last executing test programs: 30m42.678581719s ago: executing program 4 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 30m42.214512578s ago: executing program 4 (id=529): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x317b, 0x400, 0x20003, 0x369}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 30m40.335391832s ago: executing program 4 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r3, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 30m39.855616637s ago: executing program 4 (id=536): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 30m38.653856882s ago: executing program 4 (id=538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080), 0xa, 0x141) syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30m38.502928564s ago: executing program 4 (id=541): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r4, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c088) 30m38.196928603s ago: executing program 32 (id=541): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r4, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c088) 1m29.44542355s ago: executing program 1 (id=5685): syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) syz_open_dev$video4linux(&(0x7f0000000200), 0x401, 0x42880) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x1000000400000000, 0x5, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$sndtimer(0xffffff9c, &(0x7f00000002c0), 0x40) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m26.704973502s ago: executing program 1 (id=5691): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 1m23.643391208s ago: executing program 1 (id=5697): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000ab4000/0x4000)=nil, 0x4000, 0x1, 0x13, 0xffffffffffffffff, 0x2000000) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, 0x0) fsopen(0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r5, &(0x7f0000000040), &(0x7f000009de80), 0x0) 1m22.441402899s ago: executing program 1 (id=5702): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 1m19.299341483s ago: executing program 1 (id=5710): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r4, 0xe, "bb0cc2e66fbf06c61039b0aa1fa9"}, &(0x7f0000000300)=0x16) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x0, '\x00', @value64}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) dup3(r7, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 1m15.064942857s ago: executing program 1 (id=5716): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x809268, 0x400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x113, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x200000, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 59.667260577s ago: executing program 33 (id=5716): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x809268, 0x400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x113, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x200000, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 14.792728096s ago: executing program 5 (id=5860): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd8}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1000, @private1, 0x9}}, [0x40, 0xd, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xe, 0x5, 0x80000001, 0xfff, 0x6, 0xe0000000, 0x5, 0x8000000000000000, 0x4f3]}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000778000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x7, 0x2) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x437, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9081}, 0x4010004) openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) 12.577058911s ago: executing program 0 (id=5862): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={r2, 0x0, 0x1, 0x0, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x5, 0x11, 0x85}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/190, 0xbe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x64) mmap(&(0x7f0000897000/0x3000)=nil, 0x3000, 0x1000002, 0x10, 0xffffffffffffffff, 0xd8b40000) write$rfkill(r3, &(0x7f0000000100)={0x5, 0x3, 0x5, 0xff}, 0x8) 12.576757447s ago: executing program 3 (id=5863): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0)=0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) r6 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) 11.401613907s ago: executing program 5 (id=5864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) syz_pidfd_open(r3, 0x0) setns(0xffffffffffffffff, 0x8020000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000003c0)={0x2, 0x0, [{0x8b, 0x0, 0x8}, {0x280, 0x0, 0x7}]}) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x10, 0x101000) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0x2b, 0x7a, 0x10, 0x54c, 0x2e1, 0xe2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x1, 0x16, 0xfa, 0x1f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000640), 0x183180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_evm(0x0, &(0x7f00000001c0), &(0x7f0000000240)=@md5={0x1, "6d79b422c55f9eed020cfb2bce4100ee"}, 0x11, 0x2) 10.977378969s ago: executing program 0 (id=5865): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x800, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300"/28], 0x48) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC=r2, @ANYBLOB=',audit,\x00']) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0) 10.976988951s ago: executing program 3 (id=5866): syz_open_dev$usbmon(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000244000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff000000000000000000000000060000000403"], 0xf8}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c11) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) unshare(0x2040400) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffd, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000000c0)={0x980914, 0x1001}) 9.458059131s ago: executing program 2 (id=5867): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e28, 0xfffff7ff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x2e) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c990", 0x11}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x80000000000000, 0x0) syz_io_uring_setup(0xd6f, &(0x7f0000000080)={0x0, 0x4021, 0x10000, 0x1, 0xb5}, &(0x7f0000000180), &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) socket(0x22, 0x2, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_usbip_server_init(0x5) syz_usbip_server_init(0x2) syz_usbip_server_init(0x6) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) 7.918683326s ago: executing program 3 (id=5868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r4, 0xe, "bb0cc2e66fbf06c61039b0aa1fa9"}, &(0x7f0000000300)=0x16) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f905, 0x0, '\x00', @value64}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) dup3(r7, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 7.839402871s ago: executing program 2 (id=5870): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000021c0)=ANY=[@ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x4c010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 7.774546888s ago: executing program 2 (id=5871): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) r1 = socket(0x2a, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x26, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1000, 0x4d03c0) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0xc, 0x29, 0x2}], 0xc}}], 0x1, 0x24008040) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'nr0\x00', 0x4}, 0x18) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.642787797s ago: executing program 5 (id=5872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000107}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) membarrier(0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 6.545590862s ago: executing program 0 (id=5873): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x5}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$alg(0x26, 0x5, 0x0) fanotify_init(0x20, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.887173415s ago: executing program 5 (id=5875): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) 5.268064591s ago: executing program 0 (id=5876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0)=0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) r6 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) 4.289741766s ago: executing program 0 (id=5877): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000000)={0x1, @sliced={0x5, [0x9, 0x8, 0x9, 0x2, 0x231, 0xec, 0x2, 0x7ff, 0x3, 0x2, 0xaef6, 0x1ff, 0x3ff, 0x1, 0x9, 0x1, 0x4, 0x9, 0x4, 0xfffb, 0x9, 0x4, 0xfbff, 0x0, 0x401, 0x19f, 0x0, 0x8c, 0x8, 0x6, 0x1, 0x2, 0xea, 0x9, 0xe, 0x3, 0xeaf, 0x4, 0x8, 0x7, 0x3, 0x3, 0x5150, 0xad, 0xb, 0x9, 0x8abc, 0x800], 0x6}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r6, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.288881875s ago: executing program 2 (id=5878): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='gid', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000700)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x6a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6}}, {{0x9, 0x4, 0x7e, 0x8, 0x5, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x0, 0xfc, 0x5b, 0x82, 0xd7}}]}}]}}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.288456463s ago: executing program 3 (id=5879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x903d01) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x78f) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x19, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 4.285621787s ago: executing program 5 (id=5886): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 1.933297165s ago: executing program 2 (id=5880): socket(0x1, 0x47103ec4e8b200ee, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x22, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat(0xffffffffffffff9c, 0x0, 0xa000, 0x1da) 1.932818373s ago: executing program 3 (id=5881): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x10, 0xab}, 0x94) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x80) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}}, 0x1c}}, 0x84) 1.227310605s ago: executing program 5 (id=5882): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 1.191922121s ago: executing program 0 (id=5883): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x60, [0x3ff, 0xef8, 0x800, 0x0, 0x5, 0x1], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000300)=""/96}, &(0x7f0000000400)=0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x8000) 201.854722ms ago: executing program 3 (id=5884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 0s ago: executing program 2 (id=5885): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) kernel console output (not intermixed with test programs): 097][T28417] ipvlan1: entered allmulticast mode [ 1825.670865][T28417] veth0_vlan: entered allmulticast mode [ 1825.721246][T28417] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1826.769097][T16384] usb 4-1: USB disconnect, device number 123 [ 1827.074300][T28423] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1827.244516][T28430] netlink: 'syz.5.5379': attribute type 4 has an invalid length. [ 1827.398017][T16354] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1827.687832][T16354] usb 4-1: Using ep0 maxpacket: 16 [ 1827.788225][T28437] bond7: Removing last ns target with arp_interval on [ 1827.798306][T16354] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1827.944767][T16354] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1827.944800][T16354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.944817][T16354] usb 4-1: Product: syz [ 1827.944829][T16354] usb 4-1: Manufacturer: syz [ 1827.944845][T16354] usb 4-1: SerialNumber: syz [ 1828.021550][T16354] usb 4-1: config 0 descriptor?? [ 1828.166055][T16354] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1828.174824][T16354] usb 4-1: Detected FT232R [ 1828.365809][T16354] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1828.702714][T16354] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1828.920590][T28423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.998117][T28423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.113445][T16382] usb 4-1: USB disconnect, device number 124 [ 1829.138819][T16382] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1829.223060][T16382] ftdi_sio 4-1:0.0: device disconnected [ 1830.047856][T16382] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1830.188881][T28462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5387'. [ 1830.220574][T28458] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5387'. [ 1830.250326][T28460] ALSA: mixer_oss: invalid OSS volume 'u' [ 1830.293308][T16382] usb 6-1: Using ep0 maxpacket: 8 [ 1830.364284][T16382] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1830.412582][T28465] ALSA: mixer_oss: invalid OSS volume 'u' [ 1830.421859][T16382] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1830.432284][T16382] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1830.497522][T16382] usb 6-1: Product: syz [ 1830.535960][T16382] usb 6-1: Manufacturer: syz [ 1830.562495][T16382] usb 6-1: SerialNumber: syz [ 1830.701793][T28470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5388'. [ 1830.886666][T16382] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1830.895732][T16382] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1832.587868][T16354] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1832.604642][T16366] usb 6-1: USB disconnect, device number 104 [ 1832.758947][T16354] usb 4-1: Using ep0 maxpacket: 8 [ 1832.769724][T16354] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1832.788305][T16354] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1832.810643][T16354] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1832.819231][T16354] usb 4-1: Product: syz [ 1832.824670][T16354] usb 4-1: Manufacturer: syz [ 1832.829730][T16354] usb 4-1: SerialNumber: syz [ 1833.239866][T28489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5393'. [ 1833.249436][T16354] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1833.267949][T16354] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1834.199803][T16354] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1834.417897][T16354] usb 6-1: Using ep0 maxpacket: 8 [ 1834.426562][T16354] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1834.449875][T16354] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1834.472531][T16354] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1834.501000][T16354] usb 6-1: Product: syz [ 1834.515694][T16354] usb 6-1: Manufacturer: syz [ 1834.524187][T16354] usb 6-1: SerialNumber: syz [ 1835.088053][T16354] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1835.137245][T16354] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1835.246896][T16354] usb 4-1: USB disconnect, device number 125 [ 1836.504396][T28515] tipc: Resetting bearer [ 1836.686066][T28515] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 1836.791719][T16384] usb 6-1: USB disconnect, device number 105 [ 1836.801424][T28515] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 1837.100787][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5403'. [ 1837.147738][T28525] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5403'. [ 1837.468181][T28535] netdevsim netdevsim3 : renamed from netdevsim0 [ 1837.601758][T28536] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[28536] [ 1838.741863][T28550] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5406'. [ 1839.049332][T28554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5408'. [ 1839.082492][T28554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5408'. [ 1839.955880][T28564] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1840.697872][T16366] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1840.865595][T16366] usb 6-1: Using ep0 maxpacket: 8 [ 1840.873589][T16366] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1840.914373][T16366] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1840.927311][T16366] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1840.936143][T16366] usb 6-1: Product: syz [ 1840.951581][T16366] usb 6-1: Manufacturer: syz [ 