last executing test programs: 20.200710288s ago: executing program 2 (id=6817): preadv(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x202a03) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0xc1205531, &(0x7f00000010c0)=""/4101) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x4, 0xa2c65) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r6 = inotify_init1(0x80800) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x610003d5) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000000) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r7) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1532, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5c, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0xe, {0x9, 0x21, 0x200, 0x6, 0x1, {0x22, 0xa90}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) fcntl$getownex(r2, 0x10, 0x0) 19.954897916s ago: executing program 0 (id=6818): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000005c0)={0x5, 0xaf87}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = io_uring_setup(0x501a, &(0x7f0000000180)={0x0, 0xe743, 0x100, 0x1, 0x23c}) io_uring_setup(0x76e2, &(0x7f0000000200)={0x0, 0x658d, 0x200, 0x0, 0x3ca, 0x0, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x86000, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x68}}, 0x20004000) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}]}) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x4}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0xfff, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0xdd30, {0x3, 0x2, 0x3, 0x1da, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfaff}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000280)={0x9, [0x80, 0xf221, 0x78, 0x7fff, 0x81, 0x2, 0x3f, 0x1, 0x1f37, 0x6, 0x101, 0x4, 0x7, 0x7, 0x4, 0x4, 0x5, 0xfff, 0x3, 0x2c, 0x7fff, 0x4000, 0x9684, 0x4, 0xe57, 0x200, 0x9, 0x1, 0x1, 0x7, 0x2, 0x4, 0x2, 0x4, 0x2809, 0x5, 0x89, 0x9, 0x2, 0x7fff, 0x0, 0x4, 0xc, 0x4, 0x3, 0x679, 0x0, 0x8001], 0xa}) 17.025552002s ago: executing program 4 (id=6823): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004014}, 0x40004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000000600)=@llc, 0x80, &(0x7f0000000780)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000400)=""/7, 0x7}, {&(0x7f0000001400)=""/202, 0xca}], 0x4, &(0x7f0000000c00)=""/28, 0x1c}, 0x800}, {{&(0x7f0000000c40)=@xdp, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)=""/239, 0xef}, 0xf1}, {{&(0x7f0000000fc0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)=""/94, 0x5e}, {&(0x7f00000010c0)=""/201, 0xc9}, {&(0x7f00000011c0)=""/92, 0x5c}], 0x3, &(0x7f0000000cc0)=""/205, 0xcd}, 0x8}], 0x3, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) r6 = dup(r5) write$sndseq(r6, &(0x7f0000000440)=[{0x9, 0x0, 0x6, 0xc0, @time={0x2, 0xdaac}, {0xff, 0x3}, {0x3, 0x3}, @quote={{0x4, 0x4}, 0x6c95}}], 0x15) read$dsp(r4, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) io_uring_enter(r8, 0x3a55, 0x8e3b, 0x68, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x1410, 0x400, 0x70bd29, 0x25dfdbf9, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) getsockopt(r1, 0x5, 0xe, &(0x7f00000001c0)=""/97, &(0x7f00000000c0)=0x61) writev(r9, &(0x7f0000000000)=[{0x0}, {&(0x7f0000019080)='\x00\x00', 0x2}], 0x50) 16.94025834s ago: executing program 0 (id=6824): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), &(0x7f000009de80), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 16.820606764s ago: executing program 2 (id=6825): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_WEIGHT={0x8, 0xf, 0x1f7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x20001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x800000, 0x2, 0x3}}) clock_gettime(0x0, &(0x7f00000001c0)) 16.775564052s ago: executing program 3 (id=6826): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_restrict_self(r1, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x7, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x5000009) r6 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r7 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r7, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r6, 0x0) sendmsg$rds(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/90, 0x5a}], 0x1, &(0x7f0000000780), 0x0, 0xc080}, 0x40004) socket(0x11, 0xa, 0x2f3) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_dev$sndctrl(0x0, 0x2, 0x101000) 15.547550969s ago: executing program 2 (id=6828): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb", 0xae, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x4040) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x72000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) r7 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x2, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000d40)="01", 0x1) 13.506219819s ago: executing program 0 (id=6830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r9, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r10}}, 0xc) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r10, 0x2}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x9}, 0x50) r12 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000000)={r12}) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x6, 0x4, 0x3, 0x0, r11}, 0x50) 13.224707916s ago: executing program 0 (id=6831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000640)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x2}, 0x1c) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"}) syz_open_dev$hidraw(&(0x7f0000000b40), 0x6, 0x422000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b0400000000000000000212000008000940000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x3a, 0x0, @multicast1, @multicast1}, {0x8000, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff", "8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f", "62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e", {"52a05c5cfcff2c9350623b5806dc725f", 'B\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}}}}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x40000000) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 12.503118772s ago: executing program 4 (id=6833): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x3}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0xc94, 0x340, 0x25, 0x148, 0x340, 0x60, 0xc00, 0x2a8, 0x2a8, 0xc00, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x4, 0xd5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00', {0xffff}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xa, 0x4, 0xec1, 'syz1\x00', {0xbdc}}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'gre0\x00'}, 0x0, 0x878, 0x8c0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x3ff}, {0x59}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x8}, {0xffffffff, 0x3}, {0x77, 0x1}, {0x9, 0x2}, {0x1b91, 0x1}, {0xd76, 0x3}], [{0xe670, 0x5}, {0x9, 0x6}, {0x6, 0xb792}, {0x1, 0x7}, {0xf912, 0x4}, {0x7, 0x1}, {0x8c2b, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0x400}, {0xca, 0x9}], 0x2}, {[{0x4, 0x1}, {0x1}, {0x8, 0x2}, {0xa, 0x3}, {0x355, 0x3}, {0x3ff, 0x2}, {0x8}, {0xffffff34, 0x1}, {0x307d, 0x3}, {0x4}, {0x6b46, 0x3}], [{0x2, 0x5}, {0x2, 0x9}, {0xfffffffa, 0x88}, {0xfffff000, 0x175a}, {0x7, 0x200}, {0x8000}, {0x3ff}, {0x2, 0x6de89782}, {0x6, 0x519a}, {0x0, 0x8}, {0x7, 0x88}], 0x0, 0x7}, {[{0x0, 0x2}, {0x8f8}, {0x8, 0x3}, {0x2, 0x2}, {0x80000001, 0x1}, {0x2, 0x3}, {0x6}, {0x8001, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x2}], [{0x3fbe27c4, 0x9}, {0xdf, 0x7fff}, {0x8, 0x5}, {0x8, 0x7}, {0x3, 0x3}, {0xffff, 0x8}, {0x7, 0x6}, {0xffff, 0x8}, {0x4e24, 0x81}, {0x1, 0x84}, {0x101, 0x8}], 0xb, 0x5}, {[{0x2, 0x3}, {0x401, 0x1}, {0x40, 0x2}, {0x2, 0x2}, {0x80000000}, {0x2, 0x1}, {0xb, 0x3}, {0x8, 0x1}, {0x80, 0x1}, {0x5}, {0x8}], [{0xb, 0x7ff}, {0x1000, 0x1}, {0x9, 0xf}, {0x2, 0x8}, {0x2, 0x101}, {0x5, 0x7fff}, {0x7, 0x4}, {0x9, 0x4}, {0xfffff800, 0xffffff80}, {0x0, 0xfffffffe}, {0x5, 0x7}], 0x3, 0xa}, {[{0x8, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x9, 0x3}, {0x17c087d, 0x2}, {0x7fff, 0x3}, {0x80, 0x3}, {0x0, 0x3}, {0x40, 0x1}, {0x9, 0x2}], [{0x80000000, 0xfffffffc}, {0xfffffd00, 0x7}, {0x3, 0xc10}, {0xeb1d, 0x10001}, {0x8, 0x2}, {0xaf9c, 0x283}, {0x4, 0x2}, {0x7f, 0x9}, {0x400, 0x38000000}, {0x2, 0xb}, {0x2, 0x2}], 0xa, 0x1}, {[{0x535}, {0xffff, 0x3}, {0x3, 0x1}, {0xe}, {0x1, 0x2}, {0x7}, {0x4, 0x3}, {0x5}, {0x8, 0x3}, {0x37, 0x1}, {0x8}], [{0x4, 0x200}, {0x0, 0x9}, {0x4, 0x81}, {0xfffffc00, 0xfff}, {0x2, 0x1}, {0x3ff, 0x8}, {0x9, 0x6}, {0x40, 0x101}, {0xfffffffe, 0x7e05d4a7}, {0x0, 0x866}, {0x5, 0x6}], 0x1, 0x6}, {[{0x6, 0x2}, {0x3}, {0x401, 0x1}, {0x7fffffff, 0x1}, {0xff, 0x2}, {0x99e0}, {0x4}, {0x6}, {0x6417, 0x1}, {0x8}, {0x0, 0x1}], [{0x2, 0x1}, {0x8104, 0x9}, {0x9, 0xe}, {0x100, 0x9}, {0x9, 0x75}, {0xede, 0xff}, {0x3, 0x9f}, {0xfffffffe, 0x1}, {0x94, 0x5}, {0x4, 0x9}, {0x2, 0x9}], 0x2, 0x7}, {[{0x6}, {0x5, 0x3}, {0x3ff, 0x3}, {0x80, 0x2}, {0x6, 0x2}, {}, {0x18000, 0x2}, {0x2, 0x2}, {0x8, 0x2}, {0x133, 0x3}, {0xd, 0x2}], [{0x80, 0xbca}, {0x1, 0xab9f}, {0x6, 0x1}, {0x0, 0x7}, {0x8, 0x1ff}, {0x49, 0x7}, {0x1, 0x63d14f22}, {0x2, 0x8}, {0x8727, 0x401}, {0x3, 0x1}, {0x8, 0xf}], 0x9, 0x8}, {[{0x7}, {0xc}, {0xfffffffb, 0x2}, {0x5, 0x2}, {0x7}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x40, 0x2}, {0x10, 0x2}, {0xfff, 0x1}], [{0x2, 0xfff}, {0x5, 0x1}, {0xc4, 0x9}, {0x8, 0x9}, {0x3, 0x9}, {0x5, 0x6}, {0x5, 0xa}, {0x200, 0x8}, {0x2, 0x6}, {0xfffffe1e}, {0x1ed, 0x6}], 0x5, 0x3}, {[{0xfffffff7, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x80, 0x2}, {0x10001, 0x1}, {0xa, 0x2}, {0x4000000, 0x1}, {0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x8, 0x1}], [{0x0, 0x77d}, {0x0, 0x3935}, {0x0, 0x4cf6}, {0x200, 0xfffffff3}, {0x10001, 0x401}, {0xffff, 0x7}, {0x4, 0x6}, {0x8001, 0x6}, {0x4, 0xffffffff}, {0x5}, {0x80, 0x3}], 0x5, 0xb}, {[{0x5791}, {0xfffffff8}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x2}, {0xffffffff, 0x1}, {0x5, 0x3}, {0x2}, {0x8}, {0x3, 0x2}, {0x8}], [{0x6800000, 0x9}, {0x2, 0x9}, {0x5, 0x1000}, {0xfffffbff, 0x7}, {0x8001, 0x3}, {0x3, 0x7}, {0x3}, {0x3, 0xf73}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x7}], 0x6, 0xa}], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0xcf0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x20048000) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$inet(r4, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000004280)='.