last executing test programs: 15.977504894s ago: executing program 3 (id=2524): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x10000}]}}]}, 0x3c}}, 0x8850) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) 14.405645195s ago: executing program 3 (id=2526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="05a81af19772b1906cbb12fac1c7934c8f3bea4eef594b68ec65dfce9254af4d24aed6ab1a7725e07479f22f8bd6b7cca0d7e58198f2a1a0f4a99c741f3c3ecdfd6f0ad2f1a911885e03e52ad908fde58bfe368fda27faed87edb890dce5ddb255bd88c2fb92bab8ec12"], 0x5c}, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000), 0x4) 13.259713364s ago: executing program 0 (id=2530): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x20040001) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b00010009400009048500"], 0x0) 11.671587966s ago: executing program 4 (id=2533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="05a81af19772b1906cbb12fac1c7934c8f3bea4eef594b68ec65dfce9254af4d24aed6ab1a7725e07479f22f8bd6b7cca0d7e58198f2a1a0f4a99c741f3c3ecdfd6f0ad2f1a911885e03e52ad908fde58bfe368fda27faed87edb890dce5ddb255bd88c2fb92bab8ec12"], 0x5c}, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000), 0x4) 11.511392054s ago: executing program 3 (id=2535): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xb83, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x482, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0xe39b}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a0b0400000000000000000200000018000480140001800b0001006e756d67656e00000400028009f9010073797a3200000000140000001100010000317d0ed700b6a3a1d54fc6"], 0x60}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 9.730807679s ago: executing program 1 (id=2537): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r8, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 9.724359312s ago: executing program 4 (id=2538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) recvmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12100) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000007cc5cd168622674a000000000a01020000000000000000010000000900010073797a300000000014000000160a0101000b00000000000001000000140000001000010000000000000000000000000a"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r6}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r6}) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000340)) 9.597083998s ago: executing program 0 (id=2539): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r2, 0x400454dc, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffff0000000002000000000000000000ec6f5e5644fdffbf7476d995725b672b82067c3675f9d0fd9b107888d2fd265749898c130ed9a2fbf2cc777809cc16bc071d0d89e0b13dce49487466b252c680febfca61d6f382648e256ef1"], 0x2a) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41c", 0x25}], 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) write$tcp_mem(r4, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x4}) 8.013581151s ago: executing program 3 (id=2540): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4ca6d5f2db29c58d19"], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x295) syz_usb_disconnect(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="20000000000c001a8008000a80050071c3"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x1) clock_gettime(0x0, &(0x7f0000000300)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7.989039755s ago: executing program 2 (id=2541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, 0x0, 0x0) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100000000", 0x57}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x138}}, 0x4040000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) 7.466919928s ago: executing program 2 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x74}}, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x90, 0x2, [@TCA_MATCHALL_ACT={0x8c, 0x2, [@m_ife={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xfaed}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x8, 0x1, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) r6 = openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$sequencer(r6, &(0x7f0000000040)=[@l={0x92, 0x4, 0xd0, 0x1c, 0x25, 0xc, 0xb3ac}], 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2037) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r11, &(0x7f0000001980)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="f7a0f057", 0x4}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000080)={0x1001}, 0x8) close(r11) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.203575211s ago: executing program 0 (id=2543): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.135044233s ago: executing program 4 (id=2544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000), 0x4) 7.072681463s ago: executing program 2 (id=2545): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x20040001) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b"], 0x0) 6.31579848s ago: executing program 1 (id=2546): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0x74fb, 0x100, 0xfffffffd, 0x377}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xb4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@nested={0x8, 0x6e, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 5.302806925s ago: executing program 0 (id=2547): socket(0x2, 0x80805, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000100), 0x200001, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, 0x0, 0x4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a84001280110001006272696467655f736c617665000000006c00058005001900030000000500090001000000050005000000080025000100000006001f00d5000000080022000000", @ANYRES32=0x0, @ANYBLOB="050007000000000005000800000000000500060001000000060002000100000005001e0000000000050009000100000008002200", @ANYRES32=0x0, @ANYBLOB="140003006272696467655f736c6176655f30"], 0xb8}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80000, 0x80, 0x15}, 0x18) fspick(r5, &(0x7f00000000c0)='./file0\x00', 0x1) 5.181201817s ago: executing program 1 (id=2548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="05a81af19772b1906cbb12fac1c7934c8f3bea4eef594b68ec65dfce9254af4d24aed6ab1a7725e07479f22f8bd6b7cca0d7e58198f2a1a0f4a99c741f3c3ecdfd6f0ad2f1a911885e03e52ad908fde58bfe368fda27faed87edb890dce5ddb255bd88c2fb92bab8ec12"], 0x5c}, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000), 0x4) 4.694657964s ago: executing program 4 (id=2549): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x20040001) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b00010009400009048500"], 0x0) 4.048986184s ago: executing program 0 (id=2550): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x8a}, 0x0, 0x6c}, @in6=@remote, {}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @mark={0xc, 0x15, {0x350759, 0x5}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x430}]}, 0x154}}, 0x40000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014000880080003"], 0x48}}, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r9, 0x0, 0x0, 0x8, 0x1) 3.34222755s ago: executing program 3 (id=2551): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x40010, r1, 0x411df000) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000500160001000000"], 0x40}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = getpid() sched_setattr(r6, 0x0, 0x0) gettid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)}) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="2b72646d61202d6370757365742000006a3844fc26bd7b90af3408ce48174355c84f492b135f17cc77cea685"], 0xe) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 3.176048567s ago: executing program 2 (id=2552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, 0x0, 0x0) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100000000", 0x57}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x138}}, 0x4040000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) 3.075194871s ago: executing program 1 (id=2553): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffc, 0x10033, 0x3, 0x0}) sendfile(r5, r4, 0x0, 0x17) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) 2.724291169s ago: executing program 2 (id=2554): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x100000000000f7) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000280)=0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) 2.078972186s ago: executing program 1 (id=2555): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000086000/0x1000)=nil, 0x1000, 0x3000001) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x2000006, @remote, 0x1}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r7, 0x5) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1.360758148s ago: executing program 4 (id=2556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 689.867079ms ago: executing program 0 (id=2557): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x228000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\"\x00'}]}, 0x1c}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0), 0x0, 0x1000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) r6 = socket(0x10, 0x80002, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) sendmsg$nl_route(r6, 0x0, 0x0) 548.811973ms ago: executing program 1 (id=2558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000100), 0x200001, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a84001280110001006272696467655f736c617665000000006c00058005001900030000000500090001000000050005000000080025000100000006001f00d5000000080022000000", @ANYRES32=0x0, @ANYBLOB="050007000000000005000800000000000500060001000000060002000100000005001e0000000000050009000100000008002200", @ANYRES32=0x0, @ANYBLOB="140003006272696467655f736c6176655f30"], 0xb8}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80000, 0x80, 0x15}, 0x18) fspick(r7, &(0x7f00000000c0)='./file0\x00', 0x1) 57.342935ms ago: executing program 4 (id=2559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x468d5}, 0x4044015) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0xfffff990, 0x8, 0x30001, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0xe}, 0x50) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000), 0x4) 41.76266ms ago: executing program 3 (id=2560): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8, 0x10, 0x9, 0x40000000003}, &(0x7f0000000200)=0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0x6, 0x9, 0x800}}]}, {}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x18, &(0x7f00000004c0)=0x42, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 2 (id=2561): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_fd={0x80000001, 0x6, 0x4, 0x40, 0x9, {}, {0x3, 0x2, 0x6, 0x6, 0x3, 0xff, "4a8e252b"}, 0x1ff, 0x4, {&(0x7f00000002c0)=[{0x5, 0xed44, {}, 0x8}, {0xd5, 0xa, {}, 0x1004}]}, 0x8, 0x0, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0xc1]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) pwritev(r6, 0x0, 0x0, 0x1, 0x1) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140), 0x54) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x6}, 0x2) kernel console output (not intermixed with test programs): e, screwing up backlog [ 1061.494920][ T912] usb 5-1: USB disconnect, device number 81 [ 1061.503292][ T912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1061.519031][ T912] keyspan 5-1:0.133: device disconnected [ 1061.647654][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 1061.681641][T11407] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1061.716431][T11407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.807533][T11407] usb 3-1: config 0 has no interfaces? [ 1061.893407][T11407] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1061.940608][T11407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.977040][T11407] usb 3-1: config 0 descriptor?? [ 1062.454768][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.888289][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.134549][ T5969] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1063.353346][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1063.364543][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.384488][ T5969] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1063.415112][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.496719][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.577291][ T5969] usb 1-1: config 0 descriptor?? [ 1064.065559][T15404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.073914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.389449][ T5969] uclogic 0003:2179:0077.0006: interface is invalid, ignoring [ 1064.534675][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.184349][T15416] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1864'. [ 1065.208790][T15416] syz.3.1864 (15416): drop_caches: 2 [ 1065.254246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.383064][ T912] usb 3-1: USB disconnect, device number 89 [ 1065.589097][ T5982] net_ratelimit: 1 callbacks suppressed [ 1065.589117][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.894388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.904042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.184596][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.281968][ T5982] usb 1-1: USB disconnect, device number 94 [ 1066.534818][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.543301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.568503][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.624430][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.658727][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.130936][T15452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.824056][T11407] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 1069.205106][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'. [ 1069.217759][T11407] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1069.313777][T11407] usb 4-1: config 0 has no interface number 0 [ 1069.330217][T11407] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1069.483353][T11407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.497372][T11407] usb 4-1: Product: syz [ 1069.502044][T11407] usb 4-1: Manufacturer: syz [ 1069.507139][T11407] usb 4-1: SerialNumber: syz [ 1069.519988][T11407] usb 4-1: config 0 descriptor?? [ 1069.749971][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'. [ 1070.644634][ T5982] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1070.774618][ T5896] net_ratelimit: 15 callbacks suppressed [ 1070.774638][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.815280][ T5982] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1070.823599][ T5982] usb 5-1: config 0 has no interface number 0 [ 1070.857180][ T5982] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1070.866963][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.880814][ T5982] usb 5-1: Product: syz [ 1070.914533][ T5982] usb 5-1: Manufacturer: syz [ 1070.941251][ T5982] usb 5-1: SerialNumber: syz [ 1070.961234][ T5982] usb 5-1: config 0 descriptor?? [ 1071.019566][ T5969] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1071.174683][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 1071.200594][T11407] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1071.219947][ T5969] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1071.232467][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.245576][T11407] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1071.265144][T11407] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1071.273664][ T5969] usb 3-1: Product: syz [ 1071.353030][ T5969] usb 3-1: Manufacturer: syz [ 1071.358417][T11407] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1071.367751][ T5969] usb 3-1: SerialNumber: syz [ 1071.382191][ T5969] usb 3-1: config 0 descriptor?? [ 1071.546767][T11407] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1071.608802][ T5969] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1071.626503][T11407] usb 4-1: USB disconnect, device number 99 [ 1071.637071][T11407] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1071.818021][T15478] fuse: Unknown parameter 'us00000000000000000000' [ 1071.869414][ T4294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.878939][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.225838][T15497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1072.259001][ T5969] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1072.288933][ T5969] usb 3-1: USB disconnect, device number 90 [ 1072.310487][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.319394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.329485][ T6817] udevd[6817]: setting mode of /dev/bus/usb/003/090 to 020664 failed: No such file or directory [ 1072.330222][T11407] keyspan 4-1:0.133: device disconnected [ 1072.353795][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.381283][ T6817] udevd[6817]: setting owner of /dev/bus/usb/003/090 to uid=0, gid=0 failed: No such file or directory [ 1072.393222][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.402334][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.411570][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.864435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.030511][ T5982] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1074.063388][ T5982] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1074.077207][ T5982] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1074.091068][ T5982] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1074.116129][ T5982] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1074.162656][ T5982] usb 5-1: USB disconnect, device number 82 [ 1074.186495][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1074.252510][ T5982] keyspan 5-1:0.133: device disconnected [ 1074.630555][T15518] fuse: Bad value for 'fd' [ 1074.839629][ T5896] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1075.101701][T15522] netlink: 'syz.0.1875': attribute type 10 has an invalid length. [ 1075.252584][ T5896] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1075.365492][ T5896] usb 2-1: config 0 has no interface number 0 [ 1075.396185][ T5896] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1075.407482][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.427127][ T5896] usb 2-1: Product: syz [ 1075.613719][ T5896] usb 2-1: Manufacturer: syz [ 1075.635772][ T5896] usb 2-1: SerialNumber: syz [ 1075.645248][ T5896] usb 2-1: config 0 descriptor?? [ 1076.134639][ T5952] net_ratelimit: 5 callbacks suppressed [ 1076.134659][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.149177][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.159381][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.534682][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.462599][ T5896] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1077.481650][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1077.565912][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1077.574500][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.610664][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1077.642488][ T5896] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1077.692963][ T5896] usb 2-1: USB disconnect, device number 97 [ 1077.749691][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1077.775796][ T5896] keyspan 2-1:0.133: device disconnected [ 1078.055961][ T3544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.064409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.534854][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.639316][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.296306][ T5896] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1079.689760][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.253122][T15561] lo: Caught tx_queue_len zero misconfig [ 1080.717023][ T5896] usb 5-1: device descriptor read/all, error -71 [ 1081.586846][T11407] net_ratelimit: 1 callbacks suppressed [ 1081.586867][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.743777][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.976276][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.995896][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.004761][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.829254][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.666074][T15588] fuse: Bad value for 'fd' [ 1083.946072][T11407] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1083.971876][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.023858][ T4294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.244135][T11407] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.274996][T11407] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1084.302299][T11407] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.344146][T11407] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1084.361734][T11407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.391227][T11407] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1084.444222][ T5920] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1084.471558][T11407] usb 2-1: invalid MIDI out EP 0 [ 1084.615889][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.657317][ T5920] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1084.669748][ T6778] udevd[6778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.686581][ T5920] usb 3-1: config 0 has no interface number 0 [ 1084.686775][ T7147] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1084.727405][T15605] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 1084.807878][T11407] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1084.819472][ T5920] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1084.864834][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.955391][ T7147] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1084.963590][ T7147] usb 4-1: config 0 has no interface number 0 [ 1084.980157][ T5920] usb 3-1: Product: syz [ 1085.121216][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.164813][ T5920] usb 3-1: Manufacturer: syz [ 1085.172351][ T5920] usb 3-1: SerialNumber: syz [ 1085.186133][ T5920] usb 3-1: config 0 descriptor?? [ 1085.494880][ T7147] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1085.605218][ T7147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.732299][ T7147] usb 4-1: Product: syz [ 1085.753339][ T7147] usb 4-1: Manufacturer: syz [ 1085.778712][ T7147] usb 4-1: SerialNumber: syz [ 1085.826608][ T7147] usb 4-1: config 0 descriptor?? [ 1086.458690][ T912] usb 2-1: USB disconnect, device number 98 [ 1087.134659][ T4294] net_ratelimit: 3 callbacks suppressed [ 1087.134686][ T4294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.149881][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.164230][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.181607][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.714223][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.754892][ T5920] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1087.815539][ T5920] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1087.854335][ T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1087.913087][ T5920] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1087.957279][ T5920] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1087.990237][ T5920] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1088.035541][ T9] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1088.044151][ T9] usb 5-1: config 0 has no interface number 0 [ 1088.112607][T15628] program syz.2.1899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1088.148484][T15628] syz.2.1899 (15628): drop_caches: 2 [ 1088.218766][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.219461][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1088.248951][ T5920] usb 3-1: USB disconnect, device number 91 [ 1088.273579][ T7147] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1088.302912][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.345619][ T5920] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1088.356718][ T7147] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1088.367138][ T7147] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1088.385364][ T7147] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1088.386281][ T9] usb 5-1: Product: syz [ 1088.415878][ T7147] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 1088.416363][ T5920] keyspan 3-1:0.133: device disconnected [ 1088.459286][ T9] usb 5-1: Manufacturer: syz [ 1088.475214][ T9] usb 5-1: SerialNumber: syz [ 1088.480172][ T7147] usb 4-1: USB disconnect, device number 100 [ 1088.544850][ T9] usb 5-1: config 0 descriptor?? [ 1088.656496][ T7147] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 1088.705802][ T7147] keyspan 4-1:0.133: device disconnected [ 1089.259950][ T7147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.576472][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.629694][T15642] pim6reg: entered allmulticast mode [ 1089.709277][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 1090.025732][ T7147] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1090.137057][ T9] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1090.177653][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1090.196071][ T7147] usb 2-1: Using ep0 maxpacket: 16 [ 1090.284259][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1090.286009][ T7147] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 1090.308883][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.314617][ T9] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1090.334633][ T7147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.354555][ T7147] usb 2-1: Product: syz [ 1090.370286][ T9] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1090.391526][ T7147] usb 2-1: Manufacturer: syz [ 1090.427027][ T9] usb 5-1: USB disconnect, device number 85 [ 1090.453790][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1090.496171][ T9] keyspan 5-1:0.133: device disconnected [ 1090.516553][ T7147] usb 2-1: SerialNumber: syz [ 1090.761832][ T7147] usb 2-1: config 0 descriptor?? [ 1090.774586][T11407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.354968][ T7147] safe_serial 2-1:0.0: safe_serial converter detected [ 1091.387423][ T7147] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 1092.161531][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 1092.171537][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 1093.483814][ T7147] usb 2-1: USB disconnect, device number 99 [ 1093.493832][ T7147] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 1093.520893][ T7147] safe_serial 2-1:0.0: device disconnected [ 1093.659061][T15670] fuse: root generation should be zero [ 1094.174366][ T5986] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1094.241850][ T1164] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.250935][ T1164] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.277038][ T1164] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.338027][ T1164] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.349392][ T5986] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1094.364774][ T5986] usb 2-1: config 0 has no interface number 0 [ 1094.384031][ T9] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1094.411099][ T5986] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1094.438751][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.460528][ T5986] usb 2-1: Product: syz [ 1094.476015][ T5986] usb 2-1: Manufacturer: syz [ 1094.490252][ T5986] usb 2-1: SerialNumber: syz [ 1094.509341][ T5986] usb 2-1: config 0 descriptor?? [ 1094.549205][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1094.564601][ T9] usb 3-1: config 0 has no interface number 0 [ 1094.581552][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1094.591084][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.642046][ T9] usb 3-1: Product: syz [ 1094.663499][ T9] usb 3-1: Manufacturer: syz [ 1094.679388][ T9] usb 3-1: SerialNumber: syz [ 1094.755579][T15688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 1094.798252][T15688] hub 9-0:1.0: USB hub found [ 1094.803580][T15688] hub 9-0:1.0: 1 port detected [ 1094.829446][ T9] usb 3-1: config 0 descriptor?? [ 1096.854546][ T5896] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1097.049324][ T5896] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1097.146516][ T5896] usb 5-1: config 0 has no interface number 0 [ 1097.187868][ T5896] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1097.204463][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.236679][ T5896] usb 5-1: Product: syz [ 1097.284101][ T5896] usb 5-1: Manufacturer: syz [ 1097.298925][ T5896] usb 5-1: SerialNumber: syz [ 1097.326360][ T5896] usb 5-1: config 0 descriptor?? [ 1097.359824][ T5986] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1097.421703][ T5986] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1097.464645][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1097.493452][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1097.507618][ T5986] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1097.524967][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1097.536042][ T5986] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1097.558300][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1097.599862][ T5986] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1097.626146][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 1097.647426][ T5986] usb 2-1: USB disconnect, device number 100 [ 1097.695039][ T9] usb 3-1: USB disconnect, device number 92 [ 1097.703525][ T5986] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1097.811679][ T9] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 1097.827830][ T5986] keyspan 2-1:0.133: device disconnected [ 1097.845042][ T9] keyspan 3-1:0.133: device disconnected [ 1097.996756][T15713] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[15713] [ 1098.321716][T15713] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1917'. [ 1098.683314][T15713] batadv2: entered promiscuous mode [ 1098.701207][T15713] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1099.182014][T15724] input: syz0 as /devices/virtual/input/input17 [ 1100.355982][ T5982] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1100.390608][T15725] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 1100.453418][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.467601][T15725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.474821][T15725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.546496][ T5982] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1100.563837][ T5982] usb 4-1: config 0 has no interface number 0 [ 1100.624741][ T5982] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1100.667668][ T5896] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1100.747589][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.799157][ T5896] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1100.826247][ T5982] usb 4-1: Product: syz [ 1100.851788][ T5982] usb 4-1: Manufacturer: syz [ 1100.865107][ T5896] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1100.885803][ T5982] usb 4-1: SerialNumber: syz [ 1100.908684][ T5896] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1100.945220][ T5982] usb 4-1: config 0 descriptor?? [ 1100.992059][ T5896] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1101.207223][T15743] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1101.227625][ T5896] usb 5-1: USB disconnect, device number 86 [ 1101.375623][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1101.632027][ T5896] keyspan 5-1:0.133: device disconnected [ 1102.491855][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 1103.085420][ T5982] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1103.103526][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1103.113393][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1103.123501][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1103.153829][ T5982] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1103.198204][ T5982] usb 4-1: USB disconnect, device number 101 [ 1103.410323][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1103.457187][ T5982] keyspan 4-1:0.133: device disconnected [ 1104.064140][ T9] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1104.237805][ T5986] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1104.334790][ T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1104.343359][ T9] usb 4-1: config 0 has no interface number 0 [ 1104.353593][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1104.365175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.376715][ T9] usb 4-1: Product: syz [ 1104.380951][ T9] usb 4-1: Manufacturer: syz [ 1104.389482][ T9] usb 4-1: SerialNumber: syz [ 1104.407039][ T9] usb 4-1: config 0 descriptor?? [ 1104.449480][ T5986] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1104.458281][ T5986] usb 5-1: config 0 has no interface number 0 [ 1104.481571][ T5986] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1104.492026][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.500635][ T5986] usb 5-1: Product: syz [ 1104.568435][ T5986] usb 5-1: Manufacturer: syz [ 1104.612832][ T5986] usb 5-1: SerialNumber: syz [ 1104.703678][ T5986] usb 5-1: config 0 descriptor?? [ 1105.263363][T15774] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1940'. [ 1105.724087][ T5920] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1105.894429][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1105.904536][ T5920] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1105.914076][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.922549][ T5920] usb 2-1: Product: syz [ 1105.927064][ T5920] usb 2-1: Manufacturer: syz [ 1105.931668][ T5920] usb 2-1: SerialNumber: syz [ 1105.963052][ T5920] usb 2-1: config 0 descriptor?? [ 1106.182589][ T5920] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 1106.202849][ T5920] b3 c1 69 eb 50 3d 29 15 [ 1106.210769][ T5920] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1106.518835][ T5920] usb 2-1: USB disconnect, device number 101 [ 1106.586586][ T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1106.597175][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1106.823906][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1106.857236][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1107.060573][ T5986] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1107.076964][ T5986] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1107.109256][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1107.123733][ T5986] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1107.153454][ T5986] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1107.241377][ T9] usb 4-1: USB disconnect, device number 102 [ 1107.281801][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1107.300568][ T5986] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 1107.310783][ T9] keyspan 4-1:0.133: device disconnected [ 1107.322045][ T5986] usb 5-1: USB disconnect, device number 87 [ 1107.343181][ T5986] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 1107.466991][ T5986] keyspan 5-1:0.133: device disconnected [ 1107.910591][ T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1108.134268][T15805] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 1108.143049][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.164490][T15805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.171755][T15805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.332200][ T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1108.353998][ T9] usb 4-1: config 0 has no interface number 0 [ 1108.383827][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1108.393755][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.402834][ T9] usb 4-1: Product: syz [ 1108.407042][ T9] usb 4-1: Manufacturer: syz [ 1108.422997][ T9] usb 4-1: SerialNumber: syz [ 1108.577737][ T9] usb 4-1: config 0 descriptor?? [ 1109.803556][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 1109.813752][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 1110.355694][ T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1110.395482][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1110.474154][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1110.494131][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1110.580611][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1110.647999][ T9] usb 4-1: USB disconnect, device number 103 [ 1110.699210][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1110.732591][ T9] keyspan 4-1:0.133: device disconnected [ 1111.897608][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 1115.354802][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1115.354822][ T30] audit: type=1804 audit(1765034467.022:1277): pid=15891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1951" name="bus" dev="ramfs" ino=53981 res=1 errno=0 [ 1115.478396][ T30] audit: type=1804 audit(1765034467.022:1278): pid=15891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1951" name="bus" dev="ramfs" ino=53981 res=1 errno=0 [ 1115.824830][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.835654][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.355457][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1117.806593][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1117.818093][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1117.839003][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1117.960686][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.004067][T15912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1118.022042][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1119.173219][T15935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1120.845821][ T912] usb 4-1: USB disconnect, device number 104 [ 1123.774780][ T9] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1123.988155][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1124.027779][T15989] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1124.089671][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.114804][ T9] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1124.124744][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.160982][ T9] usb 3-1: config 0 descriptor?? [ 1124.669399][ T9] uclogic 0003:2179:0077.0007: interface is invalid, ignoring [ 1125.549535][T16001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1974'. [ 1127.065391][ T9] usb 3-1: USB disconnect, device number 93 [ 1128.164958][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'. [ 1129.647113][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 1129.659617][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 1129.670820][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 1130.036056][T16047] tipc: Enabling of bearer rejected, failed to enable media [ 1132.317276][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1132.327669][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1132.337099][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1134.054638][ T5986] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1134.572635][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1134.621719][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.692910][ T5986] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1134.692941][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.705076][ T5986] usb 4-1: config 0 descriptor?? [ 1135.143809][ T5986] uclogic 0003:2179:0077.0008: interface is invalid, ignoring [ 1136.138753][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.146222][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.536454][T11407] usb 4-1: USB disconnect, device number 105 [ 1137.613581][T16107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.695164][T16107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.885862][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1995'. [ 1138.416181][T16107] tipc: Resetting bearer [ 1138.500124][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 1138.634758][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 1138.782869][ T1164] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.802253][ T1164] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.884410][ T1164] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.945746][ T1164] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.784505][ T5982] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1139.964253][ T5982] usb 3-1: Using ep0 maxpacket: 16 [ 1139.986748][ T5982] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 1140.000141][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.079212][ T5982] usb 3-1: Product: syz [ 1140.094312][ T5982] usb 3-1: Manufacturer: syz [ 1140.105165][ T5982] usb 3-1: SerialNumber: syz [ 1140.126968][ T5982] usb 3-1: config 0 descriptor?? [ 1140.141675][ T5982] safe_serial 3-1:0.0: safe_serial converter detected [ 1140.160477][ T5982] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 1140.462046][T16163] input: syz0 as /devices/virtual/input/input18 [ 1142.347503][ T5986] usb 3-1: USB disconnect, device number 94 [ 1142.383811][ T5986] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 1142.431720][ T5986] safe_serial 3-1:0.0: device disconnected [ 1143.364416][ T5986] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1143.578870][ T5986] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1143.657828][ T5986] usb 3-1: config 0 has no interface number 0 [ 1143.711280][ T5986] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1143.722204][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.754349][ T5986] usb 3-1: Product: syz [ 1143.754370][ T5986] usb 3-1: Manufacturer: syz [ 1143.754384][ T5986] usb 3-1: SerialNumber: syz [ 1143.764560][ T5986] usb 3-1: config 0 descriptor?? [ 1144.232309][T16195] tipc: Resetting bearer [ 1144.238945][ T5982] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1144.484571][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1144.496058][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.654688][ T5982] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1144.805589][T16202] delete_channel: no stack [ 1144.861924][ T6022] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.878742][ T6022] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.940182][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.948887][ T6022] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.973671][ T6022] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.009359][ T5982] usb 2-1: config 0 descriptor?? [ 1145.828943][ T5982] uclogic 0003:2179:0077.0009: interface is invalid, ignoring [ 1146.174424][ T5986] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1146.186044][ T5986] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1146.197235][ T5986] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1146.216212][ T5986] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1146.332327][ T5986] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1146.369741][ T5986] usb 3-1: USB disconnect, device number 95 [ 1146.796413][ T5986] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1146.817946][ T5986] keyspan 3-1:0.133: device disconnected [ 1147.327019][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 1147.711237][ T5986] usb 2-1: USB disconnect, device number 102 [ 1148.599702][T16238] netlink: 'syz.0.2018': attribute type 1 has an invalid length. [ 1150.635221][ T912] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1151.207089][ T912] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1151.217323][ T912] usb 4-1: config 0 has no interface number 0 [ 1151.237442][ T912] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1151.265155][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.303698][ T912] usb 4-1: Product: syz [ 1151.309346][ T912] usb 4-1: Manufacturer: syz [ 1151.430205][ T912] usb 4-1: SerialNumber: syz [ 1151.485230][ T912] usb 4-1: config 0 descriptor?? [ 1153.042220][ T912] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1153.079507][ T912] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1153.091505][ T912] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1153.101495][ T912] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1153.113082][ T912] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1153.126362][ T912] usb 4-1: USB disconnect, device number 106 [ 1153.136250][ T912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1153.403781][ T912] keyspan 4-1:0.133: device disconnected [ 1156.103569][ T9] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1156.484290][ T30] audit: type=1804 audit(1765034508.122:1279): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2034" name="bus" dev="ramfs" ino=56565 res=1 errno=0 [ 1156.784769][ T30] audit: type=1804 audit(1765034508.122:1280): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2034" name="bus" dev="ramfs" ino=56565 res=1 errno=0 [ 1156.992314][ T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1157.017678][ T9] usb 4-1: config 0 has no interface number 0 [ 1157.099531][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1157.109009][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.129758][ T9] usb 4-1: Product: syz [ 1157.134646][ T9] usb 4-1: Manufacturer: syz [ 1157.472581][ T9] usb 4-1: SerialNumber: syz [ 1157.594254][ T9] usb 4-1: config 0 descriptor?? [ 1157.876264][T16338] delete_channel: no stack [ 1159.727496][T16357] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1160.145524][ T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1160.178051][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1160.190121][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1160.199671][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1160.213549][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1160.276094][ T9] usb 4-1: USB disconnect, device number 107 [ 1160.309837][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1160.348635][ T9] keyspan 4-1:0.133: device disconnected [ 