last executing test programs: 17.606010641s ago: executing program 0 (id=532): r0 = socket(0x80000000000000a, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dabfc54c2c0e1f532d95a1a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e0300"/200], 0x18c) r7 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x14000, 0x87) unlinkat(r7, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x70000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa0, 0x40, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x6, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000004c0)=""/88) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000005c0)='enc=', 0x0) fsopen(&(0x7f0000000240)='nfsd\x00', 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7abd, {{0xa, 0xfffe, 0x0, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104) 16.71155048s ago: executing program 4 (id=533): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) 15.950941539s ago: executing program 3 (id=534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x84, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0xa, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x3, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) fchdir(0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) dup(r2) r8 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r10, 0x5414, &(0x7f0000000040)={0x3, 0x84a, 0x4, 0x8}) ftruncate(r8, 0x200004) 15.588585244s ago: executing program 2 (id=535): gettid() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x686) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000180), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r5, 0x4, 0x2) 14.659789853s ago: executing program 1 (id=536): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a008001000000020000000000000000000000000000000100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b1d30f42a6d30fa6498d056b1a6942c2ca61d9dceca874722fffc"], 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) r9 = fsmount(r5, 0x0, 0x6) fchdir(r9) 14.659305453s ago: executing program 4 (id=537): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) 14.634002213s ago: executing program 0 (id=538): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 13.930894153s ago: executing program 3 (id=539): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(0x0, 0x208c, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x20, 0x140c, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0xc0c4) listen(r5, 0xda90) accept4(r5, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) syz_io_uring_setup(0x37ff, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x2, 0x20b}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x2b, @multicast2, 0x0, 0x2, 'wlc\x00', 0x6, 0x1, 0x3}, {@empty, 0x2, 0x2, 0x7, 0x0, 0x2}}, 0x44) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 12.72121846s ago: executing program 1 (id=540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r9, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$LOOP_SET_DIRECT_IO(r9, 0x4c08, 0x95) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.495832033s ago: executing program 2 (id=541): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) 11.273710705s ago: executing program 3 (id=542): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/141, 0x8d}], 0x1, &(0x7f0000000580)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x10040) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r5 = socket$netlink(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xcd, 0xf9, 0xf8, 0x8, 0xbc3, 0x1, 0x1185, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xd2, 0x96}}]}}]}}, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 11.126110377s ago: executing program 1 (id=543): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0x2, 0xfa13, 0xffffffff}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x903d01) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) keyctl$set_timeout(0xf, 0x0, 0x78f) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000100)='[^@\x00', &(0x7f0000000180)) mprotect(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000040)=0xffffffff, 0xffffff62) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000135000/0x3000)=nil, 0x3000, 0xd, 0x13, r1, 0xfffff000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000a83c0c00f0ff0b000006000000000000000000000000000017000000"], 0x0, 0x26, 0x0, 0x7, 0xfffffffe}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x10448) socket$inet6_mptcp(0xa, 0x1, 0x106) 10.647493305s ago: executing program 4 (id=544): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a01020301090224000100", @ANYRES8, @ANYBLOB="b611"], 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) r9 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2}) io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200100, 0x0) r10 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000}) fsetxattr$system_posix_acl(r9, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 10.050431166s ago: executing program 0 (id=545): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/186, 0xba) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f00000002c0)={0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0xb, 0x17}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20040054) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x3, 0x0, @scatter={0x2, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x4800) 9.78883325s ago: executing program 2 (id=546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000001680)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x800007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x38c, 0xffffffff, 0x268, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @remote, [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'netdevsim0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0xd, 0x0, 0x2}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x1, [0x6, 0x47de, 0x5, 0x3, 0x20, 0xe000, 0x0, 0x5400, 0x1222, 0x1, 0x7, 0x40, 0x8, 0x400, 0x3, 0x400], 0xb}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf6fa, 'syz1\x00', {0xab7}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) mremap(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000001700)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7.81265581s ago: executing program 0 (id=547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) socket(0x1, 0x80000, 0xfffffffe) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r11 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r11, 0x7003) 7.245622641s ago: executing program 2 (id=548): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) mknodat(r3, &(0x7f0000000080)='./file0\x00', 0x8, 0x1000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x2, @remote}}, {{0x2, 0x0, @local}}]}, 0x18c) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x5e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0d, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r8, 0x0, 0x0) 7.14675354s ago: executing program 1 (id=549): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r9, 0x0, 0x0, 0x8, 0x1) write$vga_arbiter(r9, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf) 6.615190598s ago: executing program 3 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000039c0)={0x2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbe) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69619c"], 0x10}}, 0x4000000) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r11}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x2, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 5.90690996s ago: executing program 4 (id=551): connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @local, 0x7}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x53, 0xffffffffffffffff, 0x0) socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setresuid(0xee00, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(r2, 0x408) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYRESHEX]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5.257572666s ago: executing program 0 (id=552): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg(r0, 0x0, 0x0, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000780)=""/185, 0xb9, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b1b, &(0x7f0000000040)) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x3}, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r7, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.48570528s ago: executing program 3 (id=553): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r5, &(0x7f0000000300)=""/57, 0x39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() timer_create(0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000640)=[{0x7, 0x10, 0x81, &(0x7f0000000080)="15075c33fa1ffa186dd1032695966e2c12dee700fef21509ea77ac6256c15375ffb29b1d7283e9f38b0961a78bbc7903368dad004d11fc37a1e2adb0a21c43f27491315f216b9c9b756d4fe9f6e693c226f086a87ddac540c0d545f5b2e30fa9b8926ea731f6b4644e260ca82877edd226ebf35d42717e725ad9db8a14b404455b"}, {0xe, 0x400, 0x0, &(0x7f0000000140)}, {0x9, 0x0, 0x1a, &(0x7f0000000000)="21298e06ae2f1915ea1a9b37a593625d62e80edb850d1b7f036e"}, {0x9, 0x8000, 0x0, &(0x7f00000002c0)}, {0x7, 0xde01, 0xab, &(0x7f0000000380)="0f0b3df060a7b3f6d1405c7ac13b59aca1f9f634612248766e2acde66827a670879d68e15af693c7d234190e65c6f4eaa79463ef901550556b64c46a6a76caf946fd0f4b95998a6286d4ff8b1556a0baecf54d3ef52a568bea8119903f07665ef9778aa1304e5c87d0d503d1ec526610e840bc3bcb016dcd9e31274cd0866c1798760619414356f682bfda435a9cb7c5dbe84c264fd425b18982f6af31139c52c3b307b02ebbe6eaacac7e"}, {0xffff, 0xa00, 0xe5, &(0x7f0000000440)="1d1d1366bb9fc435169814d3416f9bb45a9288f8b900b9b71ffb6387b90c4242cc990932607c72ae44728f8f749431c77366fb62ae215e9379e9189b674dcb7d2ca35bb6b5ba01e41a00b09cc3399e12b2721dbe36322b91281887ecff56b2358f949956dffc9263b7f89ae482052275be675830d228dc109e3f61b4a69fa581bf2f6ebc751a423fd813b84464b8c503dd22015616bbbb3aa91cff18fab277653e34ebb78103191a41505ada830b07a4bf8bb22776a9f96309801c6c7bfa02dbf4e05f63cb30864003d1dda1eb1b07ae8d3ae4416ae1a67b8adcc43cd33466356cf2582f3e"}, {0x5, 0xe411, 0x168, &(0x7f0000001740)="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"}, {0x0, 0x200, 0xcf, &(0x7f0000000540)="3ebb02ffdf72943cbc503924e64cdc71db91b68cd7abd08d1096e17d94f9d3af7be3ff36f694058b707ef73b5c490068ba951d44d01a2985255d7d05c4e78f34476051ac02cf6c6efe46c7bfa1ce02a8b52c99ef4a1af02cc236224ffb53c911bea449fde91c05139a9e1613f5ca7ca744532a8f4a4e96d86db46da4c60a45f6a44bca87cbae2118af9ee475e7addda7d73c5db35b68f8f58afda2f20f89114f6c90222998c54fa3920e5da956f884530b622a82358c782a534add269f7820561b6a1051a4b980ebed46e2d086d0ed"}], 0x8}) 3.660426993s ago: executing program 1 (id=554): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) 3.551929566s ago: executing program 4 (id=555): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0x2, 0x1, 0x3}]}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r7, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=@newchain={0x708, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @filter_kind_options=@f_flow={{0x9}, {0x6a8, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x5c4, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x2001, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x6, 0x8, 0x6, 0x10, 0x4, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0x4, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xe, 0xffffffff, 0x101, 0xfffffffe, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x7, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0xc0, 0x5, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x9, 0x100, 0x1, 0xffffffff, 0x4}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x5b, 0x6, "cc9672feacf24a9c86a95b47641261c5b2aee6c3887463907474fb0c1ef6d3d38ec1d36e664baf9af50681b51152db1f2b212c73a7de24989450011477df672f6ef749526dbf3a0917504cacebf3e14e3a9569f89b629a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.472031811s ago: executing program 2 (id=556): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) 2.503149064s ago: executing program 0 (id=557): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f0000001380)=""/157, 0x9d}], 0x2, 0x0, 0x8000005) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x3c) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 892.909568ms ago: executing program 4 (id=558): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0x1, 0x5, 0x8, 0xffffff7f, 0x2, 0xb}]}) sendmsg$nl_route(r6, 0x0, 0x800) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f0000000280)=""/116) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r10, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 886.704578ms ago: executing program 1 (id=568): set_mempolicy(0x1, &(0x7f0000000180)=0x1004, 0x4) r0 = userfaultfd(0x80801) r1 = openat$sndseq(0xffffff9c, 0x0, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cebffff030601010000040000000600090000000500010003000000"], 0x1c}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) sendmsg$can_raw(r2, 0x0, 0x0) fallocate(r1, 0x21, 0x4, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000480011062cbd7000fddbdf250a007800", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x38}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) 772.930517ms ago: executing program 3 (id=559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x138}}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c6", 0xa1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x40045730, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc0045543, &(0x7f0000000100)=0x10) kernel console output (not intermixed with test programs): UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.815960][ T6124] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 88.287436][ T5903] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 88.303999][ T6128] veth3: entered promiscuous mode [ 88.339149][ T6130] syzkaller0: entered promiscuous mode [ 88.353275][ T6130] syzkaller0: entered allmulticast mode [ 88.611439][ T6134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.63'. [ 89.159524][ T6137] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 89.816938][ T5903] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 89.831651][ T5903] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 89.865422][ T5903] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 89.910698][ T5903] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 89.928071][ T5903] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 89.976012][ T5903] usb 3-1: USB disconnect, device number 4 [ 90.833614][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 90.842475][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 91.043650][ T6162] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.413437][ T876] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.969831][ T876] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.991213][ T876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.053121][ T876] usb 5-1: Product: syz [ 93.072749][ T876] usb 5-1: Manufacturer: syz [ 93.078553][ T876] usb 5-1: SerialNumber: syz [ 93.197587][ T6195] syz.2.78 uses obsolete (PF_INET,SOCK_PACKET) [ 93.208069][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 93.237928][ T6195] veth0_to_batadv: entered promiscuous mode [ 93.244726][ T6195] veth0_to_batadv: entered allmulticast mode [ 93.298268][ T6198] syzkaller0: entered promiscuous mode [ 93.305287][ T6198] syzkaller0: entered allmulticast mode [ 93.316609][ T6198] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 93.362934][ T6190] tipc: Enabled bearer , priority 0 [ 93.376056][ T6197] veth0_to_batadv: left promiscuous mode [ 93.381778][ T6197] veth0_to_batadv: left allmulticast mode [ 93.417568][ T6190] tipc: Resetting bearer [ 93.433444][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.473203][ T6189] tipc: Resetting bearer [ 93.555885][ T6189] tipc: Disabling bearer [ 93.557385][ T876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 93.593961][ T876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 93.616563][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 93.635327][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.674555][ T5920] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.692497][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.793472][ T5920] usb 1-1: Product: syz [ 93.797883][ T5920] usb 1-1: Manufacturer: syz [ 93.803018][ T5920] usb 1-1: SerialNumber: syz [ 93.811637][ T5920] usb 1-1: config 0 descriptor?? [ 93.827357][ T5920] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 93.840602][ T5920] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 94.524159][ T5920] em28xx 1-1:0.0: chip ID is em2765 [ 94.571326][ T6201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.578798][ T6201] IPv6: NLM_F_CREATE should be set when creating new route [ 95.137975][ T6210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.182496][ T6210] team0: Port device bond0 added [ 95.270507][ T876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 95.294659][ T876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 95.320489][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 95.746206][ T5920] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 95.773107][ T5920] em28xx 1-1:0.0: board has no eeprom [ 96.102959][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.571747][ T6228] netlink: 188 bytes leftover after parsing attributes in process `syz.3.86'. [ 96.824829][ T876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 96.888267][ T5920] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.976161][ T5920] em28xx 1-1:0.0: dvb set to bulk mode. [ 96.989654][ T5917] em28xx 1-1:0.0: Binding DVB extension [ 97.003477][ T876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 97.133690][ T876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 97.175881][ T876] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 97.237290][ T876] usb 5-1: USB disconnect, device number 3 [ 97.523408][ T5933] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.551760][ T43] usb 1-1: USB disconnect, device number 4 [ 97.553045][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 97.798887][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 97.892151][ T5917] em28xx 1-1:0.0: Registering input extension [ 97.931249][ T43] em28xx 1-1:0.0: Closing input extension [ 97.965884][ T43] em28xx 1-1:0.0: Freeing device [ 98.334194][ T5933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.413300][ T6239] fuse: Bad value for 'fd' [ 98.416096][ T6239] netlink: 'syz.4.88': attribute type 10 has an invalid length. [ 98.416115][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.88'. [ 98.416139][ T6239] batadv0: entered promiscuous mode [ 98.416153][ T6239] batadv0: entered allmulticast mode [ 98.417266][ T6239] bridge0: port 3(batadv0) entered blocking state [ 98.417861][ T6239] bridge0: port 3(batadv0) entered disabled state [ 98.423078][ T6239] bridge0: port 3(batadv0) entered blocking state [ 98.423210][ T6239] bridge0: port 3(batadv0) entered forwarding state [ 98.666849][ T3509] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 98.666892][ T3509] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 98.933908][ T5933] usb 2-1: config 4 interface 0 has no altsetting 0 [ 98.944887][ T5933] usb 2-1: string descriptor 0 read error: -22 [ 99.132523][ T5933] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 99.132553][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.163381][ T5933] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 99.172000][ T5933] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 99.174099][ T5933] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 99.174141][ T5933] usb 2-1: media controller created [ 99.233635][ T876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.324284][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.475119][ T876] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 99.475150][ T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.475168][ T876] usb 1-1: Product: syz [ 99.475182][ T876] usb 1-1: Manufacturer: syz [ 99.475195][ T876] usb 1-1: SerialNumber: syz [ 99.924258][ T6230] usb 2-1: dvb_usb_au6610: wlen=3, aborting [ 99.924756][ T876] usb 1-1: config 0 descriptor?? [ 99.942338][ T876] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 99.957485][ T876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.958309][ T876] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 99.958380][ T876] usb 1-1: media controller created [ 100.003035][ T876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.251915][ T876] DVB: Unable to find symbol mt352_attach() [ 100.828115][ T30] audit: type=1326 audit(1764645659.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.4.92" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x0 [ 100.987225][ T5933] zl10353_read_register: readreg error (reg=127, ret==0) [ 101.298689][ T876] DVB: Unable to find symbol nxt6000_attach() [ 101.318061][ T876] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 101.394625][ T876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 101.454133][ T876] dvb-usb: schedule remote query interval to 1000 msecs. [ 101.472074][ T876] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 101.489683][ T5933] usb 2-1: USB disconnect, device number 3 [ 101.501568][ T876] dvb-usb: bulk message failed: -22 (7/0) [ 101.508745][ T876] dvb-usb: bulk message failed: -22 (7/0) [ 101.576029][ T876] usb 1-1: USB disconnect, device number 5 [ 101.736984][ T876] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 101.776174][ T6274] syzkaller0: entered promiscuous mode [ 101.784036][ T6275] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 101.801867][ T6274] syzkaller0: entered allmulticast mode [ 101.867721][ T6277] syzkaller0: entered promiscuous mode [ 101.873235][ T6277] syzkaller0: entered allmulticast mode [ 102.018976][ T6284] netlink: 156 bytes leftover after parsing attributes in process `syz.3.97'. [ 102.218489][ T6284] netlink: 72 bytes leftover after parsing attributes in process `syz.3.97'. [ 103.633458][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.289273][ T5910] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice=1e.a0 [ 104.300085][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.320449][ T5910] usb 5-1: config 0 descriptor?? [ 104.696603][ T6304] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 104.728351][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 104.788661][ T6304] bond1 (unregistering): Released all slaves [ 105.087700][ T6320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.105'. [ 105.210523][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.218780][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.238594][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.249007][ T5186] bcm5974 5-1:0.0: could not read from device [ 105.259041][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.268054][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.279372][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.293531][ T5910] usb 5-1: USB disconnect, device number 4 [ 105.366353][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.386411][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.392875][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.406764][ T6324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.758366][ T6329] tipc: Enabled bearer , priority 0 [ 105.766939][ T6329] syzkaller0: entered promiscuous mode [ 105.772439][ T6329] syzkaller0: entered allmulticast mode [ 105.802859][ T6329] tipc: Resetting bearer [ 105.817108][ T6328] tipc: Resetting bearer [ 105.876151][ T6328] tipc: Disabling bearer [ 106.217738][ T6346] syzkaller0: entered promiscuous mode [ 106.238211][ T6346] syzkaller0: entered allmulticast mode [ 108.016303][ T6371] macvlan2: entered promiscuous mode [ 108.045328][ T6372] tipc: Enabled bearer , priority 0 [ 108.059594][ T6372] syzkaller0: entered promiscuous mode [ 108.070946][ T6372] syzkaller0: entered allmulticast mode [ 108.126171][ T6375] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 108.189593][ T6375] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 108.200837][ T6375] team0: Failed to send options change via netlink (err -105) [ 108.209615][ T6375] team0: Port device netdevsim0 added [ 108.245119][ T6372] tipc: Resetting bearer [ 108.271788][ T6368] tipc: Resetting bearer [ 108.334123][ T6368] tipc: Disabling bearer [ 109.183642][ T876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.663704][ T876] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.663733][ T876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.663751][ T876] usb 4-1: Product: syz [ 110.136022][ T876] usb 4-1: Manufacturer: syz [ 110.142862][ T876] usb 4-1: SerialNumber: syz [ 110.674221][ T876] net_ratelimit: 28 callbacks suppressed [ 110.674243][ T876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 110.695302][ T876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 110.723403][ T5903] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.931203][ T6411] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 110.940964][ T6411] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 110.949646][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 110.981706][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 111.008057][ T5903] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 111.017242][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.025234][ T5903] usb 2-1: Product: syz [ 111.029465][ T5903] usb 2-1: Manufacturer: syz [ 111.035419][ T5903] usb 2-1: SerialNumber: syz [ 111.044111][ T5903] usb 2-1: config 0 descriptor?? [ 111.090637][ T5903] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 112.403029][ T876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 112.417600][ T876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 113.514231][ T876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 113.534230][ T876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 113.995241][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.147388][ T5903] gspca_zc3xx: reg_r err -32 [ 114.199543][ T876] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 114.273496][ T5889] usb 1-1: device descriptor read/64, error -71 [ 114.287181][ T876] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 114.307816][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 114.318981][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.326199][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.339441][ T876] usb 4-1: USB disconnect, device number 4 [ 114.523415][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.657612][ T5889] usb 1-1: device descriptor read/64, error -71 [ 114.734069][ T5903] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 114.743542][ T5903] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 114.847060][ T5889] usb usb1-port1: attempt power cycle [ 115.266714][ T5903] IPVS: starting estimator thread 0... [ 115.483652][ T5889] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.553441][ T6451] IPVS: using max 32 ests per chain, 76800 per kthread [ 115.654041][ T5889] usb 1-1: device descriptor read/8, error -71 [ 115.772767][ T1214] usb 2-1: USB disconnect, device number 4 [ 115.925896][ T6458] tipc: Enabled bearer , priority 0 [ 116.032919][ T6459] tipc: Resetting bearer [ 116.039718][ T6458] syzkaller0: entered promiscuous mode [ 116.046675][ T5889] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.089544][ T6461] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 116.148196][ T6457] tipc: Resetting bearer [ 116.293407][ T5889] usb 1-1: device not accepting address 9, error -71 [ 116.305658][ T6457] tipc: Disabling bearer [ 116.322406][ T5889] usb usb1-port1: unable to enumerate USB device [ 116.527836][ T6461] bond1: entered promiscuous mode [ 116.765650][ T6461] bond1: entered allmulticast mode [ 116.794741][ T6461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.818359][ T6462] erspan1: entered allmulticast mode [ 116.846399][ T6462] bond1: (slave erspan1): making interface the new active one [ 116.856121][ T6462] erspan1: entered promiscuous mode [ 116.878635][ T6462] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 117.778318][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.780042][ T30] audit: type=1326 audit(1764645676.982:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6475 comm="syz.4.141" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f85539 code=0x0 [ 118.264040][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 118.277006][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 118.288630][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.304798][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.361472][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.523448][ T5917] usb 3-1: Product: syz [ 118.527666][ T5917] usb 3-1: Manufacturer: syz [ 118.535075][ T5917] usb 3-1: SerialNumber: syz [ 118.652074][ T5903] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.699660][ T5917] usb 3-1: config 0 descriptor?? [ 118.726801][ T5917] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.736435][ T5917] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 118.898043][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 118.962231][ T5903] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 118.993471][ T5903] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.041797][ T5903] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.054053][ T5903] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 119.132324][ T5903] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 119.141653][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.167454][ T5903] usb 4-1: Product: syz [ 119.171657][ T5903] usb 4-1: Manufacturer: syz [ 119.184174][ T5903] usb 4-1: SerialNumber: syz [ 119.225434][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 119.255895][ T5903] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input9 [ 119.337264][ T5917] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 119.348151][ T6496] netlink: 14 bytes leftover after parsing attributes in process `syz.4.145'. [ 119.358341][ T5917] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 119.452579][ T5903] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 119.468896][ T5903] (id 0x00) [ 119.694813][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.923828][ T5903] rc_core: IR keymap rc-imon-pad not found [ 119.935595][ T5903] Registered IR keymap rc-empty [ 119.950821][ T5903] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 120.011263][ T5903] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 120.030649][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 