last executing test programs: 8m40.341026225s ago: executing program 0 (id=177): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 8m40.082018426s ago: executing program 0 (id=178): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 8m39.809701148s ago: executing program 0 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000, 0x200000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1e0000}, 0x18) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getitimer(0x1, &(0x7f0000000880)) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x48004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0xd0f5eac46a0d4a09) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="c9ae85633eeeb0edd21d9b27d3409d46ebf71203ec01bb2428cef8b1572a31650936747ba48d2c785d5d8c75e6e68ed052385ef48529fff26a574af617bf5a90961b4d9c17e04892b6b8f2d4c48a3705e268fb1049dad630e6806cd9067554f82684e4492bd5c0c009c0426db694cd098863c3b9e6f8188257f4a472d075c8de84454c872defd10bcd941839278db45a7ff466fb4993ad3e3dcb585101f09d3dd3e02f1867a80ed077749fe115978ade2cebbacf", 0xb4}, {&(0x7f0000000580)="ee7f9d1aa756c43ac750e672fd9c84cb65b1e4526dbb9b7d36e4caba5805b7d68f69aa4bc096ec2656ce8122c3", 0x2d}, {&(0x7f0000000600)="1c1328e32e2b1e9d41747fb6f733664bcdb4d9699d9d5a9a4255233660f24a6abb1f9ba06a0d8cc9ee16036ba059cd7a67c401562b7cdaf2c2767cd6aa030aad4438801ce13e3ff3b9d4496df18a8898e270b9f36f0d0875135e86f8c49f81dc9187a29caa3cc445238068a9ffe75b9e9a050b5628fa2509dddcef1ee5ea7d9ebd344fc8ccf665261b7b21243b02f52a043e533473a0e24bd3ebfadde1fdfd54f16d4fc2619d9be5d4d12f10e3fe5cb17f7b74b96566203b6ab86ccd93ff71120b260ede2163a203ececf9202aa926764e2f", 0xd2}, {}, {0x0}, {&(0x7f0000000700)="730391b9acec6c8a9f15be6b241ce8b81d7bd0c5550f1b0f9bb9424c738fe1873f5c4abafc604ab0a6d9e42dcec7cdc2c3653dda53cdb9f91f88866f8d3b42b614bf9ec4d9b503b9e7dfa5f9def2d1cb14d5d5b70c86e6d51184052d40aa17b67c28a72369ce0f0ef23d8b34d09491b55f457d42799b50fae53631e90f3a5e6390a9858432b930bd34908a11b6532ee3ed9a91c44e7edbc946aab64b45cef1f896e790ab662f8976bd0b784e21a3501454dfb831a2c5c9770f50db088b4d7714e90ff23daeb11d1cb4b1", 0xca}], 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="3ed5c585"], 0x28, 0x4005}, 0x84d) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m38.646557302s ago: executing program 0 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x505, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0xd997}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) 8m34.206345232s ago: executing program 0 (id=198): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x0, 0x1, 0x2, @mcast1, @mcast2, 0x7, 0x1, 0xf, 0xfffffff9}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5500000020007fafb32d13b2a4a2719302000000030b43026c26236925000400d1870000bd2d", 0x26}, {&(0x7f0000000080)}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) r7 = socket$packet(0x11, 0xa, 0x300) getsockopt$sock_buf(r7, 0x1, 0x28, &(0x7f0000000240)=""/47, &(0x7f0000000280)=0x2f) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64abf929", @ANYRES16=0x0, @ANYBLOB="20072dbd7000fedbdf255700000006009500c69700000600950006000000060095000800000006009500000200000600950002000000060095000e000000060095000200000006009500010100000600950080ff00000600950064000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 8m31.88631777s ago: executing program 0 (id=204): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x80eb, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x1b314843cb6afbc4, @in=@empty, 0x0, 0x5, 0x3, 0xb7}}, 0x117) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)=ANY=[], 0x68) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x9c, 0x0, &(0x7f0000000400)="c26c0a3e348158d1a4c09ad20229ab9d12dae68889154a7a12bdc491f0cc456d0a66392a370c119e8286124543ffa7b2f166069bd2bf4803ee014a88628ee7eeca833019297531474ef3f7992775ddffe5dae059bf2740af1e22e0a4e0cab3aa3495bbd2833bd356cc24991e7e36d8cbedfb78967e2cf3ac4e6311687333a18141451b2cffaab7b1a5e6d23121b98a7d63c1561dd92158ecd4bd1bd9"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x4009, 0x0, 0x2, 0x7fff0000}]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 8m16.72113906s ago: executing program 32 (id=204): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x80eb, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x1b314843cb6afbc4, @in=@empty, 0x0, 0x5, 0x3, 0xb7}}, 0x117) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)=ANY=[], 0x68) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x9c, 0x0, &(0x7f0000000400)="c26c0a3e348158d1a4c09ad20229ab9d12dae68889154a7a12bdc491f0cc456d0a66392a370c119e8286124543ffa7b2f166069bd2bf4803ee014a88628ee7eeca833019297531474ef3f7992775ddffe5dae059bf2740af1e22e0a4e0cab3aa3495bbd2833bd356cc24991e7e36d8cbedfb78967e2cf3ac4e6311687333a18141451b2cffaab7b1a5e6d23121b98a7d63c1561dd92158ecd4bd1bd9"}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x4009, 0x0, 0x2, 0x7fff0000}]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 10.636699129s ago: executing program 2 (id=1890): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0xa, 0x3, "2e85f85a3b9156e89e82960ad936188f4429f4bf777d1b56926c75b050d4c3f0", 0x39555659}) read$snddsp(0xffffffffffffffff, &(0x7f0000001040)=""/141, 0x8d) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='}#$-:\x00', r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x7, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @remote}, 0x14) 9.435317146s ago: executing program 4 (id=1895): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x0, 0x1, 0x2, @mcast1, @mcast2, 0x7, 0x1, 0xf, 0xfffffff9}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000300)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5500000020007fafb32d13b2a4a2719302000000030b43026c26236925000400d1870000", 0x24}, {&(0x7f0000000080)}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) r8 = socket$packet(0x11, 0xa, 0x300) getsockopt$sock_buf(r8, 0x1, 0x28, &(0x7f0000000240)=""/47, &(0x7f0000000280)=0x2f) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64abf929", @ANYRES16=0x0, @ANYBLOB="20072dbd7000fedbdf255700000006009500c69700000600950006000000060095000800000006009500000200000600950002000000060095000e000000060095000200000006009500010100000600950080ff00000600950064000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 8.306112258s ago: executing program 1 (id=1897): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x240, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x6, 0x4, 0x4, 0x8, 0x0, 0x7], 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x1, 0x6, 0x4, 0x0, 0x6], 0x3}, {0x4, [0x1, 0x4, 0x1, 0x1, 0x5, 0x4], 0x1, 0x2}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, 0xffffffff, 0xffffffff, 'dvmrp0\x00', 'ip6tnl0\x00', {0xff}, {}, 0xc, 0x5, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf, 0x6, [0x1f, 0x33, 0x14, 0x38, 0x18, 0xa, 0x1d, 0xe, 0x33, 0x2b, 0x31, 0x1c, 0x19, 0x2a, 0x3e, 0x1b], 0x2, 0xc1, 0x5}}}, {{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x30}, 0xff000000, 0xff, 'veth1_to_bridge\x00', 'veth1_macvtap\x00', {}, {}, 0x62, 0x0, 0x82}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) socket$inet(0xa, 0x801, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 8.167385929s ago: executing program 4 (id=1898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x197, &(0x7f0000000100)={0x0, 0xd462, 0x0, 0xfffffffc, 0x3aa}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) 7.930087538s ago: executing program 3 (id=1900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x505, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0xd997}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) 6.644013472s ago: executing program 3 (id=1903): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usbip_server_init(0x3) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x1, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) pread64(r0, &(0x7f0000000480)=""/209, 0xd1, 0x170ac66a) 6.642915502s ago: executing program 4 (id=1904): syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0xe4, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x11, 0x0, 0x0, 0x800000}, 0x80) 6.512438443s ago: executing program 1 (id=1905): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffffe}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.522478543s ago: executing program 4 (id=1907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) 4.580809899s ago: executing program 3 (id=1908): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @multicast}) 4.20362257s ago: executing program 4 (id=1909): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x0, 0x1, 0x2, @mcast1, @mcast2, 0x7, 0x1, 0xf, 0xfffffff9}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000300)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5500000020007fafb32d13b2a4a2719302000000030b43026c26236925000400d1870000", 0x24}, {&(0x7f0000000080)}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) r8 = socket$packet(0x11, 0xa, 0x300) getsockopt$sock_buf(r8, 0x1, 0x28, &(0x7f0000000240)=""/47, &(0x7f0000000280)=0x2f) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64abf929", @ANYRES16=0x0, @ANYBLOB="20072dbd7000fedbdf255700000006009500c69700000600950006000000060095000800000006009500000200000600950002000000060095000e000000060095000200000006009500010100000600950080ff00000600950064000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 4.097607478s ago: executing program 1 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='Yd\x00'/27], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000280)) io_pgetevents(0x0, 0x3, 0x1, &(0x7f0000000200)=[{}], 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x1a3) r2 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) stat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdd, 0x8}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008008}, 0x20008000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.985856088s ago: executing program 5 (id=1911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x800, 0x7fff, 0xa77, 0x3, 0x2cba1e40, 0x6, 0x7f}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) 3.20828327s ago: executing program 4 (id=1912): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000940)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 3.121559708s ago: executing program 3 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x505, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0xd997}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) 2.989905958s ago: executing program 1 (id=1914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x197, &(0x7f0000000100)={0x0, 0xd462, 0x0, 0xfffffffc, 0x3aa}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) 2.853555799s ago: executing program 5 (id=1915): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x240, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x6, 0x4, 0x4, 0x8, 0x0, 0x7], 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x1, 0x6, 0x4, 0x0, 0x6], 0x3}, {0x4, [0x1, 0x4, 0x1, 0x1, 0x5, 0x4], 0x1, 0x2}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x33}, 0xffffffff, 0xffffffff, 'dvmrp0\x00', 'ip6tnl0\x00', {0xff}, {}, 0xc, 0x5, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xf, 0x6, [0x1f, 0x33, 0x14, 0x38, 0x18, 0xa, 0x1d, 0xe, 0x33, 0x2b, 0x31, 0x1c, 0x19, 0x2a, 0x3e, 0x1b], 0x2, 0xc1, 0x5}}}, {{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x30}, 0xff000000, 0xff, 'veth1_to_bridge\x00', 'veth1_macvtap\x00', {}, {}, 0x62, 0x0, 0x82}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xfffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) socket$inet(0xa, 0x801, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 2.628101937s ago: executing program 2 (id=1916): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r2 = syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000018c0)=ANY=[], 0x118) syz_open_dev$I2C(0x0, 0x7fffffffffffffff, 0x426400) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)="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", 0x17f, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x80000000) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x280) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000240)=""/161) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x94, 0x0, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x2, 0x6, 0x4, 0x2, 0xd83, 0x5, 0x5]}) 1.729090681s ago: executing program 2 (id=1917): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r1) 1.703109612s ago: executing program 1 (id=1918): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0xa, 0x3, "2e85f85a3b9156e89e82960ad936188f4429f4bf777d1b56926c75b050d4c3f0", 0x39555659}) read$snddsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='}#$-:\x00', r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x7, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @remote}, 0x14) 1.497015539s ago: executing program 5 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 954.639703ms ago: executing program 2 (id=1920): socket$nl_route(0x10, 0x3, 0x0) ptrace(0x4206, 0x0) ptrace(0x8, 0x0) ptrace(0x4207, 0x0) 786.296587ms ago: executing program 1 (id=1921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000080)=""/57, 0x39}, {0x0}], 0x3, 0x5, 0xfff7fffd) r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0x9c4, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f000001fac0)={0x0, 0x1}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5863, 0x1000, 0xfffffffc, 0x24d}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x100847c0, 0x0, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) 707.128523ms ago: executing program 2 (id=1922): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 594.179583ms ago: executing program 3 (id=1923): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close(0xffffffffffffffff) close(r0) 361.715191ms ago: executing program 3 (id=1924): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="14e2d6d65ce5575d5f8e79705c5777b1c4553f79291f8ba6b506334d0720fb2a758ed9bb", 0x24}], 0x1}}], 0x1, 