1840.960524][T16366] usb 6-1: SerialNumber: syz [ 1841.290904][T16366] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1841.495017][T16366] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1842.364091][T28590] openvswitch: netlink: Key type 31 is not supported [ 1842.446265][T16384] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1842.634478][T28589] tipc: Resetting bearer [ 1842.641094][T16384] usb 3-1: Using ep0 maxpacket: 8 [ 1842.699266][T28589] tipc: Resetting bearer [ 1842.709666][T16384] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1842.801233][T12123] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 20004 - 0 [ 1842.825188][T12123] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1842.846961][T16384] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1842.857806][T16384] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1842.874003][T12123] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1842.996862][T16384] usb 3-1: Product: syz [ 1843.004108][T12123] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1843.016455][T16384] usb 3-1: Manufacturer: syz [ 1843.025700][T16384] usb 3-1: SerialNumber: syz [ 1843.565714][T16382] usb 6-1: USB disconnect, device number 106 [ 1843.587997][T16384] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1843.596404][T16384] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1843.768051][ C1] TC_ACT_REPEAT abuse ? [ 1844.808008][ C1] TC_ACT_REPEAT abuse ? [ 1845.191533][T16354] usb 3-1: USB disconnect, device number 120 [ 1846.666670][T28632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5426'. [ 1846.767995][T28632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5426'. [ 1846.839569][T28632] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5426'. [ 1846.863104][T28632] batadv_slave_0: entered promiscuous mode [ 1846.868995][T28632] batadv_slave_0: entered allmulticast mode [ 1847.187818][T16384] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1847.497807][T16384] usb 4-1: Using ep0 maxpacket: 8 [ 1847.499838][T16384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1847.502882][T16384] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1847.502911][T16384] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1847.502934][T16384] usb 4-1: Product: syz [ 1847.502949][T16384] usb 4-1: Manufacturer: syz [ 1847.502964][T16384] usb 4-1: SerialNumber: syz [ 1847.979877][T16384] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1848.122729][T16384] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1849.397919][T16384] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1849.749073][T16384] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.792349][T16384] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1849.817146][T16384] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1849.843731][T16384] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1849.911576][T16382] usb 4-1: USB disconnect, device number 126 [ 1849.947961][T16384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.002949][T16384] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1850.137974][T16384] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1850.618835][T16366] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1850.801161][T28691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1850.960607][T16366] usb 4-1: Using ep0 maxpacket: 8 [ 1851.019114][T16366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1851.619641][T28670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.628758][T28670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.644430][T16366] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1851.665705][T16366] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1851.695077][T16366] usb 4-1: Product: syz [ 1851.754520][T16366] usb 4-1: Manufacturer: syz [ 1851.771011][T16366] usb 4-1: SerialNumber: syz [ 1851.957322][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1851.957568][ T30] audit: type=1326 audit(1767063470.811:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.061492][T28697] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1852.099347][ T30] audit: type=1326 audit(1767063470.811:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.129742][T16366] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1852.135299][ T30] audit: type=1326 audit(1767063470.811:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.161601][ T30] audit: type=1326 audit(1767063470.811:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.214347][ T30] audit: type=1326 audit(1767063470.811:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.237313][ T30] audit: type=1326 audit(1767063470.811:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.291365][T16366] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1852.391284][ T30] audit: type=1326 audit(1767063470.811:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.495303][ T30] audit: type=1326 audit(1767063470.811:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.727432][ T30] audit: type=1326 audit(1767063470.811:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1852.756727][ T30] audit: type=1326 audit(1767063470.821:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28663 comm="syz.2.5434" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1853.131898][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.139549][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.192826][T16354] usb 3-1: USB disconnect, device number 121 [ 1854.043124][T16354] usb 4-1: USB disconnect, device number 127 [ 1854.372013][T28723] netlink: 'syz.0.5441': attribute type 21 has an invalid length. [ 1854.387766][T28723] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5441'. [ 1854.417891][T28723] netlink: 'syz.0.5441': attribute type 10 has an invalid length. [ 1854.460350][T28723] bond4: (slave team0): Releasing active interface [ 1854.557917][T16354] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1854.596502][T28728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1854.609582][T28728] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1854.817855][T16354] usb 4-1: Using ep0 maxpacket: 8 [ 1854.832044][T16354] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1855.120648][T16354] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1855.308395][T16354] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1855.406864][T16354] usb 4-1: Product: syz [ 1855.426510][T16354] usb 4-1: Manufacturer: syz [ 1855.451911][T28740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5449'. [ 1855.480938][T16354] usb 4-1: SerialNumber: syz [ 1855.488781][T28737] bond3: (slave erspan0): Releasing active interface [ 1855.517810][T28742] input: syz1 as /devices/virtual/input/input133 [ 1855.606338][T28737] ip6gretap3: entered promiscuous mode [ 1855.759090][T28737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1855.850246][T16354] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1855.877864][T16354] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1856.927618][T28740] team0 (unregistering): Port device geneve0 removed [ 1857.001884][T28751] netlink: 'syz.2.5451': attribute type 13 has an invalid length. [ 1857.246866][T16366] usb 4-1: USB disconnect, device number 2 [ 1857.698375][T28761] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5452'. [ 1857.890576][T28751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.947502][T28751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1858.227415][T28754] ALSA: mixer_oss: invalid OSS volume 'u' [ 1859.717628][T16366] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1859.957803][T16366] usb 2-1: Using ep0 maxpacket: 8 [ 1859.996142][T16366] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1860.301797][T16366] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1860.369410][T16366] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1860.377504][T16366] usb 2-1: Product: syz [ 1860.385105][T28783] netlink: 'syz.2.5459': attribute type 4 has an invalid length. [ 1860.448238][T16366] usb 2-1: Manufacturer: syz [ 1860.469083][T16366] usb 2-1: SerialNumber: syz [ 1860.788133][T16366] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1860.796464][T16366] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1861.877094][T16366] usb 2-1: USB disconnect, device number 18 [ 1864.722849][T28831] netlink: 'syz.3.5469': attribute type 4 has an invalid length. [ 1865.155246][T28840] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5473'. [ 1865.367863][T16384] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1865.547941][T16384] usb 3-1: Using ep0 maxpacket: 32 [ 1865.554891][T16384] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1865.563100][T16384] usb 3-1: config 0 has no interface number 0 [ 1865.593261][T16384] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1865.605815][T16384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.617761][T16384] usb 3-1: Product: syz [ 1865.621984][T16384] usb 3-1: Manufacturer: syz [ 1865.631324][T16384] usb 3-1: SerialNumber: syz [ 1865.641789][T16384] usb 3-1: config 0 descriptor?? [ 1865.654828][T16384] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1865.668797][T16384] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1865.948258][T16384] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1866.468136][ C1] TC_ACT_REPEAT abuse ? [ 1866.505879][T28843] input: syz0 as /devices/virtual/input/input134 [ 1866.548139][T28843] netlink: 'syz.1.5474': attribute type 10 has an invalid length. [ 1866.559381][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5476'. [ 1866.568795][T28843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1867.048054][ C1] TC_ACT_REPEAT abuse ? [ 1867.835121][T16384] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 1867.853953][T16384] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 1867.869528][T16384] usb 3-1: USB disconnect, device number 122 [ 1867.876906][T16384] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 1868.117395][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5479'. [ 1868.129870][T28857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5479'. [ 1868.482409][T28868] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5487'. [ 1868.530752][T28871] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5477'. [ 1869.307010][T28876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5481'. [ 1870.012594][T28872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5478'. [ 1870.108256][T28875] team_slave_0: left promiscuous mode [ 1870.113779][T28875] team_slave_0: left allmulticast mode [ 1870.122970][T28875] team0: Port device team_slave_0 removed [ 1870.142613][T28875] team_slave_1: left promiscuous mode [ 1870.161371][T28875] team_slave_1: left allmulticast mode [ 1870.190490][T28875] team0: Port device team_slave_1 removed [ 1870.207941][T28875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.216278][T28875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.248745][T28875] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1870.736847][T28884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5483'. [ 1870.836338][T28884] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5483'. [ 1872.415363][T28905] netlink: 'syz.0.5486': attribute type 4 has an invalid length. [ 1872.988169][T16382] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1873.497927][T16382] usb 3-1: Using ep0 maxpacket: 8 [ 1873.550247][T16382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1873.600685][T16382] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1873.632741][T16382] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1873.716618][T16382] usb 3-1: Product: syz [ 1873.897248][T16382] usb 3-1: Manufacturer: syz [ 1873.902226][T16382] usb 3-1: SerialNumber: syz [ 1874.100331][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5491'. [ 1874.188878][T28925] input: syz1 as /devices/virtual/input/input135 [ 1874.338113][T16382] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1874.391038][T16382] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1875.219229][T28928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5492'. [ 1875.763258][T28940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1876.554162][T16354] usb 3-1: USB disconnect, device number 123 [ 1876.947957][T16382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1877.071372][T28956] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5498'. [ 1877.167816][T16382] usb 4-1: Using ep0 maxpacket: 8 [ 1877.186251][T16382] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1877.309428][T16382] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1877.318748][T16382] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1877.330760][T16382] usb 4-1: Product: syz [ 1877.335029][T16382] usb 4-1: Manufacturer: syz [ 1877.341160][T16382] usb 4-1: SerialNumber: syz [ 1877.697354][T16382] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1877.753350][T16382] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1878.814538][T16382] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1878.974492][T16382] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.987254][T16382] usb 2-1: config 0 has no interfaces? [ 1879.024333][T16382] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1879.043532][T16382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.070984][T16382] usb 2-1: Product: syz [ 1879.083911][T16382] usb 2-1: Manufacturer: syz [ 1879.100044][T16382] usb 2-1: SerialNumber: syz [ 1879.118531][T16382] usb 2-1: config 0 descriptor?? [ 1879.343885][T28976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1879.355361][T28976] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1879.618019][T16382] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1879.650583][T16383] usb 4-1: USB disconnect, device number 3 [ 1879.828331][T16382] usb 3-1: Using ep0 maxpacket: 8 [ 1879.851530][T16384] usb 2-1: USB disconnect, device number 19 [ 1879.914685][T16382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1879.976762][T16382] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1880.087014][T16382] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1880.108206][T16382] usb 3-1: Product: syz [ 1880.121188][T16382] usb 3-1: Manufacturer: syz [ 1880.131555][T16382] usb 3-1: SerialNumber: syz [ 1880.447948][T16382] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1880.456559][T16382] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1880.788077][T28997] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 1880.797057][T28997] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 1880.863984][T28995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5506'. [ 1880.931298][T28990] could not allocate digest TFM handle sha3-512-generic [ 1881.256901][T28995] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5506'. [ 1881.658403][T16366] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1881.837807][T16366] usb 4-1: Using ep0 maxpacket: 8 [ 1881.858526][T16366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1881.912124][T16366] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1881.948204][T16366] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1881.990727][T16366] usb 4-1: Product: syz [ 1882.002979][T16366] usb 4-1: Manufacturer: syz [ 1882.007969][T16366] usb 4-1: SerialNumber: syz [ 1882.359083][T16366] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1882.367923][T16366] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1883.084414][T16366] usb 3-1: USB disconnect, device number 124 [ 1884.015906][T29018] netlink: 'syz.1.5510': attribute type 13 has an invalid length. [ 1884.268084][T16366] usb 4-1: USB disconnect, device number 4 [ 1884.667399][T29018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1886.488086][T16382] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1886.899528][T16382] usb 3-1: Using ep0 maxpacket: 8 [ 1886.917972][T16382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1886.989498][T16382] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1887.018720][T16382] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1887.150972][T16382] usb 3-1: Product: syz [ 1887.172521][T16382] usb 3-1: Manufacturer: syz [ 1887.177427][T16382] usb 3-1: SerialNumber: syz [ 1887.649292][T16382] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1887.657655][T16382] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1888.642621][T29065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5519'. [ 1889.496941][T16354] usb 3-1: USB disconnect, device number 125 [ 1890.560724][T29084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1890.668356][T29087] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1892.588943][T29107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1892.605198][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1892.605210][ T30] audit: type=1326 audit(1767063511.461:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1892.646110][ T30] audit: type=1326 audit(1767063511.501:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1892.692947][ T30] audit: type=1326 audit(1767063511.501:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1892.971925][ T30] audit: type=1326 audit(1767063511.501:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1894.029233][T29105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.099035][ T30] audit: type=1326 audit(1767063511.501:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1894.128207][T29105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.150196][T29110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.224080][ T30] audit: type=1326 audit(1767063511.501:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1894.254068][ T30] audit: type=1326 audit(1767063511.501:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1894.337520][T29119] netlink: 'syz.3.5528': attribute type 13 has an invalid length. [ 1894.475263][ T30] audit: type=1326 audit(1767063511.501:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1894.571212][ T30] audit: type=1326 audit(1767063511.501:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1894.776483][ T30] audit: type=1326 audit(1767063511.501:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29104 comm="syz.1.