1162.378152][T16384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2043'. [ 1163.784292][ T5982] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1163.948816][ T5982] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1163.953333][T16397] loop2: detected capacity change from 0 to 7 [ 1163.965682][ T5982] usb 4-1: config 0 has no interface number 0 [ 1163.975710][T16397] Dev loop2: unable to read RDB block 7 [ 1163.996783][T16397] loop2: AHDI p1 p2 p3 [ 1164.001432][T16397] loop2: partition table partially beyond EOD, truncated [ 1164.046755][ T5982] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1164.054495][T16397] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1164.066535][T16397] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1164.073435][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.101907][ T5982] usb 4-1: Product: syz [ 1164.245338][ T5201] Dev loop2: unable to read RDB block 7 [ 1164.250953][ T5201] loop2: AHDI p1 p2 p3 [ 1164.255594][ T5201] loop2: partition table partially beyond EOD, truncated [ 1164.262805][ T5201] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1164.275011][ T5982] usb 4-1: Manufacturer: syz [ 1164.279633][ T5982] usb 4-1: SerialNumber: syz [ 1164.318754][ T5201] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1164.379491][ T5982] usb 4-1: config 0 descriptor?? [ 1166.386450][ T5982] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1166.495956][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1166.533028][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1166.569606][ T5982] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1166.661408][ T5982] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1166.714878][ T5982] usb 4-1: USB disconnect, device number 108 [ 1166.861027][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1166.901327][ T5982] keyspan 4-1:0.133: device disconnected [ 1168.589147][ T5982] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1168.746592][ T5982] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1168.755196][ T5982] usb 3-1: config 0 has no interface number 0 [ 1168.765154][ T5982] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1168.776448][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.784999][ T5982] usb 3-1: Product: syz [ 1168.793318][ T5982] usb 3-1: Manufacturer: syz [ 1168.801536][ T5982] usb 3-1: SerialNumber: syz [ 1168.818743][ T5982] usb 3-1: config 0 descriptor?? [ 1169.602428][T16463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2059'. [ 1169.764030][ T9] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1170.019783][ T9] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1170.284032][ T9] usb 2-1: config 0 has no interface number 0 [ 1170.296921][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1170.312842][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 1170.333093][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.344564][ T9] usb 2-1: Product: syz [ 1170.349250][ T9] usb 2-1: Manufacturer: syz [ 1170.354552][ T9] usb 2-1: SerialNumber: syz [ 1170.380528][ T9] usb 2-1: config 0 descriptor?? [ 1172.302939][ T5982] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1172.319678][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1172.336516][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1172.413134][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1172.473808][ T5982] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1172.501477][ T5982] usb 3-1: USB disconnect, device number 96 [ 1172.548835][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1172.587386][ T5982] keyspan 3-1:0.133: device disconnected [ 1172.887200][ T9] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1172.896447][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1172.938544][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1172.961792][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1172.990125][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1173.023991][ T9] usb 2-1: USB disconnect, device number 103 [ 1173.070099][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1173.118928][ T9] keyspan 2-1:0.133: device disconnected [ 1173.630636][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 1173.667900][T16499] netlink: 91 bytes leftover after parsing attributes in process `syz.2.2067'. [ 1173.768320][ T5982] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1173.964854][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 1174.049596][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.102816][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.136939][ T5982] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1174.146998][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.208788][ T5982] usb 2-1: config 0 descriptor?? [ 1174.311374][T16503] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 1174.779114][ T5982] kye 0003:0458:501B.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1174.794917][ T5982] kye 0003:0458:501B.000A: unknown main item tag 0x0 [ 1174.801635][ T5982] kye 0003:0458:501B.000A: unknown main item tag 0x0 [ 1174.872088][ T5982] kye 0003:0458:501B.000A: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 1174.944518][ T5982] kye 0003:0458:501B.000A: tablet-enabling feature report not found [ 1174.971320][ T5982] kye 0003:0458:501B.000A: tablet enabling failed [ 1176.514652][T16525] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 1177.183800][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2074'. [ 1177.259460][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.266213][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.274615][ T5982] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1177.297890][ T7147] usb 2-1: USB disconnect, device number 104 [ 1177.612181][ T5982] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1177.628690][ T5982] usb 3-1: config 0 has no interface number 0 [ 1177.653183][ T5982] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1177.673060][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.693642][ T5982] usb 3-1: Product: syz [ 1177.709203][ T5982] usb 3-1: Manufacturer: syz [ 1177.720767][ T5982] usb 3-1: SerialNumber: syz [ 1177.740498][ T5982] usb 3-1: config 0 descriptor?? [ 1178.924312][T11407] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1179.101148][T11407] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1179.109500][T11407] usb 2-1: config 0 has no interface number 0 [ 1179.119949][T11407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1179.129980][T11407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.143532][T11407] usb 2-1: Product: syz [ 1179.195016][T11407] usb 2-1: Manufacturer: syz [ 1179.212303][T11407] usb 2-1: SerialNumber: syz [ 1179.239625][T11407] usb 2-1: config 0 descriptor?? [ 1180.402152][ T5982] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1180.420417][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1180.438620][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1180.481055][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1180.522454][ T5982] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1180.558790][ T5982] usb 3-1: USB disconnect, device number 97 [ 1180.600290][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1180.620016][ T5982] keyspan 3-1:0.133: device disconnected [ 1181.818379][T11407] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1181.840014][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1181.890742][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1181.898855][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1181.908686][T11407] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1181.920868][T11407] usb 2-1: USB disconnect, device number 105 [ 1181.932415][T11407] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1182.030553][T11407] keyspan 2-1:0.133: device disconnected [ 1182.757920][T16584] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 1182.807148][T16584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.816090][T16584] .`: (slave batadv0): Enslaving as an active interface with an up link [ 1185.464051][ T5982] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1185.657567][ T5982] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1185.667330][ T5982] usb 2-1: config 0 has no interface number 0 [ 1185.823829][ T5982] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1185.855235][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.885204][ T5982] usb 2-1: Product: syz [ 1185.899812][ T5982] usb 2-1: Manufacturer: syz [ 1185.913027][ T5982] usb 2-1: SerialNumber: syz [ 1185.959172][ T5982] usb 2-1: config 0 descriptor?? [ 1187.223958][ T5896] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1187.489334][ T5896] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1187.516176][ T5896] usb 3-1: config 0 has no interface number 0 [ 1187.544948][ T5896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1187.572797][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.600086][ T5896] usb 3-1: Product: syz [ 1187.608716][ T5896] usb 3-1: Manufacturer: syz [ 1187.620408][ T5896] usb 3-1: SerialNumber: syz [ 1187.654461][ T5896] usb 3-1: config 0 descriptor?? [ 1188.503446][ T5982] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1188.579674][ T5982] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1188.606915][ T5982] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1188.646390][T16639] delete_channel: no stack [ 1188.703751][ T5982] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1188.756177][ T5982] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1188.803368][ T5982] usb 2-1: USB disconnect, device number 106 [ 1188.841813][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1188.885106][ T5982] keyspan 2-1:0.133: device disconnected [ 1190.540073][ T5896] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1190.585873][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1190.606824][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1190.626790][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1190.683722][ T5896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1190.874947][ T5896] usb 3-1: USB disconnect, device number 98 [ 1190.905292][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1190.921399][ T5896] keyspan 3-1:0.133: device disconnected [ 1191.450599][ T5896] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1191.651526][ T5896] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1191.666727][ T5896] usb 3-1: config 0 has no interface number 0 [ 1191.699758][ T5896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1191.729625][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.924308][ T5896] usb 3-1: Product: syz [ 1191.933050][ T5896] usb 3-1: Manufacturer: syz [ 1192.123269][ T5896] usb 3-1: SerialNumber: syz [ 1192.169601][ T5896] usb 3-1: config 0 descriptor?? [ 1192.354236][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1192.531197][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.551072][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1192.564257][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1192.611190][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1192.626237][ T9] usb 4-1: SerialNumber: syz [ 1193.202176][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 1194.365426][ T5896] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1194.376346][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1194.392028][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1194.401277][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1194.486883][ T5896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1194.518017][ T5896] usb 3-1: USB disconnect, device number 99 [ 1194.835035][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1194.882864][ T9] usb 4-1: 0:2 : does not exist [ 1194.929101][ T5896] keyspan 3-1:0.133: device disconnected [ 1194.955009][ T9] usb 4-1: USB disconnect, device number 109 [ 1195.062207][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.175665][ T30] audit: type=1326 audit(1765034547.862:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.229503][ T30] audit: type=1326 audit(1765034547.882:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.305935][ T30] audit: type=1326 audit(1765034547.882:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.334316][ T30] audit: type=1326 audit(1765034547.882:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.461564][ T30] audit: type=1326 audit(1765034547.892:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.520056][ T30] audit: type=1326 audit(1765034547.892:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.800787][ T30] audit: type=1326 audit(1765034547.892:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.854405][ T30] audit: type=1326 audit(1765034547.912:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.894244][ T5896] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1196.941223][ T30] audit: type=1326 audit(1765034547.912:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1196.975077][ T30] audit: type=1326 audit(1765034547.912:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1197.271488][ T5896] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1197.307878][ T5896] usb 2-1: config 0 has no interface number 0 [ 1197.354899][ T5896] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1197.387890][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.406031][ T5896] usb 2-1: Product: syz [ 1197.428263][ T5896] usb 2-1: Manufacturer: syz [ 1197.441911][ T5896] usb 2-1: SerialNumber: syz [ 1197.510050][ T5896] usb 2-1: config 0 descriptor?? [ 1199.253560][T16738] netlink: 'syz.0.2116': attribute type 10 has an invalid length. [ 1199.266615][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.278246][T16738] batadv0: entered promiscuous mode [ 1199.284997][T16738] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1199.562700][ T5896] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1199.616949][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1199.648383][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1199.773611][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1199.789076][ T5896] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1199.837412][ T5896] usb 2-1: USB disconnect, device number 107 [ 1200.028635][T16746] tipc: Failed to remove unknown binding: 66,1,1/3758096386:861213903/861213905 [ 1200.045725][T16746] tipc: Failed to remove unknown binding: 66,1,1/3758096386:861213903/861213905 [ 1200.057990][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1200.075994][ T5896] keyspan 2-1:0.133: device disconnected [ 1200.097748][T16746] tipc: Failed to remove unknown binding: 66,1,1/3758096386:861213903/861213905 [ 1201.750443][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 1202.144012][ T5920] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1202.389579][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.399980][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1202.511883][ T5920] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1202.521491][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1202.557831][ T5920] usb 3-1: SerialNumber: syz [ 1203.240222][T16783] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 1204.306028][ T5920] usb 3-1: 0:2 : does not exist [ 1204.347431][ T5920] usb 3-1: USB