0x8005) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="25a4be9c0ce89cbf9f6699e37603e1b74587b94298ccf0bf22e83e142bea0dfdb0f130961206c868fd9ad415d70013932fd13ff87593d15015e5643df1aa3d4d9ac4d8b4095417d99b967dd587d8891c594bf0aa6949c1eb6f418eec14bdf7c0d9d73e789e7d7b12926bf14c10ae3c8a4e8e002c3370d1d229ad2647c10126e77b6645aa687743473311af671d69128b0181cdb8e68f8e501d020837bf8828c6e01e05e92b31ff8cc07e778ab39c9d4d878000f3730d6272df8070c8b90046c6b152a6c8aec4d04c996a5293d436b35ef0ef516605cf3c9405b322adeafeaa826d3b0aa14d37baa57b5062acfe1176e56269e125eb3225ab80aeaf2b7ade327e144dbfcec7dacff5c74e04ce85d200b2a8ae09cc6f804c73c3db742f204f80b4d3e68ea22de44918490b09fa1f50cf59fad253f6b29a7d98d3909a32820c93aa93dd90127ed3f6c5bb1fc092b4aa73162a095db772e6ce346c66177b482fa24e00027d13696a563bf055916fe34ce24466163da4343ea07b397ce41b3ce145e7f72e2b9072253b3e8be8b921411853284cd70123ac5ab40dae387efd12fb1b0b995329e69c0b9e2268ed6c2639f75ccc4a32e5377078bbd9a4119a1f6bd0752791faf2cac84df0c42e43106819a3a624f3f3995f7a4d892622dda277192f58e948af6a95fad17685f9fe1dc8c5dfb4adee234d7fd18c8b2f29b34a66d2120a1d0f7f0a774247abd9fa595c736750f183761fbd9b029f6601d199ba12734a59be5efaac2b66ba564b65683763e33cc93b1cf125956a5f704b325e1d131e13df01c2eff2a29e65ab02cba302020b5e5f763f15bd9348ac127213822f8ee4021b99bbe8a569a00ea66d9b06498e7e29e6e7d5ba4515e0592a78232e69bc59f049923597ad50abfda79e160e91bb1b4f7574b83727a02343755124ef25abcc7f66eeed248c0b77c33350a42c0e06d69c18745789fe922f5df70e64f6da80e430b836a389ab83b5ec8b4d44965eabcea85bc3b69126263a9a201a72558ad26a3f8b228b389e01d6bd94bc37d145c0e12bba5a6a15685125882193870235dd50eda594cbf40d79b0d0184baea13dfe03705f929e0f727d84a4b98a596a211674ae16a3d61ce76c60d3eb006c232c8e4826a84aadaf60b1fba24e5bfe881622628dbe3776269373cc2405eb9c940b1b2595f8426aa314ded4c3102bb07ace7de03edd73c3fee3846e17a2dac01850b560e5b4c447c4b415e9ed81694810356addfedeb9ce645c73f9297274842d29880d294a4364898d5fea28957a2fb14114c8affa08524949a67419093070e482da553f9690f74bdbfef145f8a0b6bca7573578ea1877d49c67fd8598e763f565bdccc6741e4ce12de0c25568c4c929b19a8d138f52f2e122994c76d9ac032b76cbeabe68d7f98c5c4a5b8bcb43f5b6ce57bbfc3653ae94fc045cc3aa8981f3296ed5adbaf0c7b02c7df26ba9bd5d49c1a9cf7897f08d91d93bcb7568e8cd6ad33bba1bd30a97707c62b9eafa0edd0e9a45bda10ff1f918445a82712848591c50dc01163aad5bc4a564ff57542e9ee6fadd2d30b208c1751b57257f9c0b850dee36ced2c25393819ae623d41873737b2ac3ffb9a412bef3f01acf4038e7d1807419a6a73afaabf4f9c7d36a75a4d2a140479bed2a0c32572c2bc4962a611d31b34d722725391d10dc9152868c1db3a07266dc71d951789db47c0d97b293a6004a26811c5fbfd3bce97dc127febc16ccb2bfae1658aab5fa31d8de69f47ed35be4cdea02884889198245dcc1c7fd9c29d7424b50ac56fb8597d30e8fdc6f6f04bca4f4d3718eddac272b6153d10e805b740d9e8ee35e797334e16a7db9ee53bcf48f512a3b4e82b4b814d5ec90da3d583c3d7b453d5e433572531f4ea632df22ce7c7178fc7a07616969e2a305af4b8efaa1c9a6ab06a1683e563518a303d0dce5fd4d8dc3501734f3a0fbdf0af675a72362e4e47599707bedfbb90fd585969f0973e9a80351c21ea4ebbd1e9b376fe8a2d6a765deb1203e67c6ecd8561138ddbd65dc942f95b0473500efd5c2dbdbecaf948b4f9be93800944aa8f4604d350355d24c913520152db29e698e01fba4dc6b27245fd62d23302fe3a6339c82e93f55bfe8f959bd3443591c0074e32330146fad7ce40bda92d2c0f65fe6f237e21e032c82e1e1a3a1d7848919062f932b175bf21ddeece862791424b1fa3a3504e61840d313ad303fa654f637d2428317055682a2e17d2d2fa44d048baf989306b32427fce31c37eb9f80cedfeb919ce9ae7a8a78a8ccab0f0365c52d8d2d86a274fdd04e849672b7cde631c1ded5014c9186b576e57d50e2f16fbe1564c7d76149e2dd7db7ef0c0aeddda7e5b31db39331e5c715f999fd6a0679275de566f554c0c4a3ece2123976c6a2671d4107f5f833baeb968f9cf10acb9e5a808ce047e8ca227d674ea32e6ad2e7b81fc168d3c85fc6548cf0a4f413064782dea276d27c18f512ce5f5a81211df7024d1cd76e242a87f0ac13068c14606f1eb22bd50155e461e2d4a21e28ea6e64127ceb04a5d85485e09e5b32594156549121cc9ad693763ddc0e7c9ec0a54cf7d54cafb75001b6a5c7562cbe632a717e325f2b5115defcd340842a2a0747b2ea2ac552ad34bdddf66f78a83a18bc83728e5dbb5b00a0a5536e5ee936a958362fc719ff9cade216819b5e32e20fe6ebaf51ae7bcd29bd4121d7e0b13300049a0545aaa63f042f9d865d22bb1632427c40fdf58ce6fdd662ad56401174a05ed3705bca6294b2844e628e4a98e8b4a2b41cd77fc144d7d1de31087859e0b425fd6b9a398a8256ee0c2c0762dde714a958cea0c8f547fe73d1d3b0fc90426613b8f105a07ad9e6bb1fee9c77ad107bbf89e3e4dba32d104be1906485dca8b6d449615ef47507b1ed0479ed316f8b56297fb90c07dd3839a82d27d171d37c4886f3f5bd2022c73eb2ff9d623ce4aac1f0d42f9e09e832a19056758ec0b0eaf2a6848e7fa6434f82294ea950258f05bcd907a84911b88a8f52c00a7951594cdbef410c8b958d4f8618fb98704d4ad298236c5be0c25434a093fb5755af0b6322b63ae2e623f0fee42f14c3c4b95ddf63a5529e90f4433a45b853c483413ef201d1c24a20e88628cfac50ec26ff0cbc83a4c3999ee9f8e93726811fb013e10aa08289e6deb655c391695793a8edf5a9c2a595bb81fe0162e39fd0e9aabf51eaf10186ffb354e5a8da2f5999e8a9958dac6d8cdf4feb07702ea67fc3db7f8ae7874162f00125e298254406cc26f322cdb28273a4e1ead4bcf07b1081e03bd59df5291037d9ce6fb101996f81b4c216c88f4ece75d35f97f54457a8116cc19666ccdfe8d77dbae05656cb184722a1c73dfe5215a241ab7c45a4668a307df243b8f02b3e1a2535155d62e4d8a0a8d583b38d3243d32e573063e3fd55d7a6edeb0a77e51a42a79079a4355739c2ae826d6e8e94356c42127406dce0025448efe36427158f7d64e3a178f723afc33d2b7b56af844350a8db4387c874ffbf4a1035b615bad38bb29d85a5cc4ea81d7de3f5f1f18c31da9459837e80d38a2f735920f6ae5caada66273d059181262e0c66d5832c6e4183f43f3ae37e3dddb0d9fa1e36ec7fdee8aab17fb9f47d080e0d73673f8a3c5d3a70c36aba6a04760e447fd3d6f3afee0dde6c6d2babfca717e3be22e9474df7b1ffcf156e24d36c1f7d45057cdb4840d4164e397db1634544891ad2112655c2cdb321e8f1a2385b7ccdff4a7d1148b47496b6b22d33a9e07761ed7d9ae16fe54b22026e4f068f0ca9127c51cc39812701f3511f6f16e29ab7138b97adfb4c15b94b90c21b358cccc7835e6c5f151222b5138661f62f2b8a527ad7f4a03e2fbed98e1c6d31cbb82e291496775746f091cfe6362aca9fc40d700d95e2ced98115b34d07d12639c7a5fdcc894618a72b6e18fe855768ad94964ee9d039839c01fa3bcfaa6283bee546a96f4a58d654eeb9616c7b67098fcf2a03afe6b6a1dab0197cd1a29bb7e0769cb921ef7e08c113223bf0c586fc23c2971efb3a29957b896b6f0bdfce51ca7be552d734a814eacd4cab06e577f09e7e6c54c913d3b1ea67278fbf1ebe6824312621c3130159528845c4f296ba0e35a8048270efccfd0084ec965f6b72a2a8432ac0b2378b73c3f2a7be1992b36fe87511c06c2844e11a08f7fb618a4764c6bef30779aaf1638ce32492732ce619e74dd4ef694a9c6ab22ab563608fcb065dba5b0844bd90e4cb7c4ae30fa37ad015a359d6fe984904898ac3bf27169a0dc7f59bb35df8a059b3f4c4bc43c7ac077d7289537f39f7d4acdc98b02a728b3449afe9df3dcd3561992b7e5e1e712259a66ea883d5eaa1075a983f613daf02307e8f8f7513e59ccc5bad3bcc1a5747670588941a9d17e06f94f3eeb694744306cfaef10a781c31d7f12664d29749e560d3f1aaf1b8acb8d4822c5141ea40c8f62d7b2e454ee74abf31c850d1413fd7b3e52d3f34942b528b95b0c2b6875d502412abb6490144c6c0adee91ca02cd961d9e505b0e7fd520d2c0bba4a78e2f00d84255958f0571a51f295adc0d4a9a08f8c70b037c214bbb17b94fb0d7b45b1d895243caa1eeb3c7adb2669f4c1913bcffb03d32bdf5c2587254b0c76ce67df28060214d6b524f648385b18cb7114785b0f062acaf3ff4a59ba6c9ad0f4c06e2e1944a390cb2eb990de7cf92ab378c69bb5fd30263b7326d739057050d7b8ca2ed11d497bd194c41e8f8eb6825976879a2f48bff9c0af6b3764d706188d3ec7e812fab8660a3e330889b020bec3cecddf19b66fddadbb1a0cdd9ec61337cf9cca346199b193c11830cc33b8ebdbc524a58c6577fdd2b0589256f4b452274dcf6b72a81e661231333149eb7ecb37b0e5a74e6a9cab2832ad9424a185e9da9d11e619984a3334327ea0aa00d66aa8c06209f57afaa5ea3d8238f8750e99b2b09022c29ee2cc79022a50ea0ff13a36d6e69533156c53a91bbb0c8329ffcfeb78cb66542dafee5f481351b64fb6fe1ff9aeddbf671e2b99497307e8b7daced4258ab4b6fe369255a3158327fca5b213c3320ca2f693aa3564e564b379c32f23b0293c775badb4621471739f0db3b14b1f55db8906aab95556351cb72bcab8f3c32764097903f5c95ab50676a122da5507ff4fcf3b8fe059a9bb8dd6533b3365fc82126a184453aa7101339f9574b80a59f537211ee9d7003de19dea4029dcc6dbe83c8e756cc93c3c8d2e4d3ab175f7abb44fc40be9b83780483c8078d6e8128bf152922d8b442cfb402cb68aeebf6e68e31f15343765be0fbfb6c37f24e51eb55fc4e1b85f5f946ed985558d8222ada03bce8596823c1f3e2ae3abf63b59b01be937bffe8a0c67e587c5eb7c46affcb4ea954b59ee97dba1454f5d708a2fd1100732f308b01e72b39b759d9688af6884a50735773608a71154911812fa2107c59bd720df90a28571efc09b1d7e84c06f8014305a777d10879b96be9b8482192a476bdd9ddd6fee5b9e6d77cfe73bcd6c2e266a243407f513a46f63018217aab326088462dc5b1f133a89facf7dfeac3c98380f9a3e8fc6d1584a491fe64c70d478d6547a9abb7bc45c612ca0d283534e6617754e6f3d789763e20553433ea4bf83d74a7c61f3f67a88c1ecb1379aa6d05b0b0901fb38ff46f81dbb8cae168f0b232780bee5cb26d6308bfa8c5b00ba435adc3a59a6321ffcf1307a09dfa9607d1bbe66a3fca47d527f74df2ab1730a95b327a25c99b23f1589ac676", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001840)="b0", 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) 337.273123ms ago: executing program 5 (id=1925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r1) 188.100445ms ago: executing program 5 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000040)=0xf, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x8}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xaf}, @void, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 21.441009ms ago: executing program 2 (id=1927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@ifindex, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x40) 0s ago: executing program 5 (id=1928): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000280)={0x0, 0x1, 0x10000}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d08000000000000140003006970766c616e31000000000000000000240012800b0001006970766c616e00001400028006000200010000000600010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x200000010}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {}, 0x2}) kernel console output (not intermixed with test programs): 00 [ 278.376107][ T7017] netlink: 148 bytes leftover after parsing attributes in process `syz.2.659'. [ 278.385627][ T7017] netlink: 116 bytes leftover after parsing attributes in process `syz.2.659'. [ 280.917541][ T7036] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 281.929197][ T7052] loop4: detected capacity change from 0 to 512 [ 282.080466][ T7052] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.173144][ T7063] affs: No valid root block on device nullb0 [ 282.740747][ T7052] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.755319][ T7066] netlink: 148 bytes leftover after parsing attributes in process `syz.2.672'. [ 286.869413][ T7101] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 288.360215][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 288.845533][ T7124] loop4: detected capacity change from 0 to 512 [ 289.093753][ T7135] netlink: 148 bytes leftover after parsing attributes in process `syz.1.689'. [ 289.103116][ T7135] netlink: 116 bytes leftover after parsing attributes in process `syz.1.689'. [ 289.175682][ T7124] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.298975][ T7124] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.609202][ T7159] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 292.881130][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 292.881162][ T26] audit: type=1326 audit(1754696516.254:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.218495][ T26] audit: type=1326 audit(1754696516.584:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.635348][ T26] audit: type=1326 audit(1754696516.584:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.659120][ T26] audit: type=1326 audit(1754696516.584:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.682212][ T26] audit: type=1326 audit(1754696516.584:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.712902][ T26] audit: type=1326 audit(1754696516.584:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.769861][ T26] audit: type=1326 audit(1754696516.584:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.793176][ T26] audit: type=1326 audit(1754696516.584:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 293.836280][ T26] audit: type=1326 audit(1754696516.584:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 294.013424][ T26] audit: type=1326 audit(1754696516.584:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 294.050588][ T7188] netlink: 148 bytes leftover after parsing attributes in process `syz.2.702'. [ 294.060103][ T7188] netlink: 116 bytes leftover after parsing attributes in process `syz.2.702'. [ 294.932778][ T7197] loop2: detected capacity change from 0 to 512 [ 295.138173][ T7202] affs: No valid root block on device nullb0 [ 295.468116][ T7197] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.657458][ T7197] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.018417][ T7212] affs: No valid root block on device nullb0 [ 296.511471][ T7217] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 298.266303][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 298.266316][ T26] audit: type=1326 audit(1754696521.644:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 298.417962][ T26] audit: type=1326 audit(1754696521.644:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 298.440610][ T26] audit: type=1326 audit(1754696521.644:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 298.967999][ T26] audit: type=1326 audit(1754696521.644:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 299.153851][ T26] audit: type=1326 audit(1754696521.644:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 299.250486][ T26] audit: type=1326 audit(1754696521.644:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 299.535595][ T7246] netlink: 148 bytes leftover after parsing attributes in process `syz.4.717'. [ 299.544984][ T7246] netlink: 116 bytes leftover after parsing attributes in process `syz.4.717'. [ 299.599319][ T26] audit: type=1326 audit(1754696521.644:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 299.651415][ T26] audit: type=1326 audit(1754696521.644:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 299.698424][ T26] audit: type=1326 audit(1754696521.644:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 299.730374][ T26] audit: type=1326 audit(1754696521.684:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.3.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 300.322567][ T7260] affs: No valid root block on device nullb0 [ 300.430647][ T7258] loop4: detected capacity change from 0 to 512 [ 301.222336][ T7270] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 301.745677][ T7258] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.316672][ T7258] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.697388][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 303.697404][ T26] audit: type=1326 audit(1754696527.044:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 303.734088][ T26] audit: type=1326 audit(1754696527.044:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 303.770093][ T26] audit: type=1326 audit(1754696527.044:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 303.955762][ T26] audit: type=1326 audit(1754696527.044:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 304.104784][ T7292] netlink: 148 bytes leftover after parsing attributes in process `syz.5.730'. [ 304.114201][ T7292] netlink: 116 bytes leftover after parsing attributes in process `syz.5.730'. [ 304.212375][ T26] audit: type=1326 audit(1754696527.044:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 304.768475][ T26] audit: type=1326 audit(1754696527.044:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 304.833831][ T26] audit: type=1326 audit(1754696527.044:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 306.200870][ T7312] affs: No valid root block on device nullb0 [ 306.449408][ T26] audit: type=1326 audit(1754696527.044:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 306.573652][ T26] audit: type=1326 audit(1754696527.044:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 306.665324][ T26] audit: type=1326 audit(1754696527.044:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7739725be9 code=0x7ffc0000 [ 306.953816][ T7323] affs: No valid root block on device nullb0 [ 307.194516][ T7325] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 307.904202][ T7328] netlink: 52 bytes leftover after parsing attributes in process `syz.1.738'. [ 309.359395][ T7329] loop3: detected capacity change from 0 to 512 [ 309.543177][ T7155] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 309.647916][ T7329] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.786862][ T7329] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.815231][ T7155] usb 6-1: Using ep0 maxpacket: 32 [ 309.933821][ T7155] usb 6-1: config 0 interface 0 has no altsetting 0 [ 310.113710][ T7155] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 310.176677][ T7155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.376842][ T7155] usb 6-1: Product: syz [ 310.381236][ T7155] usb 6-1: Manufacturer: syz [ 310.393411][ T7155] usb 6-1: SerialNumber: syz [ 310.402398][ T7155] usb 6-1: config 0 descriptor?? [ 312.711809][ T7379] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 313.356784][ T23] usb 6-1: USB disconnect, device number 3 [ 313.873329][ T7393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.753'. [ 315.398475][ T7388] loop5: detected capacity change from 0 to 512 [ 315.535330][ T7392] affs: No valid root block on device nullb0 [ 317.153033][ T7412] netlink: 148 bytes leftover after parsing attributes in process `syz.4.757'. [ 317.162105][ T7412] netlink: 116 bytes leftover after parsing attributes in process `syz.4.757'. [ 317.188357][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.194805][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.203601][ T7388] EXT4-fs: error -4 creating inode table initialization thread [ 317.329331][ T7388] EXT4-fs (loop5): mount failed [ 318.169405][ T7435] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 321.377874][ T7457] netlink: 148 bytes leftover after parsing attributes in process `syz.2.770'. [ 321.387082][ T7457] netlink: 116 bytes leftover after parsing attributes in process `syz.2.770'. [ 321.539066][ T7461] affs: No valid root block on device nullb0 [ 322.071629][ T7471] netlink: 52 bytes leftover after parsing attributes in process `syz.5.773'. [ 323.661489][ T7469] loop4: detected capacity change from 0 to 512 [ 324.225191][ T7483] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 324.956851][ T7469] EXT4-fs: failed to create workqueue [ 324.980525][ T7469] EXT4-fs (loop4): mount failed [ 325.326185][ T7497] affs: No valid root block on device nullb0 [ 329.317297][ T7521] affs: No valid root block on device nullb0 [ 330.135027][ T7534] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 330.883034][ T7532] loop1: detected