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 1894.957255][T29119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1894.983444][T29119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1895.103823][T29119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1896.658077][T16354] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1896.817956][T16354] usb 6-1: Using ep0 maxpacket: 8 [ 1896.825535][T16354] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1896.852799][T16354] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1896.875164][T16354] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1896.895712][T16354] usb 6-1: Product: syz [ 1896.906003][T16354] usb 6-1: Manufacturer: syz [ 1896.916091][T16354] usb 6-1: SerialNumber: syz [ 1897.261595][T16354] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1897.277248][T16354] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1897.563154][T29154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5540'. [ 1897.587869][T16382] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1897.783739][T16382] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1897.793642][T16382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.830133][T16382] usb 3-1: Product: syz [ 1897.840127][T16382] usb 3-1: Manufacturer: syz [ 1897.855853][T16382] usb 3-1: SerialNumber: syz [ 1897.861079][T16383] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1897.918091][T16382] usb 3-1: config 0 descriptor?? [ 1898.056767][T16383] usb 4-1: Using ep0 maxpacket: 8 [ 1898.069325][T16383] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1898.115777][T16383] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1898.132834][T16382] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1898.141304][T16383] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1898.169100][T16383] usb 4-1: Product: syz [ 1898.180901][T16383] usb 4-1: Manufacturer: syz [ 1898.218948][T16383] usb 4-1: SerialNumber: syz [ 1898.306210][T29159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1898.323058][T29159] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1898.660620][T16383] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1898.669296][T16383] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1899.274355][T16354] usb 6-1: USB disconnect, device number 107 [ 1899.686118][T29166] netlink: 'syz.0.5543': attribute type 1 has an invalid length. [ 1899.702513][T29170] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1899.821291][T29166] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1899.888734][T29168] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1899.895954][T29168] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1899.945486][T29168] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1899.984403][T29166] gretap2: entered promiscuous mode [ 1899.994044][T29166] bond10: (slave gretap2): making interface the new active one [ 1900.010988][T29166] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 1900.056494][T29166] macvlan4: entered promiscuous mode [ 1900.062011][T29166] macvlan4: entered allmulticast mode [ 1900.069150][T29166] bond10: entered promiscuous mode [ 1900.075366][T29166] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1900.085630][T29166] bond10: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 1900.098005][T16382] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1900.108910][T29166] bond10: left promiscuous mode [ 1900.146658][T16382] usb 3-1: USB disconnect, device number 126 [ 1900.516879][T16354] usb 4-1: USB disconnect, device number 5 [ 1901.724795][T29180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5545'. [ 1904.932268][T29226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5551'. [ 1905.221150][T29238] netlink: 'syz.5.5550': attribute type 13 has an invalid length. [ 1906.232727][T16382] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1906.517827][T16382] usb 2-1: Using ep0 maxpacket: 8 [ 1906.525862][T16382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1906.551800][T16382] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1906.561245][T16382] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1906.773673][T16382] usb 2-1: Product: syz [ 1906.795141][T16382] usb 2-1: Manufacturer: syz [ 1906.806367][T16382] usb 2-1: SerialNumber: syz [ 1907.199711][T16382] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1907.267491][T16382] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1907.317161][T29238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.336650][T29238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.356553][T29238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1907.437921][T16354] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1907.638032][T16354] usb 4-1: Using ep0 maxpacket: 8 [ 1907.770849][T16354] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1907.830766][T16354] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1907.877744][T16354] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1907.896436][T16354] usb 4-1: Product: syz [ 1907.913304][T16354] usb 4-1: Manufacturer: syz [ 1907.920140][T16354] usb 4-1: SerialNumber: syz [ 1908.349899][T16354] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1908.369901][T16354] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1908.798295][T16382] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1908.977895][T16382] usb 3-1: Using ep0 maxpacket: 8 [ 1908.986293][T16382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1909.018621][T16382] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1909.041715][T16366] usb 2-1: USB disconnect, device number 20 [ 1909.254880][T16382] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1909.284146][T16382] usb 3-1: Product: syz [ 1909.308053][T16382] usb 3-1: Manufacturer: syz [ 1909.330501][T16382] usb 3-1: SerialNumber: syz [ 1909.690183][T16382] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1909.734348][T16382] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1910.203835][T16366] usb 4-1: USB disconnect, device number 6 [ 1911.502813][T16366] usb 3-1: USB disconnect, device number 127 [ 1912.017886][T16354] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1912.055670][T29287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5562'. [ 1912.467798][T16354] usb 6-1: Using ep0 maxpacket: 32 [ 1912.579904][T16354] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.630498][T29296] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 1912.640949][T29296] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 1912.665175][T29293] could not allocate digest TFM handle sha3-512-generic [ 1912.723599][T16354] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1912.737372][T16354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.747524][T16354] usb 6-1: Product: syz [ 1912.752476][T16354] usb 6-1: Manufacturer: syz [ 1912.967776][T16354] usb 6-1: SerialNumber: syz [ 1913.222014][T16354] usb 6-1: config 0 descriptor?? [ 1913.233090][T16354] usb 6-1: bad CDC descriptors [ 1913.253502][T16354] usb 6-1: unsupported MDLM descriptors [ 1913.578483][T29275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5565'. [ 1913.682959][T29275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5565'. [ 1913.822272][T29310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1913.829533][T29310] IPv6: NLM_F_CREATE should be set when creating new route [ 1913.958842][T16354] usb 6-1: USB disconnect, device number 108 [ 1914.572093][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.578943][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.949362][T29322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5573'. [ 1915.609540][T16354] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1915.918893][T16354] usb 2-1: Using ep0 maxpacket: 8 [ 1915.925520][T16354] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1915.965422][T16354] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1915.995217][T16354] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1916.057815][T16354] usb 2-1: Product: syz [ 1916.191957][T29329] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1916.207817][T16354] usb 2-1: Manufacturer: syz [ 1916.227811][T16354] usb 2-1: SerialNumber: syz [ 1916.360842][T29335] input: syz0 as /devices/virtual/input/input136 [ 1916.529465][T29335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1916.558921][T16354] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 1916.621004][T16354] visor 2-1:1.0: probe with driver visor failed with error -71 [ 1916.650178][T16354] usb 2-1: USB disconnect, device number 21 [ 1917.448186][ C0] TC_ACT_REPEAT abuse ? [ 1918.407936][ C0] TC_ACT_REPEAT abuse ? [ 1918.877428][T29355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1920.711760][T29381] netlink: 'syz.1.5585': attribute type 4 has an invalid length. [ 1920.721500][T29381] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1920.731377][T29381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1920.749136][T29381] unsupported nlmsg_type 40 [ 1920.766088][T29380] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1921.035115][T29385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1921.045601][T29385] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1921.927916][T16383] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1922.143836][T16383] usb 3-1: Using ep0 maxpacket: 8 [ 1922.161262][T16383] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1922.174213][T16383] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1922.188319][T16383] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1922.207135][T16383] usb 3-1: Product: syz [ 1922.218606][T16383] usb 3-1: Manufacturer: syz [ 1922.229204][T16383] usb 3-1: SerialNumber: syz [ 1922.569762][T16383] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1922.582180][T16383] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1923.093177][T29402] netlink: 'syz.1.5592': attribute type 13 has an invalid length. [ 1923.106104][T29402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1924.765244][T16354] usb 3-1: USB disconnect, device number 2 [ 1924.995718][T29411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5594'. [ 1926.080057][T16383] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1926.260739][T16383] usb 6-1: Using ep0 maxpacket: 8 [ 1926.299156][T16383] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1926.408165][T16383] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 1926.417567][T16383] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.580355][T16383] usb 6-1: config 4 has no interface number 0 [ 1926.647823][T16383] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1926.742485][T16383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.857955][T16383] usb 6-1: Product: syz [ 1927.140438][T16383] usb 6-1: Manufacturer: syz [ 1927.159751][T16383] usb 6-1: SerialNumber: syz [ 1927.818042][T29446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1927.824692][T29446] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1927.922221][T29446] vhci_hcd vhci_hcd.0: Device attached [ 1928.441077][T29447] vhci_hcd: connection closed [ 1928.442533][ T2961] vhci_hcd vhci_hcd.0: stop threads [ 1928.493463][ T2961] vhci_hcd vhci_hcd.0: release socket [ 1928.551680][T16382] usb 34-1: SetAddress Request (2) to port 0 [ 1928.565088][T16382] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1928.575166][ T2961] vhci_hcd vhci_hcd.0: disconnect device [ 1929.097862][T16384] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1929.292716][T16384] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 1929.303417][T16384] usb 4-1: config 0 has no interface number 0 [ 1929.314276][T16384] usb 4-1: config 0 interface 160 has no altsetting 0 [ 1929.350030][T16384] usb 4-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1929.437766][T16384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.446295][T16384] usb 4-1: Product: syz [ 1929.450804][T16384] usb 4-1: Manufacturer: syz [ 1929.455441][T16384] usb 4-1: SerialNumber: syz [ 1929.586139][T16384] usb 4-1: config 0 descriptor?? [ 1929.725575][T16383] uvcvideo 6-1:4.147: probe with driver uvcvideo failed with error -22 [ 1929.796955][T16383] usb 6-1: USB disconnect, device number 109 [ 1929.888993][T16384] usb-storage 4-1:0.160: USB Mass Storage device detected [ 1929.992606][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'. [ 1930.329854][T29481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5609'. [ 1930.832280][T29494] binder: 29473:29494 ioctl 4018620d 0 returned -22 [ 1931.634094][T16366] usb 4-1: USB disconnect, device number 7 [ 1932.918033][T16354] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1932.987864][T16384] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1933.109775][T16354] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1933.127840][T16354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.170910][T29505] hub 1-0:1.0: USB hub found [ 1933.179454][T29505] hub 1-0:1.0: 1 port detected [ 1933.217077][T16384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.241952][T16384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.243151][T16354] usb 2-1: config 0 descriptor?? [ 1933.364983][T16384] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1933.370631][T16354] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input137 [ 1933.392555][T16384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.554876][T16384] usb 4-1: config 0 descriptor?? [ 1933.636927][T16382] usb 34-1: device descriptor read/8, error -110 [ 1933.793206][T29510] syz.5.5615 (29510): drop_caches: 2 [ 1934.278830][T16382] usb usb34-port1: attempt power cycle [ 1934.285326][T29499] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1934.354452][T29501] input: syz0 as /devices/virtual/input/input138 [ 1934.428703][T16384] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 1934.445819][T29512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.457647][T29512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.497107][T16384] cp2112 0003:10C4:EA90.0040: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1934.625938][T16384] cp2112 0003:10C4:EA90.0040: Part Number: 0x82 Device Version: 0xFE [ 1934.826779][T16384] cp2112 0003:10C4:EA90.0040: error requesting SMBus config [ 