120.057064][ T5903] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 120.077222][ T5903] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input10 [ 120.093529][ T5917] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 120.114023][ T5917] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 120.174294][ T5889] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 120.184109][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.185271][ T5903] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:5> initialized [ 120.516027][ T6492] imon:send_packet: task interrupted [ 120.546456][ T6492] imon:send_packet: packet tx failed (-512) [ 120.546485][ T5917] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 120.554985][ T6492] imon:vfd_write: send packet #1 failed [ 120.634441][ T5889] usb 5-1: config 0 descriptor?? [ 120.647298][ T5917] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 120.721310][ T6496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.746786][ T6496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.765911][ T5917] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 120.775022][ T5917] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 120.782059][ T5917] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 120.789109][ T5917] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 120.909179][ T5889] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 120.917902][ T5917] usb 3-1: USB disconnect, device number 5 [ 120.998757][ T6496] bond0 (unregistering): Released all slaves [ 121.617449][ T6492] imon:send_packet: task interrupted [ 121.636771][ T6492] imon:send_packet: packet tx failed (-512) [ 121.655421][ T6492] imon:vfd_write: send packet #0 failed [ 121.806466][ T5903] usb 4-1: USB disconnect, device number 5 [ 124.151183][ T5889] usb 5-1: Detected FT232A [ 124.164163][ T5889] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 124.199521][ T5889] usb 5-1: USB disconnect, device number 5 [ 124.252767][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 124.384076][ T5889] ftdi_sio 5-1:0.0: device disconnected [ 125.303401][ T30] audit: type=1326 audit(1764645684.472:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.1.153" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 126.038670][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.154'. [ 126.146156][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 127.683216][ T1214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.873516][ T1214] usb 2-1: Using ep0 maxpacket: 32 [ 128.127033][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.151837][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.171994][ T1214] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.191489][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.216218][ T1214] usb 2-1: config 0 descriptor?? [ 128.230120][ T1214] hub 2-1:0.0: USB hub found [ 128.823728][ T1214] hub 2-1:0.0: 1 port detected [ 128.863439][ T5933] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.074184][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 129.083431][ T5933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.086445][ T5933] usb 3-1: config 4 interface 0 has no altsetting 0 [ 129.089820][ T5933] usb 3-1: string descriptor 0 read error: -22 [ 129.300804][ T5933] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 129.300833][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.350201][ T5910] hub 2-1:0.0: activate --> -90 [ 129.366361][ T5933] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 129.372899][ T5933] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.373167][ T5933] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 129.373203][ T5933] usb 3-1: media controller created [ 129.549175][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.561677][ T6585] usb 3-1: dvb_usb_au6610: wlen=3, aborting [ 129.648039][ T6597] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 130.294661][ T6597] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 130.319905][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.503452][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 130.530715][ T5889] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 130.530743][ T5889] usb 1-1: config 0 has no interface number 0 [ 130.538160][ T5889] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 130.538188][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.538206][ T5889] usb 1-1: Product: syz [ 130.538220][ T5889] usb 1-1: Manufacturer: syz [ 130.538234][ T5889] usb 1-1: SerialNumber: syz [ 130.551480][ T5889] usb 1-1: config 0 descriptor?? [ 130.610025][ T5910] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 130.810238][ T5889] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 130.811102][ T5889] usb 1-1: Detected SIO [ 130.812610][ T5889] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.984294][ T5933] zl10353_read_register: readreg error (reg=127, ret==0) [ 131.283838][ T5933] usb 3-1: USB disconnect, device number 6 [ 132.116015][ T5889] usb 2-1: USB disconnect, device number 5 [ 132.399570][ T5889] usb 1-1: USB disconnect, device number 10 [ 132.420114][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 132.448776][ T5889] ftdi_sio 1-1:0.217: device disconnected [ 132.709955][ T6621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.169'. [ 132.727066][ T6621] input: syz0 as /devices/virtual/input/input11 [ 132.751459][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.758022][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.245048][ T6632] netlink: 156 bytes leftover after parsing attributes in process `syz.1.170'. [ 134.563979][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.170'. [ 134.741325][ T6641] Cannot find del_set index 2 as target [ 135.356552][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.173'. [ 136.225818][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.176'. [ 136.456015][ T6660] netlink: 52 bytes leftover after parsing attributes in process `syz.0.176'. [ 137.426926][ T1214] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.792698][ T1214] usb 5-1: Using ep0 maxpacket: 32 [ 137.814252][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.213460][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.223245][ T1214] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.236008][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.247826][ T1214] usb 5-1: config 0 descriptor?? [ 138.277935][ T1214] hub 5-1:0.0: USB hub found [ 138.635905][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 138.859523][ T1214] hub 5-1:0.0: 1 port detected [ 139.423524][ T1214] hub 5-1:0.0: activate --> -90 [ 140.774765][ T1214] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 141.980763][ T6710] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.980763][ T6710] program syz.3.185 not setting count and/or reply_len properly [ 142.077204][ T6712] kernel profiling enabled (shift: 6) [ 142.399283][ T6715] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 142.551255][ T5933] usb 5-1: USB disconnect, device number 6 [ 142.841133][ T6717] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.972523][ T745] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 142.988763][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.052531][ T6724] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 143.090577][ T6715] veth3: entered promiscuous mode [ 143.174496][ T745] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 143.427426][ T6729] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 143.472170][ T6732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.479708][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 143.789310][ T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 143.833657][ T1214] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.982886][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.191'. [ 145.828146][ T1214] usb 3-1: config index 0 descriptor too short (expected 72, got 10) [ 145.837215][ T1214] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 145.845228][ T1214] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 149.162735][ T1214] usb 3-1: string descriptor 0 read error: -71 [ 149.213167][ T1214] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.247039][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.269497][ T1214] usb 3-1: can't set config #1, error -71 [ 149.573240][ T1214] usb 3-1: USB disconnect, device number 7 [ 150.396973][ T6787] netlink: 14 bytes leftover after parsing attributes in process `syz.4.199'. [ 150.443856][ T5917] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.717584][ T5933] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.897084][ T6791] veth1_to_bond: entered allmulticast mode [ 150.981890][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 151.028568][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 151.034250][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 151.042324][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.057018][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.067584][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.078739][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.130406][ T5917] usb 1-1: config 0 descriptor?? [ 151.144098][ T5933] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 151.154350][ T5917] hub 1-1:0.0: USB hub found [ 151.163917][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.374941][ T5933] usb 5-1: config 0 descriptor?? [ 151.391197][ T5933] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 151.532549][ T5917] hub 1-1:0.0: 1 port detected [ 152.383757][ T5917] hub 1-1:0.0: activate --> -90 [ 153.624255][ T5889] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 153.677581][ T5933] usb 5-1: Detected FT232A [ 153.683577][ T5933] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.697794][ T5933] usb 5-1: USB disconnect, device number 7 [ 153.850926][ T5933] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 153.877954][ T5933] ftdi_sio 5-1:0.0: device disconnected [ 154.023747][ T1214] usb 1-1: USB disconnect, device number 11 [ 154.222508][ T6784] veth1_to_bond: left allmulticast mode [ 154.268451][ T6812] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 154.337796][ T6814] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 154.357516][ T6812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.364903][ T50] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.441040][ T5933] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.484863][ T6812] veth3: entered promiscuous mode [ 154.504577][ T68] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.654364][ T6819] macvlan2: entered promiscuous mode [ 154.713506][ T5933] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.726253][ T5933] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.736345][ T5933] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.828224][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.145727][ T30] audit: type=1326 audit(1764645714.132:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6815 comm="syz.0.208" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f02539 code=0x0 [ 155.229878][ T6810] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.271354][ T5933] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.663700][ T6810] syz_tun: entered allmulticast mode [ 157.243522][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'. [ 157.544522][ T5933] usb 5-1: USB disconnect, device number 8 [ 158.311150][ T6861] netlink: 14 bytes leftover after parsing attributes in process `syz.2.216'. [ 158.401373][ T5933] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.505093][ T6866] futex_wake_op: syz.0.215 tries to shift op by 144; fix this program [ 158.827272][ T5933] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 158.836133][ T5933] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 158.884380][ T5933] usb 5-1: config 0 has no interface number 0 [ 158.909648][ T5933] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 158.919268][ T5920] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.937773][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.952516][ T5933] usb 5-1: Product: syz [ 158.966462][ T5933] usb 5-1: Manufacturer: syz [ 158.972338][ T5933] usb 5-1: SerialNumber: syz [ 159.156871][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 159.452733][ T5920] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 159.534314][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.543748][ T5933] usb 5-1: config 0 descriptor?? [ 159.665095][ T5933] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 159.674712][ T5920] usb 3-1: config 0 descriptor?? [ 159.687877][ T5920] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 159.695483][ T5933] uvcvideo 5-1:0.64: No valid video chain found. [ 159.917051][ T6861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.944794][ T6861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.961099][ T6861] bond0 (unregistering): Released all slaves [ 161.063493][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.573423][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 161.586974][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.603391][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.621248][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 161.856470][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.954975][ T5917] usb 4-1: config 0 descriptor?? [ 161.975186][ T5917] hub 4-1:0.0: USB hub found [ 162.151239][ T5920] usb 3-1: Detected FT232A [ 162.195951][ T5920] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.247525][ T5920] usb 3-1: USB disconnect, device number 8 [ 162.349545][ T5917] hub 4-1:0.0: 1 port detected [ 162.404710][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.423292][ T5920] ftdi_sio 3-1:0.0: device disconnected [ 162.516942][ T1214] usb 5-1: USB disconnect, device number 9 [ 162.522997][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.752592][ T6891] netlink: 14 bytes leftover after parsing attributes in process `syz.1.222'. [ 163.260627][ T5833] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.313067][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 163.383691][ T5917] hub 4-1:0.0: activate --> -90 [ 163.423440][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 163.458073][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.470014][ T5833] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.483816][ T6891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.636336][ T5833] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 163.674961][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.755636][ T6891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.776109][ T6891] bond0 (unregistering): Released all slaves [ 163.844900][ T5833] usb 2-1: config 0 descriptor?? [ 164.029503][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.479743][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 164.493408][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 164.535917][ T43] usb 5-1: config 0 has no interfaces? [ 164.550481][ T43] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 164.590112][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.614418][ T43] usb 5-1: config 0 descriptor?? [ 164.788936][ T5917] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 