\x00', 0x80000, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) fchdir(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r9}) 10.293991566s ago: executing program 3 (id=6834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff000000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7731, 0x800, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x5, 0x0, 0x1, 0x20, 0x1}) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r9) 10.291250721s ago: executing program 2 (id=6835): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050025bd7000fbdbdf251c000000180001801400020069703667726574617030000000000000"], 0x2c}}, 0x40006) r5 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) fcntl$addseals(r5, 0x409, 0xe) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0xe03, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r6, &(0x7f0000002280)=[{}, {}, {}], 0x3, 0x8) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000083a09028040000102030109022400010102b7cd0813f8830587010209092108000501226709090581032000030901"], &(0x7f0000000480)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0xf, 0x34, 0xa, 0x10, 0x6}, 0x23, &(0x7f0000002500)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "3f3626df5d0a3881524eeb39c22d3e9d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x2, 0x62a5}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}, {0xea, &(0x7f0000002340)=ANY=[@ANYBLOB="ea039dbd9c0a62b5010467824b22b5168e723dd99c20c11c5ced1a3dca4bd06dce7b8c626276570cb0bdb57a2206d1b803bdd94064f297c263703f748916d2c68894a1ce2ef3e2fc700e9bd21434af8645d39b36bb313155a3b7e8399b6af4bfa01d292baf6f10cd11db329c5b16d5dae18357f39422347e91b4c14716758b938fba23e32c68a6780cd95210cc0d000cade32d1fa8451c1a0f14be9ef7b20063cb8beb65895908cf122530e46cfc4ac72706155b47af70b98198933d2cce324b5d488955bcb00e161ed40529a4c679f931d4245f80f2ede254000000000000"]}, {0x34, &(0x7f00000022c0)=ANY=[@ANYBLOB="3403eb2b468f93d820184eaa4cc5b7925501962fb28a3eeea424c69316a40664151d3632f93c72fd04806ec6c4f16cdb7635d228c176f0faec3541ceec8f2102193dc563f1ecd591af4f9619c157c382b86ba873b8782735321cad8a2c74f0396d6b28bbf64267b59969ae77435a35ab93af64aaaf7d90e327372720f5"]}]}) 8.76524108s ago: executing program 3 (id=6836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) close_range(r3, r4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$mouse(0x0, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0x6000, 0xd000, 0x1}}, "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", "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"}) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r10, 0x5319, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x600, 0x500, 0x36315247, 0x8, 0xd, [{0x40000000}, {}, {0x8000000, 0x3}, {}, {}, {0x0, 0x20008}, {}, {0x0, 0x2}], 0x0, 0x0, 0x7, 0x0, 0x3}}) 7.10477771s ago: executing program 0 (id=6837): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @mcast1}, {0xa, 0x0, 0x2, @mcast2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, r6}}, 0x38) lseek(r4, 0xc6c3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x1403, 0x10, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) open_by_handle_at(r5, &(0x7f0000000280)=@raw={0x0, 0x1}, 0x0) 7.056817186s ago: executing program 1 (id=6838): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffd26, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x80800, &(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESHEX=r2]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x290, 0x0, 0xcd}]}) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 6.976430596s ago: executing program 4 (id=6839): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x80, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) shutdown(r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0) lstat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@rnullb, r8, &(0x7f0000000200)='./file0\x00') r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 6.477635373s ago: executing program 3 (id=6840): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), &(0x7f000009de80), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 5.513386436s ago: executing program 1 (id=6841): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e80000001e00d37829bd7000fcdbdf25ff010000000000000000000000000001000004d60a00ff00ac1414aa0000000000000000000000000100000000000000a8000700fc020000000000000000000000000000fe80000000000000000000000000001d4e2200014e21000702", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000006000000000000000e0000090000000000000000000008000100000000000080030000e7ff000000000000000000000008000000000300000000e7ff0000000006000000bd27e801c4dd0a474784a49bcf12530000000007000000b37b6e00"], 0xe8}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x4) close_range(r7, r8, 0x0) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000040)={0x1000000d}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1, 0x4, 0x1) 5.025263926s ago: executing program 3 (id=6842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000fbdbdf25000000003f032b96f29667520fe947bb50357e7e772041f5626582761358bbb846c212816b7ca1fc880e8693f4cb84faffdebfa6f7b2bed13733171ed37f57f947309c2d60ceac4dc1dfc387196e5477ae372f36a2172c534b28189f0cfe1ba28ba70ee07024d1be6f36b9923d93841ae9c139b4545f8c67a3dc7c817a76c19475fceb44b2443ebb5824c057938a0a2cf22976f977ca2d490f28bbdc66392150c8c61ea38916cdb453181faea21a1781fbafe65b8e106784c1448df04a323a21909f68e8b5380e", @ANYBLOB="09000000000000002c0012800e00010069703667726574617000000018000280140007000000000000000000000000000000000108000d0006000020"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000300004802c0001800b00010065787468647200001c0002800800064000000001050002000f0000000000000000000009050007"], 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x281, 0x0, 0x100}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r6, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @random="1b1c83c4c21a"}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004090}, 0x4) 4.224318291s ago: executing program 1 (id=6843): sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 3.010412453s ago: executing program 1 (id=6845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) 2.973622823s ago: executing program 4 (id=6846): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) r7 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 2.955434385s ago: executing program 3 (id=6847): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000010c0)=[r1, r0, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='vxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8c) fchdir(r5) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.895085411s ago: executing program 0 (id=6848): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048915, 0x0, 0x0) r2 = syz_io_uring_setup(0x4af0, &(0x7f00000001c0)={0x0, 0xb7a2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000440)) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x2000000, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x1, 0x10100, 0x0, 0xc1, 0x0, r2}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x40000003, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x39, 0x6, [0xb, 0x2a0d, 0x5, 0x84c, 0x8, 0xe]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000020000009b2d", @ANYRES32, @ANYBLOB="0400"/13, @ANYRES32, @ANYBLOB="0100000004000000000000000000000000000000000000000000000010996c2bc86523eb02007f2a1c5050886f086c4d91bca4eb3a8680657e1495c084056e8633a5b63f9aa08745cd27978618cdfcd780bfba962478c934a9369b7a7b"], 0x48) r7 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) 2.656454836s ago: executing program 2 (id=6849): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000640)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x2}, 0x1c) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"}) syz_open_dev$hidraw(&(0x7f0000000b40), 0x6, 0x422000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b0400000000000000000212000008000940000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x3a, 0x0, @multicast1, @multicast1}, {0x8000, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff", "8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f", "62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e", {"52a05c5cfcff2c9350623b5806dc725f", 'B\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}}}}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x40000000) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1.396370705s ago: executing program 4 (id=6850): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7731, 0x800, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x5, 0x0, 0x1, 0x20, 0x1}) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r9) 1.394975737s ago: executing program 1 (id=6860): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x30, r7, 0x100, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x4000805) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x8f, 0x2, 0x53, 0x40, 0xc45, 0x8003, 0xd6bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6e, 0xe4, 0x4e}}]}}]}}, 0x0) 22.659451ms ago: executing program 2 (id=6851): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x3, 0x7, 0x1}) r1 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c00000001040500000000000000000000000000060006400000004a080005400000000005000100010000950a00020000e4ff00000000000800034000000000060006400000000008000440000000000a0002000000001f420000000800044000000000080004400aaff612c7b6a41d20040f835d9f1a16082f984662f3a3"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x2004c800) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080)=0x2, 0x7f03) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r9 = openat(r8, 0x0, 0x20842, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 4 (id=6852): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x42c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3e0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2f4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2ac, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f7203000000307830303030"]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) kernel console output (not intermixed with test programs): point 0x81 has invalid wMaxPacketSize 0 [ 1688.180863][T20287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1688.199721][T20286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1688.217301][T20287] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1688.238233][T20287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.247674][T20286] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1688.259250][T20287] usb 3-1: config 0 descriptor?? [ 1688.275241][T20286] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1688.301083][T27300] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5780'. [ 1688.311304][T20286] usb 5-1: Manufacturer: syz [ 1688.321381][T20286] usb 5-1: config 0 descriptor?? [ 1688.705548][T20287] plantronics 0003:047F:FFFF.0082: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1688.752783][T20286] appleir 0003:05AC:8243.0083: unknown main item tag 0x0 [ 1688.807257][T20286] appleir 0003:05AC:8243.0083: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1688.959862][T27307] can: request_module (can-proto-3) failed. [ 1689.044235][T12200] usb 3-1: USB disconnect, device number 9 [ 1689.139980][T20277] usb 5-1: USB disconnect, device number 7 [ 1689.500068][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5792'. [ 1689.817438][T27330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5795'. [ 1689.960310][T27332] can: request_module (can-proto-3) failed. [ 1690.007257][T20277] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1690.047967][T27339] IPVS: length: 149 != 17667290688 [ 1690.169785][T20277] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1690.179706][T20277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.220302][T20277] usb 5-1: config 0 descriptor?? [ 1690.250338][T20277] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1690.442749][T20277] gp8psk: usb in 128 operation failed. [ 1690.463949][T20277] gp8psk: usb in 137 operation failed. [ 1690.478314][T20277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1690.506792][T20277] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1690.533417][T20277] usb 5-1: media controller created [ 1690.560949][T20277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1690.584256][T20277] gp8psk_fe: Frontend attached [ 1690.592713][T20277] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1690.613510][T20277] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1690.686558][T27345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1690.876977][T20277] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1690.898070][T20277] gp8psk: found Genpix USB device pID = 203 (hex) [ 1691.158657][T20277] usb 5-1: USB