capacity change from 0 to 512 [ 331.057365][ T7540] netlink: 36 bytes leftover after parsing attributes in process `syz.3.792'. [ 332.450980][ T7532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 332.674835][ T7532] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.737842][ T7553] affs: No valid root block on device nullb0 [ 334.743876][ T7562] netlink: 148 bytes leftover after parsing attributes in process `syz.1.796'. [ 334.753019][ T7562] netlink: 116 bytes leftover after parsing attributes in process `syz.1.796'. [ 335.586477][ T7581] affs: No valid root block on device nullb0 [ 336.202537][ T7591] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 337.742023][ T7605] vivid-008: ================= START STATUS ================= [ 337.749995][ T7605] vivid-008: Generate PTS: true [ 337.755150][ T7605] vivid-008: Generate SCR: true [ 337.760239][ T7605] tpg source WxH: 640x360 (Y'CbCr) [ 337.765613][ T7605] tpg field: 1 [ 337.769762][ T7605] tpg crop: 640x360@0x0 [ 337.774331][ T7605] tpg compose: 640x360@0x0 [ 337.778890][ T7605] tpg colorspace: 8 [ 337.782986][ T7605] tpg transfer function: 0/0 [ 337.787754][ T7605] tpg Y'CbCr encoding: 0/0 [ 337.806734][ T7605] tpg quantization: 0/0 [ 337.811678][ T7605] tpg RGB range: 0/2 [ 337.815682][ T7605] vivid-008: ================== END STATUS ================== [ 338.565954][ T7606] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 338.572678][ T7606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.582080][ T7606] vhci_hcd vhci_hcd.0: Device attached [ 338.600858][ T7607] vhci_hcd: connection closed [ 338.602063][ T557] vhci_hcd: stop threads [ 338.753183][ T557] vhci_hcd: release socket [ 338.771151][ T557] vhci_hcd: disconnect device [ 338.778684][ T7604] loop4: detected capacity change from 0 to 512 [ 338.793122][ T5620] vhci_hcd: vhci_device speed not set [ 338.836551][ T7611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.809'. [ 339.307745][ T7623] netlink: 148 bytes leftover after parsing attributes in process `syz.3.812'. [ 339.316826][ T7623] netlink: 116 bytes leftover after parsing attributes in process `syz.3.812'. [ 340.260996][ T7604] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 344.462510][ T7650] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 346.422728][ T7685] affs: No valid root block on device nullb0 [ 347.900807][ T7693] loop3: detected capacity change from 0 to 512 [ 348.401044][ T7695] netlink: 36 bytes leftover after parsing attributes in process `syz.5.832'. [ 348.503682][ T7693] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.519534][ T7693] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.693054][ T7720] netlink: 148 bytes leftover after parsing attributes in process `syz.2.835'. [ 348.703608][ T7720] netlink: 116 bytes leftover after parsing attributes in process `syz.2.835'. [ 349.881335][ T7736] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 350.604409][ T7740] affs: No valid root block on device nullb0 [ 351.986741][ T7752] affs: No valid root block on device nullb0 [ 353.785083][ T7771] loop5: detected capacity change from 0 to 512 [ 353.961360][ T7776] netlink: 148 bytes leftover after parsing attributes in process `syz.4.847'. [ 353.971112][ T7776] netlink: 116 bytes leftover after parsing attributes in process `syz.4.847'. [ 354.455219][ T7771] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 354.607465][ T7771] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.793815][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.851'. [ 356.870659][ T7799] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 357.922523][ T7809] affs: No valid root block on device nullb0 [ 359.341635][ T7821] affs: No valid root block on device nullb0 [ 359.761046][ T7832] netlink: 148 bytes leftover after parsing attributes in process `syz.4.862'. [ 361.188599][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.866'. [ 361.436105][ T7855] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 363.526715][ T7883] netlink: 148 bytes leftover after parsing attributes in process `syz.4.875'. [ 367.038161][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 367.038175][ T26] audit: type=1326 audit(1754696590.404:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 367.190881][ T26] audit: type=1326 audit(1754696590.414:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 367.229416][ T7916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 367.472758][ T26] audit: type=1326 audit(1754696590.414:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 368.476311][ T26] audit: type=1326 audit(1754696590.414:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 368.499633][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.686457][ T26] audit: type=1326 audit(1754696590.414:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 368.877619][ T26] audit: type=1326 audit(1754696590.414:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 368.900007][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.135711][ T26] audit: type=1326 audit(1754696590.414:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 369.932148][ T7919] affs: No valid root block on device nullb0 [ 370.648230][ T26] audit: type=1326 audit(1754696590.414:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 370.685433][ T26] audit: type=1326 audit(1754696590.414:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 370.719495][ T26] audit: type=1326 audit(1754696590.414:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 371.010681][ T7936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.887'. [ 371.020109][ T7936] netlink: 116 bytes leftover after parsing attributes in process `syz.5.887'. [ 371.819432][ T7938] affs: No valid root block on device nullb0 [ 374.652933][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 374.652947][ T26] audit: type=1326 audit(1754696598.024:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 374.761141][ T7981] affs: No valid root block on device nullb0 [ 375.332132][ T26] audit: type=1326 audit(1754696598.024:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 375.386955][ T26] audit: type=1326 audit(1754696598.034:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 375.765211][ T26] audit: type=1326 audit(1754696598.034:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 376.023985][ T26] audit: type=1326 audit(1754696598.034:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 376.069459][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 376.250031][ T26] audit: type=1326 audit(1754696598.034:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 376.432122][ T7996] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 376.442608][ T26] audit: type=1326 audit(1754696598.034:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 376.483200][ T26] audit: type=1326 audit(1754696598.034:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 377.180598][ T26] audit: type=1326 audit(1754696598.034:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 378.208368][ T26] audit: type=1326 audit(1754696598.034:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 378.230930][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.617474][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.626987][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.951383][ T8029] affs: No valid root block on device nullb0 [ 383.431752][ T8041] vivid-008: ================= START STATUS ================= [ 383.440311][ T8041] vivid-008: Generate PTS: true [ 383.445828][ T8041] vivid-008: Generate SCR: true [ 383.450822][ T8041] tpg source WxH: 640x360 (Y'CbCr) [ 383.456142][ T8041] tpg field: 1 [ 383.459656][ T8041] tpg crop: 640x360@0x0 [ 383.463941][ T8041] tpg compose: 640x360@0x0 [ 383.468528][ T8041] tpg colorspace: 8 [ 383.473210][ T8041] tpg transfer function: 0/0 [ 383.477923][ T8041] tpg Y'CbCr encoding: 0/0 [ 383.482569][ T8041] tpg quantization: 0/0 [ 383.486978][ T8041] tpg RGB range: 0/2 [ 383.491089][ T8041] vivid-008: ================== END STATUS ================== [ 383.808724][ T8046] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 385.119256][ T8071] affs: No valid root block on device nullb0 [ 386.084124][ T8084] affs: No valid root block on device nullb0 [ 388.475338][ T8111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 388.791310][ T8114] vivid-008: ================= START STATUS ================= [ 388.799217][ T8114] vivid-008: Generate PTS: true [ 388.804174][ T8114] vivid-008: Generate SCR: true [ 388.809014][ T8114] tpg source WxH: 640x360 (Y'CbCr) [ 388.814178][ T8114] tpg field: 1 [ 388.817533][ T8114] tpg crop: 640x360@0x0 [ 388.821663][ T8114] tpg compose: 640x360@0x0 [ 388.826076][ T8114] tpg colorspace: 8 [ 388.829867][ T8114] tpg transfer function: 0/0 [ 388.834460][ T8114] tpg Y'CbCr encoding: 0/0 [ 388.838853][ T8114] tpg quantization: 0/0 [ 388.843053][ T8114] tpg RGB range: 0/2 [ 388.846937][ T8114] vivid-008: ================== END STATUS ================== [ 390.553356][ T8134] affs: No valid root block on device nullb0 [ 391.350057][ T8145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.577185][ T8157] netlink: 148 bytes leftover after parsing attributes in process `syz.4.945'. [ 392.586257][ T8157] netlink: 116 bytes leftover after parsing attributes in process `syz.4.945'. [ 392.977472][ T8145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.857269][ T8145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.978662][ T8145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.380580][ T8190] affs: No valid root block on device nullb0 [ 397.832557][ T8145] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.848623][ T8145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.863087][ T8145] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.014649][ T8201] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 398.738179][ T8145] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.553962][ T8229] affs: No valid root block on device nullb0 [ 402.502024][ T8246] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 402.979750][ T8249] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 403.383650][ T8241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.968'. [ 404.147674][ T8266] tipc: Started in network mode [ 404.183290][ T8266] tipc: Node identity ee3b90547a7d, cluster identity 4711 [ 404.190662][ T8266] tipc: Enabled bearer , priority 0 [ 404.350665][ T8266] tipc: Resetting bearer [ 404.387192][ T8268] device syzkaller0 entered promiscuous mode [ 404.397561][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 404.769420][ T8265] tipc: Resetting bearer [ 404.924817][ T8265] tipc: Disabling bearer [ 405.007004][ T8283] vivid-008: ================= START STATUS ================= [ 405.015642][ T8283] vivid-008: Generate PTS: true [ 405.020560][ T8283] vivid-008: Generate SCR: true [ 405.026063][ T8283] tpg source WxH: 640x360 (Y'CbCr) [ 405.031386][ T8283] tpg field: 1 [ 405.035067][ T8283] tpg crop: 640x360@0x0 [ 405.039433][ T8283] tpg compose: 640x360@0x0 [ 405.044451][ T8283] tpg colorspace: 8 [ 405.048377][ T8283] tpg transfer function: 0/0 [ 405.053201][ T8283] tpg Y'CbCr encoding: 0/0 [ 405.057624][ T8283] tpg quantization: 0/0 [ 405.061782][ T8283] tpg RGB range: 0/2 [ 405.066018][ T8283] vivid-008: ================== END STATUS ================== [ 406.546341][ T8312] affs: No valid root block on device nullb0 [ 406.735980][ T8325] vivid-008: ================= START STATUS ================= [ 406.744040][ T8325] vivid-008: Generate PTS: true [ 406.749105][ T8325] vivid-008: Generate SCR: true [ 406.754172][ T8325] tpg source WxH: 640x360 (Y'CbCr) [ 406.759471][ T8325] tpg field: 1 [ 406.762957][ T8325] tpg crop: 640x360@0x0 [ 406.767308][ T8325] tpg compose: 640x360@0x0 [ 406.771819][ T8325] tpg colorspace: 8 [ 406.775848][ T8325] tpg transfer function: 0/0 [ 406.780621][ T8325] tpg Y'CbCr encoding: 0/0 [ 406.785431][ T8325] tpg quantization: 0/0 [ 406.801705][ T8325] tpg RGB range: 0/2 [ 406.806176][ T8325] vivid-008: ================== END STATUS ================== [ 407.169831][ T8326] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 407.176381][ T8326] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 407.187133][ T8326] vhci_hcd vhci_hcd.0: Device attached [ 407.391712][ T8327] vhci_hcd: connection closed [ 407.393191][ T151] vhci_hcd: stop threads [ 407.422989][ T151] vhci_hcd: release socket [ 407.428085][ T151] vhci_hcd: disconnect device [ 409.435206][ T8374] affs: No valid root block on device nullb0 [ 410.207780][ T8382] vivid-008: ================= START STATUS ================= [ 410.215866][ T8382] vivid-008: Generate PTS: true [ 410.220854][ T8382] vivid-008: Generate SCR: true [ 410.225871][ T8382] tpg source WxH: 640x360 (Y'CbCr) [ 410.231041][ T8382] tpg field: 1 [ 410.234630][ T8382] tpg crop: 640x360@0x0 [ 410.238835][ T8382] tpg compose: 640x360@0x0 [ 410.243512][ T8382] tpg colorspace: 8 [ 410.247444][ T8382] tpg transfer function: 0/0 [ 410.252118][ T8382] tpg Y'CbCr encoding: 0/0 [ 410.256626][ T8382] tpg quantization: 0/0 [ 410.277864][ T8382] tpg RGB range: 0/2 [ 410.282160][ T8382] vivid-008: ================== END STATUS ================== [ 410.350172][ T8383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 410.356726][ T8383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 410.364862][ T8383] vhci_hcd vhci_hcd.0: Device attached [ 410.673055][ T4230] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 411.003032][ T8384] vhci_hcd: connection reset by peer [ 411.009403][ T4359] vhci_hcd: stop threads [ 411.016631][ T4359] vhci_hcd: release socket [ 411.295731][ T4359] vhci_hcd: disconnect device [ 413.519729][ T8428] affs: No valid root block on device nullb0 [ 416.023120][ T4230] vhci_hcd: vhci_device speed not set [ 419.414816][ T8480] tipc: Enabling of bearer rejected, failed to enable media [ 419.474439][ T8480] device syzkaller0 entered promiscuous mode [ 423.555474][ T8523] bridge0: port 3(erspan0) entered blocking state [ 424.140453][ T8523] bridge0: port 3(erspan0) entered disabled state [ 424.673133][ T8523] device erspan0 entered promiscuous mode [ 424.746356][ T8523] bridge0: port 3(erspan0) entered blocking state [ 424.753506][ T8523] bridge0: port 3(erspan0) entered forwarding state [ 424.829151][ T8533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1053'. [ 428.247751][ T8561] affs: No valid root block on device nullb0 [ 430.431960][ T8570] lo speed is unknown, defaulting to 1000 [ 436.177486][ T8637] team0: No ports can be present during mode change [ 438.717932][ T8662] x_tables: duplicate underflow at hook 3 [ 440.057736][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.159496][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.932205][ T8694] affs: No valid root block on device nullb0 [ 441.382390][ T8688] device team_slave_0 entered promiscuous mode [ 441.388956][ T8688] device team_slave_1 entered promiscuous mode [ 441.397141][ T8688] device macsec1 entered promiscuous mode [ 441.403031][ T8688] device team0 entered promiscuous mode [ 443.181004][ T8716] affs: No valid root block on device nullb0 [ 445.645659][ T8736] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 447.406696][ T8756] vivid-008: ================= START STATUS ================= [ 447.414574][ T8756] vivid-008: Generate PTS: true [ 447.419703][ T8756] vivid-008: Generate SCR: true [ 447.425006][ T8756] tpg source WxH: 640x360 (Y'CbCr) [ 447.430224][ T8756] tpg field: 1 [ 447.433842][ T8756] tpg crop: 640x360@0x0 [ 447.438093][ T8756] tpg compose: 640x360@0x0 [ 447.442945][ T8756] tpg colorspace: 8 [ 447.446882][ T8756] tpg transfer function: 0/0 [ 447.451481][ T8756] tpg Y'CbCr encoding: 0/0 [ 447.456014][ T8756] tpg quantization: 0/0 [ 447.471437][ T8756] tpg RGB range: 0/2 [ 447.475524][ T8756] vivid-008: ================== END STATUS ================== [ 447.634219][ T8757] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 447.640783][ T8757] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 447.649344][ T8757] vhci_hcd vhci_hcd.0: Device attached [ 448.195666][ T8758] vhci_hcd: connection closed [ 448.198287][ T4434] vhci_hcd: stop threads [ 448.752675][ T4434] vhci_hcd: release socket [ 448.759740][ T4434] vhci_hcd: disconnect device [ 449.101945][ T1109] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 449.110103][ T1109] usb 35-1: enqueue for inactive port 0 [ 449.203000][ T1109] vhci_hcd: vhci_device speed not set [ 449.800517][ T8778] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 450.933614][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 451.031962][ T8785] device hsr0 entered promiscuous mode [ 453.424674][ T8805] vivid-008: ================= START STATUS ================= [ 453.432504][ T8805] vivid-008: Generate PTS: true [ 453.438321][ T8805] vivid-008: Generate SCR: true [ 453.443408][ T8805] tpg source WxH: 640x360 (Y'CbCr) [ 453.448599][ T8805] tpg field: 1 [ 453.452058][ T8805] tpg crop: 640x360@0x0 [ 453.456779][ T8805] tpg compose: 640x360@0x0 [ 453.461322][ T8805] tpg colorspace: 8 [ 453.465229][ T8805] tpg transfer function: 0/0 [ 453.470026][ T8805] tpg Y'CbCr encoding: 0/0 [ 453.482797][ T8805] tpg quantization: 0/0 [ 453.487219][ T8805] tpg RGB range: 0/2 [ 453.491297][ T8805] vivid-008: ================== END STATUS ================== [ 453.611184][ T8807] affs: No valid root block on device nullb0 [ 457.423038][ T8836] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 457.960034][ T8840] bridge0: port 3(erspan0) entered blocking state [ 457.990857][ T8840] bridge0: port 3(erspan0) entered disabled state [ 457.999975][ T8840] device erspan0 entered promiscuous mode [ 458.013594][ T8840] bridge0: port 3(erspan0) entered blocking state [ 458.020167][ T8840] bridge0: port 3(erspan0) entered forwarding state [ 459.072569][ T8860] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1147'. [ 460.126892][ T8873] comedi comedi2: fl512: I/O port conflict (0x10,16) [ 463.303074][ T8887] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1151'. [ 463.312910][ T8887] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1151'. [ 463.906477][ T8899] vivid-008: ================= START STATUS ================= [ 463.914555][ T8899] vivid-008: Generate PTS: true [ 463.919658][ T8899] vivid-008: Generate SCR: true [ 463.925181][ T8899] tpg source WxH: 640x360 (Y'CbCr) [ 463.930493][ T8899] tpg field: 1 [ 463.933978][ T8899] tpg crop: 640x360@0x0 [ 463.938278][ T8899] tpg compose: 640x360@0x0 [ 463.942949][ T8899] tpg colorspace: 8 [ 463.946775][ T8899] tpg transfer function: 0/0 [ 463.951474][ T8899] tpg Y'CbCr encoding: 0/0 [ 463.956152][ T8899] tpg quantization: 0/0 [ 463.972443][ T8899] tpg RGB range: 0/2 [ 463.976800][ T8899] vivid-008: ================== END STATUS ================== [ 464.672610][ T8901] lo speed is unknown, defaulting to 1000 [ 466.017728][ T8918] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1160'. [ 467.519934][ T8938] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1164'. [ 467.529414][ T8938] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1164'. [ 471.303634][ T8968] lo speed is unknown, defaulting to 1000 [ 471.491269][ T8975] bridge0: port 3(macsec0) entered blocking state [ 471.513555][ T8975] bridge0: port 3(macsec0) entered disabled state [ 471.566664][ T8975] device macsec0 entered promiscuous mode [ 471.589844][ T8975] bridge0: port 3(macsec0) entered blocking state [ 471.596470][ T8975] bridge0: port 3(macsec0) entered forwarding state [ 471.834216][ T8982] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1177'. [ 474.136785][ T9003] netlink: 'syz.1.1184': attribute type 10 has an invalid length. [ 474.174423][ T9003] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 474.566254][ T9013] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1188'. [ 474.865087][ T8993] affs: No valid root block on device nullb0 [ 475.124233][ T9023] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1189'. [ 475.133416][ T9023] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1189'. [ 476.476160][ T9042] tipc: Enabling of bearer rejected, failed to enable media [ 476.557154][ T9047] netlink: 'syz.4.1195': attribute type 13 has an invalid length. [ 476.589103][ T9047] netlink: 'syz.4.1195': attribute type 17 has an invalid length. [ 476.727860][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.781648][ T9047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.846687][ T9067] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1200'. [ 476.913953][ T9064] lo speed is unknown, defaulting to 1000 [ 476.980525][ T9075] tipc: Started in network mode [ 476.991840][ T9075] tipc: Node identity 2e0569bf3e0a, cluster identity 4711 [ 476.999319][ T9075] tipc: Enabled bearer , priority 0 [ 477.016766][ T9075] device syzkaller0 entered promiscuous mode [ 477.108988][ T9075] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 477.155903][ T9060] syzkaller0: refused to change device tx_queue_len [ 477.171086][ T9081] tipc: Resetting bearer [ 477.195000][ T9074] tipc: Resetting bearer [ 477.202532][ T9074] tipc: Disabling bearer [ 478.764745][ T9109] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1213'. [ 478.901148][ T9111] tipc: Started in network mode [ 478.906127][ T9111] tipc: Node identity 2e18d0c19b45, cluster identity 4711 [ 478.917315][ T9111] tipc: Enabled bearer , priority 0 [ 478.926298][ T9111] device syzkaller0 entered promiscuous mode [ 479.102887][ T9114] tipc: Resetting bearer [ 479.149220][ T9113] affs: No valid root block on device nullb0 [ 479.207299][ T9110] tipc: Resetting bearer [ 479.230724][ T9110] tipc: Disabling bearer [ 480.086092][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.256428][ T9146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1225'. [ 480.694200][ T9155] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1227'. [ 480.703373][ T9155] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1227'. [ 481.972120][ T9180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1239'. [ 482.120195][ T9183] affs: No valid root block on device nullb0 [ 482.673506][ T9188] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 483.114929][ T9202] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1243'. [ 483.940639][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 484.138252][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1252'. [ 485.388667][ T9241] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1259'. [ 486.213762][ T9251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1264'. [ 486.567375][ T9240] affs: No valid root block on device nullb0 [ 488.302501][ T9282] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1273'. [ 489.735129][ T9298] affs: No valid root block on device nullb0 [ 490.941318][ T9315] tipc: Started in network mode [ 490.974231][ T9315] tipc: Node identity ee734b1020b9, cluster identity 4711 [ 491.017414][ T9315] tipc: Enabled bearer , priority 0 [ 491.081257][ T9320] device syzkaller0 entered promiscuous mode [ 491.134496][ T9315] tipc: Resetting bearer [ 491.189041][ T9311] tipc: Resetting bearer [ 491.231110][ T9311] tipc: Disabling bearer [ 491.425215][ T9330] affs: No valid root block on device nullb0 [ 491.786114][ T9336] tipc: Enabled bearer , priority 0 [ 491.809775][ T9336] device syzkaller0 entered promiscuous mode [ 491.875133][ T9336] tipc: Resetting bearer [ 491.962035][ T9335] tipc: Resetting bearer [ 491.991041][ T9335] tipc: Disabling bearer [ 492.258651][ T9347] device syzkaller1 entered promiscuous mode [ 494.803896][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.832663][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.854524][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 494.989774][ T9370] syz.2.1304[9370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.989877][ T9370] syz.2.1304[9370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.020511][ T9373] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 495.265552][ T9370] syz.2.1304 (9370) used greatest stack depth: 18592 bytes left [ 496.490926][ T9403] tipc: Enabled bearer , priority 0 [ 496.498601][ T9403] device syzkaller0 entered promiscuous mode [ 496.550631][ T9403] tipc: Resetting bearer [ 496.568288][ T9403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.580590][ T9402] tipc: Resetting bearer [ 496.598113][ T9402] tipc: Disabling bearer [ 496.657677][ T9401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1313'. [ 496.802233][ T9407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1313'. [ 497.460178][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 498.672421][ T9438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.716041][ T9438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.724186][ T9438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.733854][ T9438] device bridge_slave_0 left promiscuous mode [ 498.740439][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.752789][ T9438] device bridge_slave_1 left promiscuous mode [ 498.761514][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.038683][ T9438] bond0: (slave bond_slave_0): Releasing backup interface [ 499.160312][ T9438] bond0: (slave bond_slave_1): Releasing backup interface [ 499.299420][ T9438] team0: Port device team_slave_0 removed [ 499.327605][ T9438] team0: Port device team_slave_1 removed [ 499.343860][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.351774][ T9438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.543767][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.568564][ T9438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.767855][ T9438] device macsec0 left promiscuous mode [ 499.938276][ T9438] bridge0: port 3(macsec0) entered disabled state [ 500.516291][ T9443] netlink: 'syz.5.1326': attribute type 10 has an invalid length. [ 500.576615][ T9443] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 501.546546][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.557403][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.544807][ T9490] affs: No valid root block on device nullb0 [ 502.650062][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1341'. [ 504.543977][ T4237] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 504.872932][ T4237] usb 6-1: Using ep0 maxpacket: 16 [ 505.076919][ T4237] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.088193][ T4237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.102928][ T4237] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 506.124647][ T9536] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1354'. [ 506.134415][ T9536] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1354'. [ 507.146214][ T9542] affs: No valid root block on device nullb0 [ 507.243048][ T4237] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 507.259661][ T4237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.307265][ T4237] usb 6-1: config 0 descriptor?? [ 507.333227][ T4237] usb 6-1: can't set config #0, error -71 [ 507.346295][ T4237] usb 6-1: USB disconnect, device number 4 [ 508.563059][ T4292] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 508.591745][ T9564] tipc: Enabled bearer , priority 0 [ 508.623652][ T9564] device syzkaller0 entered promiscuous mode [ 508.660262][ T9564] tipc: Resetting bearer [ 508.692921][ T9563] tipc: Resetting bearer [ 508.735981][ T9563] tipc: Disabling bearer [ 508.935755][ T4292] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 508.980787][ T4292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.045482][ T4292] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.101953][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.767650][ T4292] usb 2-1: config 0 descriptor?? [ 509.816359][ T4292] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 510.017621][ T9578] vivid-008: ================= START STATUS ================= [ 510.025563][ T9578] vivid-008: Generate PTS: true [ 510.030573][ T9578] vivid-008: Generate SCR: true [ 510.035635][ T9578] tpg source WxH: 640x360 (Y'CbCr) [ 510.040977][ T9578] tpg field: 1 [ 510.044428][ T9578] tpg crop: 640x360@0x0 [ 510.049023][ T9578] tpg compose: 640x360@0x0 [ 510.053733][ T9578] tpg colorspace: 8 [ 510.057586][ T9578] tpg transfer function: 0/0 [ 510.062432][ T9578] tpg Y'CbCr encoding: 0/0 [ 510.067045][ T9578] tpg quantization: 0/0 [ 510.081082][ T9578] tpg RGB range: 0/2 [ 510.085481][ T9578] vivid-008: ================== END STATUS ================== [ 512.853138][ T4321] usb 2-1: USB disconnect, device number 7 [ 512.918651][ T9599] netdevsim netdevsim5: Direct firmware load for . [ 512.918651][ T9599] failed with error -2 [ 512.929448][ T9599] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 512.929448][ T9599] [ 513.687679][ T9610] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.697843][ T9610] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.706720][ T9610] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.715468][ T9610] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.514903][ T9610] team0: Port device vxlan0 added [ 514.538100][ T9625] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 514.549498][ T9625] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 514.742715][ T9632] vivid-008: ================= START STATUS ================= [ 514.750687][ T9632] vivid-008: Generate PTS: true [ 514.755816][ T9632] vivid-008: Generate SCR: true [ 514.760732][ T9632] tpg source WxH: 640x360 (Y'CbCr) [ 514.765971][ T9632] tpg field: 1 [ 514.769594][ T9632] tpg crop: 640x360@0x0 [ 514.773958][ T9632] tpg compose: 640x360@0x0 [ 514.778596][ T9632] tpg colorspace: 8 [ 514.782452][ T9632] tpg transfer function: 0/0 [ 514.787148][ T9632] tpg Y'CbCr encoding: 0/0 [ 514.791679][ T9632] tpg quantization: 0/0 [ 514.807703][ T9632] tpg RGB range: 0/2 [ 514.811826][ T9632] vivid-008: ================== END STATUS ================== [ 516.109819][ T9638] device team_slave_0 entered promiscuous mode [ 516.116495][ T9638] device team_slave_1 entered promiscuous mode [ 516.189611][ T9638] device macsec0 entered promiscuous mode [ 516.208518][ T9638] device team0 entered promiscuous mode [ 517.189067][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 517.189082][ T26] audit: type=1326 audit(1754696740.564:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.023204][ T26] audit: type=1326 audit(1754696740.604:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.093001][ T26] audit: type=1326 audit(1754696740.614:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.223194][ T26] audit: type=1326 audit(1754696740.624:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.246099][ T26] audit: type=1326 audit(1754696740.634:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.298374][ T26] audit: type=1326 audit(1754696740.644:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.372215][ T26] audit: type=1326 audit(1754696741.394:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.426483][ T26] audit: type=1326 audit(1754696741.394:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 518.542390][ T26] audit: type=1326 audit(1754696741.394:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 519.629298][ T26] audit: type=1326 audit(1754696741.394:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f41434a0be9 code=0x7ffc0000 [ 519.965635][ T9672] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1395'. [ 522.838056][ T4291] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 523.739242][ T9713] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1408'. [ 524.452998][ T4291] usb 4-1: Using ep0 maxpacket: 8 [ 524.943874][ T4291] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 524.978258][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.951158][ T4291] usb 4-1: can't set config #252, error -71 [ 525.963571][ T4291] usb 4-1: USB disconnect, device number 3 [ 526.997774][ T9752] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1420'. [ 530.397896][ T9804] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1431'. [ 531.217963][ T9810] lo speed is unknown, defaulting to 1000 [ 531.256349][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 531.256364][ T26] audit: type=1326 audit(1754696754.634:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.3.1435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7739725be9 