165.543673][ T5833] usb 4-1: USB disconnect, device number 6 [ 165.670353][ T43] usb 5-1: USB disconnect, device number 10 [ 166.376331][ T43] usb 2-1: USB disconnect, device number 6 [ 167.188485][ T6930] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 167.308176][ T6930] veth7: entered promiscuous mode [ 167.320362][ T6930] bond0: (slave veth7): Enslaving as a backup interface with a down link [ 169.456419][ T6952] netlink: 14 bytes leftover after parsing attributes in process `syz.4.233'. [ 169.735154][ T5833] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.826781][ T6963] tipc: Enabled bearer , priority 0 [ 169.835092][ T6963] syzkaller0: entered promiscuous mode [ 169.865862][ T6963] syzkaller0: entered allmulticast mode [ 169.919753][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 169.937109][ T6963] tipc: Resetting bearer [ 169.956703][ T5833] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 170.009686][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.029697][ T6961] tipc: Resetting bearer [ 170.038369][ T5833] usb 5-1: config 0 descriptor?? [ 170.048424][ T5833] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 170.072609][ T6961] tipc: Disabling bearer [ 170.771801][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 171.962180][ T5833] usb 5-1: Detected FT232A [ 171.978572][ T5833] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.996166][ T5833] usb 5-1: USB disconnect, device number 11 [ 172.011496][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 172.031535][ T5833] ftdi_sio 5-1:0.0: device disconnected [ 172.270859][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 172.282819][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 172.604881][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 172.626017][ T6998] pimreg: entered allmulticast mode [ 172.633866][ T6998] pimreg: left allmulticast mode [ 174.579052][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 174.591394][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 174.602741][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 175.419110][ T7034] netlink: 48 bytes leftover after parsing attributes in process `syz.0.247'. [ 175.430164][ T5933] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.447691][ T7034] input: syz0 as /devices/virtual/input/input12 [ 175.643402][ T5833] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.912820][ T7040] use of bytesused == 0 is deprecated and will be removed in the future, [ 175.921630][ T7040] use the actual size instead. [ 176.058956][ T7038] : renamed from bridge_slave_0 (while UP) [ 176.064997][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 176.072536][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.084353][ T5933] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 176.378309][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 176.677877][ T5833] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 176.689053][ T5833] usb 4-1: config 0 has no interface number 0 [ 176.718389][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.854378][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.883429][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 176.900468][ T5933] usb 2-1: config 0 descriptor?? [ 176.950495][ T5833] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.961599][ T5833] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.975345][ T5833] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 176.991546][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.109001][ T5833] usb 4-1: config 0 descriptor?? [ 177.133129][ T5833] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 177.163542][ T7024] binder: BINDER_SET_CONTEXT_MGR already set [ 177.170088][ T7024] binder: 7023:7024 ioctl 4018620d 80000040 returned -16 [ 177.184778][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 177.193805][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.246'. [ 177.484065][ T5933] usbhid 2-1:0.0: can't add hid device: -71 [ 177.491872][ T5933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.529363][ T5933] usb 2-1: USB disconnect, device number 7 [ 177.579455][ T5833] usb 4-1: USB disconnect, device number 7 [ 177.579980][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 177.592167][ T7047] ldusb 4-1:0.55: Couldn't submit interrupt_out_urb -19 [ 178.017007][ T5833] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 178.023450][ T1214] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 178.334800][ T1214] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 178.343889][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.357497][ T1214] usb 1-1: Product: syz [ 178.362038][ T1214] usb 1-1: Manufacturer: syz [ 178.367993][ T1214] usb 1-1: SerialNumber: syz [ 178.426983][ T1214] usb 1-1: config 0 descriptor?? [ 178.649695][ T1214] hso 1-1:0.0: Failed to find INT IN ep [ 178.656529][ T1214] usb-storage 1-1:0.0: USB Mass Storage device detected [ 178.685774][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.253'. [ 179.213511][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 179.227152][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 179.370727][ T7068] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 179.616043][ T7046] bond1: left promiscuous mode [ 179.620931][ T7046] erspan1: left promiscuous mode [ 180.630697][ T30] audit: type=1326 audit(1764645739.832:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 180.920464][ T30] audit: type=1326 audit(1764645739.832:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 181.183644][ T30] audit: type=1326 audit(1764645739.832:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 181.235927][ T5889] usb 1-1: USB disconnect, device number 12 [ 181.293618][ T30] audit: type=1326 audit(1764645739.832:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 181.605096][ T7081] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 181.611866][ T7081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.634743][ T7081] vhci_hcd vhci_hcd.0: Device attached [ 181.941192][ T5889] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 182.033854][ T30] audit: type=1326 audit(1764645739.832:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 182.072504][ T30] audit: type=1326 audit(1764645739.832:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 182.207895][ T30] audit: type=1326 audit(1764645739.832:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 182.232205][ T30] audit: type=1326 audit(1764645739.832:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 182.255232][ T30] audit: type=1326 audit(1764645739.832:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 182.436323][ T30] audit: type=1326 audit(1764645739.832:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 182.714654][ T5933] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.751998][ T7099] syzkaller0: entered promiscuous mode [ 182.762821][ T7099] syzkaller0: entered allmulticast mode [ 182.847895][ T7098] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 182.860991][ T7098] bond0 (unregistering): Released all slaves [ 182.879980][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 182.895494][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.923674][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.939456][ T5933] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 182.953429][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.963411][ T5933] usb 5-1: Product: syz [ 182.967642][ T5933] usb 5-1: Manufacturer: syz [ 182.972383][ T5933] usb 5-1: SerialNumber: syz [ 182.985330][ T5933] usb 5-1: config 0 descriptor?? [ 183.019057][ T5933] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 183.077023][ T7106] vhci_hcd vhci_hcd.0: port 0 already used [ 183.144246][ T7106] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 183.150876][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.175060][ T7106] vhci_hcd vhci_hcd.0: Device attached [ 183.263687][ T7106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 183.270324][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.362192][ T7116] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 183.368823][ T7116] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.442212][ T7116] vhci_hcd vhci_hcd.0: Device attached [ 183.450478][ T7106] vhci_hcd vhci_hcd.0: Device attached [ 183.474025][ T12] usb 5-1: Failed to submit usb control message: -71 [ 183.491890][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 183.519674][ T7114] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 183.526302][ T7114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.562010][ T7114] vhci_hcd vhci_hcd.0: Device attached [ 183.601056][ T12] usb 5-1: unable to get target info from device [ 183.607634][ T12] usb 5-1: could not get target info (-71) [ 183.613725][ T12] usb 5-1: could not probe fw (-71) [ 183.845863][ T5933] usb 5-1: USB disconnect, device number 12 [ 183.856358][ T7114] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.873153][ T7106] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 183.879748][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.894015][ T7106] vhci_hcd vhci_hcd.0: Device attached [ 183.910462][ T7106] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.920135][ T7106] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 183.930403][ T7106] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(29) [ 183.936989][ T7106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 183.973523][ T7106] vhci_hcd vhci_hcd.0: Device attached [ 184.111186][ T7129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 184.120211][ T7129] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 184.289959][ T7109] vhci_hcd: connection closed [ 184.289963][ T7111] vhci_hcd: connection closed [ 184.290812][ T7123] vhci_hcd: connection closed [ 184.296665][ T1174] vhci_hcd: stop threads [ 184.300014][ T7128] vhci_hcd: connection closed [ 184.308700][ T7117] vhci_hcd: connection closed [ 184.313671][ T7134] vhci_hcd: connection closed [ 184.331136][ T7129] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 184.344333][ T1174] vhci_hcd: release socket [ 184.356983][ T1174] vhci_hcd: disconnect device [ 184.371931][ T7129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.378834][ T7129] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 184.409651][ T1174] vhci_hcd: stop threads [ 184.421427][ T1174] vhci_hcd: release socket [ 184.431133][ T1174] vhci_hcd: disconnect device [ 184.440006][ T1174] vhci_hcd: stop threads [ 184.484414][ T7129] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 184.502246][ T7129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.509715][ T7129] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.526334][ T1174] vhci_hcd: release socket [ 184.540586][ T1174] vhci_hcd: disconnect device [ 184.547511][ T1174] vhci_hcd: stop threads [ 184.560770][ T7129] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.573083][ T1174] vhci_hcd: release socket [ 184.579631][ T1174] vhci_hcd: disconnect device [ 184.607403][ T1174] vhci_hcd: stop threads [ 184.683496][ T1174] vhci_hcd: release socket [ 185.002094][ T7129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.008183][ T7129] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.069712][ T1174] vhci_hcd: disconnect device [ 185.106526][ T1174] vhci_hcd: stop threads [ 185.110799][ T1174] vhci_hcd: release socket [ 185.268339][ T7129] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.320133][ T1174] vhci_hcd: disconnect device [ 185.459241][ T7129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.466385][ T7129] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.496148][ T7129] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.554514][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 185.968379][ T5933] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.077315][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 186.233991][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.247275][ T5933] usb 3-1: config 0 has no interfaces? [ 186.252945][ T5933] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 186.262207][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.278468][ T5933] usb 3-1: config 0 descriptor?? [ 186.433435][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.543771][ T5933] usb 3-1: USB disconnect, device number 9 [ 186.629000][ T5151] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.111838][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.463613][ T5151] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.268233][ T7175] random: crng reseeded on system resumption [ 188.287597][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.503462][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.665132][ T5151] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.011085][ T5910] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.148886][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.203915][ T5910] usb 1-1: config 0 has no interfaces? [ 189.235088][ T5910] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 189.244456][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.252669][ T5910] usb 1-1: Product: syz [ 189.258166][ T5910] usb 1-1: Manufacturer: syz [ 189.265153][ T5910] usb 1-1: SerialNumber: syz [ 189.280123][ T5910] usb 1-1: config 0 descriptor?? [ 189.434172][ T7187] netlink: 14 bytes leftover after parsing attributes in process `syz.1.275'. [ 189.497584][ T7178] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 189.504194][ T7178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.535339][ T7178] vhci_hcd vhci_hcd.0: Device attached [ 189.544130][ T5151] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.550366][ T7190] vhci_hcd: connection closed [ 189.554197][ T12] vhci_hcd: stop threads [ 189.565653][ T12] vhci_hcd: release socket [ 189.570107][ T12] vhci_hcd: disconnect device [ 189.747738][ T7195] input: syz1 as /devices/virtual/input/input13 [ 189.794878][ T5910] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.923410][ T5933] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 189.984352][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 189.991910][ T5910] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.001529][ T5910] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 190.011912][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.036838][ T5910] usb 2-1: config 0 descriptor?? [ 190.082566][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 190.243979][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 190.243995][ T30] audit: type=1326 audit(1764645749.322:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.276699][ T5933] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 190.320208][ T5933] usb 5-1: config 0 has no interface number 0 [ 190.326870][ T5933] usb 5-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 190.340103][ T30] audit: type=1326 audit(1764645749.322:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.361997][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.378597][ T5933] usb 5-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 190.445826][ T5933] usb 5-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 190.535389][ T30] audit: type=1326 audit(1764645749.322:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.561699][ T5933] usb 5-1: config 0 interface 87 has no altsetting 0 [ 190.573366][ T5933] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 190.592739][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.622969][ T30] audit: type=1326 audit(1764645749.322:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.652836][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.652925][ T30] audit: type=1326 audit(1764645749.322:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.683459][ T30] audit: type=1326 audit(1764645749.322:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.712472][ T30] audit: type=1326 audit(1764645749.322:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.743897][ T5151] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.753582][ T30] audit: type=1326 audit(1764645749.322:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.827040][ T30] audit: type=1326 audit(1764645749.322:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.863020][ T30] audit: type=1326 audit(1764645749.322:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 190.867643][ T5933] usb 5-1: Product: syz [ 190.929719][ T5933] usb 5-1: Manufacturer: syz [ 190.939070][ T5933] usb 5-1: SerialNumber: syz [ 190.999617][ T5933] usb 5-1: config 0 descriptor?? [ 191.064279][ T5933] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 191.185786][ T7205] netlink: 'syz.2.279': attribute type 13 has an invalid length. [ 191.223614][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.541046][ T5910] usb 1-1: USB disconnect, device number 13 [ 191.627654][ T5151] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.013665][ T5910] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.173916][ T1119] usb 5-1: Failed to submit usb control message: -110 [ 192.182996][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.211365][ T1119] usb 5-1: unable to send the bmi data to the device: -110 [ 192.225877][ T1119] usb 5-1: unable to get target info from device [ 192.227676][ T5910] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 192.252967][ T1119] usb 5-1: could not get target info (-110) [ 192.265359][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.295942][ T1119] usb 5-1: could not probe fw (-110) [ 192.304316][ T5910] usb 4-1: Product: syz [ 192.308553][ T5910] usb 4-1: Manufacturer: syz [ 192.320349][ T5910] usb 4-1: SerialNumber: syz [ 192.382947][ T5920] usb 5-1: USB disconnect, device number 13 [ 192.467465][ T5910] usb 4-1: config 0 descriptor?? [ 192.507933][ T5910] usb 4-1: ucan: probing device on interface #0 [ 192.517246][ T5910] usb 4-1: ucan: invalid EP count (0) [ 192.557908][ T5910] usb 4-1: ucan: probe failed; try to update the device firmware [ 192.780690][ T5917] usb 2-1: USB disconnect, device number 8 [ 192.787199][ T7224] input: syz1 as /devices/virtual/input/input14 [ 193.205473][ T7233] fuse: Bad value for 'fd' [ 193.214280][ T7233] loop6: detected capacity change from 0 to 524287999 [ 193.307909][ T6237] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 193.569448][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.287'. [ 194.198879][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.205252][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.487052][ T7252] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 194.690483][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 195.086021][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.106624][ T7255] veth3: entered promiscuous mode [ 195.113383][ T24] usb 5-1: config 0 has no interfaces? [ 195.118901][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 195.120729][ T7255] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 195.128143][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.151329][ T24] usb 5-1: config 0 descriptor?? [ 195.162757][ T7259] netlink: 'syz.0.290': attribute type 4 has an invalid length. [ 195.204570][ T7259] netlink: 152 bytes leftover after parsing attributes in process `syz.0.290'. [ 195.232941][ T7259] .`: renamed from bond0 (while UP) [ 195.301151][ T1214] usb 4-1: USB disconnect, device number 8 [ 195.407794][ T7265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 196.834508][ T7258] tipc: Started in network mode [ 196.869677][ T7258] tipc: Node identity 4, cluster identity 4711 [ 196.888457][ T7258] tipc: Node number set to 4 [ 197.565931][ T13] tipc: Left network mode [ 197.699982][ T7302] netlink: 14 bytes leftover after parsing attributes in process `syz.1.294'. [ 197.795529][ T5917] usb 5-1: USB disconnect, device number 14 [ 198.051530][ T1214] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.205092][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 198.205108][ T30] audit: type=1326 audit(1764645757.462:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.4.297" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x0 [ 198.686568][ T1214] usb 2-1: Using ep0 maxpacket: 16 [ 198.700673][ T1214] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.717430][ T1214] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 198.773360][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.955413][ T1214] usb 2-1: config 0 descriptor?? [ 200.414849][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 200.623764][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 200.637092][ T7346] 8021q: VLANs not supported on ip6_vti0 [ 200.665880][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.673655][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.604599][ T5903] usb 2-1: USB disconnect, device number 9 [ 203.932582][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 205.685398][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 206.194363][ T7416] netlink: 52 bytes leftover after parsing attributes in process `syz.2.309'. [ 207.479086][ T7438] syzkaller0: entered promiscuous mode [ 207.487351][ T7438] syzkaller0: entered allmulticast mode [ 208.192686][ T7446] netlink: 14 bytes leftover after parsing attributes in process `syz.2.314'. [ 208.453574][ T5903] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.033591][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 209.291683][ T5903] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.311040][ T5903] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 209.320572][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.409732][ T5903] usb 3-1: config 0 descriptor?? [ 211.257318][ T5920] usb 3-1: USB disconnect, device number 10 [ 211.614777][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 212.635069][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 213.154662][ T5903] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 213.540724][ T7507] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 213.597356][ T7507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.711574][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.896797][ T5903] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.962205][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.979255][ T5903] usb 4-1: Product: syz [ 213.985375][ T5903] usb 4-1: Manufacturer: syz [ 213.989989][ T5903] usb 4-1: SerialNumber: syz [ 214.057168][ T5903] usb 4-1: config 0 descriptor?? [ 214.209340][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 214.940987][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.951402][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.325366][ T5917] usb 4-1: USB disconnect, device number 9 [ 217.260287][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 218.470216][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 219.805606][ T7574] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 219.885023][ T7578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.945640][ T7614] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 224.480273][ T7627] random: crng reseeded on system resumption [ 224.768066][ T7630] ip6tnl0: Caught tx_queue_len zero misconfig [ 224.873025][ T7635] can: request_module (can-proto-3) failed. [ 226.243902][ T7648] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 226.329558][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.591800][ T7660] netlink: 14 bytes leftover after parsing attributes in process `syz.2.348'. [ 227.053593][ T5903] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 228.253414][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 228.430237][ T5903] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 228.439942][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.463133][ T5903] usb 3-1: config 0 descriptor?? [ 228.832775][ T5903] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 229.233052][ T7677] pim6reg: entered allmulticast mode [ 229.356625][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 230.025140][ T7696] netlink: 'syz.4.356': attribute type 4 has an invalid length. [ 230.080174][ T7697] netlink: 'syz.4.356': attribute type 4 has an invalid length. [ 230.437366][ T5903] usb 3-1: Detected FT232A [ 230.497520][ T5903] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.534606][ T5903] usb 3-1: USB disconnect, device number 11 [ 230.561844][ T5903] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 230.590566][ T5903] ftdi_sio 3-1:0.0: device disconnected [ 230.875015][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 231.604684][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 231.773387][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 231.791596][ T24] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 231.800844][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.849710][ T24] usb 3-1: Product: syz [ 231.900828][ T24] usb 3-1: Manufacturer: syz [ 231.912888][ T24] usb 3-1: SerialNumber: syz [ 232.076806][ T24] usb 3-1: config 0 descriptor?? [ 232.125328][ T24] safe_serial 3-1:0.0: safe_serial converter detected [ 232.180864][ T24] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 232.692806][ T7727] veth1_to_bond: entered allmulticast mode [ 232.720959][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 233.938424][ T7739] binder: 7736:7739 ioctl c0306201 0 returned -14 [ 233.955791][ T7739] binder: 7736:7739 ioctl c0306201 0 returned -14 [ 235.410043][ T5933] usb 3-1: USB disconnect, device number 12 [ 235.432847][ T5933] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 235.472836][ T5933] safe_serial 3-1:0.0: device disconnected [ 235.552700][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'. [ 236.230223][ T7727] veth1_to_bond: left allmulticast mode [ 236.237044][ T1214] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 236.553483][ T1214] usb 5-1: Using ep0 maxpacket: 8 [ 236.566432][ T1214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 236.603836][ T1214] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 236.612879][ T1214] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 236.673412][ T1214] usb 5-1: Product: syz [ 236.757410][ T1214] usb 5-1: Manufacturer: syz [ 236.762040][ T1214] usb 5-1: SerialNumber: syz [ 237.109757][ T1214] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 237.118269][ T1214] visor 5-1:1.0: probe with driver visor failed with error -110 [ 238.125537][ T30] audit: type=1326 audit(1764645797.052:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7768 comm="syz.0.371" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x0 [ 238.648795][ T7780] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 238.713461][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 238.949863][ T1214] usb 5-1: USB disconnect, device number 15 [ 239.172781][ T7785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.797000][ T7780] veth5: entered promiscuous mode [ 239.840596][ T7780] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 239.952166][ T7797] vivid-002: disconnect [ 241.026701][ T7797] vivid-002: reconnect [ 241.458325][ T5933] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.773441][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 242.481827][ T5933] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 242.499614][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.604405][ T5933] usb 1-1: config 0 descriptor?? [ 242.778397][ T5933] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 242.815863][ T7824] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 242.906720][ T7824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.996861][ T30] audit: type=1326 audit(1764645802.842:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7831 comm="syz.1.383" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 244.544948][ T5933] usb 1-1: Detected FT232A [ 244.563465][ T5933] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 244.815449][ T5933] usb 1-1: USB disconnect, device number 14 [ 244.926615][ T5933] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 245.005564][ T5933] ftdi_sio 1-1:0.0: device disconnected [ 245.278292][ T30] audit: type=1326 audit(1764645804.472:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.386" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f02539 code=0x0 [ 245.466946][ T1214] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 245.511862][ T7855] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 245.834917][ T1214] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.936824][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'. [ 245.953440][ T1214] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.976420][ T7860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.033951][ T7855] veth7: entered promiscuous mode [ 246.080451][ T7855] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 246.140107][ T1214] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.680130][ T1214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.992931][ T1214] usb 4-1: usb_control_msg returned -32 [ 247.525438][ T7873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.385'. [ 247.593742][ T1214] usbtmc 4-1:16.0: can't read capabilities [ 247.647912][ T7874] syzkaller0: entered promiscuous mode [ 247.774040][ T7874] syzkaller0: entered allmulticast mode [ 249.199456][ T5920] usb 4-1: USB disconnect, device number 10 [ 249.639644][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 249.666276][ T7889] netlink: 'syz.0.392': attribute type 13 has an invalid length. [ 249.815879][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.823195][ T7889] bridge0: port 2(bridge_slave_1) entered listening state [ 249.830713][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.837826][ T7889] bridge0: port 1(bridge_slave_0) entered listening state [ 250.065462][ T7889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.643461][ T1214] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 250.827506][ T1214] usb 4-1: Using ep0 maxpacket: 16 [ 250.878963][ T1214] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 250.911741][ T1214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.975249][ T1214] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 250.998782][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.034962][ T1214] usb 4-1: Product: syz [ 251.063519][ T1214] usb 4-1: Manufacturer: syz [ 251.080707][ T1214] usb 4-1: SerialNumber: syz [ 251.098567][ T1214] usb 4-1: config 0 descriptor?? [ 251.126989][ T1214] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 251.137231][ T1214] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 251.995467][ T1214] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 