1934.836844][T16384] cp2112 0003:10C4:EA90.0040: probe with driver cp2112 failed with error -5 [ 1934.901364][T16382] usb usb34-port1: unable to enumerate USB device [ 1935.177814][T16366] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1935.386516][T16384] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1935.390338][T16366] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.498412][T16366] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1935.567846][T16366] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1935.577109][T16366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1935.579736][T16384] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.587424][T16366] usb 3-1: SerialNumber: syz [ 1935.603171][T16384] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1935.813568][T16384] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1935.827957][T16384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.836505][T16384] usb 6-1: Product: syz [ 1935.841413][T16384] usb 6-1: Manufacturer: syz [ 1935.846273][T16384] usb 6-1: SerialNumber: syz [ 1936.178685][T29520] syzkaller0: left promiscuous mode [ 1936.184281][T29520] syzkaller0: left allmulticast mode [ 1936.198910][T29520] tipc: Enabled bearer , priority 0 [ 1936.220273][T16384] usb 6-1: 0:2 : does not exist [ 1936.225937][T16384] usb 6-1: unit 6 not found! [ 1936.614422][ T5870] usb 4-1: USB disconnect, device number 8 [ 1936.621032][T16382] usb 2-1: USB disconnect, device number 22 [ 1936.748342][T16384] usb 6-1: USB disconnect, device number 110 [ 1936.758480][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1936.796920][T25088] udevd[25088]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1936.826560][T29529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5619'. [ 1937.158540][T16383] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1937.338092][T16383] usb 2-1: Using ep0 maxpacket: 8 [ 1937.348420][T16383] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1937.361085][T16383] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1937.373707][T16383] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1937.396455][T16383] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1937.427871][T16384] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1937.456067][T16383] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1937.480543][T16383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.608022][T16384] usb 1-1: Using ep0 maxpacket: 8 [ 1937.619894][T16384] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1937.688480][T16384] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1937.743005][T16384] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1937.758670][T16384] usb 1-1: Product: syz [ 1937.770344][T16384] usb 1-1: Manufacturer: syz [ 1937.784385][T16384] usb 1-1: SerialNumber: syz [ 1937.796121][T16383] usb 2-1: GET_CAPABILITIES returned 0 [ 1937.803258][T16383] usbtmc 2-1:16.0: can't read capabilities [ 1938.023574][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1938.168352][T16384] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 1938.188234][T16384] visor 1-1:1.0: probe with driver visor failed with error -110 [ 1938.239569][ T5870] usb 2-1: USB disconnect, device number 23 [ 1938.455542][T16366] usb 3-1: 0:2 : does not exist [ 1938.535965][T16366] usb 3-1: USB disconnect, device number 3 [ 1938.964608][T29559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5627'. [ 1939.368526][T16384] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1939.828299][T16384] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1939.852868][T16384] usb 2-1: config 1 has no interface number 0 [ 1939.871069][T16384] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1939.913262][T16384] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1939.923416][T16384] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.940099][T16384] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1939.949637][T16384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.957624][T16384] usb 2-1: Product: syz [ 1939.963746][T16384] usb 2-1: Manufacturer: syz [ 1939.981154][T16384] usb 2-1: SerialNumber: syz [ 1940.028879][T29559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1940.141755][T16366] usb 1-1: USB disconnect, device number 16 [ 1940.453868][T16384] usb 2-1: Error in usbnet_get_endpoints (-71) [ 1940.498551][T16384] usb 2-1: USB disconnect, device number 24 [ 1940.639253][T29569] binder: 29568:29569 ioctl c0306201 80000640 returned -22 [ 1940.958704][T29580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5632'. [ 1941.030877][T29581] xfrm0: entered promiscuous mode [ 1941.054662][T29581] xfrm0: entered allmulticast mode [ 1942.856724][T29602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5638'. [ 1942.968092][T16383] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1943.129919][T16383] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 1943.139350][T16383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.240810][T16384] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1943.260990][T16383] usb 3-1: config 0 descriptor?? [ 1943.270019][T16383] sisusb 3-1:0.0: Invalid USB2VGA device [ 1943.278275][T16383] sisusb 3-1:0.0: probe with driver sisusb failed with error -22 [ 1943.420433][T16384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 1943.431949][T16384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58368, setting to 1024 [ 1943.458012][T16384] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1943.499146][T29611] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5640'. [ 1943.510323][T29611] syzkaller1: entered promiscuous mode [ 1943.515821][T29611] syzkaller1: entered allmulticast mode [ 1943.528294][T16384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.540040][T16384] usb 4-1: config 0 descriptor?? [ 1943.611633][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1943.611645][ T30] audit: type=1326 audit(1767063562.471:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29595 comm="syz.2.5637" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x0 [ 1944.088158][T16384] hid-steam 0003:28DE:1142.0041: item fetching failed at offset 4/5 [ 1944.097374][T16384] hid-steam 0003:28DE:1142.0041: steam_probe:parse of hid interface failed [ 1944.502502][T16384] hid-steam 0003:28DE:1142.0041: probe with driver hid-steam failed with error -22 [ 1944.561531][T16384] usb 4-1: USB disconnect, device number 9 [ 1945.229751][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1945.568594][T16366] usb 3-1: USB disconnect, device number 4 [ 1946.338313][T16384] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1946.477848][T16384] usb 3-1: device descriptor read/64, error -71 [ 1946.779704][T16384] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1946.819778][T29652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5650'. [ 1946.927861][T16384] usb 3-1: device descriptor read/64, error -71 [ 1947.048049][T16384] usb usb3-port1: attempt power cycle [ 1947.331714][T16382] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1947.419641][T16384] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1947.481068][T16384] usb 3-1: device descriptor read/8, error -71 [ 1947.521251][T16382] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1947.549445][T16382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.597034][T16382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 1947.645299][T16382] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1947.677301][T16382] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1947.757888][T16384] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1947.773389][T16383] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1947.788042][T16382] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1947.797140][T16382] usb 1-1: Manufacturer: syz [ 1947.802642][T16384] usb 3-1: device descriptor read/8, error -71 [ 1947.820008][T16382] usb 1-1: config 0 descriptor?? [ 1947.829735][T29657] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1947.918930][T16384] usb usb3-port1: unable to enumerate USB device [ 1947.937832][T16383] usb 2-1: Using ep0 maxpacket: 8 [ 1947.950963][T16383] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1947.968876][T16383] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1947.999492][T16383] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1948.026734][T16383] usb 2-1: Product: syz [ 1948.041039][T16383] usb 2-1: Manufacturer: syz [ 1948.061197][T16383] usb 2-1: SerialNumber: syz [ 1948.268969][T16382] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 1948.282907][T16382] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1948.388229][T16383] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1948.396678][T16383] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1948.753485][T29677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1949.044001][T29680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1949.492170][T29686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1949.510717][T29686] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1949.758188][T16366] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 1950.312245][T16383] usb 2-1: USB disconnect, device number 25 [ 1951.080489][ T5870] usb 1-1: USB disconnect, device number 17 [ 1952.817890][T16382] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1952.908081][ T5870] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1953.027794][T16382] usb 2-1: device descriptor read/64, error -71 [ 1953.135650][ T5870] usb 3-1: config 0 has no interfaces? [ 1953.151123][ T5870] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1953.188013][T29728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5667'. [ 1953.217378][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.226934][T29728] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5667'. [ 1953.270324][ T5870] usb 3-1: Product: syz [ 1953.274501][ T5870] usb 3-1: Manufacturer: syz [ 1953.277921][T16382] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1953.292150][ T5870] usb 3-1: SerialNumber: syz [ 1953.320871][ T5870] usb 3-1: config 0 descriptor?? [ 1953.417901][T16382] usb 2-1: device descriptor read/64, error -71 [ 1953.548028][T16382] usb usb2-port1: attempt power cycle [ 1953.681522][T29730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1953.692656][T29730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1953.907875][T16382] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1953.939279][T16382] usb 2-1: device descriptor read/8, error -71 [ 1954.199678][T16382] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1954.229217][T16382] usb 2-1: device descriptor read/8, error -71 [ 1954.340903][T16382] usb usb2-port1: unable to enumerate USB device [ 1955.438444][ T5870] usb 3-1: USB disconnect, device number 9 [ 1955.883729][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5674'. [ 1956.057315][T29754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5674'. [ 1956.677884][T16382] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1956.827992][T16382] usb 6-1: Using ep0 maxpacket: 8 [ 1956.858958][T16382] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1956.879540][T16382] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1956.890867][T16382] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1956.917765][T16382] usb 6-1: Product: syz [ 1956.947877][T16382] usb 6-1: Manufacturer: syz [ 1956.952679][T16382] usb 6-1: SerialNumber: syz [ 1957.139324][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1957.219404][T29772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5678'. [ 1957.254142][T29772] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5678'. [ 1957.304347][T29767] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1957.360351][T16382] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1957.369755][T16382] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1957.994406][T29778] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1959.053102][ T5870] usb 6-1: USB disconnect, device number 111 [ 1959.099959][T16382] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1959.247839][T16382] usb 4-1: device descriptor read/64, error -71 [ 1959.928025][T16382] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1960.033675][T29794] netlink: 'syz.2.5683': attribute type 4 has an invalid length. [ 1960.098010][T16382] usb 4-1: device descriptor read/64, error -71 [ 1960.218553][T16382] usb usb4-port1: attempt power cycle [ 1960.406678][T29797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5684'. [ 1960.462219][T29797] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5684'. [ 1960.597993][T16382] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1960.653195][T16382] usb 4-1: device descriptor read/8, error -71 [ 1960.789631][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1960.917933][T16382] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1960.939119][T16382] usb 4-1: device descriptor read/8, error -71 [ 1961.048284][T16382] usb usb4-port1: unable to enumerate USB device [ 1961.058310][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 1961.070923][ T5870] usb 2-1: config 0 has no interfaces? [ 1961.081729][ T5870] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1961.092829][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1961.102106][ T5870] usb 2-1: Product: syz [ 1961.106419][ T5870] usb 2-1: Manufacturer: syz [ 1961.111934][ T5870] usb 2-1: SerialNumber: syz [ 1961.126214][ T5870] usb 2-1: config 0 descriptor?? [ 1961.474411][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5688'. [ 1961.485311][T29810] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5688'. [ 1962.502102][T16382] usb 2-1: USB disconnect, device number 30 [ 1962.677975][T16366] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1962.897856][T16366] usb 4-1: Using ep0 maxpacket: 8 [ 1962.929011][T16366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1962.960488][T16366] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1962.970256][T16366] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1962.984999][T16366] usb 4-1: Product: syz [ 1962.989726][T16366] usb 4-1: Manufacturer: syz [ 1962.994676][T16366] usb 4-1: SerialNumber: syz [ 1963.328687][T16366] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1963.363650][T16366] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1963.432791][T29827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5691'. [ 1963.468868][T29827] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5691'. [ 1964.953323][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5696'. [ 1965.769007][T29846] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5696'. [ 1966.122804][T16366] usb 4-1: USB disconnect, device number 14 [ 1966.880471][T16382] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1967.047904][T16382] usb 4-1: device descriptor read/64, error -71 [ 1967.338991][T16382] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1967.397869][T16384] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1967.478913][T16382] usb 4-1: device descriptor read/64, error -71 [ 1967.563798][T29874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1967.574467][T29874] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1967.583665][T16384] usb 6-1: Using ep0 maxpacket: 32 [ 1967.594520][T16384] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 1967.603701][T16382] usb usb4-port1: attempt power cycle [ 1967.610219][T16384] usb 6-1: config 0 has no interface number 0 [ 1967.616732][T16384] usb 6-1: config 0 interface 23 has no altsetting 0 [ 1967.627905][T16384] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1967.647379][T16384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.718775][T16384] usb 6-1: Product: syz [ 1967.738819][T16384] usb 6-1: Manufacturer: syz [ 1967.749506][T16384] usb 6-1: SerialNumber: syz [ 1967.764043][T16384] usb 6-1: config 0 descriptor?? [ 1967.997872][T16382] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1968.018568][T16382] usb 4-1: device descriptor read/8, error -71 [ 1968.257884][T16382] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1968.278622][T16382] usb 4-1: device descriptor read/8, error -71 [ 1968.398476][T16382] usb usb4-port1: unable to enumerate USB device [ 1969.030804][T29887] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 1969.030804][T29887] program syz.0.5704 not setting count and/or reply_len properly [ 1969.090533][T29887] kernel profiling enabled (shift: 6) [ 1969.941021][T16384] usb 6-1: USB disconnect, device number 112 [ 1970.155243][T29898] nftables ruleset with unbound chain [ 1970.288062][ T30] audit: type=1326 audit(1767063589.131:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1970.334873][ T30] audit: type=1326 audit(1767063589.131:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1970.412452][ T30] audit: type=1326 audit(1767063589.131:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1970.538016][ T30] audit: type=1326 audit(1767063589.131:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1970.681482][T29909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5708'. [ 1970.724960][ T30] audit: type=1326 audit(1767063589.131:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1970.749384][T29906] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5708'. [ 1971.124898][T29916] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1971.192049][ T30] audit: type=1326 audit(1767063589.131:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1971.527935][T16382] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1971.712807][ T30] audit: type=1326 audit(1767063589.131:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1971.737773][ T30] audit: type=1326 audit(1767063589.131:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1971.766357][ T30] audit: type=1326 audit(1767063589.131:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1971.850050][T16382] usb 2-1: Using ep0 maxpacket: 8 [ 1971.862173][T16382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1971.880909][T16382] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1971.890988][T16382] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1971.902104][T16382] usb 2-1: Product: syz [ 1971.923108][T16382] usb 2-1: Manufacturer: syz [ 1971.941547][ T30] audit: type=1326 audit(1767063589.131:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29897 comm="syz.5.5707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1971.964584][T16382] usb 2-1: SerialNumber: syz [ 1972.298534][T16382] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1972.319772][T16382] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1972.617804][T16366] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1972.767911][T16366] usb 4-1: Using ep0 maxpacket: 8 [ 1972.806249][T16366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1972.904654][T16366] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1972.926743][T16366] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1972.993666][T16366] usb 4-1: Product: syz [ 1973.166150][T16366] usb 4-1: Manufacturer: syz [ 1973.184592][T16366] usb 4-1: SerialNumber: syz [ 1973.547968][T16366] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1973.563960][T16366] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1973.638205][ T5870] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1973.993405][T29940] libceph: resolve '. [ 1973.993405][T29940] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 1973.993405][T29940] ' (ret=-3): failed [ 1974.727945][T16382] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1974.770550][T16384] usb 2-1: USB disconnect, device number 31 [ 1974.958913][T16382] usb 6-1: Using ep0 maxpacket: 8 [ 1974.985137][T16382] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1975.027488][T16382] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1975.036822][T16382] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1975.062601][T16382] usb 6-1: Product: syz [ 1975.075943][T16382] usb 6-1: Manufacturer: syz [ 1975.091321][T16382] usb 6-1: SerialNumber: syz [ 1975.399194][T16366] usb 4-1: USB disconnect, device number 19 [ 1975.418060][T16382] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 1975.440378][T16382] visor 6-1:1.0: probe with driver visor failed with error -110 [ 1976.024407][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.031442][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.900695][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1976.921340][ T5870] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1976.941410][ T5870] usb 1-1: can't read configurations, error -71 [ 1977.172279][T29973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1977.246950][T29974] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1977.360943][T16382] usb 6-1: USB disconnect, device number 113 [ 1978.213296][T29984] netlink: 'syz.0.5723': attribute type 4 has an invalid length. [ 1979.104866][T29994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5726'. [ 1979.388020][T16383] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1979.547862][T16383] usb 4-1: Using ep0 maxpacket: 32 [ 1979.554659][T16383] usb 4-1: config 0 has an invalid interface number: 19 but max is 0 [ 1979.564051][T16383] usb 4-1: config 0 has no interface number 0 [ 1979.575556][T16383] usb 4-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1979.596736][T16383] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 1979.617606][T16383] usb 4-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1979.643519][T16383] usb 4-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 1979.667313][T16383] usb 4-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1979.698482][T16383] usb 4-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1979.724814][T16383] usb 4-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 1979.747974][T16383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.760193][T16383] usb 4-1: Product: syz [ 1979.768184][T16383] usb 4-1: Manufacturer: syz [ 1979.777894][T16383] usb 4-1: SerialNumber: syz [ 1979.789600][T16383] usb 4-1: config 0 descriptor?? [ 1979.828549][T29994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1979.835930][T29994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1979.866215][T16383] ipaq 4-1:0.19: PocketPC PDA converter detected [ 1979.878283][T16383] usb 4-1: active config #0 != 1 ?? [ 1979.917893][ T5870] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1980.228232][ T5870] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1980.338652][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1980.348018][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.356269][ T5870] usb 1-1: Product: syz [ 1980.368292][ T5870] usb 1-1: Manufacturer: syz [ 1980.373032][ T5870] usb 1-1: SerialNumber: syz [ 1980.416754][T16366] usb 4-1: USB disconnect, device number 20 [ 1981.199078][T30017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5733'. [ 1981.597075][ T5870] cdc_ncm 1-1:1.0: bind() failure [ 1981.718969][ T5870] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1981.799674][T30001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1981.809981][T30001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.818007][ T5870] cdc_ncm 1-1:1.1: bind() failure [ 1981.869217][T30001] macvlan0: left promiscuous mode [ 1981.874506][T30001] netlink: 'syz.0.5728': attribute type 1 has an invalid length. [ 1981.882775][T30001] netlink: 'syz.0.5728': attribute type 2 has an invalid length. [ 1981.914162][ T5870] usb 1-1: USB disconnect, device number 20 [ 1982.644046][T30030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5735'. [ 1982.724699][T30030] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5735'. [ 1984.314986][T30055] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x33424752, 2, 0, 0, 0) [ 1984.909339][T30058] syzkaller0: entered promiscuous mode [ 1984.914966][T30058] syzkaller0: entered allmulticast mode [ 1985.095059][T30061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5743'. [ 1985.195238][T30061] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5743'. [ 1985.286555][T30066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1985.296427][T30066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1987.712196][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1987.712208][ T30] audit: type=1326 audit(1767063606.571:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1987.755621][ T30] audit: type=1326 audit(1767063606.601:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1987.834559][ T30] audit: type=1326 audit(1767063606.601:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1987.995036][ T30] audit: type=1326 audit(1767063606.601:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1988.260129][ T30] audit: type=1326 audit(1767063606.601:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1988.331721][ T30] audit: type=1326 audit(1767063606.601:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1988.727928][ T30] audit: type=1326 audit(1767063606.601:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1988.751600][T30094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5750'. [ 1988.812170][T30094] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5750'. [ 1988.835417][ T30] audit: type=1326 audit(1767063606.601:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1988.865824][ T30] audit: type=1326 audit(1767063606.601:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1988.892023][ T30] audit: type=1326 audit(1767063606.601:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30073 comm="syz.2.5746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1989.438622][T30107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1989.482474][T30107] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1990.348817][T30115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1993.663337][T30153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5767'. [ 1994.551519][T30165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5768'. [ 1994.560765][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1994.560782][ T30] audit: type=1326 audit(1767063613.411:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1994.718063][ T30] audit: type=1326 audit(1767063613.411:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1994.760525][ T30] audit: type=1326 audit(1767063613.411:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1994.838338][ T30] audit: type=1326 audit(1767063613.411:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1994.935855][ T30] audit: type=1326 audit(1767063613.411:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1995.002558][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1995.017960][T16383] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1995.026868][T30172] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1995.088316][ T30] audit: type=1326 audit(1767063613.411:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1995.237965][T16383] usb 4-1: Using ep0 maxpacket: 16 [ 1995.278066][ T30] audit: type=1326 audit(1767063613.411:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1995.308206][ T30] audit: type=1326 audit(1767063613.411:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1995.358949][ T30] audit: type=1326 audit(1767063613.411:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1995.382054][ T30] audit: type=1326 audit(1767063613.411:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.5.5768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1995.404586][T16383] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1995.415823][T16383] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1995.425738][T16383] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1995.436734][T16383] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1995.457100][T16383] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1995.479338][T16383] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1995.495293][T16383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1995.505334][T16383] usb 4-1: SerialNumber: syz [ 1995.520366][T30168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1995.531433][T16383] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1995.540578][T16383] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 1997.927474][T16383] usb 4-1: USB disconnect, device number 21 [ 1998.422513][T30218] netlink: 'syz.3.5778': attribute type 10 has an invalid length. [ 1998.471712][T30218] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1998.571634][T30218] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1998.583726][T30218] bond8: (slave macvlan3): Enslaving as a backup interface with an up link [ 1998.687864][T17729] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1998.788165][T17729] bond8: (slave macvlan3): link status up again after 0 ms [ 1998.797342][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 1998.844918][T17729] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1998.948448][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 1999.068175][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 1999.178459][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 1999.287915][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 1999.721892][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 1999.890435][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2000.218729][T30234] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 2000.225455][T30234] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2000.253859][T30234] vhci_hcd vhci_hcd.0: Device attached [ 2000.270444][T30234] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(15) [ 2000.277156][T30234] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2000.287101][T30234] vhci_hcd vhci_hcd.0: Device attached [ 2000.492468][T30249] Failed to get privilege flags for destination (handle=0x2:0x25) [ 2000.659156][T30251] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(17) [ 2000.665798][T30251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2000.706898][T30251] vhci_hcd vhci_hcd.0: Device attached [ 2000.717880][T16382] usb 44-1: SetAddress Request (2) to port 0 [ 2000.730543][T16382] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2000.860858][T30234] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(20) [ 2000.867498][T30234] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2000.875066][T30251] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(22) [ 2000.881690][T30251] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2000.914772][T30251] vhci_hcd vhci_hcd.0: Device attached [ 2000.957904][T30234] vhci_hcd vhci_hcd.0: Device attached [ 2001.502881][T30256] vhci_hcd: connection closed [ 2001.503383][T30243] vhci_hcd: connection closed [ 2001.503392][T17395] vhci_hcd vhci_hcd.5: stop threads [ 2001.503429][T17395] vhci_hcd vhci_hcd.5: release socket [ 2001.518003][T30257] vhci_hcd: connection closed [ 2001.518818][T30252] vhci_hcd: connection closed [ 2001.533726][T30237] vhci_hcd: connection reset by peer [ 2001.546919][T17395] vhci_hcd vhci_hcd.5: disconnect device [ 2001.554082][T17395] vhci_hcd vhci_hcd.5: stop threads [ 2001.565742][T17395] vhci_hcd vhci_hcd.5: release socket [ 2001.585389][T17395] vhci_hcd vhci_hcd.5: disconnect device [ 2001.641332][T17395] vhci_hcd vhci_hcd.5: stop threads [ 2001.652697][T17395] vhci_hcd vhci_hcd.5: release socket [ 2001.658524][T17395] vhci_hcd vhci_hcd.5: disconnect device [ 2001.687908][T17395] vhci_hcd vhci_hcd.5: stop threads [ 2001.693176][T17395] vhci_hcd vhci_hcd.5: release socket [ 2001.747990][T17395] vhci_hcd vhci_hcd.5: disconnect device [ 2001.763816][T17395] vhci_hcd vhci_hcd.5: stop threads [ 2001.773943][T17395] vhci_hcd vhci_hcd.5: release socket [ 2001.781694][T17395] vhci_hcd vhci_hcd.5: disconnect device [ 2002.147872][T30206] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2002.588056][T30267] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 2002.648054][T30206] usb 4-1: Using ep0 maxpacket: 8 [ 2002.845335][T30206] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2002.890273][T30206] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2002.909777][T30206] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2002.956247][T30206] usb 4-1: Product: syz [ 2002.961083][T30206] usb 4-1: Manufacturer: syz [ 2002.969978][T30206] usb 4-1: SerialNumber: syz [ 2003.159475][T30267] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 2003.169795][T30267] usb 3-1: config 