disconnect, device number 100 [ 1204.774399][ T5896] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 1204.972585][ T5896] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1204.981820][ T5896] usb 2-1: config 0 has no interface number 0 [ 1205.014451][ T5920] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1205.052489][ T5896] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1205.080525][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.121478][ T5896] usb 2-1: Product: syz [ 1205.142417][ T5896] usb 2-1: Manufacturer: syz [ 1205.157130][ T5896] usb 2-1: SerialNumber: syz [ 1205.175335][ T5896] usb 2-1: config 0 descriptor?? [ 1205.258690][ T5920] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1205.284932][ T5920] usb 3-1: config 0 has no interface number 0 [ 1205.321937][ T5920] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1205.362509][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.498967][ T5920] usb 3-1: Product: syz [ 1205.533601][ T5920] usb 3-1: Manufacturer: syz [ 1205.568964][ T5920] usb 3-1: SerialNumber: syz [ 1205.603433][ T5920] usb 3-1: config 0 descriptor?? [ 1207.610264][ T5896] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1207.619556][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1207.721684][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1207.755176][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1207.854745][ T5896] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1207.999986][ T5896] usb 2-1: USB disconnect, device number 108 [ 1208.043000][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1208.340371][ T5920] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1208.349593][ T5920] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1208.364817][ T5920] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1208.372732][ T5920] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1208.385590][ T5920] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 1208.405822][ T5896] keyspan 2-1:0.133: device disconnected [ 1208.408771][ T5920] usb 3-1: USB disconnect, device number 101 [ 1208.583730][ T5920] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 1208.643814][ T5920] keyspan 3-1:0.133: device disconnected [ 1209.799294][T16857] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 1210.974263][ T7147] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1211.194360][ T5896] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1211.249717][ T7147] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1211.258623][ T7147] usb 4-1: config 0 has no interface number 0 [ 1211.285517][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 1211.316242][ T7147] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1211.325889][ T7147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.337683][ T7147] usb 4-1: Product: syz [ 1211.343371][ T7147] usb 4-1: Manufacturer: syz [ 1211.360113][ T7147] usb 4-1: SerialNumber: syz [ 1211.386065][ T7147] usb 4-1: config 0 descriptor?? [ 1211.436454][T16883] bridge_slave_1: left allmulticast mode [ 1211.455615][T16883] bridge_slave_1: left promiscuous mode [ 1211.462109][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.500202][T16883] bridge_slave_0: left allmulticast mode [ 1211.506639][T16883] bridge_slave_0: left promiscuous mode [ 1211.548299][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.556077][ T5896] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1211.565070][ T5896] usb 3-1: config 0 has no interface number 0 [ 1211.658683][ T5896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1211.672193][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.809705][ T5896] usb 3-1: Product: syz [ 1211.825882][ T5896] usb 3-1: Manufacturer: syz [ 1211.833049][ T5896] usb 3-1: SerialNumber: syz [ 1211.858177][ T5896] usb 3-1: config 0 descriptor?? [ 1212.766076][T16889] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1213.762673][ T7147] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1213.780398][ T7147] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1213.791674][ T7147] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1213.830639][ T7147] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1213.860949][ T7147] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1213.937662][ T7147] usb 4-1: USB disconnect, device number 110 [ 1213.966577][ T7147] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1213.992907][ T7147] keyspan 4-1:0.133: device disconnected [ 1214.329881][ T5896] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1214.365887][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1214.403017][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1214.455143][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1214.494964][ T5896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1214.779543][ T5896] usb 3-1: USB disconnect, device number 102 [ 1214.799361][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1214.832604][ T5896] keyspan 3-1:0.133: device disconnected [ 1218.822810][T16951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2161'. [ 1219.424402][ T5896] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1219.799822][ T5896] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1219.814710][ T5896] usb 3-1: config 0 has no interface number 0 [ 1219.937989][ T5896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1219.955045][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.034495][ T5896] usb 3-1: Product: syz [ 1220.044499][ T5896] usb 3-1: Manufacturer: syz [ 1220.050182][ T5896] usb 3-1: SerialNumber: syz [ 1220.092831][ T5896] usb 3-1: config 0 descriptor?? [ 1220.694197][ T5920] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1220.963018][ T5920] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1220.974983][ T5920] usb 2-1: config 0 has no interface number 0 [ 1221.027798][ T5920] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1221.040880][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.106695][ T5920] usb 2-1: Product: syz [ 1221.115918][ T5920] usb 2-1: Manufacturer: syz [ 1221.121334][ T5920] usb 2-1: SerialNumber: syz [ 1221.170195][ T5920] usb 2-1: config 0 descriptor?? [ 1221.202009][T16936] tipc: Resetting bearer [ 1221.260283][ T5952] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1221.289300][ T5952] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.453040][ T5952] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1221.481500][ T5952] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.500175][ T5952] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1221.529712][ T5952] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.555261][ T5952] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1221.579228][ T5952] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.094610][T16976] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 1222.106082][ T5896] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1222.164721][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1222.204835][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1222.229741][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1222.258406][ T5896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1222.336058][ T5896] usb 3-1: USB disconnect, device number 103 [ 1222.397119][ T6817] udevd[6817]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1222.401919][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1222.542584][ T5896] keyspan 3-1:0.133: device disconnected [ 1223.024634][ T5896] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1223.250601][ T5896] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1223.260169][ T5896] usb 3-1: config 0 has no interface number 0 [ 1223.313305][ T5896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1223.352914][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.373147][ T5896] usb 3-1: Product: syz [ 1223.392163][ T5896] usb 3-1: Manufacturer: syz [ 1223.401265][ T5896] usb 3-1: SerialNumber: syz [ 1223.429335][ T5896] usb 3-1: config 0 descriptor?? [ 1223.728253][ T5920] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1223.789110][ T5920] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1223.801531][ T5920] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1223.814862][ T5920] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1223.834097][ T5920] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1223.859119][ T5920] usb 2-1: USB disconnect, device number 109 [ 1223.891795][ T5920] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1223.929054][ T5920] keyspan 2-1:0.133: device disconnected [ 1225.922240][ T5896] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1225.968794][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1225.994649][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1226.030677][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1226.085501][ T5896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1226.108072][ T5896] usb 3-1: USB disconnect, device number 104 [ 1226.156970][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1226.196712][ T5896] keyspan 3-1:0.133: device disconnected [ 1226.768955][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1227.058761][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.074703][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1227.096927][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1227.177444][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1227.186036][ T9] usb 3-1: SerialNumber: syz [ 1227.708370][ T9] usb 3-1: 0:2 : does not exist [ 1227.713363][ T9] usb 3-1: unit 255 not found! [ 1227.808530][ T9] usb 3-1: USB disconnect, device number 105 [ 1228.201273][T17045] syzkaller0: entered promiscuous mode [ 1228.207621][T17045] syzkaller0: entered allmulticast mode [ 1229.239392][ T9] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1229.440429][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1229.448927][ T9] usb 3-1: config 0 has no interface number 0 [ 1229.573594][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1229.583238][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.687428][ T9] usb 3-1: Product: syz [ 1229.712083][ T9] usb 3-1: Manufacturer: syz [ 1229.755890][ T9] usb 3-1: SerialNumber: syz [ 1229.795400][ T9] usb 3-1: config 0 descriptor?? [ 1230.837143][T17073] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 1231.204500][ T5896] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1231.400606][ T5896] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1231.414415][ T5896] usb 2-1: config 0 has no interface number 0 [ 1231.492423][ T5896] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1231.511583][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.546592][ T5896] usb 2-1: Product: syz [ 1231.566193][ T5896] usb 2-1: Manufacturer: syz [ 1231.591846][ T5896] usb 2-1: SerialNumber: syz [ 1231.619757][ T5896] usb 2-1: config 0 descriptor?? [ 1231.996807][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1232.028240][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1232.068529][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1232.094352][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1232.118167][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1232.161658][ T9] usb 3-1: USB disconnect, device number 106 [ 1232.229548][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1232.286115][ T9] keyspan 3-1:0.133: device disconnected [ 1232.354690][T17082] input: syz0 as /devices/virtual/input/input22 [ 1233.680418][ T5896] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1233.945813][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1233.954482][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1233.962355][ T5896] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1234.035603][ T5896] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1234.456776][ T5896] usb 2-1: USB disconnect, device number 110 [ 1234.519682][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1234.538288][ T5896] keyspan 2-1:0.133: device disconnected [ 1235.604454][ T9] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1235.807524][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1235.854434][ T9] usb 3-1: config 0 has no interface number 0 [ 1235.874025][T11407] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1236.040845][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1236.051278][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.077991][ T9] usb 3-1: Product: syz [ 1236.310050][T11407] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1236.319183][T11407] usb 2-1: config 0 has no interface number 0 [ 1236.344373][T11407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1236.354864][ T9] usb 3-1: Manufacturer: syz [ 1236.390219][ T9] usb 3-1: SerialNumber: syz [ 1236.395810][T11407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.405947][T11407] usb 2-1: Product: syz [ 1236.414406][ T9] usb 3-1: config 0 descriptor?? [ 1236.423701][T11407] usb 2-1: Manufacturer: syz [ 1236.433490][T11407] usb 2-1: SerialNumber: syz [ 1236.467106][T11407] usb 2-1: config 0 descriptor?? [ 1238.358884][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 1238.711870][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.721480][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.817293][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1239.313181][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1239.364024][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1239.384211][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1239.464029][T11407] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1239.472895][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1239.496181][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1239.514572][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1239.546126][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1239.554547][ T9] usb 3-1: USB disconnect, device number 107 [ 1239.565306][T11407] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 1239.583297][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1239.598870][T11407] usb 2-1: USB disconnect, device number 111 [ 1239.609513][ T9] keyspan 3-1:0.133: device disconnected [ 1239.669629][T11407] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 1239.695383][T11407] keyspan 2-1:0.133: device disconnected [ 1239.920516][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 1240.100399][T17186] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2214'. [ 1240.173693][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1240.173708][ T30] audit: type=1800 audit(1765034591.832:1299): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2214" name="bus" dev="tmpfs" ino=2316 res=0 errno=0 [ 1240.434103][T11407] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1241.189254][T11407] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1241.218308][T11407] usb 2-1: config 0 has no interface number 0 [ 1241.323724][T11407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1241.356945][T11407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.376676][T11407] usb 2-1: Product: syz [ 1241.380856][T11407] usb 2-1: Manufacturer: syz [ 1241.397728][T11407] usb 2-1: SerialNumber: syz [ 1241.429958][T11407] usb 2-1: config 0 descriptor?? [ 1241.516139][T17189] input: syz0 as /devices/virtual/input/input23 [ 1242.193895][T17205] input: syz0 as /devices/virtual/input/input24 [ 1243.393374][T11407] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1243.432977][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1243.458924][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1243.481645][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1243.501220][T11407] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1243.540121][T11407] usb 2-1: USB disconnect, device number 112 [ 1243.576266][T11407] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1243.646855][T11407] keyspan 2-1:0.133: device disconnected [ 1244.120793][ T30] audit: type=1326 audit(1765034595.802:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1244.156026][T11407] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1244.265894][ T30] audit: type=1326 audit(1765034595.802:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1244.427272][ T30] audit: type=1326 audit(1765034595.802:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1244.748107][ T30] audit: type=1326 audit(1765034595.802:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1244.776905][ T30] audit: type=1326 audit(1765034595.802:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.001202][ T30] audit: type=1326 audit(1765034595.802:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.035291][T11407] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1245.046739][T11407] usb 2-1: config 0 has no interface number 0 [ 1245.066191][T11407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1245.097491][T11407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.236692][ T30] audit: type=1326 audit(1765034595.822:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.274362][T11407] usb 2-1: Product: syz [ 1245.283740][T11407] usb 2-1: Manufacturer: syz [ 1245.288887][T11407] usb 2-1: SerialNumber: syz [ 1245.295124][ T30] audit: type=1326 audit(1765034595.992:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.320401][T11407] usb 2-1: config 0 descriptor?? [ 1245.375822][ T30] audit: type=1326 audit(1765034595.992:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.433741][ T30] audit: type=1326 audit(1765034596.212:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.504859][ T30] audit: type=1326 audit(1765034596.222:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.703396][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 1245.746380][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 1245.762323][ T30] audit: type=1326 audit(1765034596.222:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.808164][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 1245.827529][ T30] audit: type=1326 audit(1765034596.222:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1245.986197][ T30] audit: type=1326 audit(1765034596.222:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.4.2223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1246.222552][T17240] input: syz0 as /devices/virtual/input/input25 [ 1247.488487][T17252] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1247.495086][T17252] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1247.702196][T11407] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1247.741325][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1247.751375][T17252] vhci_hcd vhci_hcd.0: Device attached [ 1247.759764][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1247.768796][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1247.868893][T11407] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1248.084329][T11407] usb 2-1: USB disconnect, device number 113 [ 1248.289798][T11407] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1248.295389][T17268] input: syz0 as /devices/virtual/input/input26 [ 1248.313259][T17252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2227'. [ 1248.355738][T11407] keyspan 2-1:0.133: device disconnected [ 1248.429680][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'. [ 1248.766985][T17253] vhci_hcd: connection closed [ 1248.767956][ T69] vhci_hcd: stop threads [ 1248.810229][ T69] vhci_hcd: release socket [ 1248.849422][ T69] vhci_hcd: disconnect device [ 1253.111600][ T912] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1253.317390][ T912] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1253.326501][ T912] usb 2-1: config 0 has no interface number 0 [ 1253.337503][ T912] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1253.348067][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.356946][ T912] usb 2-1: Product: syz [ 1253.387470][ T912] usb 2-1: Manufacturer: syz [ 1253.407807][ T912] usb 2-1: SerialNumber: syz [ 1253.422441][ T912] usb 2-1: config 0 descriptor?? [ 1254.373021][T17336] kAFS: unable to lookup cell '(,c¾ûL' [ 1256.140339][ T912] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1256.191127][ T912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1256.209472][ T912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1256.248677][ T912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1256.276646][ T912] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1256.323807][ T912] usb 2-1: USB disconnect, device number 114 [ 1256.344873][ T912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1256.357515][ T912] keyspan 2-1:0.133: device disconnected [ 1256.811722][T17362] input: syz0 as /devices/virtual/input/input28 [ 1256.818413][ T912] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1257.002094][ T912] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1257.023015][ T912] usb 2-1: config 0 has no interface number 0 [ 1257.059585][ T912] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1257.070415][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.082071][ T912] usb 2-1: Product: syz [ 1257.086816][ T912] usb 2-1: Manufacturer: syz [ 1257.092291][ T912] usb 2-1: SerialNumber: syz [ 1257.125313][ T912] usb 2-1: config 0 descriptor?? [ 1258.681000][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 1258.695012][T17382] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2256'. [ 1260.104816][T17399] input: syz0 as /devices/virtual/input/input29 [ 1260.360522][ T912] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1260.387195][ T912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1260.440592][ T912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1260.489006][ T912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1260.523121][T17403] usb usb8: usbfs: process 17403 (syz.1.2260) did not claim interface 0 before use [ 1260.574562][ T912] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1260.615779][ T912] usb 2-1: USB disconnect, device number 115 [ 1260.643254][ T912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1260.828555][ T912] keyspan 2-1:0.133: device disconnected [ 1261.204558][ T912] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1261.356133][ T912] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1261.377822][ T912] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1261.415526][ T912] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1261.470298][ T912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1261.501622][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1261.536805][ T912] usb 2-1: Product: syz [ 1261.555499][ T912] usb 2-1: Manufacturer: syz [ 1261.571345][ T912] usb 2-1: SerialNumber: syz [ 1261.908127][ T912] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1262.183080][ T9] usb 2-1: USB disconnect, device number 116 [ 1262.216623][ T9] usblp0: removed [ 1264.108113][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 1264.657632][T17459] input: syz0 as /devices/virtual/input/input30 [ 1264.682780][ T5896] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1265.169292][ T5896] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1265.187605][ T5896] usb 4-1: config 0 has no interface number 0 [ 1265.214065][ T5896] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1265.223607][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.424282][ T5896] usb 4-1: Product: syz [ 1265.459064][ T5896] usb 4-1: Manufacturer: syz [ 1265.463696][ T5896] usb 4-1: SerialNumber: syz [ 1265.523471][ T5896] usb 4-1: config 0 descriptor?? [ 1265.885444][T17465] input: syz0 as /devices/virtual/input/input31 [ 1266.609138][ T912] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1266.819053][ T912] usb 3-1: not running at top speed; connect to a high speed hub [ 1266.835796][ T912] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 1266.901194][ T912] usb 3-1: config 95 has no interface number 0 [ 1266.919861][ T912] usb 3-1: config 95 interface 1 has no altsetting 0 [ 1266.938310][ T912] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1266.957692][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.976941][ T912] usb 3-1: Product: syz [ 1266.990866][ T912] usb 3-1: Manufacturer: syz [ 1267.004705][ T912] usb 3-1: SerialNumber: syz [ 1267.233683][ T5896] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1267.243113][ T5896] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1267.267131][ T5896] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1267.298763][ T5896] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1267.360879][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.370785][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.404639][T17484] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1267.509750][ T5896] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1267.560653][ T5896] usb 4-1: USB disconnect, device number 111 [ 1267.612178][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1267.648608][ T5896] keyspan 4-1:0.133: device disconnected [ 1268.154497][ T5896] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1268.520120][ T5896] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1268.538114][ T5896] usb 4-1: config 0 has no interface number 0 [ 1268.577779][ T5896] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1268.587822][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.596253][ T5896] usb 4-1: Product: syz [ 1268.600551][ T5896] usb 4-1: Manufacturer: syz [ 1268.606143][ T5896] usb 4-1: SerialNumber: syz [ 1268.715312][ T5896] usb 4-1: config 0 descriptor?? [ 1269.004035][T11407] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1269.520336][T11407] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1269.528971][T11407] usb 2-1: config 0 has no interface number 0 [ 1269.612302][T11407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1269.621719][T11407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.708200][T11407] usb 2-1: Product: syz [ 1269.730240][T11407] usb 2-1: Manufacturer: syz [ 1269.752602][T11407] usb 2-1: SerialNumber: syz [ 1269.811057][T11407] usb 2-1: config 0 descriptor?? [ 1270.522772][ T912] usb 3-1: USB disconnect, device number 108 [ 1271.221065][ T5896] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1271.432637][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.456009][ T5896] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1271.464924][ T5896] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1271.472733][ T5896] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1271.515809][ T5896] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1271.574787][ T5896] usb 4-1: USB disconnect, device number 112 [ 1271.596048][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1271.625235][ T5896] keyspan 4-1:0.133: device disconnected [ 1271.909184][T17521] input: syz0 as /devices/virtual/input/input33 [ 1272.519390][T11407] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1272.636675][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1272.664530][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1272.673170][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1273.048603][T11407] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1273.082497][T11407] usb 2-1: USB disconnect, device number 117 [ 1273.115609][T11407] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1273.139920][T11407] keyspan 2-1:0.133: device disconnected [ 1273.484014][T17536] input: syz0 as /devices/virtual/input/input34 [ 1275.313491][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 1276.137006][ T9] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1276.396314][ T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1276.404752][ T9] usb 4-1: config 0 has no interface number 0 [ 1276.424759][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1276.457134][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.471212][ T9] usb 4-1: Product: syz [ 1276.553535][ T9] usb 4-1: Manufacturer: syz [ 1276.575426][ T9] usb 4-1: SerialNumber: syz [ 1276.735020][ T9] usb 4-1: config 0 descriptor?? [ 1277.374355][T11407] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1277.735818][T11407] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1277.746799][T11407] usb 2-1: config 0 has no interface number 0 [ 1277.819348][T11407] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1277.860093][T11407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.898641][T11407] usb 2-1: Product: syz [ 1277.911834][T11407] usb 2-1: Manufacturer: syz [ 1277.945429][T11407] usb 2-1: SerialNumber: syz [ 1278.003056][T11407] usb 2-1: config 0 descriptor?? [ 1278.855438][ T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1278.866262][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1278.876283][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1278.906721][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1278.970035][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1279.021795][ T9] usb 4-1: USB disconnect, device number 113 [ 1279.084809][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1279.108286][ T9] keyspan 4-1:0.133: device disconnected [ 1279.815751][T17596] input: syz0 as /devices/virtual/input/input35 [ 1280.098237][T11407] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1280.126895][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1280.145273][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1280.184964][T11407] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1280.224467][T17599] input: syz0 as /devices/virtual/input/input36 [ 1280.259746][T11407] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1280.373712][T11407] usb 2-1: USB disconnect, device number 118 [ 1280.479498][T11407] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1280.700566][T11407] keyspan 2-1:0.133: device disconnected [ 1281.503616][T17613] input: syz0 as /devices/virtual/input/input37 [ 1282.758835][T17632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2306'. [ 1283.776803][T17654] hub 9-0:1.0: USB hub found [ 1283.784078][T17654] hub 9-0:1.0: 1 port detected [ 1283.923215][T17656] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[17656] [ 1284.043582][T17656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1284.060912][ T5896] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1284.269447][ T5896] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1284.282638][ T5896] usb 3-1: config 0 has no interface number 0 [ 1284.344973][ T5896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1284.361703][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.383734][ T5896] usb 3-1: Product: syz [ 1284.444592][ T5896] usb 3-1: Manufacturer: syz [ 1284.483454][ T5896] usb 3-1: SerialNumber: syz [ 1284.499777][ T5896] usb 3-1: config 0 descriptor?? [ 1286.794879][ T912] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1286.993127][ T912] usb 4-1: device descriptor read/64, error -71 [ 1287.234496][ T912] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1287.277479][ T5896] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1287.316772][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1287.344668][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1287.357202][ T5896] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1287.374193][ T912] usb 4-1: device descriptor read/64, error -71 [ 1287.391165][ T5896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1287.430893][ T5896] usb 3-1: USB disconnect, device number 109 [ 1287.475829][ T5896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1287.506103][ T912] usb usb4-port1: attempt power cycle [ 1287.708063][ T5896] keyspan 3-1:0.133: device disconnected [ 1287.904559][ T912] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1288.057730][ T912] usb 4-1: device descriptor read/8, error -71 [ 1288.101169][T17702] loop6: detected capacity change from 0 to 524287999 [ 1288.354228][ T912] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1288.453614][T17708] input: syz0 as /devices/virtual/input/input39 [ 1288.506582][ T912] usb 4-1: device descriptor read/8, error -71 [ 1288.626066][ T912] usb usb4-port1: unable to enumerate USB device [ 1291.420955][ T30] audit: type=1326 audit(1765034643.092:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1291.456716][ T30] audit: type=1326 audit(1765034643.092:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1291.596949][ T30] audit: type=1326 audit(1765034643.092:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1292.011091][ T30] audit: type=1326 audit(1765034643.092:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1292.094164][ T30] audit: type=1326 audit(1765034643.092:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1292.300037][ T30] audit: type=1326 audit(1765034643.092:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1292.582662][ T30] audit: type=1326 audit(1765034643.092:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1292.670866][ T30] audit: type=1326 audit(1765034643.092:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1292.775728][ T30] audit: type=1326 audit(1765034643.102:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1293.166601][ T30] audit: type=1326 audit(1765034643.422:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.3.2328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1293.295790][T17747] can: request_module (can-proto-3) failed. [ 1295.293991][ T9] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1296.153986][ T9] usb 3-1: device descriptor read/64, error -71 [ 1296.465039][ T9] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1296.477862][T17788] netlink: 'syz.0.2338': attribute type 1 has an invalid length. [ 1296.643111][ T9] usb 3-1: device descriptor read/64, error -71 [ 1296.756477][ T9] usb usb3-port1: attempt power cycle [ 1297.125047][ T9] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1297.191581][ T9] usb 3-1: device descriptor read/8, error -71 [ 1297.453947][ T5986] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1297.483939][ T9] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1297.584808][ T9] usb 3-1: device descriptor read/8, error -71 [ 1297.707893][ T9] usb usb3-port1: unable to enumerate USB device [ 1297.935729][ T5986] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1297.944926][ T5986] usb 4-1: config 0 has no interface number 0 [ 1298.030743][ T5986] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1298.046631][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.059247][ T5986] usb 4-1: Product: syz [ 1298.068000][ T5986] usb 4-1: Manufacturer: syz [ 1298.076082][ T5986] usb 4-1: SerialNumber: syz [ 1298.108804][ T5986] usb 4-1: config 0 descriptor?? [ 1300.142552][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.151946][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.984528][ T5982] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1301.506450][ T5982] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1301.520863][ T5982] usb 3-1: config 0 has no interface number 0 [ 1301.527206][ T5986] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1301.559407][ T5982] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1301.572116][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.590449][ T5982] usb 3-1: Product: syz [ 1301.595366][ T5982] usb 3-1: Manufacturer: syz [ 1301.599990][ T5982] usb 3-1: SerialNumber: syz [ 1301.671204][ T5982] usb 3-1: config 0 descriptor?? [ 1301.811455][ T5986] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1302.204007][ T5986] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1302.459917][ T5986] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1302.480697][ T5986] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1302.506303][ T5986] usb 4-1: USB disconnect, device number 118 [ 1302.855701][ T5986] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1302.889287][ T5986] keyspan 4-1:0.133: device disconnected [ 1303.274189][ T5986] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 1303.453459][ T5986] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1303.473941][ T5986] usb 4-1: config 0 has no interface number 0 [ 1303.495564][ T5986] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1303.539639][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.561528][ T5986] usb 4-1: Product: syz [ 1303.571667][ T5986] usb 4-1: Manufacturer: syz [ 1303.589633][ T5986] usb 4-1: SerialNumber: syz [ 1303.673698][ T5986] usb 4-1: config 0 descriptor?? [ 1304.050406][ T5982] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1304.113733][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1304.158825][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1304.175121][ T5982] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1304.272828][ T5982] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1304.390041][ T5982] usb 3-1: USB disconnect, device number 114 [ 1305.080959][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1305.220223][ T5982] keyspan 3-1:0.133: device disconnected [ 1306.050117][ T5986] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1306.079719][ T5986] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1306.107958][ T5986] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1306.151233][ T5986] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1306.200486][ T5986] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1306.346070][ T5986] usb 4-1: USB disconnect, device number 119 [ 1306.457145][ T5986] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1306.479534][ T5986] keyspan 4-1:0.133: device disconnected [ 1307.195337][T17898] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1307.246890][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1307.380074][T17895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2360'. [ 1309.259329][T17906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1311.215265][T17871] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1311.399416][T17871] usb 3-1: Using ep0 maxpacket: 32 [ 1311.462710][T17871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.862857][T17871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.873068][T17871] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1312.324162][T17871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.585362][T17871] usb 3-1: config 0 descriptor?? [ 1313.684689][T17949] netlink: 'syz.0.2369': attribute type 1 has an invalid length. [ 1313.687048][T17871] kye 0003:0458:501B.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1313.774903][T17871] kye 0003:0458:501B.000B: unknown main item tag 0x0 [ 1313.820712][T17871] kye 0003:0458:501B.000B: unknown main item tag 0x0 [ 1313.997855][T17871] kye 0003:0458:501B.000B: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0 [ 1314.029878][T17871] kye 0003:0458:501B.000B: tablet-enabling feature report not found [ 1314.041545][T17871] kye 0003:0458:501B.000B: tablet enabling failed [ 1315.366936][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 1315.413604][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 1315.446097][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 1316.191328][T17987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2376'. [ 1316.826118][T17871] usb 3-1: USB disconnect, device number 115 [ 1317.101465][T18007] input: syz0 as /devices/virtual/input/input43 [ 1319.034018][T18024] netlink: 'syz.0.2382': attribute type 1 has an invalid length. [ 1320.305161][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 1320.339435][T18042] netlink: 320 bytes leftover after parsing attributes in process `syz.3.2385'. [ 1322.375348][T18077] bond0: Caught tx_queue_len zero misconfig [ 1323.574870][T18079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2391'. [ 1325.264535][T18103] hub 9-0:1.0: USB hub found [ 1325.271092][T18103] hub 9-0:1.0: 1 port detected [ 1326.910917][T18125] binder: 18124:18125 ioctl c0306201 80000640 returned -22 [ 1328.320144][T18143] pim6reg: entered allmulticast mode [ 1330.844209][T18167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2406'. [ 1331.232063][T18179] input: syz0 as /devices/virtual/input/input44 [ 1333.100394][T18197] input: syz0 as /devices/virtual/input/input46 [ 1335.119812][T18211] hub 9-0:1.0: USB hub found [ 1335.133949][T18211] hub 9-0:1.0: 1 port detected [ 1335.213908][ T9] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1335.318037][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2415'. [ 1335.565917][ T9] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1335.599717][ T9] usb 4-1: config 0 has no interface number 0 [ 1335.748312][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1335.875693][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.947342][ T9] usb 4-1: Product: syz [ 1335.951674][ T9] usb 4-1: Manufacturer: syz [ 1336.014272][ T9] usb 4-1: SerialNumber: syz [ 1336.022029][ T9] usb 4-1: config 0 descriptor?? [ 1336.172869][T18229] input: syz0 as /devices/virtual/input/input47 [ 1338.440854][ T9] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1338.566299][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1338.583930][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1338.602087][ T9] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1338.686042][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1338.729339][ T9] usb 4-1: USB disconnect, device number 120 [ 1338.807488][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1338.847177][ T9] keyspan 4-1:0.133: device disconnected [ 1340.356357][T18271] input: syz0 as /devices/virtual/input/input48 [ 1340.523364][T18263] syz.2.2427 (18263): drop_caches: 2 [ 1342.752765][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1342.933930][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1342.952106][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.997663][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1343.013562][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1343.088843][ T9] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1343.115957][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.132613][ T9] usb 2-1: Product: syz [ 1343.141187][ T9] usb 2-1: Manufacturer: syz [ 1343.184304][ T9] usb 2-1: SerialNumber: syz [ 1343.254916][T18314] netlink: 'syz.2.2436': attribute type 10 has an invalid length. [ 1343.275982][ T9] usb 2-1: config 0 descriptor?? [ 1343.341867][ T9] radioshark 2-1:0.0: Invalid radioSHARK device [ 1343.349970][ T9] radioshark 2-1:0.0: probe with driver radioshark failed with error -22 [ 1343.364774][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1344.926721][T18324] input: syz1 as /devices/virtual/input/input50 [ 1346.241519][T18337] input: syz0 as /devices/virtual/input/input51 [ 1346.578397][ T9] usb 2-1: USB disconnect, device number 119 [ 1347.480404][T18347] macsec0: entered promiscuous mode [ 1347.489359][T18347] macsec0: left promiscuous mode [ 1348.177248][T18355] input: syz0 as /devices/virtual/input/input52 [ 1349.616999][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2448'. [ 1349.639884][T18372] netlink: 'syz.4.2448': attribute type 13 has an invalid length. [ 1350.902637][T18372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.919814][T18372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.954953][T18372] net_ratelimit: 1 callbacks suppressed [ 1350.954964][T18372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1351.804057][ T5920] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1352.003952][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1352.315858][ T5920] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1352.715534][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1352.854450][ T5920] usb usb2-port1: attempt power cycle [ 1353.226819][T18412] binder: 18411:18412 ioctl c0306201 80000640 returned -22 [ 1353.363913][ T5920] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1353.387458][ T5920] usb 2-1: device descriptor read/8, error -71 [ 1353.536506][T18421] input: syz0 as /devices/virtual/input/input53 [ 1353.653914][ T5920] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1353.705829][ T5920] usb 2-1: device descriptor read/8, error -71 [ 1353.881013][ T5920] usb usb2-port1: unable to enumerate USB device [ 1354.024746][ T9] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1354.173976][ T9] usb 4-1: device descriptor read/64, error -71 [ 1354.247564][T18430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1354.327030][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1354.495371][ T9] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1354.643950][ T9] usb 4-1: device descriptor read/64, error -71 [ 1354.715876][T18437] input: syz0 as /devices/virtual/input/input54 [ 1355.074164][ T9] usb usb4-port1: attempt power cycle [ 1355.484185][ T9] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1355.712526][ T9] usb 4-1: device descriptor read/8, error -71 [ 1356.043939][ T9] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1356.192630][ T9] usb 4-1: device descriptor read/8, error -71 [ 1356.394628][ T9] usb usb4-port1: unable to enumerate USB device [ 1359.480167][T18481] netlink: 'syz.0.2478': attribute type 1 has an invalid length. [ 1360.538248][T18505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2471'. [ 1361.072338][ T5920] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1361.099587][T18509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'. [ 1361.127976][T18509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'. [ 1361.634873][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.641202][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.741354][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.805054][ T5920] usb 4-1: config 0 has no interfaces? [ 1361.850852][ T5920] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1361.882127][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.918391][ T5920] usb 4-1: Product: syz [ 1361.922571][ T5920] usb 4-1: Manufacturer: syz [ 1361.937551][ T5920] usb 4-1: SerialNumber: syz [ 1362.057494][ T5920] usb 4-1: config 