code=0x0 [ 533.995013][ T9843] vivid-003: disconnect [ 534.073731][ T9842] vivid-003: reconnect [ 535.183002][ T5620] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 535.665830][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.677145][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.687953][ T5620] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 535.697392][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.714678][ T5620] usb 2-1: config 0 descriptor?? [ 536.313822][ T5620] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 536.420888][ T5620] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 536.481137][ T9846] udc-core: couldn't find an available UDC or it's busy [ 536.534880][ T9846] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 536.666828][ T5620] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input5 [ 536.996108][ T5620] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 537.090356][ T5620] usb 2-1: USB disconnect, device number 8 [ 537.295890][ T9863] fido_id[9863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 537.576209][ T4332] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 537.843007][ T4332] usb 3-1: Using ep0 maxpacket: 32 [ 538.592490][ T9875] tipc: Started in network mode [ 538.618414][ T9875] tipc: Node identity 72a531b8a5c4, cluster identity 4711 [ 538.643248][ T9875] tipc: Enabled bearer , priority 0 [ 538.666948][ T9875] device syzkaller0 entered promiscuous mode [ 538.690689][ T9875] tipc: Resetting bearer [ 538.700488][ T4291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 538.713267][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.736318][ T4332] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 538.747817][ T9874] tipc: Resetting bearer [ 538.755767][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.783226][ T4332] usb 3-1: config 0 descriptor?? [ 538.810352][ T9874] tipc: Disabling bearer [ 539.111180][ T4291] usb 4-1: Using ep0 maxpacket: 16 [ 540.443085][ T4332] usbhid 3-1:0.0: can't add hid device: -71 [ 540.449405][ T4332] usbhid: probe of 3-1:0.0 failed with error -71 [ 540.480549][ T4332] usb 3-1: USB disconnect, device number 2 [ 540.563134][ T4291] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 540.603149][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.611184][ T4291] usb 4-1: Product: syz [ 540.642911][ T4291] usb 4-1: Manufacturer: syz [ 540.647540][ T4291] usb 4-1: SerialNumber: syz [ 540.673542][ T4291] r8152-cfgselector 4-1: config 0 descriptor?? [ 540.813213][ T4291] r8152-cfgselector 4-1: can't set config #0, error -71 [ 540.836205][ T4291] r8152-cfgselector 4-1: Unknown version 0x0000 [ 540.874022][ T4291] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 541.811732][ T9923] capability: warning: `syz.3.1467' uses 32-bit capabilities (legacy support in use) [ 543.046259][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060372c00: rx timeout, send abort [ 543.337016][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.344242][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.547072][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060373c00: rx timeout, send abort [ 543.556265][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060372c00: abort rx timeout. Force session deactivation [ 543.926991][ T9932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.055593][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888060373c00: abort rx timeout. Force session deactivation [ 544.171881][ T9932] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.180576][ T9932] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.189251][ T9932] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.197634][ T9932] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.242137][ T9941] device macsec1 entered promiscuous mode [ 544.276633][ T9941] device team0 entered promiscuous mode [ 544.283303][ T9942] tipc: Enabled bearer , priority 0 [ 544.369158][ T9942] tipc: Disabling bearer [ 544.402462][ T9961] device veth1_macvtap left promiscuous mode [ 544.432594][ T9959] tipc: Enabled bearer , priority 0 [ 544.470024][ T9959] device syzkaller0 entered promiscuous mode [ 544.484140][ T9959] tipc: Resetting bearer [ 544.531453][ T9958] tipc: Resetting bearer [ 544.549313][ T9958] tipc: Disabling bearer [ 544.622949][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 546.328496][ T4332] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 546.443245][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.474957][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.488900][ T13] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 546.498658][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.515213][ T13] usb 3-1: config 0 descriptor?? [ 546.623146][ T4332] usb 4-1: Using ep0 maxpacket: 32 [ 546.743186][ T4332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.787248][ T4332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.810537][ T4332] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.850585][ T9997] tipc: Enabled bearer , priority 0 [ 546.861216][ T9997] device syzkaller0 entered promiscuous mode [ 546.896010][ T9997] tipc: Resetting bearer [ 546.916223][ T9996] tipc: Resetting bearer [ 546.931765][ T9996] tipc: Disabling bearer [ 546.983059][ T4332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.006083][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.034797][ T4332] usb 4-1: Product: syz [ 547.039994][ T4332] usb 4-1: Manufacturer: syz [ 547.042006][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1492'. [ 547.050295][ T4332] usb 4-1: SerialNumber: syz [ 547.154374][ T4332] cdc_ncm 4-1:1.0: skipping garbage [ 547.159624][ T4332] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 547.195807][ T4332] cdc_ncm 4-1:1.0: bind() failure [ 547.365566][ T4332] usb 4-1: USB disconnect, device number 5 [ 548.253209][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 548.259615][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 549.819926][ T13] usb 3-1: USB disconnect, device number 3 [ 549.870233][T10035] tipc: Enabled bearer , priority 0 [ 549.884425][T10035] tipc: Disabling bearer [ 549.898841][T10032] device macsec1 entered promiscuous mode [ 549.904802][T10032] device team0 entered promiscuous mode [ 549.910381][T10032] device team_slave_0 entered promiscuous mode [ 549.918420][T10032] device team_slave_1 entered promiscuous mode [ 549.924890][T10032] device vxlan0 entered promiscuous mode [ 550.313165][ T4332] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 550.584269][ T4332] usb 4-1: Using ep0 maxpacket: 8 [ 550.883064][ T4332] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 551.242648][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.277814][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 551.318307][ T4332] usb 4-1: Product: syz [ 551.322516][ T4332] usb 4-1: Manufacturer: syz [ 551.349327][ T4332] usb 4-1: SerialNumber: syz [ 551.488738][ T4332] usb 4-1: config 0 descriptor?? [ 552.131117][ T4332] usb 4-1: can't set config #0, error -71 [ 552.157742][ T4332] usb 4-1: USB disconnect, device number 6 [ 552.542429][ T4237] Bluetooth: hci2: command 0x2021 tx timeout [ 552.876655][T10092] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 552.883181][T10092] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 552.893029][ T4332] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 552.901780][T10092] vhci_hcd vhci_hcd.0: Device attached [ 553.015619][T10092] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 553.022251][T10092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.031045][T10101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 553.101547][T10101] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 553.108175][T10101] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 553.123130][ T4228] vhci_hcd: vhci_device speed not set [ 553.162937][ T4332] usb 4-1: Using ep0 maxpacket: 16 [ 553.184381][T10101] vhci_hcd vhci_hcd.0: Device attached [ 553.189953][T10092] vhci_hcd vhci_hcd.0: Device attached [ 553.203241][ T4228] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 553.283287][ T4332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 553.297585][T10106] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 553.304307][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 553.322261][T10092] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 553.328897][T10092] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 553.396079][T10092] vhci_hcd vhci_hcd.0: Device attached [ 553.429909][T10106] vhci_hcd vhci_hcd.0: Device attached [ 553.903522][ T4332] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 554.261552][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.270460][ T4332] usb 4-1: Product: syz [ 554.347526][ T4332] usb 4-1: Manufacturer: syz [ 554.357347][T10128] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1523'. [ 554.386688][ T4332] usb 4-1: SerialNumber: syz [ 554.421815][ T4332] usb 4-1: config 0 descriptor?? [ 554.458704][T10109] vhci_hcd: connection closed [ 554.458982][ T557] vhci_hcd: stop threads [ 554.500332][ T557] vhci_hcd: release socket [ 554.513545][T10098] vhci_hcd: connection closed [ 554.513990][T10108] vhci_hcd: connection closed [ 554.514796][ T4332] hub 4-1:0.0: bad descriptor, ignoring hub [ 554.518979][T10102] vhci_hcd: connection closed [ 554.529694][T10093] vhci_hcd: connection reset by peer [ 554.573264][ T557] vhci_hcd: disconnect device [ 554.587342][ T4332] hub: probe of 4-1:0.0 failed with error -5 [ 554.593552][ T557] vhci_hcd: stop threads [ 554.606727][ T557] vhci_hcd: release socket [ 554.653193][ T557] vhci_hcd: disconnect device [ 554.680254][ T557] vhci_hcd: stop threads [ 554.682145][T10142] input: syz0 as /devices/virtual/input/input6 [ 554.726372][ T557] vhci_hcd: release socket [ 554.758261][ T557] vhci_hcd: disconnect device [ 554.792941][ T21] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 554.812989][ T557] vhci_hcd: stop threads [ 554.826286][ T557] vhci_hcd: release socket [ 554.839965][ T557] vhci_hcd: disconnect device [ 554.870117][ T557] vhci_hcd: stop threads [ 554.875181][ T4332] usb 4-1: USB disconnect, device number 7 [ 554.885686][ T557] vhci_hcd: release socket [ 554.927019][ T557] vhci_hcd: disconnect device [ 555.243006][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.257005][T10145] udevd[10145]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.307740][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.524330][ T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.632933][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.757330][T10168] affs: No valid root block on device nullb0 [ 556.034691][ T21] usb 2-1: Product: syz [ 556.067299][ T21] usb 2-1: Manufacturer: syz [ 556.099645][ T21] usb 2-1: SerialNumber: syz [ 557.346474][ T21] usb 2-1: 0:2 : does not exist [ 557.442061][ T21] usb 2-1: USB disconnect, device number 9 [ 557.730818][T10146] udevd[10146]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.180035][T10216] IPVS: set_ctl: invalid protocol: 44 172.20.20.48:20004 [ 558.194488][T10216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1542'. [ 558.263633][T10216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1542'. [ 558.280305][T10218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1542'. [ 558.293255][ T4228] vhci_hcd: vhci_device speed not set [ 559.240154][ T4332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 560.223043][ T4332] usb 3-1: Using ep0 maxpacket: 16 [ 560.486424][ T26] audit: type=1326 audit(1754696783.864:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.560722][ T26] audit: type=1326 audit(1754696783.894:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.584597][ T4332] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 560.604378][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.624492][ T4332] usb 3-1: Product: syz [ 560.637963][ T4332] usb 3-1: Manufacturer: syz [ 560.646746][ T4332] usb 3-1: SerialNumber: syz [ 560.652656][ T26] audit: type=1326 audit(1754696783.894:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.683493][ T4292] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 560.696505][ T4332] usb 3-1: config 0 descriptor?? [ 560.720158][ T26] audit: type=1326 audit(1754696783.894:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.756421][ T26] audit: type=1326 audit(1754696783.894:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.789929][ T26] audit: type=1326 audit(1754696783.904:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.822657][ T26] audit: type=1326 audit(1754696783.904:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.848856][T10257] bridge0: port 3(erspan0) entered disabled state [ 560.878999][ T26] audit: type=1326 audit(1754696783.904:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.912740][ T26] audit: type=1326 audit(1754696783.904:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 560.976903][ T4332] usb 3-1: ignoring: not an USB2CAN converter [ 561.003767][ T4292] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 561.006986][ T26] audit: type=1326 audit(1754696783.904:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 561.022598][ T4292] usb usb42-port1: attempt power cycle [ 561.227448][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.235259][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.423647][ T4292] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 561.743117][ T4292] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 561.757844][ T4292] usb usb42-port1: unable to enumerate USB device [ 562.040757][T10257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.294823][T10257] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.304397][T10257] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.314000][T10257] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.323930][T10257] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.369862][T10253] tipc: Cannot configure node identity twice [ 562.403742][T10216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1542'. [ 562.477870][ T5620] usb 3-1: USB disconnect, device number 4 [ 562.938754][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.606268][ T5620] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 564.305231][T10322] affs: No valid root block on device nullb0 [ 564.512963][ T5620] usb 3-1: Using ep0 maxpacket: 32 [ 564.763080][ T5620] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 564.782952][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 564.791048][ T5620] usb 3-1: Product: syz [ 564.822144][ T5620] usb 3-1: config 0 descriptor?? [ 564.865158][ T5620] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 564.973574][ T5620] gspca_stv06xx: st6422 sensor detected [ 565.406240][T10342] vivid-008: ================= START STATUS ================= [ 565.414071][T10342] vivid-008: Generate PTS: true [ 565.418937][T10342] vivid-008: Generate SCR: true [ 565.423904][T10342] tpg source WxH: 640x360 (Y'CbCr) [ 565.428992][T10342] tpg field: 1 [ 565.432335][T10342] tpg crop: 640x360@0x0 [ 565.436517][T10342] tpg compose: 640x360@0x0 [ 565.440912][T10342] tpg colorspace: 8 [ 565.444749][T10342] tpg transfer function: 0/0 [ 565.449312][T10342] tpg Y'CbCr encoding: 0/0 [ 565.453745][T10342] tpg quantization: 0/0 [ 565.457881][T10342] tpg RGB range: 0/2 [ 565.461774][T10342] vivid-008: ================== END STATUS ================== [ 565.502286][T10343] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 565.508992][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 565.533079][T10343] vhci_hcd vhci_hcd.0: Device attached [ 565.593533][T10344] vhci_hcd: connection closed [ 565.593784][ T155] vhci_hcd: stop threads [ 565.618898][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801eb6d800: rx timeout, send abort [ 565.628453][ T155] vhci_hcd: release socket [ 565.644876][ T155] vhci_hcd: disconnect device [ 566.570308][ T5620] STV06xx: probe of 3-1:0.0 failed with error -71 [ 566.621431][ T5620] usb 3-1: USB disconnect, device number 5 [ 