ffff888145b25198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2450.994744][ T31] #3: ffff888145b27518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2451.007927][T11041] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2451.026887][T11041] cp210x 5-1:0.79: device disconnected [ 2451.037550][ T31] #4: ffff888028136d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2451.055903][ T31] 5 locks held by kworker/1:1/28712: [ 2451.068104][ T31] #0: ffff888143af2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2451.085142][ T31] #1: ffffc9000e8b7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2451.099110][ T31] #2: ffff888028c3a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2451.110475][ T31] #3: ffff888028c3e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2451.123201][ T31] #4: ffff888028136d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2451.134311][ T31] 1 lock held by syz.0.5939/1616: [ 2451.140357][ T31] #0: ffff888079ac3008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2451.151952][ T31] 2 locks held by syz.2.5938/1620: [ 2451.158741][ T31] #0: ffff888079808d88 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2451.170186][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2451.181924][ T31] [ 2451.193074][ T31] ============================================= [ 2451.193074][ T31] [ 2451.211336][ T31] NMI backtrace for cpu 1 [ 2451.211357][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2451.211375][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2451.211385][ T31] Call Trace: [ 2451.211392][ T31] [ 2451.211400][ T31] dump_stack_lvl+0x189/0x250 [ 2451.211430][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2451.211451][ T31] ? __pfx__printk+0x10/0x10 [ 2451.211477][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2451.211496][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2451.211511][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2451.211538][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2451.211561][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2451.211579][ T31] watchdog+0xf60/0xfa0 [ 2451.211598][ T31] ? watchdog+0x1e2/0xfa0 [ 2451.211615][ T31] kthread+0x711/0x8a0 [ 2451.211637][ T31] ? __pfx_watchdog+0x10/0x10 [ 2451.211650][ T31] ? __pfx_kthread+0x10/0x10 [ 2451.211669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2451.211687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2451.211704][ T31] ? __pfx_kthread+0x10/0x10 [ 2451.211723][ T31] ret_from_fork+0x4bc/0x870 [ 2451.211740][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2451.211759][ T31] ? __switch_to_asm+0x39/0x70 [ 2451.211771][ T31] ? __switch_to_asm+0x33/0x70 [ 2451.211781][ T31] ? __pfx_kthread+0x10/0x10 [ 2451.211800][ T31] ret_from_fork_asm+0x1a/0x30 [ 2451.211824][ T31] [ 2451.211837][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2451.362763][ C0] NMI backtrace for cpu 0 [ 2451.362792][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2451.362809][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2451.362820][ C0] RIP: 0010:lock_acquire+0x5/0x360 [ 2451.362840][ C0] Code: a9 00 ff ff 00 0f 95 c0 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc [ 2451.362855][ C0] RSP: 0018:ffffc90000007e08 EFLAGS: 00000046 [ 2451.362870][ C0] RAX: ffffffff81adf5cb RBX: ffffffff997e03c8 RCX: 0000000000000002 [ 2451.362882][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff997e03c8 [ 2451.362892][ C0] RBP: ffffc90000007ed8 R08: 0000000000000001 R09: 0000000000000000 [ 2451.362902][ C0] R10: dffffc0000000000 R11: fffffbfff32fc4b5 R12: dffffc0000000000 [ 2451.362914][ C0] R13: 0000000000000000 R14: ffffffff81adf735 R15: 1ffff92000000fc4 [ 2451.362925][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 2451.362938][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2451.362949][ C0] CR2: 0000000080202018 CR3: 0000000066828000 CR4: 00000000003526f0 [ 2451.362963][ C0] Call Trace: [ 2451.362972][ C0] [ 2451.362979][ C0] seqcount_lockdep_reader_access+0xcf/0x1c0 [ 2451.362999][ C0] ? ktime_get+0x45/0x200 [ 2451.363016][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 2451.363033][ C0] ? sched_clock_cpu+0x74/0x430 [ 2451.363048][ C0] ? lapic_next_event+0x11/0x20 [ 2451.363063][ C0] ? clockevents_program_event+0x24d/0x360 [ 2451.363085][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2451.363099][ C0] ? hrtimer_interrupt+0x889/0xaa0 [ 2451.363117][ C0] ktime_get+0x45/0x200 [ 2451.363134][ C0] tick_irq_enter+0xfa/0x2c0 [ 2451.363152][ C0] ? __pfx_tick_irq_enter+0x10/0x10 [ 2451.363170][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 2451.363185][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2451.363204][ C0] irq_enter_rcu+0xa0/0xf0 [ 2451.363225][ C0] sysvec_apic_timer_interrupt+0x99/0xc0 [ 2451.363245][ C0] [ 2451.363251][ C0] [ 2451.363257][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2451.363273][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2451.363292][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2451.363306][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2451.363319][ C0] RAX: b02609546035be00 RBX: ffffffff81967b47 RCX: b02609546035be00 [ 2451.363331][ C0] RDX: 0000000000000001 RSI: ffffffff8d70f556 RDI: ffffffff8bbf0960 [ 2451.363342][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2451.363354][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf770 [ 2451.363365][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2451.363378][ C0] ? do_idle+0x1e7/0x510 [ 2451.363398][ C0] default_idle+0x13/0x20 [ 2451.363412][ C0] default_idle_call+0x73/0xb0 [ 2451.363427][ C0] do_idle+0x1e7/0x510 [ 2451.363445][ C0] ? __pfx_do_idle+0x10/0x10 [ 2451.363468][ C0] cpu_startup_entry+0x44/0x60 [ 2451.363483][ C0] rest_init+0x2de/0x300 [ 2451.363500][ C0] start_kernel+0x3ae/0x410 [ 2451.363520][ C0] x86_64_start_reservations+0x24/0x30 [ 2451.363541][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2451.363562][ C0] common_startup_64+0x13e/0x147 [ 2451.363589][ C0]