252.001934][ T1214] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 252.731957][ T1214] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 252.789713][ T7913] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 252.847047][ T7914] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 252.849719][ T7913] team0: Port device netdevsim0 added [ 252.873479][ T5933] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.953546][ T1214] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 252.960825][ T1214] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 252.980880][ T1214] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 252.993795][ T1214] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 253.005432][ T1214] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 253.027042][ T1214] usb 4-1: USB disconnect, device number 11 [ 253.165395][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 253.188238][ T7914] team0: Port device netdevsim0 removed [ 253.232913][ T5933] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 253.278752][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.368477][ T5933] usb 2-1: config 0 descriptor?? [ 253.476067][ T5933] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 254.635715][ T7931] xt_bpf: check failed: parse error [ 255.641689][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.648057][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.693052][ T5933] usb 2-1: Detected FT232A [ 255.847154][ T5933] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 256.247243][ T5933] usb 2-1: USB disconnect, device number 10 [ 256.350718][ T5933] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 256.377912][ T30] audit: type=1326 audit(1764645815.622:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7940 comm="syz.4.403" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x0 [ 256.387564][ T5933] ftdi_sio 2-1:0.0: device disconnected [ 257.586272][ T7962] netlink: 'syz.2.407': attribute type 4 has an invalid length. [ 258.759571][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 258.773535][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 259.780388][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.409'. [ 260.194717][ T7989] vivid-000: disconnect [ 260.541303][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 260.989877][ T7989] vivid-000: reconnect [ 262.615343][ T30] audit: type=1326 audit(1764645821.852:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.1.416" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 263.593470][ T1214] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.803387][ T1214] usb 4-1: Using ep0 maxpacket: 16 [ 264.022859][ T1214] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 264.060183][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.093492][ T1214] usb 4-1: Product: syz [ 264.097689][ T1214] usb 4-1: Manufacturer: syz [ 264.102290][ T1214] usb 4-1: SerialNumber: syz [ 264.286154][ T1214] usb 4-1: config 0 descriptor?? [ 264.328403][ T1214] safe_serial 4-1:0.0: safe_serial converter detected [ 264.420025][ T1214] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 264.494157][ T5903] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 264.835848][ T8045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.422'. [ 264.917155][ T8046] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 265.048953][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.180042][ T5903] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.334483][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.460007][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.643480][ T5903] usb 1-1: Product: syz [ 265.663379][ T5903] usb 1-1: Manufacturer: syz [ 265.678400][ T5903] usb 1-1: SerialNumber: syz [ 265.715939][ T5903] cdc_ncm 1-1:1.0: skipping garbage [ 265.722372][ T5903] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 265.730156][ T5903] cdc_ncm 1-1:1.0: bind() failure [ 265.841806][ T5903] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 265.848743][ T5903] cdc_ncm 1-1:1.1: bind() failure [ 266.039851][ T5933] usb 4-1: USB disconnect, device number 12 [ 266.610640][ T5933] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 266.620365][ T5933] safe_serial 4-1:0.0: device disconnected [ 266.773856][ T8030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.780677][ T8030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.794131][ T8030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.806216][ T8055] netlink: 'syz.3.424': attribute type 9 has an invalid length. [ 266.814261][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 266.863574][ T8030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.869700][ T8030] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.181629][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.423'. [ 267.193933][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 267.660709][ T30] audit: type=1326 audit(1764645826.912:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 267.873219][ T30] audit: type=1326 audit(1764645826.912:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 267.917215][ T30] audit: type=1326 audit(1764645826.912:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 267.950330][ T30] audit: type=1326 audit(1764645826.942:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 267.991253][ T30] audit: type=1326 audit(1764645827.122:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 268.021247][ T30] audit: type=1326 audit(1764645827.122:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 268.239560][ T30] audit: type=1326 audit(1764645827.132:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 268.239716][ T5933] usb 1-1: USB disconnect, device number 15 [ 268.318541][ T30] audit: type=1326 audit(1764645827.242:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 268.393166][ T30] audit: type=1326 audit(1764645827.242:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 268.415219][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 268.626505][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.426'. [ 268.730244][ T30] audit: type=1326 audit(1764645827.242:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 268.908776][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.914926][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 268.935609][ T5903] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 268.953519][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.967858][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.983578][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.989646][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.024468][ T5903] usb 2-1: Product: syz [ 269.028631][ T5903] usb 2-1: Manufacturer: syz [ 269.284535][ T5903] usb 2-1: SerialNumber: syz [ 269.305304][ T5903] usb 2-1: config 0 descriptor?? [ 269.386345][ T5903] ch341 2-1:0.0: ch341-uart converter detected [ 270.424191][ T5903] usb 2-1: failed to receive control message: -110 [ 270.430852][ T5903] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 270.603635][ T5933] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 270.689298][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 270.702744][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 271.013643][ T5903] usb 2-1: USB disconnect, device number 11 [ 271.025766][ T5903] ch341 2-1:0.0: device disconnected [ 271.094247][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 271.131294][ T5933] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 271.594137][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.613986][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 271.688574][ T5933] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 271.789955][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.927102][ T5933] usb 1-1: config 0 descriptor?? [ 272.636439][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.647190][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.679225][ T8083] pimreg: entered allmulticast mode [ 272.928852][ T5933] samsung 0003:0419:0001.0001: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 273.271459][ T5933] usb 1-1: USB disconnect, device number 16 [ 273.292174][ T8110] netlink: 'syz.3.434': attribute type 11 has an invalid length. [ 273.374959][ T8115] program syz.2.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.389710][ T8115] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 273.403467][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.834513][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 273.891445][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.977489][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 274.072720][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.292019][ T43] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 274.301374][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.469983][ T43] usb 5-1: Product: syz [ 274.470920][ T5933] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 274.480111][ T43] usb 5-1: Manufacturer: syz [ 274.493208][ T43] usb 5-1: SerialNumber: syz [ 274.532267][ T43] usb 5-1: config 0 descriptor?? [ 274.586250][ T43] radioshark 5-1:0.0: Invalid radioSHARK device [ 274.592549][ T43] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 274.601258][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 274.601271][ T30] audit: type=1326 audit(1764645833.802:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8128 comm="syz.0.440" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x0 [ 274.703615][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 274.716481][ T5933] usb 3-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 275.041715][ T8141] tipc: Can't bind to reserved service type 2 [ 275.137717][ T5933] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 275.154663][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 275.274022][ T5933] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 275.293219][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.411834][ T5933] usb 3-1: Product: syz [ 275.468407][ T5933] usb 3-1: Manufacturer: syz [ 275.479433][ T5933] usb 3-1: SerialNumber: syz [ 275.539607][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 275.726593][ T8132] netlink: 23 bytes leftover after parsing attributes in process `syz.2.439'. [ 275.736052][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 275.748568][ T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 275.757117][ T43] usb 2-1: config 0 has no interface number 0 [ 275.775899][ T43] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 57055, setting to 1024 [ 275.797721][ T43] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 275.824810][ T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 275.834299][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.875286][ T43] usb 2-1: Product: syz [ 275.879476][ T43] usb 2-1: Manufacturer: syz [ 275.894935][ T43] usb 2-1: SerialNumber: syz [ 275.915592][ T43] usb 2-1: config 0 descriptor?? [ 275.934530][ T8141] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 275.949985][ T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 276.334351][ T5933] usb 3-1: USB disconnect, device number 13 [ 276.363992][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 276.391447][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 276.450817][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 276.961197][ T43] usb 5-1: USB disconnect, device number 16 [ 277.415636][ T30] audit: type=1326 audit(1764645836.482:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.0.443" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x0 [ 277.824749][ T43] usb 2-1: USB disconnect, device number 12 [ 277.855241][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 277.856886][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 277.857269][ T43] quatech2 2-1:0.51: device disconnected [ 278.900891][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.444'. [ 278.910004][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 279.944745][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 279.952467][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 280.239634][ T8184] vivid-000: ================= START STATUS ================= [ 280.247742][ T8184] vivid-000: Test Pattern: 75% Colorbar [ 280.253885][ T8184] vivid-000: Fill Percentage of Frame: 100 [ 280.259855][ T8184] vivid-000: Horizontal Movement: No Movement [ 280.269026][ T8184] vivid-000: Vertical Movement: No Movement [ 280.275090][ T8184] vivid-000: OSD Text Mode: All [ 280.280025][ T8184] vivid-000: Show Border: false [ 280.285188][ T8184] vivid-000: Show Square: false [ 280.290161][ T8184] vivid-000: Sensor Flipped Horizontally: [ 280.372606][ T8190] netlink: 'syz.4.449': attribute type 3 has an invalid length. [ 280.793451][ T8184] false [ 280.796267][ T8184] vivid-000: Sensor Flipped Vertically: false [ 280.950859][ T8184] vivid-000: Insert SAV Code in Image: false [ 280.960641][ T8184] vivid-000: Insert EAV Code in Image: false [ 280.979762][ T8184] vivid-000: Insert Video Guard Band: false [ 280.985949][ T8184] vivid-000: Reduced Framerate: false [ 280.991463][ T8184] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 281.001530][ T8184] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 281.009668][ T8184] vivid-000: Enable Capture Cropping: true grabbed [ 281.016305][ T8184] vivid-000: Enable Capture Composing: true grabbed [ 281.022957][ T8184] vivid-000: Enable Capture Scaler: true grabbed [ 281.029373][ T8184] vivid-000: Timestamp Source: End of Frame [ 281.035400][ T8184] vivid-000: Colorspace: SMPTE 170M [ 281.040722][ T8184] vivid-000: Transfer Function: Default [ 281.046343][ T8184] vivid-000: Y'CbCr Encoding: Default [ 281.051832][ T8184] vivid-000: HSV Encoding: Hue 0-179 [ 281.057193][ T8184] vivid-000: Quantization: Default [ 281.062395][ T8184] vivid-000: Apply Alpha To Red Only: false [ 281.068549][ T8184] vivid-000: Standard Aspect Ratio: 4x3 [ 281.074252][ T8184] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 281.082432][ T8184] vivid-000: DV Timings: 640x480p59 inactive [ 281.088537][ T8184] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 281.095955][ T8184] vivid-000: Maximum EDID Blocks: 2 [ 281.101193][ T8184] vivid-000: Limited RGB Range (16-235): false [ 281.107454][ T8184] vivid-000: Rx RGB Quantization Range: Automatic [ 281.114004][ T8184] vivid-000: Power Present: 0x00000001 [ 281.119587][ T8184] tpg source WxH: 720x576 (Y'CbCr) [ 281.125182][ T8184] tpg field: 4 [ 281.128571][ T8184] tpg crop: (0,0)/720x576 [ 281.132991][ T8184] tpg compose: (0,0)/720x576 [ 281.137630][ T8184] tpg colorspace: 1 [ 281.141448][ T8184] tpg transfer function: 0/1 [ 281.146168][ T8184] tpg Y'CbCr encoding: 0/1 [ 281.150607][ T8184] tpg quantization: 0/2 [ 281.154811][ T8184] tpg RGB range: 0/2 [ 281.158733][ T8184] vivid-000: ================== END STATUS ================== [ 283.224813][ T8207] fuse: Bad value for 'fd' [ 283.230565][ T8207] fuse: Bad value for 'fd' [ 283.373471][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 284.453412][ T5920] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 284.605428][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 