disconnect, device number 8 [ 1691.217467][T27356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1691.463249][T20277] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1691.474509][T27356] netlink: 'syz.3.5800': attribute type 10 has an invalid length. [ 1691.488397][T27363] can: request_module (can-proto-3) failed. [ 1691.501748][T27364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1691.503451][T27356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.571876][T27356] team0: Port device bond0 added [ 1691.966446][T27377] can: request_module (can-proto-3) failed. [ 1692.711223][T27364] team0 (unregistering): Port device bond0 removed [ 1693.077809][T27393] can: request_module (can-proto-3) failed. [ 1693.193527][T27409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5816'. [ 1693.453707][T27412] IPVS: length: 149 != 17667290688 [ 1693.865750][T20286] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1694.041888][T20286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.065492][T20286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.078763][T20286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1694.096067][T20286] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1694.111071][T20286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.137159][T20286] usb 5-1: config 0 descriptor?? [ 1694.306852][T27437] loop2: detected capacity change from 0 to 7 [ 1694.313609][T27434] can: request_module (can-proto-3) failed. [ 1694.322840][T24952] Dev loop2: unable to read RDB block 7 [ 1694.342550][T24952] loop2: unable to read partition table [ 1694.353176][T24952] loop2: partition table beyond EOD, truncated [ 1694.390218][T27437] Dev loop2: unable to read RDB block 7 [ 1694.410880][T27437] loop2: unable to read partition table [ 1694.423892][T27437] loop2: partition table beyond EOD, truncated [ 1694.439704][T27437] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1694.608410][T20286] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1694.888162][T20277] usb 5-1: USB disconnect, device number 9 [ 1694.933481][T27465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1694.989240][T27464] bond0: option arp_validate: invalid value (18446744071562068032) [ 1695.196296][T27468] IPVS: length: 149 != 17667290688 [ 1695.384004][T27482] can: request_module (can-proto-3) failed. [ 1695.515416][ T30] audit: type=1326 audit(1768525153.473:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27475 comm="syz.3.5841" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0 [ 1696.231378][T27509] can: request_module (can-proto-3) failed. [ 1696.325306][T27521] libceph: resolve '0..' (ret=-3): failed [ 1696.496777][ T57] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 1696.642079][T27528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1697.255407][T27554] can: request_module (can-proto-3) failed. [ 1697.876074][T20286] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1697.912409][T27567] libceph: resolve '0..' (ret=-3): failed [ 1698.069036][T20286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.117122][T20286] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1698.139700][T20286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.168933][T20286] usb 1-1: Product: syz [ 1698.196867][T20286] usb 1-1: Manufacturer: syz [ 1698.214006][T20286] usb 1-1: SerialNumber: syz [ 1698.725996][T20287] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1698.907871][T20287] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1698.914273][T27585] can: request_module (can-proto-3) failed. [ 1698.945866][T20287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.980860][T20287] usb 3-1: config 0 descriptor?? [ 1699.294990][T20286] cdc_ncm 1-1:1.0: bind() failure [ 1699.307660][T20286] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1699.314638][T20286] cdc_ncm 1-1:1.1: bind() failure [ 1699.327131][T20286] usb 1-1: USB disconnect, device number 5 [ 1699.385806][T20288] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1699.556729][T20288] usb 5-1: Using ep0 maxpacket: 8 [ 1699.565856][T20288] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1699.574977][T20288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.583128][T20288] usb 5-1: Product: syz [ 1699.587492][T20288] usb 5-1: Manufacturer: syz [ 1699.592219][T20288] usb 5-1: SerialNumber: syz [ 1699.599026][T20288] usb 5-1: config 0 descriptor?? [ 1699.609964][T20288] gspca_main: se401-2.14.0 probing 047d:5003 [ 1700.098161][T27603] libceph: resolve '0..' (ret=-3): failed [ 1700.213918][T20288] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input304 [ 1700.225343][T20287] pegasus 3-1:0.0: can't reset MAC [ 1700.236663][T20287] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 1700.296035][T20287] usb 3-1: USB disconnect, device number 10 [ 1700.449238][T20277] usb 5-1: USB disconnect, device number 10 [ 1701.105863][T20287] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1701.127830][ T30] audit: type=1326 audit(1768525159.093:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27636 comm="syz.4.5904" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67539 code=0x0 [ 1701.285808][T20287] usb 3-1: Using ep0 maxpacket: 8 [ 1701.293602][T20287] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1701.315842][T20287] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1701.336211][T20287] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1701.337505][T27645] libceph: resolve '0..' (ret=-3): failed [ 1701.351918][T20287] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1701.375700][T20287] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1701.405797][T20287] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1701.414988][T20287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.643681][T20287] usb 3-1: usb_control_msg returned -32 [ 1701.650179][T20287] usbtmc 3-1:16.0: can't read capabilities [ 1702.183977][T27662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1702.377685][T27673] libceph: resolve '0..' (ret=-3): failed [ 1702.516300][T20277] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1702.667704][T20277] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1702.679374][T20277] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1702.691134][T20277] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1702.700753][T20277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.712719][T27666] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1702.720982][T27666] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1702.731987][T20277] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1702.950431][T20287] usb 1-1: USB disconnect, device number 6 [ 1703.873049][T20277] usb 3-1: USB disconnect, device number 11 [ 1704.035966][T20287] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1704.212848][T20287] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1704.225417][T20287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1704.238253][T20287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1704.250219][T20287] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1704.263608][T20287] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1704.273165][T20287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.285798][T20287] usb 1-1: config 0 descriptor?? [ 1704.292948][T27688] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1704.445856][T20286] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1704.605727][T20286] usb 3-1: Using ep0 maxpacket: 8 [ 1704.617200][T20286] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1704.627198][T20286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.635429][T20286] usb 3-1: Product: syz [ 1704.640191][T20286] usb 3-1: Manufacturer: syz [ 1704.645005][T20286] usb 3-1: SerialNumber: syz [ 1704.654052][T20286] usb 3-1: config 0 descriptor?? [ 1704.716852][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.724980][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.732625][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.740877][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.748519][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.758427][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.766111][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.773956][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.781674][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.790153][T20287] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 1704.816727][T20287] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1704.870482][T20286] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1704.910933][T27704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1704.937435][T27704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1705.048452][T20287] usb 1-1: USB disconnect, device number 7 [ 1705.482018][T20286] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1705.498779][T20286] usb 3-1: USB disconnect, device number 12 [ 1705.928230][T20286] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1706.088852][T20286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.108038][T20286] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1706.119316][T20286] usb 1-1: config 1 interface 2 has no altsetting 0 [ 1706.131785][T20286] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1706.146240][T20286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.167196][T20286] usb 1-1: Product: syz [ 1706.177206][T20286] usb 1-1: Manufacturer: syz [ 1706.194081][T20286] usb 1-1: SerialNumber: syz [ 1706.438484][T20286] usb 1-1: selecting invalid altsetting 0 [ 1706.468958][T20286] usb 1-1: USB disconnect, device number 8 [ 1706.507411][T24952] udevd[24952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1706.655562][T27739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5944'. [ 1706.665176][T27739] netlink: 'syz.1.5944': attribute type 15 has an invalid length. [ 1706.680062][T27739] vxlan1: entered promiscuous mode [ 1706.687181][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1706.698106][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1706.707686][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1706.851376][T27744] libceph: resolve '0..' (ret=-3): failed [ 1707.178994][T27754] libceph: resolve '0..' (ret=-3): failed [ 1707.406812][T20286] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1707.578487][T20286] usb 1-1: Using ep0 maxpacket: 8 [ 1707.590056][T20286] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1707.606904][T20286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1707.640214][T20286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1707.748104][T20286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1707.764945][T20286] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1707.778871][T20286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1707.791929][T20286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.062524][T20286] usb 1-1: usb_control_msg returned -32 [ 1708.071963][T20286] usbtmc 1-1:16.0: can't read capabilities [ 1708.657458][T20287] usb 1-1: USB disconnect, device number 9 [ 1708.775981][T20286] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1708.840378][T27796] batadv0: entered promiscuous mode [ 1708.853770][T27796] batadv0: left promiscuous mode [ 1708.936075][T20286] usb 3-1: Using ep0 maxpacket: 8 [ 