566.746153][T10339] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.755995][T10339] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.764995][T10339] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.774235][T10339] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.854014][T10357] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1571'. [ 567.175108][T10370] affs: No valid root block on device nullb0 [ 567.594898][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 568.032912][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 568.084250][ T7155] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 568.091822][ T4321] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 568.099639][ T4332] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 568.183297][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 568.392952][ T4332] usb 5-1: Using ep0 maxpacket: 16 [ 568.398179][ T7155] usb 3-1: Using ep0 maxpacket: 32 [ 568.513287][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 568.523431][ T4321] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 568.533068][ T7155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.549521][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.570450][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.578869][ T7155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.592794][ T13] usb 2-1: Product: syz [ 568.598113][ T4321] usb 6-1: config 0 descriptor?? [ 568.606140][ T7155] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 568.615757][ T4332] usb 5-1: unable to get BOS descriptor or descriptor too short [ 568.623790][ T13] usb 2-1: Manufacturer: syz [ 568.628461][ T13] usb 2-1: SerialNumber: syz [ 568.633579][ T7155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.654857][ T13] usb 2-1: config 0 descriptor?? [ 568.669091][ T7155] usb 3-1: config 0 descriptor?? [ 568.682938][ T4321] gspca_main: spca508-2.14.0 probing 8086:0110 [ 568.693384][ T4332] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 568.700971][ T4332] usb 5-1: can't read configurations, error -71 [ 568.708870][ T13] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 568.720768][ T13] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 568.759330][ T7155] hub 3-1:0.0: USB hub found [ 568.903182][ T4321] gspca_spca508: reg_read err -32 [ 568.963133][ T7155] hub 3-1:0.0: 1 port detected [ 569.183040][ T7155] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 569.190026][ T7155] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 569.293199][ T7155] usbhid 3-1:0.0: can't add hid device: -71 [ 569.299332][ T7155] usbhid: probe of 3-1:0.0 failed with error -71 [ 569.334040][ T7155] usb 3-1: USB disconnect, device number 6 [ 569.353043][ T13] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 569.451606][T10387] usb usb8: usbfs: process 10387 (syz.4.1579) did not claim interface 0 before use [ 569.464901][ T4321] gspca_spca508: reg_read err -110 [ 569.483196][ T4321] gspca_spca508: reg_read err -32 [ 569.503030][ T4321] gspca_spca508: reg_read err -32 [ 569.523161][ T4321] gspca_spca508: reg write: error -32 [ 569.528797][ T4321] spca508: probe of 6-1:0.0 failed with error -32 [ 569.924997][T10398] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 570.432162][ T7155] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 570.474928][ T4292] usb 6-1: USB disconnect, device number 5 [ 570.732426][T10404] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1586'. [ 570.903652][ T7155] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 570.922325][ T7155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.009165][ T7155] usb 4-1: config 0 descriptor?? [ 571.042970][ T4292] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 571.087444][ T7155] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 571.513035][ T7155] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 571.763122][ T7155] gspca_cpia1: usb_control_msg 01, error -71 [ 571.769319][ T7155] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 571.785302][ T7155] usb 4-1: USB disconnect, device number 8 [ 571.803150][ T4321] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 571.823242][ T4292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.834673][ T4292] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 571.843795][ T4292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.853931][ T4292] usb 3-1: config 0 descriptor?? [ 571.883470][ T13] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 571.893560][ T13] em28xx 2-1:0.0: board has no eeprom [ 571.905695][ T4292] pwc: Askey VC010 type 2 USB webcam detected. [ 572.002925][ T13] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 572.012993][ T13] em28xx 2-1:0.0: dvb set to bulk mode. [ 572.026355][ T7155] em28xx 2-1:0.0: Binding DVB extension [ 572.040331][ T13] usb 2-1: USB disconnect, device number 10 [ 572.046481][ T4321] usb 6-1: Using ep0 maxpacket: 16 [ 572.063445][ T13] em28xx 2-1:0.0: Disconnecting em28xx [ 572.097243][ T7155] em28xx 2-1:0.0: Registering input extension [ 572.109337][ T13] em28xx 2-1:0.0: Closing input extension [ 572.163917][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.212695][ T4321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.229663][ T4321] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 572.239612][ T13] em28xx 2-1:0.0: Freeing device [ 572.253768][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.303937][ T4321] usb 6-1: config 0 descriptor?? [ 572.333144][ T4292] pwc: recv_control_msg error -32 req 02 val 2b00 [ 572.418485][T10439] vivid-008: ================= START STATUS ================= [ 572.426432][T10439] vivid-008: Generate PTS: true [ 572.431435][T10439] vivid-008: Generate SCR: true [ 572.436567][T10439] tpg source WxH: 640x360 (Y'CbCr) [ 572.441754][T10439] tpg field: 1 [ 572.445196][T10439] tpg crop: 640x360@0x0 [ 572.449430][T10439] tpg compose: 640x360@0x0 [ 572.454049][T10439] tpg colorspace: 8 [ 572.457872][T10439] tpg transfer function: 0/0 [ 572.462503][T10439] tpg Y'CbCr encoding: 0/0 [ 572.467052][T10439] tpg quantization: 0/0 [ 572.480085][T10439] tpg RGB range: 0/2 [ 572.484222][T10439] vivid-008: ================== END STATUS ================== [ 572.484692][ T4292] pwc: recv_control_msg error -32 req 02 val 2700 [ 573.085782][ T4321] ntrig 0003:1B96:0008.0002: unbalanced delimiter at end of report description [ 573.384242][T10440] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 573.390890][T10440] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 573.398738][T10440] vhci_hcd vhci_hcd.0: Device attached [ 573.406935][T10441] vhci_hcd: connection closed [ 573.408867][ T151] vhci_hcd: stop threads [ 573.692069][ T151] vhci_hcd: release socket [ 573.697052][ T151] vhci_hcd: disconnect device [ 573.713021][ T4292] pwc: recv_control_msg error -32 req 02 val 2c00 [ 573.728263][ T4321] ntrig 0003:1B96:0008.0002: parse failed [ 573.753014][ T4292] pwc: recv_control_msg error -32 req 04 val 1000 [ 573.765212][ T4321] ntrig: probe of 0003:1B96:0008.0002 failed with error -22 [ 573.813018][ T4292] pwc: recv_control_msg error -71 req 04 val 1300 [ 573.833036][ T4292] pwc: recv_control_msg error -71 req 04 val 1400 [ 573.867082][ T4292] pwc: recv_control_msg error -71 req 02 val 2000 [ 573.992986][ T5620] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 574.224391][ T4237] usb 6-1: USB disconnect, device number 6 [ 574.231241][T10456] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1600'. [ 574.233458][ T4292] pwc: recv_control_msg error -71 req 02 val 2100 [ 574.273239][ T4292] pwc: recv_control_msg error -71 req 04 val 1500 [ 574.293008][ T4292] pwc: recv_control_msg error -71 req 02 val 2500 [ 574.323104][ T4292] pwc: recv_control_msg error -71 req 02 val 2400 [ 574.415570][ T4292] pwc: recv_control_msg error -71 req 02 val 2600 [ 574.433051][ T4292] pwc: recv_control_msg error -71 req 02 val 2900 [ 574.483155][ T4292] pwc: recv_control_msg error -71 req 02 val 2800 [ 574.501707][T10461] tipc: Enabled bearer , priority 0 [ 574.503099][ T4292] pwc: recv_control_msg error -71 req 04 val 1100 [ 574.510226][T10461] device syzkaller0 entered promiscuous mode [ 574.541195][T10460] tipc: Resetting bearer [ 574.553026][ T4292] pwc: recv_control_msg error -71 req 04 val 1200 [ 574.574763][T10460] tipc: Disabling bearer [ 574.586490][ T4292] pwc: Registered as video103. [ 574.600987][ T4292] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 574.656032][ T5620] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.710040][ T5620] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 574.741945][ T4292] usb 3-1: USB disconnect, device number 7 [ 574.776920][ T5620] usb 4-1: config 0 interface 0 has no altsetting 0 [ 574.953202][ T4321] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 574.965033][ T5620] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 574.974807][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.985148][ T5620] usb 4-1: config 0 descriptor?? [ 575.330799][T10479] vivid-008: ================= START STATUS ================= [ 575.338904][T10479] vivid-008: Generate PTS: true [ 575.343983][T10479] vivid-008: Generate SCR: true [ 575.348972][T10479] tpg source WxH: 640x360 (Y'CbCr) [ 575.354205][T10479] tpg field: 1 [ 575.357600][T10479] tpg crop: 640x360@0x0 [ 575.361819][T10479] tpg compose: 640x360@0x0 [ 575.366481][T10479] tpg colorspace: 8 [ 575.370433][T10479] tpg transfer function: 0/0 [ 575.375171][T10479] tpg Y'CbCr encoding: 0/0 [ 575.379858][T10479] tpg quantization: 0/0 [ 575.397709][T10479] tpg RGB range: 0/2 [ 575.401883][T10479] vivid-008: ================== END STATUS ================== [ 575.443361][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.454470][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 575.798229][ T5620] gembird 0003:11FF:3331.0003: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0 [ 576.602198][ T5620] usb 4-1: USB disconnect, device number 9 [ 576.673765][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.737464][ T4321] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 576.773164][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.806698][ T4321] usb 5-1: config 0 descriptor?? [ 576.922940][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 577.032934][ T5620] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 577.043161][ T13] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 577.081245][ T13] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 577.112453][ T13] usb 2-1: config 1 has no interface number 1 [ 577.137768][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 577.314008][ T4321] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 577.384093][ T4321] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 577.395666][ T13] usb 2-1: string descriptor 0 read error: -22 [ 577.402128][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.435814][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.453215][ T5620] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.491749][ T5620] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.554375][ T13] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 577.588185][T10496] tipc: Enabled bearer , priority 0 [ 577.593112][ T5620] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 577.606534][T10496] device syzkaller0 entered promiscuous mode [ 577.608047][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 577.613171][ T4321] cp2112 0003:10C4:EA90.0004: error requesting version [ 577.621684][ T5620] usb 4-1: SerialNumber: syz [ 577.646140][ T4321] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71 [ 577.655819][T10495] tipc: Resetting bearer [ 577.671119][ T4321] usb 5-1: USB disconnect, device number 7 [ 577.683259][T10495] tipc: Disabling bearer [ 577.915545][ T5620] usb 4-1: 0:2 : does not exist [ 578.049996][ T4245] usb 2-1: USB disconnect, device number 11 [ 578.271103][ T5620] usb 4-1: USB disconnect, device number 10 [ 578.552922][ T7155] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 578.724468][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 578.724482][ T26] audit: type=1326 audit(1754696802.104:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 578.830585][ T26] audit: type=1326 audit(1754696802.104:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 578.860878][ T26] audit: type=1326 audit(1754696802.144:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 578.958179][ T7155] usb 6-1: Using ep0 maxpacket: 32 [ 579.045634][ T26] audit: type=1326 audit(1754696802.144:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 579.069121][ T26] audit: type=1326 audit(1754696802.144:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 579.092430][ T26] audit: type=1326 audit(1754696802.144:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 579.103234][ T7155] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 579.722935][ T7155] usb 6-1: config 0 has no interface number 0 [ 579.889449][T10525] vivid-008: ================= START STATUS ================= [ 579.948182][ T7155] usb 6-1: config 0 interface 12 has no altsetting 0 [ 579.998960][T10520] affs: No valid root block on device nullb0 [ 580.017872][ T26] audit: type=1326 audit(1754696802.144:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 580.038424][T10525] vivid-008: Generate PTS: true [ 580.046019][T10525] vivid-008: Generate SCR: true [ 580.051258][T10525] tpg source WxH: 640x360 (Y'CbCr) [ 580.057158][T10525] tpg field: 1 [ 580.061665][T10525] tpg crop: 640x360@0x0 [ 580.065960][T10525] tpg compose: 640x360@0x0 [ 580.069186][T10521] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 580.070477][T10525] tpg colorspace: 8 [ 580.076900][T10521] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 580.077097][T10521] vhci_hcd vhci_hcd.0: Device attached [ 580.081073][T10525] tpg transfer function: 0/0 [ 580.099000][T10525] tpg Y'CbCr encoding: 0/0 [ 580.105841][T10525] tpg quantization: 0/0 [ 580.110245][T10525] tpg RGB range: 0/2 [ 580.114267][T10525] vivid-008: ================== END STATUS ================== [ 580.119012][T10519] fido_id[10519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 580.122156][ T26] audit: type=1326 audit(1754696802.144:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 580.253186][ T7155] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 580.262609][T10528] vhci_hcd: connection closed [ 580.278759][ T151] vhci_hcd: stop threads [ 580.278873][ T7155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.293602][ T151] vhci_hcd: release socket [ 580.301054][ T151] vhci_hcd: disconnect device [ 580.316896][T10146] udevd[10146]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 580.333380][ T5620] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 580.341208][ T26] audit: type=1326 audit(1754696802.144:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e0a502b07 code=0x7ffc0000 [ 580.347073][ T7155] usb 6-1: Product: syz [ 580.368369][ T4332] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 580.375801][ T26] audit: type=1326 audit(1754696802.144:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10508 comm="syz.1.