284.670370][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.729084][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.779255][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.818816][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.412646][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 285.801428][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.827726][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 285.940355][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.053239][ T8228] openvswitch: netlink: Actions may not be safe on all matching packets [ 286.222131][ T30] audit: type=1326 audit(1764645845.472:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.1.458" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 286.486117][ T5920] usb 5-1: GET_CAPABILITIES returned 0 [ 286.707927][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 288.448493][ T5903] usb 5-1: USB disconnect, device number 17 [ 288.588497][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.596347][ T24] usb 3-1: no configurations [ 288.643945][ T24] usb 3-1: can't read configurations, error -22 [ 288.838465][ T8259] fuse: Unknown parameter 'î_¦[' [ 289.116095][ T5903] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 289.173403][ T5920] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 289.283639][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 289.339555][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.352417][ T5903] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 289.369571][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.434468][ T5920] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 289.440803][ T5903] usb 5-1: config 0 descriptor?? [ 289.457227][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.652151][ T5920] usb 2-1: Product: syz [ 289.663373][ T5920] usb 2-1: Manufacturer: syz [ 289.674646][ T5920] usb 2-1: SerialNumber: syz [ 289.794266][ T5920] usb 2-1: config 0 descriptor?? [ 289.805997][ T5920] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 289.826163][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.907560][ T5920] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 289.993185][ T5920] usb 2-1: media controller created [ 290.014608][ T8259] dvb-usb: bulk message failed: -22 (7/0) [ 290.720523][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.318461][ T5920] DVB: Unable to find symbol mt352_attach() [ 291.424151][ T5903] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 291.470194][ T5920] DVB: Unable to find symbol nxt6000_attach() [ 291.486695][ T5920] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 291.526896][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 291.545306][ T5920] dvb-usb: schedule remote query interval to 1000 msecs. [ 291.633126][ T5920] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 291.660616][ T5920] dvb-usb: bulk message failed: -22 (7/0) [ 291.724501][ T5920] dvb-usb: bulk message failed: -22 (7/0) [ 291.841968][ T5920] usb 2-1: USB disconnect, device number 13 [ 292.644637][ T30] audit: type=1326 audit(1764645851.532:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.466" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 293.637047][ T30] audit: type=1326 audit(1764645852.872:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 293.756984][ T30] audit: type=1326 audit(1764645852.872:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 293.876153][ T30] audit: type=1326 audit(1764645852.872:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 293.889687][ T5920] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 294.007083][ T5903] usb 5-1: USB disconnect, device number 18 [ 294.325431][ T30] audit: type=1326 audit(1764645852.872:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 294.754815][ T1214] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.767070][ T5920] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 294.777850][ T30] audit: type=1326 audit(1764645853.102:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 294.897358][ T30] audit: type=1326 audit(1764645853.102:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 294.926616][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 294.935571][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.948886][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.110977][ T5920] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 295.180938][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.225197][ T5920] usb 2-1: config 0 descriptor?? [ 295.363146][ T30] audit: type=1326 audit(1764645853.102:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 295.463553][ T30] audit: type=1326 audit(1764645853.332:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 295.585229][ T30] audit: type=1326 audit(1764645853.562:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 297.770656][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 298.103291][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 298.131438][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 298.380117][ T5920] usb 2-1: USB disconnect, device number 14 [ 298.853430][ T1214] usb 4-1: device descriptor read/64, error -71 [ 299.103655][ T1214] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 299.386886][ T1214] usb 4-1: Using ep0 maxpacket: 8 [ 299.397720][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.420913][ T1214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 299.461204][ T1214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.635562][ T1214] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 299.649369][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.667020][ T1214] usb 4-1: Product: syz [ 299.929394][ T1214] usb 4-1: Manufacturer: syz [ 300.015699][ T1214] usb 4-1: SerialNumber: syz [ 300.073813][ T1214] usb 4-1: config 0 descriptor?? [ 300.112145][ T1214] radioshark 4-1:0.0: Invalid radioSHARK device [ 300.120823][ T1214] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 300.145127][ T1214] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 302.220633][ T8409] hub 9-0:1.0: USB hub found [ 302.232947][ T8409] hub 9-0:1.0: 1 port detected [ 302.325413][ T24] usb 4-1: USB disconnect, device number 14 [ 304.418842][ T8433] ipip0: entered promiscuous mode [ 304.424079][ T8433] ipip0: entered allmulticast mode [ 304.573405][ T5933] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 304.588041][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 304.607073][ T8435] netlink: 'syz.1.487': attribute type 13 has an invalid length. [ 304.951332][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 304.996973][ T5933] usb 1-1: config 0 has an invalid interface number: 59 but max is 0 [ 305.005131][ T5933] usb 1-1: config 0 has no interface number 0 [ 305.011202][ T5933] usb 1-1: config 0 interface 59 has no altsetting 0 [ 305.020049][ T5933] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 305.029136][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.037177][ T5933] usb 1-1: Product: syz [ 305.041317][ T5933] usb 1-1: Manufacturer: syz [ 305.045903][ T5933] usb 1-1: SerialNumber: syz [ 305.054399][ T5933] usb 1-1: config 0 descriptor?? [ 305.212571][ T5933] smsc75xx v1.0.0 [ 305.303669][ T5933] smsc75xx 1-1:0.59 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 305.310203][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.322464][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.181674][ T5933] smsc75xx 1-1:0.59: probe with driver smsc75xx failed with error -22 [ 306.260195][ T8431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.833429][ T8431] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 306.876371][ T8431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.882874][ T8431] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 306.894326][ T8435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.064088][ T8431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.071158][ T8431] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 307.090405][ T8431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.096826][ T8431] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 307.117880][ T8431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.132343][ T8431] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 307.455717][ T5920] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 307.741038][ T8453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.474368][ T1214] usb 1-1: USB disconnect, device number 17 [ 309.796481][ T8444] loop6: detected capacity change from 0 to 524287999 [ 309.827408][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.873508][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.913590][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.921529][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.023481][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.030740][ C1] bridge0: topology change detected, propagating [ 310.038455][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.045665][ C1] bridge0: topology change detected, propagating [ 310.055588][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.063934][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.071840][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.093483][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.117614][ T6237] ldm_validate_partition_table(): Disk read failed. [ 310.150713][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.206190][ T6237] Buffer I/O error on dev loop6, logical block 0, async page read [ 310.229841][ T5920] usb 3-1: device descriptor read/all, error -71 [ 310.235417][ T6237] Dev loop6: unable to read RDB block 0 [ 310.249082][ T6237] loop6: unable to read partition table [ 310.605960][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 310.656537][ T8476] trusted_key: encrypted_key: insufficient parameters specified [ 310.703914][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 310.803433][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 310.874638][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 310.889023][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.900369][ T24] usb 5-1: Product: syz [ 310.904956][ T24] usb 5-1: Manufacturer: syz [ 310.909814][ T24] usb 5-1: SerialNumber: syz [ 310.931826][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 310.941064][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 315.079754][ T8508] fuse: Unknown parameter '0xffffffffffffffff' [ 315.393106][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 315.409155][ T24] r8152-cfgselector 5-1: bad CDC descriptors [ 315.465943][ T24] r8152-cfgselector 5-1: USB disconnect, device number 19 [ 316.273862][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 317.022536][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 317.082425][ T8515] openvswitch: netlink: Actions may not be safe on all matching packets [ 317.093864][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.100167][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.370678][ T8536] pim6reg: entered allmulticast mode [ 317.403910][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 317.403926][ T30] audit: type=1326 audit(1764645876.572:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 317.667165][ T30] audit: type=1326 audit(1764645876.572:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 317.689032][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.016693][ T30] audit: type=1326 audit(1764645876.572:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 318.038454][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.161854][ T30] audit: type=1326 audit(1764645876.572:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 318.261820][ T8531] pim6reg: left allmulticast mode [ 318.293540][ T30] audit: type=1326 audit(1764645876.572:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 318.321643][ T30] audit: type=1326 audit(1764645876.572:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 318.449167][ T30] audit: type=1326 audit(1764645876.572:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 318.476522][ T30] audit: type=1326 audit(1764645876.572:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 318.631563][ T30] audit: type=1326 audit(1764645876.572:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 318.962953][ T30] audit: type=1326 audit(1764645876.582:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8531 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 319.437653][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.452051][ T24] usb 5-1: no configurations [ 319.898246][ T24] usb 5-1: can't read configurations, error -22 [ 320.103708][ T8422] schedule_timeout: wrong timeout value ffffffffffffffff [ 320.136875][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: vivid-007-sdr-c Not tainted syzkaller #0 PREEMPT(full) [ 320.136906][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.136926][ T8422] Call Trace: [ 320.136933][ T8422] [ 320.136941][ T8422] dump_stack_lvl+0x189/0x250 [ 320.136971][ T8422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.136992][ T8422] ? __pfx__printk+0x10/0x10 [ 320.137023][ T8422] schedule_timeout+0x1e1/0x270 [ 320.137041][ T8422] ? __pfx_schedule_timeout+0x10/0x10 [ 320.137068][ T8422] ? prepare_to_wait_event+0x437/0x480 [ 320.137098][ T8422] vivid_thread_sdr_cap+0xa62/0xf80 [ 320.137140][ T8422] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 320.137168][ T8422] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.137189][ T8422] ? __kthread_parkme+0x7b/0x200 [ 320.137207][ T8422] ? __kthread_parkme+0x1a1/0x200 [ 320.137230][ T8422] kthread+0x711/0x8a0 [ 320.137253][ T8422] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 320.137273][ T8422] ? __pfx_kthread+0x10/0x10 [ 320.137295][ T8422] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.137313][ T8422] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.137331][ T8422] ? __pfx_kthread+0x10/0x10 [ 320.137353][ T8422] ret_from_fork+0x4bc/0x870 [ 320.137374][ T8422] ? __pfx_ret_from_fork+0x10/0x10 [ 320.137399][ T8422] ? __switch_to_asm+0x39/0x70 [ 320.137412][ T8422] ? __switch_to_asm+0x33/0x70 [ 320.137431][ T8422] ? __pfx_kthread+0x10/0x10 [ 320.137454][ T8422] ret_from_fork_asm+0x1a/0x30 [ 320.137484][ T8422] [ 320.286908][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.013006][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 321.303046][ T8566] netlink: 52 bytes leftover after parsing attributes in process `syz.4.509'. [ 321.539480][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 321.551610][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 322.607662][ T8580] loop5: detected capacity change from 0 to 7 [ 322.657252][ T8580] Dev loop5: unable to read RDB block 7 [ 322.662868][ T8580] loop5: unable to read partition table [ 322.903573][ T8580] loop5: partition table beyond EOD, truncated [ 322.954243][ T8580] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.371912][ T8597] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 323.814897][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 323.814913][ T30] audit: type=1326 audit(1764645882.662:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.517" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 325.021220][ T30] audit: type=1326 audit(1764645884.232:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.0.520" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x0 [ 328.288888][ T30] audit: type=1326 audit(1764645887.432:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.4.526" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x0 [ 329.818086][ T5920] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 330.001671][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 330.093405][ T5903] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 330.473441][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 330.533810][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.542888][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.610321][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 330.642107][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 330.658103][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 330.684140][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.768590][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.783515][ T8650] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.800504][ T8650] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.887511][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.926153][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 330.977522][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.047881][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.171819][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 331.405508][ T24] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 331.435416][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.464913][ T24] usb 3-1: Product: syz [ 331.471232][ T24] usb 3-1: Manufacturer: syz [ 331.479551][ T24] usb 3-1: SerialNumber: syz [ 331.490521][ T24] usb 3-1: config 0 descriptor?? [ 331.502493][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 332.117303][ T5903] usb 2-1: GET_CAPABILITIES returned 0 [ 332.126052][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 332.392518][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'. [ 332.761487][ T24] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 332.826393][ T24] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 333.105920][ T24] usb 3-1: USB disconnect, device number 18 [ 333.296327][ T30] audit: type=1326 audit(1764645892.542:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.4.533" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x0 [ 333.317620][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.657763][ T5933] usb 4-1: USB disconnect, device number 15 [ 334.891809][ T5933] usb 2-1: USB disconnect, device number 15 [ 335.657477][ T8703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.115476][ T8717] capability: warning: `syz.3.539' uses 32-bit capabilities (legacy support in use) [ 338.623400][ T43] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 339.025288][ T43] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 339.034111][ T43] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 339.042169][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 339.083618][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 339.184488][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 339.195290][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 339.297060][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 339.446050][ T43] usb 4-1: string descriptor 0 read error: -22 [ 339.453503][ T43] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 339.563526][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.603973][ T5933] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 339.618595][ T43] usb 4-1: config 0 descriptor?? [ 339.773480][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 339.807776][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.808656][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 339.903105][ T8747] binder: 8744:8747 ioctl c018620c 800002c0 returned -1 [ 339.944726][ T30] audit: type=1326 audit(1764645899.182:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 339.984447][ T5933] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.033081][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 340.067775][ T5933] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 340.093663][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.185144][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.195676][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.301078][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 340.315070][ T5933] usb 5-1: Product: syz [ 340.325743][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 340.359602][ T5933] usb 5-1: Manufacturer: syz [ 340.366928][ T5933] usb 5-1: SerialNumber: syz [ 340.377379][ T30] audit: type=1326 audit(1764645899.182:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 340.388345][ T5933] usb 5-1: config 0 descriptor?? [ 340.399174][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.892922][ T30] audit: type=1326 audit(1764645899.182:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 340.914762][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.213447][ T30] audit: type=1326 audit(1764645899.182:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 341.247973][ T43] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 341.285189][ T8756] ip6t_REJECT: ECHOREPLY is not supported [ 341.463748][ T30] audit: type=1326 audit(1764645899.182:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 341.577883][ T30] audit: type=1326 audit(1764645899.182:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 341.599709][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.850823][ T30] audit: type=1326 audit(1764645899.182:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 342.430241][ T30] audit: type=1326 audit(1764645899.182:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 342.696910][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 342.707112][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 342.900300][ T30] audit: type=1326 audit(1764645899.182:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 342.938123][ T5920] usb 4-1: USB disconnect, device number 16 [ 342.994413][ T5933] usb 5-1: USB disconnect, device number 22 [ 343.260516][ T30] audit: type=1326 audit(1764645899.182:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 343.282421][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.335856][ T8779] netlink: 'syz.1.549': attribute type 13 has an invalid length. [ 343.382121][ T5903] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 343.395943][ T8780] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 343.448297][ T8775] bond3 (unregistering): Released all slaves [ 343.624838][ T8779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.186050][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 344.199450][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 344.219873][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 344.230288][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.284810][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.329076][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 344.423547][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.679321][ T8790] warning: `syz.0.552' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 344.743878][ T5903] usb 3-1: GET_CAPABILITIES returned 0 [ 344.749390][ T5903] usbtmc 3-1:16.0: can't read capabilities [ 346.135879][ T5933] usb 3-1: USB disconnect, device number 19 [ 348.069993][ T8808] hub 9-0:1.0: USB hub found [ 348.082065][ T8808] hub 9-0:1.0: 1 port detected [ 348.370060][ T5920] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 348.637616][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 348.689980][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.729796][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 348.777431][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 348.813419][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 348.845691][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.923533][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'. [ 348.986245][ T5920] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 348.999901][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.012372][ T5920] usb 1-1: Product: syz [ 349.025736][ T5920] usb 1-1: Manufacturer: syz [ 349.038641][ T5920] usb 1-1: SerialNumber: syz [ 349.097045][ T5920] usb 1-1: config 0 descriptor?? [ 349.839496][ T5920] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 350.366461][ T31] INFO: task kworker/0:3:5833 blocked for more than 143 seconds. [ 350.403426][ T31] Not tainted syzkaller #0 [ 350.408488][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.426348][ T31] task:kworker/0:3 state:D stack:22824 pid:5833 tgid:5833 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 350.574887][ T31] Workqueue: usb_hub_wq hub_event [ 350.580037][ T31] Call Trace: [ 350.597860][ T31] [ 350.603255][ T31] __schedule+0x1798/0x4cc0 [ 350.609033][ T31] ? __pfx___schedule+0x10/0x10 [ 350.616374][ T31] ? schedule+0x91/0x360 [ 350.622884][ T31] schedule+0x165/0x360 [ 350.678139][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.810499][ T31] __mutex_lock+0x7e6/0x1350 [ 350.819367][ T31] ? __mutex_lock+0x5bb/0x1350 [ 350.973446][ T31] ? hub_event+0x21e5/0x4a20 [ 350.982320][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 350.990155][ T5920] usb 1-1: USB disconnect, device number 18 [ 351.037218][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 351.066126][ T31] hub_event+0x21e5/0x4a20 [ 351.081956][ T31] ? do_raw_spin_lock+0x121/0x290 [ 351.223712][ T31] ? __pfx_hub_event+0x10/0x10 [ 351.228617][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.240354][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.245752][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.251562][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.257674][ T31] process_scheduled_works+0xae1/0x17b0 [ 351.264413][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.273614][ T31] worker_thread+0x8a0/0xda0 [ 351.283411][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.289833][ T31] ? __kthread_parkme+0x7b/0x200 [ 351.296125][ T31] kthread+0x711/0x8a0 [ 351.302474][ T31] ? __pfx_worker_thread+0x10/0x10 [ 351.312570][ T31] ? __pfx_kthread+0x10/0x10 [ 351.317842][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.323126][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.328921][ T31] ? __pfx_kthread+0x10/0x10 [ 351.333889][ T31] ret_from_fork+0x4bc/0x870 [ 351.339647][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.346272][ T31] ? __switch_to_asm+0x39/0x70 [ 351.357763][ T31] ? __switch_to_asm+0x33/0x70 [ 351.372825][ T31] ? __pfx_kthread+0x10/0x10 [ 351.384273][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.407952][ T31] [ 351.416678][ T31] [ 351.416678][ T31] Showing all locks held in the system: [ 351.468830][ T31] 1 lock held by khungtaskd/31: [ 351.492367][ T31] #0: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 351.522682][ T31] 2 locks held by getty/5595: [ 351.537473][ T31] #0: ffff88802fccf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.567930][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 351.588172][ T31] 5 locks held by kworker/0:3/5833: [ 351.595773][ T31] #0: ffff888143ac3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.608557][ T31] #1: ffffc900041ffba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.621649][ T31] #2: ffff888029181198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 351.631932][ T31] #3: ffff888029184518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 351.642268][ T31] #4: ffff888145bf7868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 351.653144][ T31] 5 locks held by kworker/0:4/5889: [ 351.658759][ T31] #0: ffff888143ac3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.676802][ T31] #1: ffffc9000460fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.696841][ T31] #2: ffff88814631b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 351.710193][ T31] #3: ffff88814631e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 351.720631][ T31] #4: ffff888145bf7868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 351.731756][ T31] 1 lock held by syz.4.558/8835: [ 351.736969][ T31] [ 351.739384][ T31] ============================================= [ 351.739384][ T31] [ 351.748356][ T31] NMI backtrace for cpu 1 [ 351.748366][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.748379][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.748386][ T31] Call Trace: [ 351.748390][ T31] [ 351.748394][ T31] dump_stack_lvl+0x189/0x250 [ 351.748413][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.748425][ T31] ? __pfx__printk+0x10/0x10 [ 351.748441][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 351.748456][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 351.748471][ T31] ? __pfx__printk+0x10/0x10 [ 351.748482][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.748497][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 351.748512][ T31] watchdog+0xf60/0xfa0 [ 351.748525][ T31] ? watchdog+0x1e2/0xfa0 [ 351.748538][ T31] kthread+0x711/0x8a0 [ 351.748551][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.748561][ T31] ? __pfx_kthread+0x10/0x10 [ 351.748573][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.748583][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.748594][ T31] ? __pfx_kthread+0x10/0x10 [ 351.748606][ T31] ret_from_fork+0x4bc/0x870 [ 351.748617][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.748629][ T31] ? __switch_to_asm+0x39/0x70 [ 351.748636][ T31] ? __switch_to_asm+0x33/0x70 [ 351.748643][ T31] ? __pfx_kthread+0x10/0x10 [ 351.748655][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.748670][ T31] [ 351.748674][ T31] Sending NMI from CPU 1 to CPUs 0: [ 351.893805][ C0] NMI backtrace for cpu 0 [ 351.893821][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 351.893838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.893847][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 351.893869][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a1 1f 00 f3 0f 1e fa fb f4 08 e7 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 351.893882][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 351.893896][ C0] RAX: 8bb733230364b800 RBX: ffffffff8196d6e7 RCX: 8bb733230364b800 [ 351.893907][ C0] RDX: 0000000000000001 RSI: ffffffff8d70fa6b RDI: ffffffff8bbf0560 [ 351.893918][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832f9b R09: 1ffff110171065f3 [ 351.893928][ C0] R10: dffffc0000000000 R11: ffffed10171065f4 R12: ffffffff8f7cf270 [ 351.893939][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 351.893949][ C0] FS: 0000000000000000(0000) GS:ffff88812612d000(0000) knlGS:0000000000000000 [ 351.893961][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.893971][ C0] CR2: 0000000080202018 CR3: 000000007f3fe000 CR4: 00000000003526f0 [ 351.893984][ C0] Call Trace: [ 351.893992][ C0] [ 351.893998][ C0] default_idle+0x13/0x20 [ 351.894016][ C0] default_idle_call+0x73/0xb0 [ 351.894035][ C0] do_idle+0x1e7/0x510 [ 351.894055][ C0] ? __pfx_do_idle+0x10/0x10 [ 351.894083][ C0] cpu_startup_entry+0x44/0x60 [ 351.894099][ C0] rest_init+0x2de/0x300 [ 351.894118][ C0] start_kernel+0x3ae/0x410 [ 351.894135][ C0] x86_64_start_reservations+0x24/0x30 [ 351.894153][ C0] x86_64_start_kernel+0x143/0x1c0 [ 351.894171][ C0] common_startup_64+0x13e/0x147 [ 351.894197][ C0]