0 descriptor?? [ 1363.295382][T18536] input: syz0 as /devices/virtual/input/input55 [ 1364.012287][ T5920] usb 4-1: USB disconnect, device number 125 [ 1364.606957][T18545] tipc: Resetting bearer [ 1365.062959][T18557] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1365.934676][T18560] netlink: 'syz.0.2484': attribute type 1 has an invalid length. [ 1368.869792][T18606] input: syz0 as /devices/virtual/input/input56 [ 1369.155908][ T9] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1369.242622][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2494'. [ 1369.271822][T18614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.280894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.347172][T18615] usb usb8: usbfs: process 18615 (syz.4.2494) did not claim interface 0 before use [ 1369.562166][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.572631][ T9] usb 2-1: config 0 has no interfaces? [ 1369.643902][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1369.653119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.661210][ T9] usb 2-1: Product: syz [ 1369.666000][ T9] usb 2-1: Manufacturer: syz [ 1369.670754][ T9] usb 2-1: SerialNumber: syz [ 1369.698067][ T9] usb 2-1: config 0 descriptor?? [ 1370.818564][T18635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.827524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.014063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.022761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.031252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.039743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.048226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.056555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.857569][ T9] usb 2-1: USB disconnect, device number 124 [ 1372.291936][T18650] netlink: 'syz.0.2499': attribute type 1 has an invalid length. [ 1373.138828][T18668] pim6reg: entered allmulticast mode [ 1374.256750][T18676] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 1374.623331][T18684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'. [ 1375.162842][T18688] input: syz0 as /devices/virtual/input/input57 [ 1375.640593][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1375.650321][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1375.927054][T18700] input: syz1 as /devices/virtual/input/input58 [ 1378.530194][T18735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2516'. [ 1378.754055][T18738] macsec0: entered promiscuous mode [ 1378.763403][T18738] macsec0: left promiscuous mode [ 1380.240081][T18749] input: syz0 as /devices/virtual/input/input59 [ 1381.321772][T18758] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1381.524153][ T5982] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1381.683377][ T5982] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.708331][ T5982] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1381.735529][ T5982] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1381.764340][ T5982] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1381.783882][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.893439][ T5982] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1381.939310][ T5982] usb 3-1: invalid MIDI out EP 0 [ 1382.078172][ T5982] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1384.112991][ T5896] usb 3-1: USB disconnect, device number 116 [ 1385.920184][T18799] input: syz0 as /devices/virtual/input/input60 [ 1387.866378][T18825] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[18825] [ 1388.166397][T18825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2532'. [ 1388.845707][T18832] xt_bpf: check failed: parse error [ 1391.364155][ T5896] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1391.575963][ T5896] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1391.622084][ T5896] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1391.702261][T18866] input: syz0 as /devices/virtual/input/input61 [ 1391.755387][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1391.765435][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.078897][T18852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1392.147748][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1392.374043][T11407] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1392.611829][T11407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.643950][T11407] usb 3-1: config 0 has no interfaces? [ 1392.659829][T11407] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1392.668946][T11407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.676995][T11407] usb 3-1: Product: syz [ 1392.705138][T11407] usb 3-1: Manufacturer: syz [ 1392.720001][T11407] usb 3-1: SerialNumber: syz [ 1392.736760][T11407] usb 3-1: config 0 descriptor?? [ 1392.743113][T18856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.770685][T18856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.185628][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1393.185644][ T30] audit: type=1326 audit(1765034744.872:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1393.364334][ T30] audit: type=1326 audit(1765034744.872:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1393.455220][T11407] usb 4-1: USB disconnect, device number 126 [ 1393.730886][T18881] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 1393.809361][ T30] audit: type=1326 audit(1765034744.952:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1393.932102][ T30] audit: type=1326 audit(1765034744.952:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1393.956665][ T30] audit: type=1326 audit(1765034744.952:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1394.081977][ T30] audit: type=1326 audit(1765034744.952:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1394.302132][ T30] audit: type=1326 audit(1765034744.952:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1394.517095][ T30] audit: type=1326 audit(1765034744.952:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1394.644464][ T30] audit: type=1326 audit(1765034744.952:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1394.707254][ T30] audit: type=1326 audit(1765034744.952:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18848 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 1395.045606][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 1395.146867][T18899] netlink: 'syz.0.2550': attribute type 13 has an invalid length. [ 1395.327417][ T5896] usb 3-1: USB disconnect, device number 117 [ 1395.723237][T18899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.747118][T18899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.771134][T18899] net_ratelimit: 112 callbacks suppressed [ 1395.771250][T18899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1395.811344][ T13] bridge0: port 3(team0) entered blocking state [ 1395.817714][ T13] bridge0: port 3(team0) entered forwarding state [ 1399.055146][T18946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1399.064947][T18946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1399.298213][T18948] netlink: 'syz.2.2561': attribute type 13 has an invalid length. [ 1399.506690][ T31] INFO: task kworker/1:9:7147 blocked for more than 143 seconds. [ 1399.515673][ T31] Tainted: G L syzkaller #0 [ 1399.577140][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1399.765908][T18942] bond0: invalid ARP target 0.0.0.0 specified for addition [ 1399.845022][T18942] bond0: option arp_ip_target: invalid value (0) [ 1399.846167][ T31] task:kworker/1:9 state:D stack:20400 pid:7147 tgid:7147 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1399.889705][ T31] Workqueue: usb_hub_wq hub_event [ 1399.896697][ T31] Call Trace: [ 1399.901063][ T31] [ 1399.904481][ T31] __schedule+0x14bc/0x5000 [ 1399.909176][ T31] ? __pfx___schedule+0x10/0x10 [ 1399.914362][ T31] ? schedule+0x91/0x360 [ 1399.918650][ T31] schedule+0x165/0x360 [ 1399.924347][ T31] schedule_preempt_disabled+0x13/0x30 [ 1399.931268][ T31] __mutex_lock+0x7e6/0x1350 [ 1400.016406][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1400.027975][ T31] ? hub_event+0x21e5/0x4a20 [ 1400.055945][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1400.117642][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1400.263571][ T31] hub_event+0x21e5/0x4a20 [ 1400.275342][ T31] ? __pfx_hub_event+0x10/0x10 [ 1400.318477][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1400.329389][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1400.337520][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1400.346443][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1400.352853][ T31] process_scheduled_works+0xad1/0x1770 [ 1400.359837][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1400.366559][ T31] worker_thread+0x8a0/0xda0 [ 1400.371321][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1400.378520][ T31] ? __kthread_parkme+0x7b/0x200 [ 1400.383968][ T31] kthread+0x711/0x8a0 [ 1400.388139][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1400.393339][ T31] ? __pfx_kthread+0x10/0x10 [ 1400.398683][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1400.405674][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1400.411072][ T31] ? __pfx_kthread+0x10/0x10 [ 1400.416405][ T31] ret_from_fork+0x599/0xb30 [ 1400.421155][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1400.427150][ T31] ? __switch_to_asm+0x39/0x70 [ 1400.432025][ T31] ? __switch_to_asm+0x33/0x70 [ 1400.437833][ T31] ? __pfx_kthread+0x10/0x10 [ 1400.442639][ T31] ret_from_fork_asm+0x1a/0x30 [ 1400.448314][ T31] [ 1400.456212][ T31] [ 1400.456212][ T31] Showing all locks held in the system: [ 1400.467363][ T31] 1 lock held by khungtaskd/31: [ 1400.467875][T18942] bond0 (unregistering): Released all slaves [ 1400.480298][ T31] #0: ffffffff8df41e20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1400.499588][ T31] 3 locks held by kworker/u8:3/50: [ 1400.506252][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1400.519526][ T31] #1: ffffc90000bb7b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1400.540910][ T31] #2: ffffffff8f304948 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1400.592910][ T31] 2 locks held by getty/5596: [ 1400.598091][ T31] #0: ffff888034e790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1400.608367][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1400.619192][ T31] 5 locks held by kworker/0:8/5964: [ 1400.624811][ T31] #0: ffff888020a9e148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1400.636617][ T31] #1: ffffc9000474fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1400.648976][ T31] #2: ffff8880299d3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1400.658390][ T31] #3: ffff8880299d6518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1400.668720][ T31] #4: ffff888028824f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1400.678787][ T31] 5 locks held by kworker/1:9/7147: [ 1400.684712][ T31] #0: ffff888020a9e148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1400.696906][ T31] #1: ffffc90003277b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1400.709303][ T31] #2: ffff888144ff9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1400.718622][ T31] #3: ffff888144ffc518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1400.729129][ T31] #4: ffff888028824f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1400.739319][ T31] 1 lock held by syz.3.2560/18938: [ 1400.744856][ T31] #0: ffffffff8f304948 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1400.754285][ T31] 3 locks held by syz.2.2561/18942: [ 1400.759496][ T31] #0: ffffffff8f818648 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1400.769457][ T31] #1: ffffffff8f304948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1400.779447][ T31] #2: ffffffff8df47978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1400.790966][ T31] 1 lock held by syz.2.2561/18948: [ 1400.796775][ T31] #0: ffffffff8f304948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1400.806363][ T31] [ 1400.832232][ T31] ============================================= [ 1400.832232][ T31] [ 1400.841439][ T31] NMI backtrace for cpu 1 [ 1400.841463][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1400.841487][ T31] Tainted: [L]=SOFTLOCKUP [ 1400.841493][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1400.841505][ T31] Call Trace: [ 1400.841513][ T31] [ 1400.841521][ T31] dump_stack_lvl+0x189/0x250 [ 1400.841548][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1400.841568][ T31] ? __pfx__printk+0x10/0x10 [ 1400.841604][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1400.841626][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1400.841647][ T31] ? __pfx__printk+0x10/0x10 [ 1400.841673][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1400.841700][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1400.841722][ T31] watchdog+0xf3c/0xf80 [ 1400.841749][ T31] ? watchdog+0x1e2/0xf80 [ 1400.841775][ T31] kthread+0x711/0x8a0 [ 1400.841799][ T31] ? __pfx_watchdog+0x10/0x10 [ 1400.841819][ T31] ? __pfx_kthread+0x10/0x10 [ 1400.841842][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1400.841862][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1400.841882][ T31] ? __pfx_kthread+0x10/0x10 [ 1400.841904][ T31] ret_from_fork+0x599/0xb30 [ 1400.841924][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1400.841950][ T31] ? __switch_to_asm+0x39/0x70 [ 1400.841969][ T31] ? __switch_to_asm+0x33/0x70 [ 1400.841986][ T31] ? __pfx_kthread+0x10/0x10 [ 1400.842007][ T31] ret_from_fork_asm+0x1a/0x30 [ 1400.842043][ T31] [ 1400.842050][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1400.996620][ C0] NMI backtrace for cpu 0 [ 1400.996639][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1400.996660][ C0] Tainted: [L]=SOFTLOCKUP [ 1400.996666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1400.996682][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1400.996707][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 80 19 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1400.996721][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1400.996735][ C0] RAX: ac248f62ddb76100 RBX: ffffffff81974b6a RCX: ac248f62ddb76100 [ 1400.996747][ C0] RDX: 0000000000000001 RSI: ffffffff8d7831da RDI: ffffffff8bc00c60 [ 1400.996758][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b88336db R09: 1ffff110171066db [ 1400.996770][ C0] R10: dffffc0000000000 R11: ffffed10171066dc R12: ffffffff8f815070 [ 1400.996781][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 1400.996792][ C0] FS: 0000000000000000(0000) GS:ffff888126084000(0000) knlGS:0000000000000000 [ 1400.996805][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1400.996816][ C0] CR2: 00000000f73f99b4 CR3: 0000000075972000 CR4: 00000000003526f0 [ 1400.996830][ C0] Call Trace: [ 1400.996836][ C0] [ 1400.996843][ C0] default_idle+0x13/0x20 [ 1400.996863][ C0] default_idle_call+0x73/0xb0 [ 1400.996884][ C0] do_idle+0x1ea/0x520 [ 1400.996900][ C0] ? irqentry_exit+0x5ba/0x660 [ 1400.996920][ C0] ? __pfx_do_idle+0x10/0x10 [ 1400.996943][ C0] cpu_startup_entry+0x44/0x60 [ 1400.996959][ C0] rest_init+0x2de/0x300 [ 1400.996975][ C0] start_kernel+0x3ae/0x410 [ 1400.996995][ C0] x86_64_start_reservations+0x24/0x30 [ 1400.997011][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1400.997026][ C0] common_startup_64+0x13e/0x147 [ 1400.997052][ C0]