0 has no interface number 0 [ 2003.176426][T30267] usb 3-1: config 0 interface 113 has no altsetting 0 [ 2003.200540][T30267] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2003.228566][T30267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.236655][T30267] usb 3-1: Product: syz [ 2003.241207][T30206] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 2003.258169][T30206] visor 4-1:1.0: probe with driver visor failed with error -71 [ 2003.292290][T30267] usb 3-1: Manufacturer: syz [ 2003.308879][T30206] usb 4-1: USB disconnect, device number 22 [ 2003.314925][T30267] usb 3-1: SerialNumber: syz [ 2003.335789][T30267] usb 3-1: config 0 descriptor?? [ 2003.354866][T30267] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2003.585245][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5790'. [ 2003.610347][T30285] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5790'. [ 2003.738574][T11961] net_ratelimit: 27 callbacks suppressed [ 2003.738605][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2003.859523][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2003.986141][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2004.101378][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2004.248159][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2004.414365][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2004.551653][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2004.677826][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2004.787972][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2004.909231][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2005.715576][ T5870] usb 3-1: USB disconnect, device number 10 [ 2005.848011][T16382] usb 44-1: device descriptor read/8, error -110 [ 2006.047552][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2006.047584][ T30] audit: type=1326 audit(1767063624.901:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30301 comm="syz.2.5795" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb5539 code=0x0 [ 2006.075388][T16383] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2006.782208][T30317] can: request_module (can-proto-3) failed. [ 2006.858325][T30267] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2007.159195][T16382] usb usb44-port1: attempt power cycle [ 2007.177823][T30267] usb 6-1: Using ep0 maxpacket: 8 [ 2007.185310][T30267] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2007.200273][T30267] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2007.270332][T30267] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2007.286449][T30267] usb 6-1: Product: syz [ 2007.297441][T30267] usb 6-1: Manufacturer: syz [ 2007.412448][T30267] usb 6-1: SerialNumber: syz [ 2007.804713][T30267] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 2007.834632][T16382] usb usb44-port1: unable to enumerate USB device [ 2007.846386][T30267] visor 6-1:1.0: probe with driver visor failed with error -110 [ 2007.870759][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'. [ 2007.889873][T30323] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5799'. [ 2008.267844][T16382] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2008.417806][T16382] usb 4-1: Using ep0 maxpacket: 8 [ 2008.428108][T16382] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2008.444201][T16382] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2008.453782][T16382] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2008.462323][T16382] usb 4-1: Product: syz [ 2008.466651][T16382] usb 4-1: Manufacturer: syz [ 2008.473773][T16382] usb 4-1: SerialNumber: syz [ 2008.808508][T16382] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 2008.857634][T17395] net_ratelimit: 28 callbacks suppressed [ 2008.857657][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2008.888429][T16382] visor 4-1:1.0: probe with driver visor failed with error -110 [ 2009.028131][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.138049][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.248024][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.358124][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.411838][ T5870] usb 6-1: USB disconnect, device number 114 [ 2009.468886][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.578493][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.688455][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.745684][T30342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5803'. [ 2009.757652][T30342] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5803'. [ 2009.814918][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2009.960555][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2010.088021][T16382] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2010.240513][T16382] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2010.253377][T16382] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 2010.290567][T16382] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2010.309262][T16382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.380411][T16382] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2010.396930][T16382] usb 1-1: invalid MIDI out EP 0 [ 2010.544505][T30169] udevd[30169]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2010.569588][T16382] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2010.934303][T30267] usb 4-1: USB disconnect, device number 23 [ 2010.947882][T16382] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2011.107818][T16382] usb 3-1: Using ep0 maxpacket: 8 [ 2011.157131][T16382] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.168285][T16382] usb 3-1: config 0 has no interfaces? [ 2011.179162][T16382] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2011.188949][T16382] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2011.197489][T16382] usb 3-1: Product: syz [ 2011.203070][T16382] usb 3-1: Manufacturer: syz [ 2011.208124][T16382] usb 3-1: SerialNumber: syz [ 2011.216967][T16382] usb 3-1: config 0 descriptor?? [ 2011.435588][T16382] usb 3-1: USB disconnect, device number 11 [ 2012.034530][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5806'. [ 2012.046134][T30353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5806'. [ 2012.699698][T30267] usb 1-1: USB disconnect, device number 21 [ 2013.997834][T12123] net_ratelimit: 30 callbacks suppressed [ 2013.997860][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2014.194053][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2014.317832][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2014.567320][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2014.688251][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2014.803179][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2014.928039][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2015.052005][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2015.168920][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2015.394084][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2016.189859][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5815'. [ 2016.261196][T30402] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5815'. [ 2017.086466][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5817'. [ 2017.106254][T30408] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5817'. [ 2017.789080][T30420] netlink: 'syz.3.5821': attribute type 4 has an invalid length. [ 2018.118307][T16366] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2018.288226][T16366] usb 4-1: Using ep0 maxpacket: 8 [ 2018.298211][T16366] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2018.313648][T16366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.340340][T16366] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2018.350481][T16366] pvrusb2: ********** [ 2018.356356][T16366] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2018.373961][T16366] pvrusb2: Important functionality might not be entirely working. [ 2018.387025][T16366] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2018.405329][T16366] pvrusb2: ********** [ 2018.652512][ T2345] pvrusb2: Invalid write control endpoint [ 2018.715459][ T2345] pvrusb2: Invalid write control endpoint [ 2018.725659][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2018.738947][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2018.746624][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2018.757347][ T2345] pvrusb2: Device being rendered inoperable [ 2018.769999][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 2018.780429][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2018.814225][ T2345] pvrusb2: Attached sub-driver cx25840 [ 2018.820320][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2018.831278][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2019.038235][T17729] net_ratelimit: 27 callbacks suppressed [ 2019.038259][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2019.167854][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2019.277852][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2019.408319][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2019.517845][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2019.637191][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2019.767857][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2019.889238][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2020.072064][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2020.278098][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2020.718252][T16366] usb 4-1: USB disconnect, device number 24 [ 2022.267415][T30462] misc userio: Invalid payload size [ 2022.607820][T16366] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2022.691436][T30469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5831'. [ 2022.703345][T30469] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5831'. [ 2022.774922][T16366] usb 1-1: Using ep0 maxpacket: 8 [ 2022.799022][T16366] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.857822][T16366] usb 1-1: config 0 has no interfaces? [ 2022.972054][T16366] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2023.014350][T16366] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2023.027682][T16366] usb 1-1: Product: syz [ 2023.034326][T16366] usb 1-1: Manufacturer: syz [ 2023.063981][T16366] usb 1-1: SerialNumber: syz [ 2023.093547][T16366] usb 1-1: config 0 descriptor?? [ 2023.397525][ T5870] usb 1-1: USB disconnect, device number 22 [ 2024.164939][ T2961] net_ratelimit: 23 callbacks suppressed [ 2024.164960][ T2961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2024.489568][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2024.505543][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5832'. [ 2024.530513][T30489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5832'. [ 2024.681874][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2024.696070][T30492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5835'. [ 2024.853877][ T2961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2025.229121][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2025.361136][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2025.497944][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2025.610389][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2025.737982][ T2961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2025.958058][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2027.772856][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5843'. [ 2027.848754][T30526] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5843'. [ 2028.925882][T30535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5845'. [ 2029.007841][ T30] audit: type=1326 audit(1767063647.851:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30532 comm="syz.3.5844" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb5539 code=0x0 [ 2029.380275][T17729] net_ratelimit: 22 callbacks suppressed [ 2029.380291][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2029.568156][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2029.677922][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2030.002639][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2030.118211][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2030.229575][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2030.237892][T16366] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2030.413265][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2030.568062][T16366] usb 3-1: Using ep0 maxpacket: 16 [ 2030.706125][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2030.795733][T16366] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.827350][T16366] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2030.847475][T16366] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2030.918040][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2030.931282][T16366] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 2030.961884][T16366] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2031.011394][T16366] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2031.028360][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2031.042351][T30560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5850'. [ 2031.055819][T30560] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5850'. [ 2031.070934][T16366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2031.115477][T16366] usb 3-1: SerialNumber: syz [ 2031.145530][T30547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2031.230563][T16366] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 2031.241472][T16366] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 2031.809361][T30569] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 2031.816002][T30569] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2031.851124][T30569] vhci_hcd vhci_hcd.0: Device attached [ 2031.880935][T30572] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 2031.887576][T30572] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2031.968157][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5853'. [ 2031.979650][T30581] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5853'. [ 2032.009495][T30572] vhci_hcd vhci_hcd.0: Device attached [ 2032.021985][T30569] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(18) [ 2032.028703][T30569] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2032.076155][T30569] vhci_hcd vhci_hcd.0: Device attached [ 2032.124694][T30569] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 2032.131337][T30569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2032.139241][T16366] usb 34-1: SetAddress Request (6) to port 0 [ 2032.145321][T16366] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2032.469821][T30569] vhci_hcd vhci_hcd.0: Device attached [ 2032.514319][T30572] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(22) [ 2032.520965][T30572] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2032.531228][T30572] vhci_hcd vhci_hcd.0: Device attached [ 2032.796038][T30586] vhci_hcd: connection closed [ 2032.796440][T30584] vhci_hcd: connection closed [ 2032.801825][T30582] vhci_hcd: connection closed [ 2032.808192][T30578] vhci_hcd: connection closed [ 2032.815885][T30573] vhci_hcd: connection reset by peer [ 2032.846487][ T60] vhci_hcd vhci_hcd.0: stop threads [ 2032.852280][ T60] vhci_hcd vhci_hcd.0: release socket [ 2032.978839][T30206] usb 3-1: USB disconnect, device number 12 [ 2033.201033][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 2033.209126][ T60] vhci_hcd vhci_hcd.0: stop threads [ 2033.220142][ T60] vhci_hcd vhci_hcd.0: release socket [ 2033.241891][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 2033.335850][ T60] vhci_hcd vhci_hcd.0: stop threads [ 2033.361958][ T60] vhci_hcd vhci_hcd.0: release socket [ 2033.372103][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 2033.397885][ T60] vhci_hcd vhci_hcd.0: stop threads [ 2033.406069][ T60] vhci_hcd vhci_hcd.0: release socket [ 2033.411858][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 2033.436178][ T60] vhci_hcd vhci_hcd.0: stop threads [ 2033.442961][ T60] vhci_hcd vhci_hcd.0: release socket [ 2033.452427][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 2033.501453][T30598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5855'. [ 