1708.952485][T20286] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1708.972156][T20286] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1708.999303][T20286] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1709.010591][T20286] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1709.024350][T20286] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1709.039367][T20286] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1709.048820][T20286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.261213][T27813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5974'. [ 1709.426250][T27813] IPVS: length: 149 != 17667290688 [ 1709.835258][T27815] usbtmc 3-1:16.0: simple usb_control_msg returned 0 [ 1710.054754][T20286] usb 3-1: USB disconnect, device number 13 [ 1710.141841][T27829] IPVS: Scheduler module ip_vs_ not found [ 1711.327149][T27877] libceph: resolve '0..' (ret=-3): failed [ 1712.173691][T27891] libceph: resolve '0..' (ret=-3): failed [ 1712.185791][T20286] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1712.370012][T20286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.381366][T20286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.391290][T20286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1712.405810][T20286] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1712.414983][T20286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.428535][T20286] usb 5-1: config 0 descriptor?? [ 1712.796126][T20277] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1712.852504][T20286] plantronics 0003:047F:FFFF.0086: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1712.946047][T20277] usb 1-1: Using ep0 maxpacket: 8 [ 1712.953552][T20277] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1712.962362][T20277] usb 1-1: config 0 has no interface number 0 [ 1712.969086][T20277] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1712.980602][T20277] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1712.992830][T20277] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1713.004469][T20277] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1713.017965][T20277] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1713.027422][T20277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.038926][T20277] usb 1-1: config 0 descriptor?? [ 1713.062888][T20277] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1713.456461][T27914] can: request_module (can-proto-3) failed. [ 1713.835782][T20286] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1714.015774][T20286] usb 3-1: Using ep0 maxpacket: 8 [ 1714.025535][T20286] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1714.038373][T20286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.047045][T20286] usb 3-1: Product: syz [ 1714.051446][T20286] usb 3-1: Manufacturer: syz [ 1714.056199][T20286] usb 3-1: SerialNumber: syz [ 1714.063654][T20286] usb 3-1: config 0 descriptor?? [ 1714.072804][T20286] gspca_main: se401-2.14.0 probing 047d:5003 [ 1714.186267][ C0] plantronics 0003:047F:FFFF.0086: usb_submit_urb(ctrl) failed: -1 [ 1714.197992][T20288] usb 1-1: USB disconnect, device number 10 [ 1714.215892][T20288] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 1714.683722][T20286] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input305 [ 1714.967623][T20286] usb 3-1: USB disconnect, device number 14 [ 1714.986328][T20277] usb 5-1: USB disconnect, device number 11 [ 1715.872045][T27951] libceph: resolve '0..' (ret=-3): failed [ 1715.937527][T27962] kernel read not supported for file /rmdF¼ì (pid: 27962 comm: syz.3.6030) [ 1715.955942][ T30] audit: type=1800 audit(1768525173.913:679): pid=27962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6030" name=726D64461716BCEC dev="mqueue" ino=99344 res=0 errno=0 [ 1716.094438][T27971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6034'. [ 1716.266096][T20277] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1716.419097][T20277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.430766][T20277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.443148][T20277] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1716.452938][T20277] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1716.461545][T20277] usb 1-1: Manufacturer: syz [ 1716.468906][T20277] usb 1-1: config 0 descriptor?? [ 1716.626037][T20090] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1716.718406][T27985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1716.728071][T27985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6040'. [ 1716.779813][T20090] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1716.798207][T20090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1716.826555][T20090] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1716.848705][T20090] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1716.857693][T20090] usb 5-1: Manufacturer: syz [ 1716.877019][T20090] usb 5-1: config 0 descriptor?? [ 1716.979148][T20090] rc_core: IR keymap rc-hauppauge not found [ 1716.986008][T20090] Registered IR keymap rc-empty [ 1716.992456][T20090] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1717.008102][T20090] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input306 [ 1717.104186][T20090] usb 5-1: USB disconnect, device number 12 [ 1717.289462][T20277] uclogic 0003:256C:006D.0087: interface is invalid, ignoring [ 1717.509003][T20277] usb 1-1: USB disconnect, device number 11 [ 1717.955864][T20286] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1718.116000][T20286] usb 5-1: Using ep0 maxpacket: 8 [ 1718.127731][T20286] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1718.147094][T20286] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1718.176159][T20286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1718.195567][T20286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1718.207077][T28006] can: request_module (can-proto-3) failed. [ 1718.213506][T20286] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1718.229003][T20286] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1718.250508][T20286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.470413][T20286] usb 5-1: usb_control_msg returned -32 [ 1718.485756][T20286] usbtmc 5-1:16.0: can't read capabilities [ 1718.596900][T20277] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1718.766261][T20277] usb 3-1: Using ep0 maxpacket: 32 [ 1718.773515][T20277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.784906][T20277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.795222][T20277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1718.808687][T20277] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1718.818306][T20277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.835232][T20277] usb 3-1: config 0 descriptor?? [ 1718.935895][T20286] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1719.088384][T20286] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 1719.100219][T20286] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1719.109541][T20286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.117916][T20286] usb 1-1: Product: syz [ 1719.122298][T20286] usb 1-1: Manufacturer: syz [ 1719.127001][T20286] usb 1-1: SerialNumber: syz [ 1719.138903][T20286] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1719.158892][T20287] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1719.266366][T28023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1719.276167][T20277] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0088/input/input307 [ 1719.372559][T20277] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0088/input/input308 [ 1719.419483][T28019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.454529][T20277] kye 0003:0458:5011.0088: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 1719.518397][T28019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.563397][T28024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1719.594012][T28019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.628970][T28019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.671879][T28019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.687095][T28027] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1719.707217][T28019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.739112][T20277] usb 1-1: USB disconnect, device number 12 [ 1719.769494][T20090] usb 3-1: USB disconnect, device number 15 [ 1719.808276][T20286] usb 5-1: USB disconnect, device number 13 [ 1720.195930][T20287] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1720.203013][T20287] ath9k_htc: Failed to initialize the device [ 1720.209916][T20277] usb 1-1: ath9k_htc: USB layer deinitialized [ 1720.525752][T20277] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1720.586343][T28048] can: request_module (can-proto-3) failed. [ 1720.668663][T28051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6060'. [ 1720.681233][T20277] usb 1-1: Using ep0 maxpacket: 32 [ 1720.701049][T20277] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 1720.710225][T20277] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1720.726390][T20277] usb 1-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1720.740058][T20277] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 1720.749640][T20277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.762555][T20277] usb 1-1: config 0 descriptor?? [ 1720.773887][T20277] mos7840 1-1:0.0: missing endpoints [ 1721.032073][T20287] usb 1-1: USB disconnect, device number 13 [ 1721.686228][T20287] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1721.772228][T28081] libceph: resolve '0..' (ret=-3): failed [ 1721.845744][T20287] usb 5-1: Using ep0 maxpacket: 8 [ 1721.855558][T20287] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1721.864351][T20287] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1721.874676][T20287] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1721.895450][T20287] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1721.915037][T20287] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1721.929657][T20287] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1721.940663][T20287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.171225][T20287] usb 5-1: GET_CAPABILITIES returned 0 [ 1722.178821][T20287] usbtmc 5-1:16.0: can't read capabilities [ 1722.548574][T28071] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 1722.559287][T20277] usb 5-1: USB disconnect, device number 14 [ 1722.641112][T28089] can: request_module (can-proto-3) failed. [ 1722.695072][T28087] libceph: resolve '0..' (ret=-3): failed [ 1722.888563][T28098] libceph: resolve '0..' (ret=-3): failed [ 1723.860606][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1723.939207][T28113] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6085'. [ 1724.204729][T28121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1724.269374][T28122] libceph: resolve '0..' (ret=-3): failed [ 1724.578370][T28131] can: request_module (can-proto-3) failed. [ 1725.080153][T28146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6093'. [ 1725.646374][T28147] IPVS: length: 149 != 17667290688 [ 1725.991225][T28159] netlink: 'syz.2.6099': attribute type 2 has an invalid length. [ 1726.011603][T28159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6099'. [ 1726.025882][T28159] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1726.217139][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1726.226950][T28171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1726.242160][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1726.253523][T28171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1726.390402][T28179] loop2: detected capacity change from 0 to 7 [ 1726.401884][T28179] Dev loop2: unable to read RDB block 7 [ 1726.415716][T28179] loop2: unable to read partition table [ 1726.421718][T28179] loop2: partition table beyond