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e0a502a7c code=0x7ffc0000 [ 580.377099][ T13] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 580.421921][T10532] fido_id[10532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 580.423240][ T7155] usb 6-1: Manufacturer: syz [ 580.451400][ T13] usb 35-1: enqueue for inactive port 0 [ 580.471681][ T7155] usb 6-1: SerialNumber: syz [ 580.479828][ T7155] usb 6-1: config 0 descriptor?? [ 580.532973][ T13] vhci_hcd: vhci_device speed not set [ 580.649194][T10539] device syzkaller0 entered promiscuous mode [ 580.658976][T10539] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 580.753136][ T5620] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 580.768446][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.773247][ T4332] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 580.797918][ T5620] usb 3-1: config 0 descriptor?? [ 580.803132][ T7155] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 580.921159][ T7155] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 580.934570][ T4332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.992515][ T7155] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 581.078838][ T4332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 581.391439][ T7155] f81534: probe of 6-1:0.12 failed with error -71 [ 581.572623][ T4332] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.588896][ T7155] usb 6-1: USB disconnect, device number 7 [ 581.742698][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'. [ 581.744524][ T4332] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 581.768452][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 581.778101][ T4332] usb 5-1: Product: syz [ 581.782295][ T4332] usb 5-1: Manufacturer: syz [ 581.792261][T10553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1630'. [ 581.990426][ T4332] cdc_wdm 5-1:1.0: skipping garbage [ 581.999927][ T4332] cdc_wdm 5-1:1.0: skipping garbage [ 582.005646][ T4332] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 582.208778][ T4332] usb 5-1: USB disconnect, device number 8 [ 582.653101][ T5620] pegasus 3-1:0.0: can't reset MAC [ 582.658469][ T5620] pegasus: probe of 3-1:0.0 failed with error -5 [ 582.752300][T10568] affs: No valid root block on device nullb0 [ 583.316989][ T5620] usb 3-1: USB disconnect, device number 8 [ 583.702987][T10584] vivid-008: ================= START STATUS ================= [ 583.710873][T10584] vivid-008: Generate PTS: true [ 583.715927][T10584] vivid-008: Generate SCR: true [ 583.720852][T10584] tpg source WxH: 640x360 (Y'CbCr) [ 583.726095][T10584] tpg field: 1 [ 583.729609][T10584] tpg crop: 640x360@0x0 [ 583.734072][T10584] tpg compose: 640x360@0x0 [ 583.738621][T10584] tpg colorspace: 8 [ 583.742680][T10584] tpg transfer function: 0/0 [ 583.747482][T10584] tpg Y'CbCr encoding: 0/0 [ 583.751914][T10584] tpg quantization: 0/0 [ 583.766669][T10584] tpg RGB range: 0/2 [ 583.770683][T10584] vivid-008: ================== END STATUS ================== [ 585.777183][ T13] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 586.382596][T10603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.401935][T10603] device batadv_slave_0 entered promiscuous mode [ 586.523068][ T13] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 586.544354][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.173964][ T13] usb 2-1: Product: syz [ 587.225289][ T13] usb 2-1: Manufacturer: syz [ 587.233261][ T4332] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 587.304158][ T13] usb 2-1: SerialNumber: syz [ 587.332396][ T13] usb 2-1: config 0 descriptor?? [ 587.489908][ T13] usb 2-1: can't set config #0, error -71 [ 587.548965][T10617] affs: No valid root block on device nullb0 [ 587.713272][ T4332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.042059][ T4332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 588.088658][ T13] usb 2-1: USB disconnect, device number 12 [ 588.111609][ T4332] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 588.333335][ T4332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.358902][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.387416][ T4332] usb 3-1: Product: syz [ 588.399537][ T4332] usb 3-1: Manufacturer: syz [ 588.429897][ T4332] usb 3-1: SerialNumber: syz [ 588.493246][T10605] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 588.578692][T10626] vivid-008: ================= START STATUS ================= [ 588.586664][T10626] vivid-008: Generate PTS: true [ 588.591628][T10626] vivid-008: Generate SCR: true [ 588.596815][T10626] tpg source WxH: 640x360 (Y'CbCr) [ 588.602028][T10626] tpg field: 1 [ 588.605456][T10626] tpg crop: 640x360@0x0 [ 588.609651][T10626] tpg compose: 640x360@0x0 [ 588.614175][T10626] tpg colorspace: 8 [ 588.618009][T10626] tpg transfer function: 0/0 [ 588.622630][T10626] tpg Y'CbCr encoding: 0/0 [ 588.627105][T10626] tpg quantization: 0/0 [ 588.640615][T10626] tpg RGB range: 0/2 [ 588.644793][T10626] vivid-008: ================== END STATUS ================== [ 590.035183][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 590.081082][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 590.143201][ T4332] cdc_ncm 3-1:1.0: bind() failure [ 590.180735][ T4332] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 590.227532][ T4332] cdc_ncm 3-1:1.1: bind() failure [ 590.293659][ T4332] usb 3-1: USB disconnect, device number 9 [ 590.437279][T10644] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 591.483212][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 591.483227][ T26] audit: type=1326 audit(1754696814.854:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 592.514015][ T26] audit: type=1326 audit(1754696814.854:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 592.554289][ T26] audit: type=1326 audit(1754696814.854:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 592.577118][ T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 592.818062][ T26] audit: type=1326 audit(1754696814.854:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 592.895199][T10688] vivid-008: ================= START STATUS ================= [ 592.903154][T10688] vivid-008: Generate PTS: true [ 592.908058][T10688] vivid-008: Generate SCR: true [ 592.912972][T10688] tpg source WxH: 640x360 (Y'CbCr) [ 592.918060][T10688] tpg field: 1 [ 592.921418][T10688] tpg crop: 640x360@0x0 [ 592.925738][T10688] tpg compose: 640x360@0x0 [ 592.930152][T10688] tpg colorspace: 8 [ 592.934053][T10688] tpg transfer function: 0/0 [ 592.938621][T10688] tpg Y'CbCr encoding: 0/0 [ 592.943046][T10688] tpg quantization: 0/0 [ 592.947185][T10688] tpg RGB range: 0/2 [ 592.951091][T10688] vivid-008: ================== END STATUS ================== [ 592.970716][T10686] vivid-001: ================= START STATUS ================= [ 592.982704][ T26] audit: type=1326 audit(1754696814.854:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 593.009421][T10686] vivid-001: Test Pattern: 75% Colorbar [ 593.017192][T10686] vivid-001: Fill Percentage of Frame: 100 [ 593.021192][ T26] audit: type=1326 audit(1754696814.854:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 593.031078][T10686] vivid-001: Horizontal Movement: No Movement [ 593.050468][ T26] audit: type=1326 audit(1754696814.854:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 593.079455][ T26] audit: type=1326 audit(1754696814.854:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 593.102358][T10686] [ 593.105027][T10686] vivid-001: Vertical Movement: No Movement [ 593.111217][T10686] vivid-001: OSD Text Mode: All [ 593.116431][T10686] vivid-001: Show Border: false [ 593.116526][ T26] audit: type=1326 audit(1754696814.854:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 593.121632][T10686] vivid-001: Show Square: false [ 593.150078][T10686] vivid-001: Sensor Flipped Horizontally: false [ 593.157178][T10686] vivid-001: Sensor Flipped Vertically: false [ 593.163922][T10686] vivid-001: Insert SAV Code in Image: false [ 593.177146][T10686] vivid-001: Insert EAV Code in Image: false [ 593.184844][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 593.190100][T10686] vivid-001: Reduced Framerate: false [ 593.196265][T10686] vivid-001: Enable Capture Cropping: true grabbed [ 593.203135][T10686] vivid-001: Enable Capture Composing: true grabbed [ 593.211027][T10686] vivid-001: Enable Capture Scaler: true grabbed [ 593.211789][T10690] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 593.224612][T10690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 593.233325][T10690] vhci_hcd vhci_hcd.0: Device attached [ 593.239105][T10686] [ 593.243509][T10686] vivid-001: Timestamp Source: End of Frame [ 593.253503][T10686] vivid-001: Colorspace: sRGB [ 593.258311][T10686] vivid-001: Transfer Function: Default [ 593.264222][T10686] vivid-001: Y'CbCr Encoding: Default [ 593.269793][T10686] vivid-001: HSV Encoding: Hue 0-179 [ 593.275330][T10686] vivid-001: Quantization: Default [ 593.284144][T10686] vivid-001: Apply Alpha To Red Only: false [ 593.294860][T10686] vivid-001: Standard Aspect Ratio: 16x9 Anamorphic [ 593.299377][ T26] audit: type=1326 audit(1754696814.854:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10657 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 593.327167][T10686] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 593.335818][T10686] vivid-001: DV Timings: 640x480p59 inactive [ 593.342594][T10686] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 593.351507][T10686] vivid-001: Maximum EDID Blocks: 2 [ 593.362561][T10686] vivid-001: Limited RGB Range (16-235): false [ 593.371603][T10693] vhci_hcd: connection closed [ 593.372545][T10686] vivid-001: Rx RGB Quantization Range: [ 593.372692][ T557] vhci_hcd: stop threads [ 593.383289][ T13] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 593.383317][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.384957][ T13] usb 2-1: config 0 descriptor?? [ 593.414062][T10686] Automatic [ 593.418275][T10686] vivid-001: Power Present: 0x00000001 [ 593.431742][T10686] tpg source WxH: 640x360 (Y'CbCr) [ 593.439680][T10686] tpg field: 1 [ 593.443037][ T557] vhci_hcd: release socket [ 593.448702][T10686] tpg crop: 640x360@0x0 [ 593.454205][T10686] tpg compose: 640x360@0x0 [ 593.459772][T10686] tpg colorspace: 8 [ 593.459854][ T557] vhci_hcd: disconnect device [ 593.468404][T10686] tpg transfer function: 0/2 [ 593.479677][T10686] tpg Y'CbCr encoding: 0/1 [ 593.494555][T10686] tpg quantization: 0/2 [ 593.494568][T10686] tpg RGB range: 0/2 [ 593.494576][T10686] vivid-001: ================== END STATUS ================== [ 593.503024][ T4245] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 593.503067][ T4245] usb 43-1: enqueue for inactive port 0 [ 593.582993][ T4245] vhci_hcd: vhci_device speed not set [ 593.808006][ T13] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 593.831197][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.883474][ T13] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 593.891108][ T13] usb 2-1: media controller created [ 593.939257][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.167084][T10708] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 595.073223][T10714] netlink: 'syz.4.1676': attribute type 10 has an invalid length. [ 595.105527][T10714] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 595.114511][ T13] az6027: usb out operation failed. (-71) [ 595.120920][ T13] stb0899_attach: Driver disabled by Kconfig [ 595.168668][ T13] az6027: no front-end attached [ 595.168668][ T13] [ 595.200476][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 595.718082][T10714] device erspan0 left promiscuous mode [ 595.860411][T10714] bridge0: port 3(erspan0) entered disabled state [ 595.873075][ T13] az6027: usb out operation failed. (-71) [ 595.878882][ T13] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 595.905047][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 595.956690][ T13] dvb-usb: schedule remote query interval to 400 msecs. [ 595.978696][ T13] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 596.021365][ T13] usb 2-1: USB disconnect, device number 13 [ 596.144992][T10714] device bridge_slave_1 left promiscuous mode [ 596.173818][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.214753][ T13] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 596.239786][T10714] device bridge_slave_0 left promiscuous mode [ 596.246567][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.280525][T10714] bond0: (slave bridge0): Releasing backup interface [ 596.743141][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 597.072933][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 597.123053][ T5620] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 597.553612][ T5620] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 597.712975][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.723216][ T5620] usb 2-1: config 0 descriptor?? [ 597.764108][ T5620] cp210x 2-1:0.0: cp210x converter detected [ 597.823501][ T13] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 597.856049][ T13] usb 5-1: config 0 has no interface number 0 [ 597.862299][ T13] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.883187][ T13] usb 5-1: config 0 interface 85 has no altsetting 0 [ 597.895361][T10760] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 598.064200][T10764] netlink: 'syz.2.1691': attribute type 10 has an invalid length. [ 598.078138][T10764] bond0: (slave wlan1): Opening slave failed [ 598.083386][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 598.099231][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.099823][T10764] device bridge_slave_0 left promiscuous mode [ 598.123135][T10764] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.126922][ T13] usb 5-1: Product: syz [ 598.147883][T10764] device bridge_slave_1 left promiscuous mode [ 598.163324][T10764] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.177967][ T13] usb 5-1: Manufacturer: syz [ 598.186508][ T13] usb 5-1: SerialNumber: syz [ 598.198084][ T5620] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 598.204726][ T13] usb 5-1: config 0 descriptor?? [ 598.212352][T10764] bond0: (slave bond_slave_0): Releasing backup interface [ 598.249138][ T5620] usb 2-1: cp210x converter now attached to ttyUSB0 [ 598.299310][T10764] bond0: (slave bond_slave_1): Releasing backup interface [ 598.339000][T10764] device team_slave_0 left promiscuous mode [ 598.378361][T10764] team0: Port device team_slave_0 removed [ 598.394382][T10764] device team_slave_1 left promiscuous mode [ 598.464647][T10764] team0: Port device team_slave_1 removed [ 598.511196][ T5620] usb 2-1: USB disconnect, device number 14 [ 598.515971][T10764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.863173][ T13] appletouch 5-1:0.85: Geyser mode initialized. [ 598.915276][ T5620] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 598.920577][ T13] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input10 [ 598.932117][ T5620] cp210x 2-1:0.0: device disconnected [ 599.092748][ T13] usb 5-1: USB disconnect, device number 9 [ 599.147185][ T26] kauditd_printk_skb: 101 callbacks suppressed [ 599.147202][ T26] audit: type=1326 audit(1754696822.524:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.196255][ T26] audit: type=1326 audit(1754696822.574:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.220797][ T13] appletouch 5-1:0.85: input: appletouch disconnected [ 599.309222][ T26] audit: type=1326 audit(1754696822.574:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.373008][ T26] audit: type=1326 audit(1754696822.574:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.434850][ T26] audit: type=1326 audit(1754696822.574:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.452970][ T5620] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 599.464987][ T26] audit: type=1326 audit(1754696822.574:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.507421][ T26] audit: type=1326 audit(1754696822.574:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.531720][ T26] audit: type=1326 audit(1754696822.574:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.554804][ T26] audit: type=1326 audit(1754696822.574:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.577955][ T26] audit: type=1326 audit(1754696822.574:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10776 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 599.755267][ T5620] usb 6-1: Using ep0 maxpacket: 8 [ 599.933191][ T5620] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 600.464114][ T5620] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 600.487241][ T5620] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 600.500841][ T5620] usb 6-1: Product: syz [ 600.586313][ T5620] usb 6-1: Manufacturer: syz [ 600.591243][ T5620] usb 6-1: SerialNumber: syz [ 600.638694][T10801] tipc: Enabled bearer , priority 0 [ 600.677717][T10801] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 600.712419][T10801] tipc: Resetting bearer [ 600.741260][T10800] tipc: Disabling bearer [ 600.904234][ T5620] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 