2034.465908][T12123] net_ratelimit: 27 callbacks suppressed [ 2034.465924][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2034.598269][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2034.727502][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2034.847985][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2034.918219][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5859'. [ 2034.984962][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2035.098326][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2035.218347][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2035.368077][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2035.477978][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2035.599685][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2037.208187][T16366] usb 34-1: device descriptor read/8, error -110 [ 2037.424999][ T5870] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2037.453373][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.459789][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.539020][T16366] usb usb34-port1: attempt power cycle [ 2038.888058][T30206] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 2039.208603][T16366] usb usb34-port1: unable to enumerate USB device [ 2039.280574][T30206] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 2039.428000][T30206] usb 6-1: config 0 has no interface number 0 [ 2039.436108][T30206] usb 6-1: config 0 interface 113 has no altsetting 0 [ 2039.485593][T30206] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2039.538839][ T60] net_ratelimit: 30 callbacks suppressed [ 2039.538854][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2039.560965][T30206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.610638][T30267] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2039.626127][T30206] usb 6-1: Product: syz [ 2039.658699][T30206] usb 6-1: Manufacturer: syz [ 2039.669191][T30206] usb 6-1: SerialNumber: syz [ 2039.710003][T30206] usb 6-1: config 0 descriptor?? [ 2039.736013][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2039.787829][T30267] usb 1-1: Using ep0 maxpacket: 16 [ 2039.800385][T30267] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2039.811481][T30267] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2039.821723][T30267] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2039.840670][T30206] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2039.857860][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2039.879781][T30267] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 2039.929472][T30267] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2039.978160][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2040.020339][T30267] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2040.041776][T30267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2040.073364][T30267] usb 1-1: SerialNumber: syz [ 2040.101099][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2040.110332][T30652] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2040.178726][T30267] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 2040.200472][T30267] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 2040.238353][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2040.368877][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2040.548151][ T1154] bond8: (slave macvlan3): failed to get link speed/duplex [ 2040.668726][T30656] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 2040.675359][T30656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2040.688002][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2040.713964][T30656] vhci_hcd vhci_hcd.0: Device attached [ 2040.753962][T30659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 2040.760596][T30659] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2040.795238][T30659] vhci_hcd vhci_hcd.0: Device attached [ 2040.808165][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2040.890289][T30656] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 2040.897277][T30656] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2040.948819][T30656] vhci_hcd vhci_hcd.0: Device attached [ 2040.972817][T30659] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(20) [ 2040.979648][T30659] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2040.993179][T30659] vhci_hcd vhci_hcd.0: Device attached [ 2041.000409][T30656] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 2041.007042][T30656] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2041.017928][T30267] usb 38-1: SetAddress Request (6) to port 0 [ 2041.030046][T30267] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2041.070538][T30656] vhci_hcd vhci_hcd.0: Device attached [ 2041.390933][T30666] vhci_hcd: connection closed [ 2041.391091][ T1154] vhci_hcd vhci_hcd.2: stop threads [ 2041.401393][ T1154] vhci_hcd vhci_hcd.2: release socket [ 2041.409774][T30664] vhci_hcd: connection closed [ 2041.410147][T30662] vhci_hcd: connection closed [ 2041.415120][T30660] vhci_hcd: connection closed [ 2041.420475][T30657] vhci_hcd: connection reset by peer [ 2041.432006][ T1154] vhci_hcd vhci_hcd.2: disconnect device [ 2041.440802][ T1154] vhci_hcd vhci_hcd.2: stop threads [ 2041.450874][ T1154] vhci_hcd vhci_hcd.2: release socket [ 2041.457016][ T1154] vhci_hcd vhci_hcd.2: disconnect device [ 2041.463700][ T1154] vhci_hcd vhci_hcd.2: stop threads [ 2041.470350][ T1154] vhci_hcd vhci_hcd.2: release socket [ 2041.476076][ T1154] vhci_hcd vhci_hcd.2: disconnect device [ 2041.482029][ T1154] vhci_hcd vhci_hcd.2: stop threads [ 2041.487271][ T1154] vhci_hcd vhci_hcd.2: release socket [ 2041.493745][ T1154] vhci_hcd vhci_hcd.2: disconnect device [ 2041.499904][ T1154] vhci_hcd vhci_hcd.2: stop threads [ 2041.505145][ T1154] vhci_hcd vhci_hcd.2: release socket [ 2041.510814][ T1154] vhci_hcd vhci_hcd.2: disconnect device [ 2042.019902][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5870'. [ 2042.163635][T16366] usb 6-1: USB disconnect, device number 115 [ 2042.241189][T16382] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2042.355057][ T5870] usb 1-1: USB disconnect, device number 23 [ 2042.437957][T16382] usb 4-1: Using ep0 maxpacket: 8 [ 2042.450522][T16382] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2042.538893][T16382] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2042.576493][T16382] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2042.639914][T16382] usb 4-1: Product: syz [ 2042.648014][T16382] usb 4-1: Manufacturer: syz [ 2042.654545][T16382] usb 4-1: SerialNumber: syz [ 2042.980287][T16382] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 2042.989490][T16382] visor 4-1:1.0: probe with driver visor failed with error -110 [ 2043.423019][ T30] audit: type=1326 audit(1767063662.271:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30695 comm="syz.0.5873" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 2044.648723][T12123] net_ratelimit: 31 callbacks suppressed [ 2044.648740][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2044.768131][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2045.032845][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2045.035884][T16382] usb 4-1: USB disconnect, device number 25 [ 2045.238913][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2045.358527][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2045.467991][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2045.578277][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2045.720192][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2045.763125][T30721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5886'. [ 2045.775200][T30721] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5886'. [ 2046.023665][T30720] pim6reg: entered allmulticast mode [ 2046.221402][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2046.229515][T30267] usb 38-1: device descriptor read/8, error -110 [ 2046.367908][T24487] bond8: (slave macvlan3): failed to get link speed/duplex [ 2046.447236][T30206] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2047.438529][T30267] usb usb38-port1: attempt power cycle [ 2048.071513][T30267] usb usb38-port1: unable to enumerate USB device [ 2048.785449][T30747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5882'. [ 2048.807959][T30747] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5882'. [ 2049.715188][T17729] net_ratelimit: 26 callbacks suppressed [ 2049.715203][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2049.877888][ T7210] bond8: (slave macvlan3): failed to get link speed/duplex [ 2049.987830][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2050.097902][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2050.137884][ T5870] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2050.217908][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2050.268214][ T5870] usb 3-1: device descriptor read/64, error -71 [ 2050.328228][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2050.437881][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2050.507827][ T5870] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2050.547911][ T7210] bond8: (slave macvlan3): failed to get link speed/duplex [ 2050.683711][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2050.691216][ T5870] usb 3-1: device descriptor read/64, error -71 [ 2050.865276][ T5870] usb usb3-port1: attempt power cycle [ 2050.878488][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2051.247989][ T5870] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2051.278610][ T5870] usb 3-1: device descriptor read/8, error -71 [ 2051.538057][ T5870] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2051.568519][ T5870] usb 3-1: device descriptor read/8, error -71 [ 2051.678229][ T5870] usb usb3-port1: unable to enumerate USB device [ 2054.728159][T17729] net_ratelimit: 34 callbacks suppressed [ 2054.728180][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2054.848137][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2054.958024][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2055.067934][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2055.178021][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2055.287961][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2055.398521][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2055.507936][T17729] bond8: (slave macvlan3): failed to get link speed/duplex [ 2055.617950][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2055.728033][ T7210] bond8: (slave macvlan3): failed to get link speed/duplex [ 2059.807987][ T7210] net_ratelimit: 36 callbacks suppressed [ 2059.808010][ T7210] bond8: (slave macvlan3): failed to get link speed/duplex [ 2059.928048][ T7210] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.037982][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.147961][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.258046][ T7210] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.368004][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.477955][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.587951][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.697988][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2060.808158][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2064.828003][ T60] net_ratelimit: 35 callbacks suppressed [ 2064.828026][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2064.947899][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.067938][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.178021][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.288065][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.408017][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.517977][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.627959][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.737953][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2065.848075][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2069.938003][T11961] net_ratelimit: 36 callbacks suppressed [ 2069.938020][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.058002][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.168323][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.278081][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.388067][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.498068][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.607991][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.717945][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.828054][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2070.937984][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.008040][ T60] net_ratelimit: 36 callbacks suppressed [ 2075.008056][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.128116][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.237911][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.347916][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.457909][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.567939][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.678026][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.787928][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2075.897931][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2076.007953][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.097937][ T168] net_ratelimit: 36 callbacks suppressed [ 2080.097958][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.218012][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.327993][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.438015][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.548001][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.657949][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.767948][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.878005][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2080.987932][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2081.097995][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.207993][T12123] net_ratelimit: 36 callbacks suppressed [ 2085.208016][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.327979][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.437956][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.547978][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.657974][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.768170][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.877967][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2085.987970][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2086.097955][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2086.207960][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2090.287948][T11961] net_ratelimit: 36 callbacks suppressed [ 2090.287969][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2090.407960][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2090.518112][ T60] bond8: (slave macvlan3): failed to get link speed/duplex [ 2090.628036][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2090.738021][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2090.848150][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2090.958073][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2091.068017][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2091.178084][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2091.288155][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2095.378000][T12123] net_ratelimit: 36 callbacks suppressed [ 2095.378017][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2095.498153][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2095.608063][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2095.718068][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2095.827937][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2095.937985][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2096.047926][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2096.157972][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2096.267898][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2096.377941][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2098.890605][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.897073][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.447949][T11961] net_ratelimit: 