EOD, truncated [ 1726.428402][T28179] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1726.865967][T28188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6110'. [ 1727.886200][T20277] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1727.886270][T20287] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1728.056201][T20277] usb 1-1: Using ep0 maxpacket: 16 [ 1728.065021][T20277] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.077698][T20277] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.088565][T20277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1728.088654][T20287] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1728.095205][T20277] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1728.095233][T20277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.124119][T20287] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1728.136870][T20277] usb 1-1: config 0 descriptor?? [ 1728.137952][T20287] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1728.151981][T20287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.381653][T20287] usb 3-1: usb_control_msg returned -32 [ 1728.389685][T20287] usbtmc 3-1:16.0: can't read capabilities [ 1728.580112][T20277] hid_parser_main: 5 callbacks suppressed [ 1728.580136][T20277] nzxt-smart2 0003:1E71:2009.0089: unknown main item tag 0x0 [ 1728.594293][T20277] nzxt-smart2 0003:1E71:2009.0089: unknown main item tag 0x0 [ 1728.602501][T20277] nzxt-smart2 0003:1E71:2009.0089: unknown main item tag 0x0 [ 1728.610464][T20277] nzxt-smart2 0003:1E71:2009.0089: unknown main item tag 0x0 [ 1728.618345][T20277] nzxt-smart2 0003:1E71:2009.0089: unknown main item tag 0x0 [ 1728.628429][T20277] nzxt-smart2 0003:1E71:2009.0089: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1728.802902][T20277] usb 1-1: USB disconnect, device number 14 [ 1728.940330][T28233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6125'. [ 1729.530273][T28244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6128'. [ 1729.749816][T28246] libceph: resolve '0..' (ret=-3): failed [ 1729.801702][T28247] IPVS: length: 149 != 17667290688 [ 1730.278975][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.286482][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.667129][T20277] usb 3-1: USB disconnect, device number 16 [ 1730.700093][T28260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6135'. [ 1731.110656][T28276] can: request_module (can-proto-3) failed. [ 1731.230037][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6141'. [ 1731.336925][T28288] can: request_module (can-proto-3) failed. [ 1731.452584][T28292] libceph: resolve '0..' (ret=-3): failed [ 1731.737143][T28302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6147'. [ 1731.816468][T20287] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1731.919643][T28302] IPVS: length: 149 != 17667290688 [ 1732.005705][T20287] usb 1-1: Using ep0 maxpacket: 32 [ 1732.012846][T20287] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1732.029076][T20287] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1732.056787][T20287] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1732.077877][T20287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1732.120219][T20287] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1732.152034][T20287] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1732.188461][T20287] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1732.222558][T20287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.251780][T20287] usb 1-1: config 0 descriptor?? [ 1732.266043][T20277] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1732.426496][T20277] usb 3-1: Using ep0 maxpacket: 32 [ 1732.433781][T20277] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1732.453118][T20277] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1732.488905][T20287] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1732.490140][T20277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1732.534873][T20287] usb 1-1: USB disconnect, device number 15 [ 1732.564976][T20277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1732.572351][T20287] usblp0: removed [ 1732.576636][T20277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1732.592362][T20277] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1732.621437][T20277] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1732.640158][T20277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.664569][T20277] usb 3-1: config 0 descriptor?? [ 1732.926516][T20277] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1732.952021][T20277] usb 3-1: USB disconnect, device number 17 [ 1732.972727][T20277] usblp0: removed [ 1733.005932][T20287] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1733.165947][T20287] usb 1-1: Using ep0 maxpacket: 32 [ 1733.176902][T20287] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1733.185300][T20287] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1733.215699][T20287] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1733.224810][T20287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1733.247614][T20287] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1733.267275][T20287] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1733.286549][T20287] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1733.296350][T20287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.307447][T20287] usb 1-1: config 0 descriptor?? [ 1733.435810][T20277] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1733.492510][T28328] libceph: resolve '0..' (ret=-3): failed [ 1733.521734][T20287] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1733.586381][T20277] usb 3-1: Using ep0 maxpacket: 32 [ 1733.614810][T20277] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1733.630684][T20277] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1733.650191][T20277] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1733.661669][T20277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1733.672058][T20277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1733.682524][T20277] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1733.696898][T20277] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1733.707112][T20277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.730511][T20277] usb 3-1: config 0 descriptor?? [ 1733.764817][T20288] usb 1-1: USB disconnect, device number 16 [ 1733.792958][T20288] usblp0: removed [ 1733.858387][T28331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6156'. [ 1733.950115][T20277] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1734.140017][T28335] can: request_module (can-proto-3) failed. [ 1734.187212][T20277] usb 3-1: USB disconnect, device number 18 [ 1734.205322][T20277] usblp0: removed [ 1734.617560][T28351] libceph: resolve '0..' (ret=-3): failed [ 1734.839479][T28357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6164'. [ 1734.933300][T28357] dvmrp6: entered allmulticast mode [ 1735.410410][T28371] can: request_module (can-proto-3) failed. [ 1735.847167][T28388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6175'. [ 1735.938986][T28394] libceph: resolve '0..' (ret=-3): failed [ 1735.996372][T28399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1736.110868][T28406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1736.205242][T28404] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1736.304864][T28406] bond2 (unregistering): (slave geneve3): Releasing backup interface [ 1736.371339][T28406] bond2 (unregistering): Released all slaves [ 1737.128142][T28416] can: request_module (can-proto-3) failed. [ 1737.400480][T28429] libceph: resolve '0..' (ret=-3): failed [ 1737.406528][T20288] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1737.558432][T20288] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1737.569376][T20288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.582019][T20288] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1737.592723][T20288] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1737.602249][T20288] usb 5-1: Manufacturer: syz [ 1737.613482][T20288] usb 5-1: config 0 descriptor?? [ 1737.695733][T20288] rc_core: IR keymap rc-hauppauge not found [ 1737.701949][T20288] Registered IR keymap rc-empty [ 1737.709298][T20288] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1737.723335][T20288] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input309 [ 1737.854890][T20277] usb 5-1: USB disconnect, device number 15 [ 1738.725396][T28441] netlink: 'syz.1.6190': attribute type 13 has an invalid length. [ 1738.733498][T20288] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1738.887595][T20288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.910310][T20288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.923730][T20288] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1738.934611][T20288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.962550][T20288] usb 5-1: config 0 descriptor?? [ 1739.304178][T28450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6192'. [ 1739.316357][T28448] libceph: resolve '0..' (ret=-3): failed [ 1739.432162][T20288] cp2112 0003:10C4:EA90.008A: unknown main item tag 0x0 [ 1739.448318][T20288] cp2112 0003:10C4:EA90.008A: unknown main item tag 0x0 [ 1739.469123][T20288] cp2112 0003:10C4:EA90.008A: unknown main item tag 0x0 [ 1739.489707][T20288] cp2112 0003:10C4:EA90.008A: unknown main item tag 0x0 [ 1739.512036][T20288] cp2112 0003:10C4:EA90.008A: unknown main item tag 0x0 [ 1739.530989][T20288] cp2112 0003:10C4:EA90.008A: unknown main item tag 0x0 [ 1739.557243][T20288] cp2112 0003:10C4:EA90.008A: unknown main item tag 0x0 [ 1739.566695][T20288] cp2112 0003:10C4:EA90.008A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1739.649927][T20288] cp2112 0003:10C4:EA90.008A: Part Number: 0x82 Device Version: 0xFE [ 1739.778103][T28457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6193'. [ 1740.102877][T28459] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1740.321174][T20288] cp2112 0003:10C4:EA90.008A: error reading lock byte: -71 [ 1740.368470][T20288] usb 5-1: USB disconnect, device number 16 [ 1740.900744][T28466] can: request_module (can-proto-3) failed. [ 1741.197056][T20277] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1741.357865][T20277] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.385334][T20277] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1741.406078][T20277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.424259][T20277] usb 3-1: Product: syz [ 1741.434188][T20277] usb 3-1: Manufacturer: syz [ 1741.446227][T20277] usb 3-1: SerialNumber: syz [ 1741.473629][T20277] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1741.890951][T20277] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1741.902829][T20277] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1741.911791][T20277] usb 3-1: media controller created [ 1741.937893][T20277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1742.064214][T20277] usb 3-1: USB disconnect, device number 19 [ 1742.141860][T28496] can: request_module (can-proto-3) failed. [ 1742.672204][T28518] can: request_module (can-proto-3) failed. [ 1742.750291][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'. [ 1742.778009][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'. [ 1742.794289][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'. [ 1742.810174][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6214'. [ 1744.134429][T28541] can: request_module (can-proto-3) failed. [ 1744.417324][T28555] netlink: 'syz.4.6223': attribute type 13 has an invalid length. [ 