600.912175][ T5620] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 600.956730][ T5620] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 601.123236][ T5620] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 601.131665][ T5620] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 601.144965][ T5620] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 601.157469][ T5620] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 601.210554][ T5620] usb 6-1: USB disconnect, device number 8 [ 601.262374][ T5620] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 601.290569][ T5620] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 601.324265][ T5620] visor 6-1:1.0: device disconnected [ 601.495052][ T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 601.877320][ T13] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.901605][ T13] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.927248][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 601.947241][ T13] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 601.970494][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.000995][ T13] usb 2-1: config 0 descriptor?? [ 602.099766][T10850] tipc: Enabled bearer , priority 0 [ 602.109710][T10850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 602.121880][T10850] tipc: Resetting bearer [ 602.132216][T10849] tipc: Disabling bearer [ 602.542027][T10865] usb usb8: usbfs: process 10865 (syz.3.1724) did not claim interface 0 before use [ 602.723962][ T13] usb 2-1: string descriptor 0 read error: -22 [ 602.987789][ T13] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0005/input/input11 [ 603.010946][ T13] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 603.855251][ T13] usb 2-1: USB disconnect, device number 15 [ 605.839927][ T26] kauditd_printk_skb: 182 callbacks suppressed [ 605.839940][ T26] audit: type=1326 audit(1754696829.214:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 605.949103][ T26] audit: type=1326 audit(1754696829.214:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 606.038838][ T26] audit: type=1326 audit(1754696829.254:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 606.480193][ T26] audit: type=1326 audit(1754696829.254:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 606.508124][ T26] audit: type=1326 audit(1754696829.254:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 607.211044][ T26] audit: type=1326 audit(1754696829.254:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 607.323149][ T26] audit: type=1326 audit(1754696829.254:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 607.346596][ T26] audit: type=1326 audit(1754696829.254:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 607.369857][ T26] audit: type=1326 audit(1754696829.254:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 607.392700][ T26] audit: type=1326 audit(1754696829.254:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be0f31be9 code=0x7ffc0000 [ 608.494782][T11019] tipc: Enabled bearer , priority 0 [ 608.505190][T11019] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 608.515408][T11019] tipc: Resetting bearer [ 608.536999][T11016] tipc: Disabling bearer [ 609.960908][T11035] device batadv_slave_0 entered promiscuous mode [ 611.411765][T11079] device pim6reg1 entered promiscuous mode [ 611.835246][T11099] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1807'. [ 612.630558][T11112] lo speed is unknown, defaulting to 1000 [ 613.574005][T11144] device veth0_vlan left promiscuous mode [ 613.580211][T11144] device veth0_vlan entered promiscuous mode [ 613.817077][T11154] syz.5.1825[11154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.817137][T11154] syz.5.1825[11154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 614.099091][T11155] affs: No valid root block on device nullb0 [ 614.853263][T11166] affs: No valid root block on device nullb0 [ 615.587305][T11170] device pim6reg1 entered promiscuous mode [ 615.649316][T11172] device macsec0 entered promiscuous mode [ 615.693577][T11172] device team0 entered promiscuous mode [ 615.810418][T11172] device team_slave_0 entered promiscuous mode [ 615.817026][T11172] device team_slave_1 entered promiscuous mode [ 617.991539][T11224] tipc: Enabled bearer , priority 0 [ 618.040341][T11224] device syzkaller0 entered promiscuous mode [ 618.111632][T11224] tipc: Resetting bearer [ 618.209126][T11221] tipc: Resetting bearer [ 618.233510][T11221] tipc: Disabling bearer [ 618.262407][T11237] device syzkaller0 entered promiscuous mode [ 618.373134][ T5620] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 619.333162][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.355990][ T5620] usb 4-1: config 0 has no interfaces? [ 619.361528][ T5620] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 619.489229][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.525260][ T5620] usb 4-1: config 0 descriptor?? [ 620.371430][ T13] usb 4-1: USB disconnect, device number 11 [ 620.458599][T11259] affs: No valid root block on device nullb0 [ 621.304371][T11268] device veth0_vlan left promiscuous mode [ 621.332071][T11268] device veth0_vlan entered promiscuous mode [ 621.561515][T11279] tipc: Enabled bearer , priority 0 [ 621.579450][T11279] device syzkaller0 entered promiscuous mode [ 621.626203][ T4321] syzkaller0: tun_net_xmit 76 [ 621.632580][ T4321] syzkaller0: tun_net_xmit 48 [ 621.645226][T11281] syzkaller0: create flow: hash 3329062870 index 1 [ 621.654874][T11279] tipc: Resetting bearer [ 621.674927][ T13] syzkaller0: tun_net_xmit 76 [ 621.695092][T11274] tipc: Resetting bearer [ 621.753970][T11274] tipc: Disabling bearer [ 621.783104][T11278] syzkaller0: delete flow: hash 3329062870 index 1 [ 622.119173][T11289] affs: No valid root block on device nullb0 [ 624.153003][ T5620] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 624.375291][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.462962][ T5620] usb 5-1: Using ep0 maxpacket: 16 [ 624.583167][ T5620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 624.783044][ T5620] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 624.799214][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.828278][ T5620] usb 5-1: Product: syz [ 624.847784][ T5620] usb 5-1: Manufacturer: syz [ 624.901054][ T5620] usb 5-1: SerialNumber: syz [ 624.951321][ T5620] usb 5-1: config 0 descriptor?? [ 625.006061][ T5620] hub 5-1:0.0: bad descriptor, ignoring hub [ 625.026724][ T5620] hub: probe of 5-1:0.0 failed with error -5 [ 625.103319][T11343] tipc: Enabling of bearer rejected, failed to enable media [ 625.594816][ T13] usb 5-1: USB disconnect, device number 10 [ 626.539910][T11374] affs: No valid root block on device nullb0 [ 626.965072][ T26] kauditd_printk_skb: 84 callbacks suppressed [ 626.965163][ T26] audit: type=1326 audit(1754696850.344:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 627.429654][ T26] audit: type=1326 audit(1754696850.584:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 627.463002][ T26] audit: type=1326 audit(1754696850.644:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 627.612476][ T26] audit: type=1326 audit(1754696850.774:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 627.717752][ T26] audit: type=1326 audit(1754696850.774:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 627.789860][ T26] audit: type=1326 audit(1754696850.774:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 627.843028][ T26] audit: type=1326 audit(1754696850.774:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 628.038208][ T26] audit: type=1326 audit(1754696850.774:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 628.096318][ T26] audit: type=1326 audit(1754696850.864:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 628.229894][ T26] audit: type=1326 audit(1754696850.864:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b8e9dbe9 code=0x7ffc0000 [ 630.124181][T11404] vivid-008: ================= START STATUS ================= [ 630.132068][T11404] vivid-008: Generate PTS: true [ 630.135077][T11408] tipc: Enabling of bearer rejected, failed to enable media [ 630.146246][T11404] vivid-008: Generate SCR: true [ 630.151371][T11404] tpg source WxH: 640x360 (Y'CbCr) [ 630.157064][T11404] tpg field: 1 [ 630.160572][T11404] tpg crop: 640x360@0x0 [ 630.165375][T11404] tpg compose: 640x360@0x0 [ 630.170326][T11404] tpg colorspace: 8 [ 630.176942][T11404] tpg transfer function: 0/0 [ 630.182737][T11404] tpg Y'CbCr encoding: 0/0 [ 630.187596][T11404] tpg quantization: 0/0 [ 630.191848][T11404] tpg RGB range: 0/2 [ 630.196048][T11404] vivid-008: ================== END STATUS ================== [ 631.781923][T11431] affs: No valid root block on device nullb0 [ 632.348926][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 632.348941][ T26] audit: type=1326 audit(1754696855.724:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 632.533806][ T26] audit: type=1326 audit(1754696855.724:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 632.602939][ T26] audit: type=1326 audit(1754696855.724:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 632.729523][T11447] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1912'. [ 632.772655][ T26] audit: type=1326 audit(1754696855.744:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 632.909338][ T26] audit: type=1326 audit(1754696855.754:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 632.997551][ T26] audit: type=1326 audit(1754696855.754:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 633.086009][ T26] audit: type=1326 audit(1754696855.754:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 634.004332][ T26] audit: type=1326 audit(1754696855.754:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 634.045182][ T26] audit: type=1326 audit(1754696855.754:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 634.201998][ T26] audit: type=1326 audit(1754696855.754:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.1.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f0e0a500be9 code=0x7ffc0000 [ 635.041596][T11470] lo speed is unknown, defaulting to 1000 [ 635.100719][T11473] lo speed is unknown, defaulting to 1000 [ 685.815349][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.032859][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 741.039663][ C1] rcu: 1-...!: (10504 ticks this GP) idle=297/1/0x4000000000000000 softirq=33105/33107 fqs=339 [ 741.051751][ C1] (t=10500 jiffies g=45621 q=83) [ 741.056771][ C1] rcu: rcu_preempt kthread starved for 9819 jiffies! g45621 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 741.067943][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 741.077908][ C1] rcu: RCU grace-period kthread stack dump: [ 741.083779][ C1] task:rcu_preempt state:R running task stack:27904 pid: 15 ppid: 2 flags:0x00004000 [ 741.094638][ C1] Call Trace: [ 741.097903][ C1] [ 741.100820][ C1] __schedule+0x11b8/0x43b0 [ 741.105316][ C1] ? release_firmware_map_entry+0x190/0x190 [ 741.111198][ C1] schedule+0x11b/0x1e0 [ 741.115345][ C1] schedule_timeout+0x15c/0x280 [ 741.120285][ C1] ? console_conditional_schedule+0x40/0x40 [ 741.126273][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 741.132146][ C1] ? update_process_times+0x200/0x200 [ 741.137624][ C1] ? prepare_to_swait_event+0x331/0x350 [ 741.143160][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 741.148090][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 741.154218][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 741.159114][ C1] ? finish_swait+0xc0/0x1d0 [ 741.163702][ C1] rcu_gp_kthread+0x98/0x350 [ 741.168280][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 741.173559][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 741.179436][ C1] ? __kthread_parkme+0x157/0x1b0 [ 741.184537][ C1] kthread+0x436/0x520 [ 741.188597][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 741.193817][ C1] ? kthread_blkcg+0xd0/0xd0 [ 741.198405][ C1] ret_from_fork+0x1f/0x30 [ 741.202817][ C1] [ 741.205823][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 741.212217][ C1] Sending NMI from CPU 1 to CPUs 0: [ 741.217634][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 741.218594][ C1] NMI backtrace for cpu 1 [ 741.230907][ C1] CPU: 1 PID: 11491 Comm: syz.5.1928 Not tainted 5.15.189-syzkaller #0 [ 741.239138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.249276][ C1] Call Trace: [ 741.252548][ C1] [ 741.255373][ C1] dump_stack_lvl+0x168/0x230 [ 741.260034][ C1] ? show_regs_print_info+0x20/0x20 [ 741.265399][ C1] ? load_image+0x3b0/0x3b0 [ 741.269884][ C1] ? try_to_wake_up+0x3d4/0x1050 [ 741.274799][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 741.279713][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 741.285930][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 741.291280][ C1] ? _raw_spin_lock+0x40/0x40 [ 741.295931][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 741.302085][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 741.308045][ C1] rcu_dump_cpu_stacks+0x22f/0x380 [ 741.313286][ C1] print_cpu_stall+0x31d/0x5f0 [ 741.318141][ C1] rcu_sched_clock_irq+0x6d8/0x1110 [ 741.323331][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 741.328158][ C1] ? account_process_tick+0x227/0x3a0 [ 741.333618][ C1] update_process_times+0x193/0x200 [ 741.338823][ C1] tick_sched_timer+0x37d/0x560 [ 741.343661][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 741.348927][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 741.354453][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 741.359546][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 741.365689][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 741.370658][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 741.376643][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 741.382260][ C1] [ 741.385169][ C1] [ 741.388100][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 741.394084][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 741.399887][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7e db aa f7 48 89 df e8 46 b0 ab f7 e8 91 46 cc f7 fb bf 01 00 00 00 76 d4 9f f7 65 8b 05 17 d4 50 76 85 c0 74 02 5b c3 e8 c4 de 4e [ 741.419574][ C1] RSP: 0018:ffffc9000319fbc0 EFLAGS: 00000282 [ 741.425711][ C1] RAX: cac911333db51d00 RBX: ffff888078b665c0 RCX: cac911333db51d00 [ 741.433678][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: 0000000000000001 [ 741.441646][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f16ccb9 [ 741.449600][ C1] R10: ffffed100f16ccb9 R11: 1ffff1100f16ccb8 R12: ffff888078b665c0 [ 741.457564][ C1] R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000004000000 [ 741.465522][ C1] get_signal+0x11d6/0x12c0 [ 741.470010][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 741.475619][ C1] ? _copy_from_user+0x111/0x170 [ 741.480527][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 741.486139][ C1] ? rcu_lock_release+0x5/0x20 [ 741.490984][ C1] ? load_gs_index+0x120/0x120 [ 741.495723][ C1] ? get_sigframe_size+0x10/0x10 [ 741.500664][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 741.506126][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 741.511561][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 741.517088][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 741.522522][ C1] do_syscall_64+0x58/0xa0 [ 741.526920][ C1] ? clear_bhb_loop+0x30/0x80 [ 741.531576][ C1] ? clear_bhb_loop+0x30/0x80 [ 741.536223][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 741.542094][ C1] RIP: 0033:0x7f86b8e9dbe9 [ 741.546487][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.566187][ C1] RSP: 002b:00007f86b71050e8 EFLAGS: 00000246 [ 741.572396][ C1] RAX: fffffffffffffffc RBX: 00007f86b90c4fa8 RCX: 00007f86b8e9dbe9 [ 741.580434][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f86b90c4fa8 [ 741.588411][ C1] RBP: 00007f86b90c4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 741.596399][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.604556][ C1] R13: 00007f86b90c5038 R14: 00007ffea0711c30 R15: 00007ffea0711d18 [ 741.612532][ C1] [ 747.255380][ T1422] ieee802154 phy0 wpan0: encryption failed: -22