36 callbacks suppressed [ 2100.447972][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2100.567911][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2100.678153][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2100.787898][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2100.897955][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2101.007977][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2101.118023][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2101.228006][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2101.338037][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2101.448024][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2105.567981][T11961] net_ratelimit: 36 callbacks suppressed [ 2105.568004][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2105.688072][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2105.797964][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2105.907929][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2106.017946][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2106.127920][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2106.237959][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2106.347927][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2106.457949][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2106.568135][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2110.658132][T12123] net_ratelimit: 36 callbacks suppressed [ 2110.658148][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2110.778092][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2110.888204][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2110.997959][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2111.108037][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2111.218070][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2111.328122][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2111.438079][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2111.548046][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2111.658002][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2115.748054][ T168] net_ratelimit: 36 callbacks suppressed [ 2115.748075][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2115.868070][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2115.977908][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2116.098178][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2116.208062][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2116.317996][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2116.427982][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2116.538007][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2116.648050][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2116.758012][ T168] bond8: (slave macvlan3): failed to get link speed/duplex [ 2120.648165][ T31] INFO: task kworker/1:14:16384 blocked for more than 143 seconds. [ 2120.656290][ T31] Tainted: G L syzkaller #0 [ 2120.663247][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2120.672129][ T31] task:kworker/1:14 state:D stack:21568 pid:16384 tgid:16384 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2120.684387][ T31] Workqueue: events rfkill_sync_work [ 2120.689816][ T31] Call Trace: [ 2120.693171][ T31] [ 2120.696107][ T31] __schedule+0x149b/0x4fd0 [ 2120.700848][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 2120.705981][ T31] ? __pfx___schedule+0x10/0x10 [ 2120.710943][ T31] ? schedule+0x91/0x360 [ 2120.715228][ T31] schedule+0x165/0x360 [ 2120.719564][ T31] schedule_preempt_disabled+0x13/0x30 [ 2120.725031][ T31] __mutex_lock+0x7e6/0x1350 [ 2120.729911][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2120.734750][ T31] ? nfc_dev_down+0x3b/0x290 [ 2120.739454][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2120.744490][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2120.749601][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2120.755420][ T31] nfc_dev_down+0x3b/0x290 [ 2120.759983][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2120.765712][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 2120.771137][ T31] rfkill_set_block+0x1d2/0x440 [ 2120.775993][ T31] rfkill_sync_work+0x114/0x200 [ 2120.780977][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2120.786716][ T31] process_scheduled_works+0xad1/0x1770 [ 2120.792478][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2120.798550][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2120.803586][ T31] worker_thread+0x8a0/0xda0 [ 2120.808369][ T31] ? __kthread_parkme+0x7b/0x200 [ 2120.813510][ T31] kthread+0x711/0x8a0 [ 2120.817922][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2120.823068][ T31] ? __pfx_kthread+0x10/0x10 [ 2120.827680][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2120.833086][ T31] ? __pfx_kthread+0x10/0x10 [ 2120.837871][ T31] ret_from_fork+0x510/0xa50 [ 2120.837942][T12123] net_ratelimit: 36 callbacks suppressed [ 2120.837956][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2120.842479][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2120.860647][ T31] ? __switch_to+0xc9e/0x1480 [ 2120.865324][ T31] ? __pfx_kthread+0x10/0x10 [ 2120.870100][ T31] ret_from_fork_asm+0x1a/0x30 [ 2120.874884][ T31] [ 2120.878219][ T31] INFO: task syz.1.5716:29947 blocked for more than 143 seconds. [ 2120.885942][ T31] Tainted: G L syzkaller #0 [ 2120.892800][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2120.901583][ T31] task:syz.1.5716 state:D stack:24640 pid:29947 tgid:29947 ppid:5851 task_flags:0x400040 flags:0x10080002 [ 2120.913574][ T31] Call Trace: [ 2120.916860][ T31] [ 2120.919920][ T31] __schedule+0x149b/0x4fd0 [ 2120.924463][ T31] ? __pfx___schedule+0x10/0x10 [ 2120.929447][ T31] ? schedule+0x91/0x360 [ 2120.933702][ T31] schedule+0x165/0x360 [ 2120.938015][ T31] schedule_timeout+0x9a/0x270 [ 2120.942802][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2120.948268][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2120.953312][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2120.958630][ T31] ? wait_for_completion+0x267/0x5d0 [ 2120.963925][ T31] wait_for_completion+0x2bf/0x5d0 [ 2120.969389][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2120.970482][T12123] bond8: (slave macvlan3): failed to get link speed/duplex [ 2120.975098][ T31] ? __flush_work+0xd2/0xbc0 [ 2120.987155][ T31] ? __flush_work+0xd2/0xbc0 [ 2120.992079][ T31] __flush_work+0x9b9/0xbc0 [ 2120.996612][ T31] ? __flush_work+0xd2/0xbc0 [ 2121.001437][ T31] ? __pfx___flush_work+0x10/0x10 [ 2121.006462][ T31] ? __mutex_lock+0x335/0x1350 [ 2121.011345][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2121.016663][ T31] ? __cancel_work_sync+0x5c/0x110 [ 2121.021943][ T31] __cancel_work_sync+0xbe/0x110 [ 2121.026904][ T31] rfkill_unregister+0x92/0x220 [ 2121.031850][ T31] nfc_unregister_device+0x96/0x300 [ 2121.037068][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2121.042938][ T31] virtual_ncidev_close+0x56/0x90 [ 2121.048251][ T31] __fput+0x44c/0xa70 [ 2121.052338][ T31] task_work_run+0x1d4/0x260 [ 2121.056917][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2121.062205][ T31] exit_to_user_mode_loop+0xef/0x4e0 [ 2121.067508][ T31] ? rcu_is_watching+0x15/0xb0 [ 2121.072362][ T31] __do_fast_syscall_32+0x38e/0x560 [ 2121.077570][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 2121.083068][ T31] ? do_fast_syscall_32+0x34/0x80 [ 2121.088200][ T31] ? irqentry_exit+0x10f/0x660 [ 2121.093057][ T31] do_fast_syscall_32+0x34/0x80 [ 2121.098187][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2121.104639][ T31] RIP: 0023:0xf7f11539 [ 2121.108900][ T31] RSP: 002b:00000000f74ffaec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 2121.117338][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 2121.125555][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2121.133367][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2121.141432][ T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2121.150009][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2121.158086][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2121.166248][ T31] [ 2121.169449][ T31] [ 2121.169449][ T31] Showing all locks held in the system: [ 2121.177179][ T31] 1 lock held by khungtaskd/31: [ 2121.182095][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2121.192154][ T31] 2 locks held by getty/5592: [ 2121.196826][ T31] #0: ffff8880307030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2121.206654][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2121.217046][ T31] 4 locks held by kworker/1:14/16384: [ 2121.222466][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2121.233583][ T31] #1: ffffc9001003fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2121.237953][T11961] bond8: (slave macvlan3): failed to get link speed/duplex [ 2121.246022][ T31] #2: ffffffff8f5fd768 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 2121.263367][ T31] #3: ffff88804240c100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 2121.272703][ T31] 1 lock held by syz.1.5716/29947: [ 2121.277850][ T31] #0: ffff88804240c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 2121.287633][ T31] 2 locks held by syz-executor/30113: [ 2121.293158][ T31] #0: ffff8880563ae918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 2121.303283][ T31] #1: ffffffff8f5fd768 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 2121.313352][ T31] [ 2121.315691][ T31] ============================================= [ 2121.315691][ T31] [ 2121.324359][ T31] NMI backtrace for cpu 1 [ 2121.324379][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2121.324405][ T31] Tainted: [L]=SOFTLOCKUP [ 2121.324412][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2121.324426][ T31] Call Trace: [ 2121.324435][ T31] [ 2121.324444][ T31] dump_stack_lvl+0xe8/0x150 [ 2121.324473][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2121.324591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2121.324624][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2121.324653][ T31] sys_info+0x135/0x170 [ 2121.324675][ T31] watchdog+0xf95/0xfe0 [ 2121.324706][ T31] ? watchdog+0x20a/0xfe0 [ 2121.324738][ T31] kthread+0x711/0x8a0 [ 2121.324767][ T31] ? __pfx_watchdog+0x10/0x10 [ 2121.324791][ T31] ? __pfx_kthread+0x10/0x10 [ 2121.324816][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2121.324843][ T31] ? __pfx_kthread+0x10/0x10 [ 2121.324865][ T31] ret_from_fork+0x510/0xa50 [ 2121.324884][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2121.324900][ T31] ? __switch_to+0xc9e/0x1480 [ 2121.324926][ T31] ? __pfx_kthread+0x10/0x10 [ 2121.324948][ T31] ret_from_fork_asm+0x1a/0x30 [ 2121.325037][ T31] [ 2121.325045][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2121.387899][T17395] bond8: (slave macvlan3): failed to get link speed/duplex [ 2121.390641][ C0] NMI backtrace for cpu 0 [ 2121.390658][ C0] CPU: 0 UID: 0 PID: 17395 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 2121.390682][ C0] Tainted: [L]=SOFTLOCKUP [ 2121.390694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2121.390706][ C0] Workqueue: bond8 bond_mii_monitor [ 2121.390735][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 2121.390756][ C0] Code: de a6 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1c fe 0c fd 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 2121.390777][ C0] RSP: 0018:ffffc9000f4a7170 EFLAGS: 00000002 [ 2121.390791][ C0] RAX: 0000000000000032 RBX: 0000000000000032 RCX: 0000000000000000 [ 2121.390802][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 2121.390813][ C0] RBP: 00000000000003f8 R08: ffff888024710237 R09: 1ffff110048e2046 [ 2121.390826][ C0] R10: dffffc0000000000 R11: ffffffff851a1960 R12: dffffc0000000000 [ 2121.390839][ C0] R13: ffffffff998f39e9 R14: ffffffff99c082a0 R15: 0000000000000000 [ 2121.390852][ C0] FS: 0000000000000000(0000) GS:ffff888125e21000(0000) knlGS:0000000000000000 [ 2121.390866][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2121.390878][ C0] CR2: 0000555aca960168 CR3: 00000000349a0000 CR4: 00000000003526f0 [ 2121.390893][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2121.390904][ C0] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2121.390916][ C0] Call Trace: [ 2121.390923][ C0] [ 2121.390932][ C0] serial8250_console_write+0x13c5/0x1b60 [ 2121.390960][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 2121.390978][ C0] ? console_flush_all+0x11a/0xb00 [ 2121.391004][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2121.391028][ C0] ? console_flush_all+0x11a/0xb00 [ 2121.391049][ C0] console_flush_all+0x713/0xb00 [ 2121.391073][ C0] ? console_flush_all+0x11a/0xb00 [ 2121.391098][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 2121.391122][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2121.391148][ C0] console_unlock+0xbb/0x190 [ 2121.391168][ C0] ? vprintk_emit+0x2c5/0x550 [ 2121.391187][ C0] ? __pfx_console_unlock+0x10/0x10 [ 2121.391210][ C0] ? vprintk_emit+0x2c5/0x550 [ 2121.391234][ C0] ? vprintk_emit+0x2c5/0x550 [ 2121.391254][ C0] vprintk_emit+0x47b/0x550 [ 2121.391276][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 2121.391301][ C0] _printk+0xcf/0x120 [ 2121.391323][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 2121.391342][ C0] ? __pfx__printk+0x10/0x10 [ 2121.391365][ C0] ? bond_ethtool_get_link_ksettings+0x67f/0x760 [ 2121.391387][ C0] ? __netdev_printk+0x36f/0x480 [ 2121.391413][ C0] netdev_warn+0x10a/0x160 [ 2121.391432][ C0] ? __pfx_netdev_warn+0x10/0x10 [ 2121.391446][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2121.391473][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2121.391497][ C0] ? ___ratelimit+0x5a0/0x900 [ 2121.391524][ C0] bond_mii_monitor+0x19de/0x2e50 [ 2121.391548][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 2121.391575][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 2121.391599][ C0] ? finish_task_switch+0x162/0x940 [ 2121.391631][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 2121.391648][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 2121.391669][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 2121.391685][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 2121.391702][ C0] process_scheduled_works+0xad1/0x1770 [ 2121.391733][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2121.391749][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2121.391779][ C0] worker_thread+0x8a0/0xda0 [ 2121.391809][ C0] kthread+0x711/0x8a0 [ 2121.391831][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2121.391947][ C0] ? __pfx_kthread+0x10/0x10 [ 2121.391969][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2121.392004][ C0] ? __pfx_kthread+0x10/0x10 [ 2121.392025][ C0] ret_from_fork+0x510/0xa50 [ 2121.392042][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2121.392057][ C0] ? __switch_to+0xc9e/0x1480 [ 2121.392082][ C0] ? __pfx_kthread+0x10/0x10 [ 2121.392103][ C0] ret_from_fork_asm+0x1a/0x30 [ 2121.392134][ C0] [ 2121.392693][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2121.392712][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2121.392739][ T31] Tainted: [L]=SOFTLOCKUP [ 2121.392748][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2121.392760][ T31] Call Trace: [ 2121.392770][ T31] [ 2121.392779][ T31] vpanic+0x1e0/0x670 [ 2121.392807][ T31] panic+0xb9/0xc0 [ 2121.392834][ T31] ? __pfx_panic+0x10/0x10 [ 2121.392859][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2121.392883][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2121.392914][ T31] watchdog+0xfdf/0xfe0 [ 2121.392945][ T31] ? watchdog+0x20a/0xfe0 [ 2121.392984][ T31] kthread+0x711/0x8a0 [ 2121.393010][ T31] ? __pfx_watchdog+0x10/0x10 [ 2121.393036][ T31] ? __pfx_kthread+0x10/0x10 [ 2121.393064][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2121.393091][ T31] ? __pfx_kthread+0x10/0x10 [ 2121.393117][ T31] ret_from_fork+0x510/0xa50 [ 2121.393139][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2121.393156][ T31] ? __switch_to+0xc9e/0x1480 [ 2121.393186][ T31] ? __pfx_kthread+0x10/0x10 [ 2121.393211][ T31] ret_from_fork_asm+0x1a/0x30 [ 2121.393250][ T31] [ 2121.396137][ T31] Kernel Offset: disabled