1744.699281][T28563] loop2: detected capacity change from 0 to 7 [ 1744.711086][T28563] Dev loop2: unable to read RDB block 7 [ 1744.724289][T28563] loop2: unable to read partition table [ 1744.737154][T28563] loop2: partition table beyond EOD, truncated [ 1744.751001][T28563] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1744.787718][ T5201] Dev loop2: unable to read RDB block 7 [ 1744.794323][ T5201] loop2: unable to read partition table [ 1744.800439][ T5201] loop2: partition table beyond EOD, truncated [ 1744.920104][T28566] netlink: 'syz.1.6227': attribute type 1 has an invalid length. [ 1744.954209][T28566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1744.981707][T28566] vlan0: entered allmulticast mode [ 1744.987888][T28566] veth0_to_bond: entered allmulticast mode [ 1744.994764][T28566] bond5: (slave vlan0): Opening slave failed [ 1745.147573][T28570] can: request_module (can-proto-3) failed. [ 1745.176311][T20277] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1745.336127][T20277] usb 5-1: Using ep0 maxpacket: 32 [ 1745.347430][T20277] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1745.365901][T20277] usb 5-1: config 0 has no interface number 0 [ 1745.380913][T20277] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1745.405299][T20277] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1745.418541][T20277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.461454][T20277] usb 5-1: Product: syz [ 1745.479388][T20277] usb 5-1: Manufacturer: syz [ 1745.487730][T20277] usb 5-1: SerialNumber: syz [ 1745.517517][T20277] usb 5-1: config 0 descriptor?? [ 1745.532524][T28568] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1745.811537][T28568] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1745.865016][T28592] can: request_module (can-proto-3) failed. [ 1745.885737][T20288] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1746.050799][T20288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.066058][T20288] usb 3-1: config 0 has no interfaces? [ 1746.072410][T20288] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1746.082922][T20288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.107068][T20288] usb 3-1: config 0 descriptor?? [ 1746.233358][T20277] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1746.250573][T20277] asix 5-1:0.188: probe with driver asix failed with error -61 [ 1746.924862][T28616] input: syz1 as /devices/virtual/input/input310 [ 1747.747659][T28623] loop2: detected capacity change from 0 to 7 [ 1747.758796][T24952] Dev loop2: unable to read RDB block 7 [ 1747.764519][T24952] loop2: unable to read partition table [ 1747.771189][T24952] loop2: partition table beyond EOD, truncated [ 1747.779455][T28623] Dev loop2: unable to read RDB block 7 [ 1747.785066][T28623] loop2: unable to read partition table [ 1747.797508][T28623] loop2: partition table beyond EOD, truncated [ 1747.803876][T28623] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1747.947823][T20277] usb 5-1: USB disconnect, device number 17 [ 1748.035170][T28631] can: request_module (can-proto-3) failed. [ 1748.115312][T28636] libceph: resolve '0..' (ret=-3): failed [ 1748.670295][T20277] usb 3-1: USB disconnect, device number 20 [ 1749.687688][T20277] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1749.860528][T20277] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1749.888252][T20277] usb 5-1: config 0 has no interface number 0 [ 1749.904147][T20277] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1749.939199][T20277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.957009][T20277] usb 5-1: config 0 descriptor?? [ 1749.978333][T20277] usb 5-1: selecting invalid altsetting 1 [ 1749.994410][T20277] dvb_ttusb_budget: ttusb_init_controller: error [ 1750.004022][T20277] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1750.120541][T28682] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1750.150625][T28682] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1750.256645][T20277] DVB: Unable to find symbol cx22700_attach() [ 1750.327389][T28690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6268'. [ 1750.398503][T20277] DVB: Unable to find symbol tda10046_attach() [ 1750.423692][T20277] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1750.483661][T20277] usb 5-1: USB disconnect, device number 18 [ 1750.729350][T28692] IPVS: length: 149 != 17667290688 [ 1750.793690][T28695] can: request_module (can-proto-3) failed. [ 1751.226461][T20090] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1751.405231][T20090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1751.415611][T20090] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1751.427265][T20090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1751.437678][T20090] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1751.448261][T20277] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1751.456958][T20090] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1751.467417][T20090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.496314][T20090] usb 5-1: config 0 descriptor?? [ 1751.563826][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'. [ 1751.615949][T20277] usb 3-1: Using ep0 maxpacket: 8 [ 1751.627693][T20277] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1751.639073][T20277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.648627][T20277] usb 3-1: Product: syz [ 1751.653371][T20277] usb 3-1: Manufacturer: syz [ 1751.659789][T20277] usb 3-1: SerialNumber: syz [ 1751.686519][T20277] usb 3-1: config 0 descriptor?? [ 1751.718524][T20090] hdpvr 5-1:0.0: firmware version 0xf4 dated êÐœ~¯ÏLµj¶uU$«[-Må¿/h&ÉçûXgÁÞ†<|’ [ 1751.730697][T20090] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1751.807545][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6275'. [ 1751.898386][T20277] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1752.251655][T20090] hdpvr 5-1:0.0: Could not setup controls [ 1752.272452][T20090] hdpvr 5-1:0.0: registering videodev failed [ 1752.336163][T20090] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 1752.377760][T20090] usb 5-1: USB disconnect, device number 19 [ 1752.963481][T28738] libceph: resolve '0..' (ret=-3): failed [ 1753.588511][T28741] openvswitch: netlink: Key type 50 is out of range max 32 [ 1753.758649][T20277] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1753.789989][T20277] dvbdev: DVB: registering new adapter (Terratec H7) [ 1753.828019][T20277] usb 3-1: media controller created [ 1753.926331][T20277] usb 3-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 1754.032833][T20277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1754.091772][T20277] DVB: Unable to find symbol drxk_attach() [ 1754.144242][T20277] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 1754.171741][T20277] usb 3-1: USB disconnect, device number 21 [ 1754.224103][T28745] can: request_module (can-proto-3) failed. [ 1754.822512][T28751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1755.065473][T28752] IPVS: length: 149 != 17667290688 [ 1755.157582][T28756] libceph: resolve '0..' (ret=-3): failed [ 1755.495803][T28763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6289'. [ 1755.637262][T28765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1756.135076][T28784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1756.205827][T20288] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1756.316188][T28788] libceph: resolve '0..' (ret=-3): failed [ 1756.387830][T20288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.399716][T20288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1756.419432][T20288] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1756.435983][T20288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.444361][T20288] usb 3-1: Product: syz [ 1756.456089][T20288] usb 3-1: Manufacturer: syz [ 1756.460871][T20288] usb 3-1: SerialNumber: syz [ 1756.665072][T28796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6301'. [ 1757.479481][T28805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6304'. [ 1757.490164][T20288] usb 3-1: 0:2 : does not exist [ 1757.512517][T20288] usb 3-1: USB disconnect, device number 22 [ 1757.677827][T28805] IPVS: length: 149 != 17667290688 [ 1757.707567][T28811] can: request_module (can-proto-3) failed. [ 1757.750207][T28796] IPVS: length: 149 != 17667290688 [ 1758.228436][T28834] libceph: resolve '0..' (ret=-3): failed [ 1758.461999][T28838] can: request_module (can-proto-3) failed. [ 1759.329402][T28849] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1759.441993][T28854] libceph: resolve '0..' (ret=-3): failed [ 1759.765258][T28858] can: request_module (can-proto-3) failed. [ 1760.420854][T28867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6321'. [ 1760.732471][T28868] IPVS: length: 149 != 17667290688 [ 1761.059962][T28884] can: request_module (can-proto-3) failed. [ 1761.147157][T28893] libceph: resolve '0..' (ret=-3): failed [ 1761.513198][T28898] can: request_module (can-proto-3) failed. [ 1761.821353][T28911] libceph: resolve '0..' (ret=-3): failed [ 1762.851023][T28933] can: request_module (can-proto-3) failed. [ 1763.117685][T28948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6345'. [ 1763.690448][T28950] can: request_module (can-proto-3) failed. [ 1763.701257][T28955] netlink: 'syz.4.6347': attribute type 1 has an invalid length. [ 1763.779224][T28955] bond5: entered promiscuous mode [ 1763.795456][T28955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1766.475562][T28995] libceph: resolve '0..' (ret=-3): failed [ 1767.291505][T28999] can: request_module (can-proto-3) failed. [ 1767.466297][T20090] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1767.639901][T20090] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1767.659689][T20090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.690480][T20090] usb 5-1: config 0 descriptor?? [ 1767.720552][T20090] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1767.983997][T20090] gspca_spca508: reg_read err -71 [ 1768.008604][T20090] gspca_spca508: reg_read err -71 [ 1768.023408][T20090] gspca_spca508: reg_read err -71 [ 1768.042070][T20090] gspca_spca508: reg_read err -71 [ 1768.064362][T20090] gspca_spca508: reg_read err -71 [ 1768.084654][T20090] gspca_spca508: reg write: error -71 [ 1768.105067][T20090] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1768.128053][T29029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1768.140751][T20090] usb 5-1: USB disconnect, device number 20 [ 1768.912003][T29032] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1768.913347][ T30] audit: type=1326 audit(1768525226.873:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.017022][T29035] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1769.041648][ T30] audit: type=1326 audit(1768525226.873:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.074433][ T30] audit: type=1326 audit(1768525226.873:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.136060][ T30] audit: type=1326 audit(1768525226.873:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.214822][ T30] audit: type=1326 audit(1768525226.873:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.294841][T29035] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1769.303869][ T30] audit: type=1326 audit(1768525226.873:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.372852][ T30] audit: type=1326 audit(1768525226.873:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.425612][ T30] audit: type=1326 audit(1768525226.873:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.510501][ T30] audit: type=1326 audit(1768525226.873:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1769.569669][ T30] audit: type=1326 audit(1768525226.873:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.4.6366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1770.332551][T29047] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.6371'. [ 1770.611935][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6373'. [ 1770.878611][T29056] can: request_module (can-proto-3) failed. [ 1770.933358][T29054] libceph: resolve '0..' (ret=-3): failed [ 1771.796530][T20090] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1771.901862][T29076] program syz.2.6379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1771.957686][T20090] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 1771.966171][T20090] usb 5-1: config 0 has no interface number 0 [ 1771.978107][T20090] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1771.999088][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.056455][T20090] usb 5-1: Product: syz [ 1772.090130][T20090] usb 5-1: Manufacturer: syz [ 1772.094928][T20090] usb 5-1: SerialNumber: syz [ 1772.122496][T20090] usb 5-1: config 0 descriptor?? [ 1772.135268][T20090] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1772.161679][T20090] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 1772.435078][T20090] usb 5-1: USB disconnect, device number 21 [ 1772.537824][T29086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1773.189232][T29095] dummy0: entered promiscuous mode [ 1773.204829][T29095] dummy0: left promiscuous mode [ 1773.959839][T29111] can: request_module (can-proto-3) failed. [ 1774.316481][T20090] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1774.506025][T20090] usb 1-1: Using ep0 maxpacket: 16 [ 1774.546438][T20090] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1774.620267][T20090] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1774.670865][T20090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.722030][T20090] usb 1-1: config 0 descriptor?? [ 1774.773052][T20090] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input311 [ 1775.100206][T29122] input: syz0 as /devices/virtual/input/input312 [ 1775.791498][T29130] netlink: 'syz.2.6394': attribute type 1 has an invalid length. [ 1775.901219][T29130] bond5: entered promiscuous mode [ 1775.923694][T29130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1776.116861][T29137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6395'. [ 1776.519474][T29139] IPVS: length: 149 != 17667290688 [ 1777.076645][T20090] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1777.121941][ T5186] bcm5974 1-1:0.0: could not read from device [ 1777.122281][T20277] usb 1-1: USB disconnect, device number 17 [ 1777.164426][T24951] bcm5974 1-1:0.0: could not read from device [ 1777.236358][T20090] usb 5-1: Using ep0 maxpacket: 16 [ 1777.248011][T20090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1777.280109][T20090] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1777.300835][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.324165][T20090] usb 5-1: Product: syz [ 1777.340386][T20090] usb 5-1: Manufacturer: syz [ 1777.346783][T20090] usb 5-1: SerialNumber: syz [ 1777.369208][T20090] usb 5-1: config 0 descriptor?? [ 1777.381299][T20090] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1777.399040][T20090] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1777.445065][T29163] can: request_module (can-proto-3) failed. [ 1778.004220][T20090] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1778.336053][T29174] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1567568797/1567568798 [ 1778.396673][T29175] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1567568797/1567568798 [ 1778.449346][T20090] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1778.459051][T20090] em28xx 5-1:0.0: board has no eeprom [ 1778.592220][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6408'. [ 1778.805779][T20090] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1778.823162][T20090] em28xx 5-1:0.0: dvb set to bulk mode. [ 1778.841633][T20277] em28xx 5-1:0.0: Binding DVB extension [ 1779.147616][T29195] bridge0: entered promiscuous mode [ 1779.154732][T29195] vlan2: entered promiscuous mode [ 1779.976658][T29151] em28xx 5-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 1779.999725][T20090] usb 5-1: USB disconnect, device number 22 [ 1780.018832][T20090] em28xx 5-1:0.0: Disconnecting em28xx [ 1780.073592][T20277] em28xx 5-1:0.0: Registering input extension [ 1780.109509][T20090] em28xx 5-1:0.0: Closing input extension [ 1780.144301][T20090] em28xx 5-1:0.0: Freeing device [ 1780.399177][T29202] syzkaller0: entered promiscuous mode [ 1780.406117][T29202] syzkaller0: entered allmulticast mode [ 1780.644297][T29208] sit0: entered promiscuous mode [ 1780.706030][T29208] netlink: 'syz.1.6416': attribute type 1 has an invalid length. [ 1780.746117][T29208] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1780.920369][T29213] can: request_module (can-proto-3) failed. [ 1781.483128][T29231] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1782.290389][T29240] syzkaller0: entered promiscuous mode [ 1782.318486][T29240] syzkaller0: entered allmulticast mode [ 1782.467200][T29243] syzkaller0: entered promiscuous mode [ 1782.473012][T29243] syzkaller0: entered allmulticast mode [ 1782.647976][T29249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6427'. [ 1782.848715][T29254] vlan0: entered allmulticast mode [ 1782.866885][T29254] veth1: entered allmulticast mode [ 1782.907424][T29258] IPVS: length: 149 != 17667290688 [ 1783.086285][T20090] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1783.246253][T20090] usb 5-1: Using ep0 maxpacket: 32 [ 1783.270272][T20090] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1783.297415][T20090] usb 5-1: config 0 has no interface number 0 [ 1783.318613][T20090] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1783.345181][T20090] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1783.361752][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.373032][T20090] usb 5-1: Product: syz [ 1783.378049][T20090] usb 5-1: Manufacturer: syz [ 1783.386663][T20090] usb 5-1: SerialNumber: syz [ 1783.412176][T20090] usb 5-1: config 0 descriptor?? [ 1783.632676][T29269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6433'. [ 1783.653597][T29269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6433'. [ 1784.576997][T29275] can: request_module (can-proto-3) failed. [ 1785.322058][T20090] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 1785.354446][T20090] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1785.391037][T20090] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1785.432672][T20090] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1785.476839][T20090] usb 5-1: USB disconnect, device number 23 [ 1785.790821][T29292] syzkaller0: entered promiscuous mode [ 1785.800090][T29292] syzkaller0: entered allmulticast mode [ 1785.923835][T29295] tipc: Enabling of bearer rejected, already enabled [ 1786.207882][T29301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1786.494552][T29312] tipc: Enabled bearer , priority 0 [ 1786.527114][T29312] syzkaller0: entered promiscuous mode [ 1786.556601][T29312] syzkaller0: entered allmulticast mode [ 1786.721741][T29309] vlan2: entered promiscuous mode [ 1786.769251][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1786.796766][T29309] bond0: entered promiscuous mode [ 1786.844751][T29309] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1787.038057][T29312] tipc: Resetting bearer [ 1787.071468][T29310] tipc: Resetting bearer [ 1787.136521][T29310] tipc: Disabling bearer [ 1787.194486][T29320] tipc: Enabled bearer , priority 0 [ 1787.253566][T29320] syzkaller0: entered promiscuous mode [ 1787.299684][T29320] syzkaller0: entered allmulticast mode [ 1787.386880][T29320] tipc: Resetting bearer [ 1787.433442][T29319] tipc: Resetting bearer [ 1787.510807][T29319] tipc: Disabling bearer [ 1787.836319][T29332] can: request_module (can-proto-3) failed. [ 1787.888189][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6453'. [ 1787.999470][T29343] tipc: Enabled bearer , priority 0 [ 1788.014232][T29343] syzkaller0: entered promiscuous mode [ 1788.020959][T29343] syzkaller0: entered allmulticast mode [ 1788.047813][T29343] tipc: Resetting bearer [ 1788.057698][T29342] tipc: Resetting bearer [ 1788.090081][T29342] tipc: Disabling bearer [ 1788.096131][T20090] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1788.279361][T20090] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1788.297616][T20090] usb 5-1: not running at top speed; connect to a high speed hub [ 1788.307351][T20090] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1788.317395][T20090] usb 5-1: config 1 has no interface number 1 [ 1788.323616][T20090] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1788.339916][T20090] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1788.349800][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.358644][T20090] usb 5-1: Product: syz [ 1788.362895][T20090] usb 5-1: Manufacturer: syz [ 1788.390483][T20090] usb 5-1: SerialNumber: syz [ 1788.427132][T29339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1788.674474][T20090] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1788.712040][T20090] usb 5-1: USB disconnect, device number 24 [ 1788.760368][T24952] udevd[24952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1789.530301][T29364] libceph: resolve '0..' (ret=-3): failed [ 1789.658636][T20090] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1789.838195][T20090] usb 5-1: Using ep0 maxpacket: 32 [ 1789.853928][T20090] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1789.871547][T20090] usb 5-1: config 0 has no interface number 0 [ 1789.890962][T20090] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1789.913558][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.947408][T20090] usb 5-1: Product: syz [ 1789.959552][T20090] usb 5-1: Manufacturer: syz [ 1789.972771][T20090] usb 5-1: SerialNumber: syz [ 1789.996332][T20090] usb 5-1: config 0 descriptor?? [ 1790.015366][T20090] smsc95xx v2.0.0 [ 1790.428631][T20090] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1790.470716][T20090] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1790.660628][T29373] tipc: Enabled bearer , priority 0 [ 1790.690760][T29373] syzkaller0: entered promiscuous mode [ 1790.716333][T29373] syzkaller0: entered allmulticast mode [ 1790.987841][T29375] tipc: Resetting bearer [ 1791.017711][T29372] tipc: Resetting bearer [ 1791.126949][T29372] tipc: Disabling bearer [ 1791.376066][T20277] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1791.536046][T20277] usb 3-1: Using ep0 maxpacket: 16 [ 1791.544902][T20277] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1791.573900][T20277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1791.615366][T20277] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1791.649556][T20277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.674873][T20277] usb 3-1: Product: syz [ 1791.690475][T20277] usb 3-1: Manufacturer: syz [ 1791.708319][T20277] usb 3-1: SerialNumber: syz [ 1791.718696][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.725082][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.757813][T20277] usb 3-1: config 0 descriptor?? [ 1791.785486][T20277] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1791.807905][T20277] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1792.381480][T20277] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1792.417477][T20277] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1792.464733][T29382] syzkaller0: entered promiscuous mode [ 1792.478560][T29382] syzkaller0: entered allmulticast mode [ 1792.978527][T20288] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1793.043821][T20277] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1793.043890][T29396] tipc: Enabling of bearer rejected, already enabled [ 1793.053270][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1793.073023][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1793.073285][T29396] tipc: Resetting bearer [ 1793.086558][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1793.093898][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1793.102042][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1793.123263][T20090] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1793.138950][T20090] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1793.159408][T20090] usb 5-1: USB disconnect, device number 25 [ 1793.183177][T20288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.200725][T20288] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1793.212087][T20288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.237522][T20288] usb 1-1: config 0 descriptor?? [ 1793.252134][T20288] pwc: Askey VC010 type 2 USB webcam detected. [ 1793.258920][T29398] can: request_module (can-proto-3) failed. [ 1793.457514][T29392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.467026][T29392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.515424][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1793.524115][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1793.532878][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1793.542928][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1793.557054][T20277] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1793.569396][T20277] usb 3-1: USB disconnect, device number 23 [ 1793.695388][T20288] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1793.706776][T20288] pwc: recv_control_msg error -32 req 02 val 2700 [ 1793.714434][T20288] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1793.724185][T20288] pwc: recv_control_msg error -32 req 04 val 1000 [ 1793.731998][T20288] pwc: recv_control_msg error -32 req 04 val 1300 [ 1793.740231][T20288] pwc: recv_control_msg error -32 req 04 val 1400 [ 1793.751499][T20288] pwc: recv_control_msg error -32 req 02 val 2000 [ 1793.767942][T20288] pwc: recv_control_msg error -32 req 02 val 2100 [ 1793.775494][T20288] pwc: recv_control_msg error -32 req 04 val 1500 [ 1793.790432][T20288] pwc: recv_control_msg error -32 req 02 val 2500 [ 1793.798145][T29410] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1793.820427][T20288] pwc: recv_control_msg error -32 req 02 val 2400 [ 1794.031444][T20288] pwc: recv_control_msg error -71 req 02 val 2900 [ 1794.041485][T20288] pwc: recv_control_msg error -71 req 02 val 2800 [ 1794.050053][T20288] pwc: recv_control_msg error -71 req 04 val 1100 [ 1794.058366][T20288] pwc: recv_control_msg error -71 req 04 val 1200 [ 1794.083280][T20288] pwc: Registered as video103. [ 1794.113336][T20288] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input314 [ 1794.249327][T20288] usb 1-1: USB disconnect, device number 18 [ 1794.497046][T20277] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1794.657198][T20277] usb 3-1: Using ep0 maxpacket: 8 [ 1794.674081][T20277] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1794.705223][T20277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.742113][T20277] usb 3-1: Product: syz [ 1794.760430][T20277] usb 3-1: Manufacturer: syz [ 1794.771431][T20277] usb 3-1: SerialNumber: syz [ 1794.801804][T20277] usb 3-1: config 0 descriptor?? [ 1794.834532][T20277] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1795.098553][T29429] libceph: resolve '0..' (ret=-3): failed [ 1795.187599][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1795.197768][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1795.218043][T29433] libceph: resolve '0..' (ret=-3): failed [ 1795.291640][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1795.331511][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1795.458768][T29438] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1795.510138][T29438] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1795.526360][T20090] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1795.687003][T20090] usb 5-1: Using ep0 maxpacket: 32 [ 1795.701712][T20090] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 1795.726391][T20090] usb 5-1: config 0 has no interface number 0 [ 1795.784677][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1795.796203][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1795.808370][T20090] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1795.834491][T29442] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1795.877061][T29442] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1795.884818][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.903084][T20090] usb 5-1: Product: syz [ 1795.916440][T20090] usb 5-1: Manufacturer: syz [ 1795.948079][T20090] usb 5-1: SerialNumber: syz [ 1795.973956][T20090] usb 5-1: config 0 descriptor?? [ 1796.386733][T29449] tipc: Enabled bearer , priority 0 [ 1796.398395][T29450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1796.418488][T29449] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 1796.465066][T29449] tipc: Resetting bearer [ 1796.630348][T29453] IPVS: length: 149 != 17667290688 [ 1796.651688][T29458] netlink: 'syz.1.6488': attribute type 10 has an invalid length. [ 1796.664498][T29458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.065151][T20090] cp210x 5-1:0.79: cp210x converter detected [ 1798.102264][T20090] cp210x 5-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1798.113777][T20090] cp210x 5-1:0.79: querying part number failed [ 1798.142014][T20090] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1798.163384][T20277] gspca_sonixj: reg_r err -71 [ 1798.173988][T20277] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1798.192139][T20277] usb 3-1: USB disconnect, device number 24 [ 1798.203183][T20090] usb 5-1: USB disconnect, device number 26 [ 1798.238685][T20090] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1798.264049][T20090] cp210x 5-1:0.79: device disconnected [ 1798.427075][T29484] libceph: resolve '0..' (ret=-3): failed [ 1798.470838][T29485] libceph: resolve '0..' (ret=-3): failed [ 1798.576206][T20090] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1798.670026][T29487] can: request_module (can-proto-3) failed. [ 1798.730695][T20090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.762885][T20090] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1798.790485][T20090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.810366][T20090] usb 5-1: config 0 descriptor?? [ 1798.829818][T29493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6499'. [ 1798.829906][T20090] pwc: Askey VC010 type 2 USB webcam detected. [ 1798.919351][T29495] fuse: Bad value for 'fd' [ 1799.237406][T29501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1799.277499][T20090] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1799.351947][T20090] pwc: recv_control_msg error -32 req 02 val 2700 [ 1799.376796][T20090] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1799.412207][T20090] pwc: recv_control_msg error -32 req 04 val 1000 [ 1799.428517][T20090] pwc: recv_control_msg error -32 req 04 val 1300 [ 1799.437894][T20090] pwc: recv_control_msg error -32 req 04 val 1400 [ 1799.448168][T20090] pwc: recv_control_msg error -32 req 02 val 2000 [ 1799.462442][T20090] pwc: recv_control_msg error -32 req 02 val 2100 [ 1799.475220][T20090] pwc: recv_control_msg error -32 req 04 val 1500 [ 1799.487728][T20090] pwc: recv_control_msg error -32 req 02 val 2500 [ 1799.498126][T20090] pwc: recv_control_msg error -32 req 02 val 2400 [ 1799.507422][T20090] pwc: recv_control_msg error -32 req 02 val 2600 [ 1799.521226][T20090] pwc: recv_control_msg error -32 req 02 val 2900 [ 1799.937956][T20090] pwc: recv_control_msg error -71 req 04 val 1200 [ 1799.976776][T20090] pwc: Registered as video103. [ 1800.004832][T20090] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input315 [ 1800.049963][T20090] usb 5-1: USB disconnect, device number 27 [ 1800.184427][T29510] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1800.771022][T29517] netlink: 'syz.3.6505': attribute type 20 has an invalid length. [ 1800.867432][T20090] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1800.988975][T29520] tipc: Enabling of bearer rejected, already enabled [ 1801.054205][T20090] usb 1-1: config index 0 descriptor too short (expected 58429, got 61) [ 1801.084710][T20090] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 1801.112981][T20090] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1801.142142][T20090] usb 1-1: config 0 has no interface number 0 [ 1801.169371][T20090] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1801.206921][T20090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.214960][T20090] usb 1-1: Product: syz [ 1801.247530][T20090] usb 1-1: Manufacturer: syz [ 1801.260731][T29523] can: request_module (can-proto-3) failed. [ 1801.272069][T20090] usb 1-1: SerialNumber: syz [ 1801.305061][T20090] usb 1-1: config 0 descriptor?? [ 1801.534278][T20090] ljca 1-1:0.4: bulk endpoints not found [ 1801.559251][T20090] usb 1-1: USB disconnect, device number 19 [ 1801.637795][T29539] libceph: resolve '0..' (ret=-3): failed [ 1802.425776][T20288] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1802.533552][T29553] netlink: 'syz.1.6517': attribute type 23 has an invalid length. [ 1802.550870][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1802.596939][T20288] usb 1-1: Using ep0 maxpacket: 32 [ 1802.622472][T20288] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1802.632048][T20288] usb 1-1: config 0 has no interface number 0 [ 1802.675000][T20288] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1802.704752][T20288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.743318][T20288] usb 1-1: Product: syz [ 1802.761188][T20288] usb 1-1: Manufacturer: syz [ 1802.783372][T20288] usb 1-1: SerialNumber: syz [ 1802.813691][T20288] usb 1-1: config 0 descriptor?? [ 1802.847356][T20288] smsc95xx v2.0.0 [ 1803.212571][T20287] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1803.252692][T20288] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1803.264097][T20288] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1803.284784][T29568] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6520'. [ 1803.426745][T20287] usb 5-1: Using ep0 maxpacket: 16 [ 1803.447245][T20287] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1803.466339][T20287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1803.519033][T20287] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1803.529309][T20287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.538202][T20287] usb 5-1: Product: syz [ 1803.546149][T20287] usb 5-1: Manufacturer: syz [ 1803.565054][T20287] usb 5-1: SerialNumber: syz [ 1803.617624][T20287] usb 5-1: config 0 descriptor?? [ 1803.685091][T20287] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1803.711854][T20287] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1804.010044][T29571] sctp: [Deprecated]: syz.2.6521 (pid 29571) Use of int in max_burst socket option deprecated. [ 1804.010044][T29571] Use struct sctp_assoc_value instead [ 1804.295849][T20287] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1804.303745][T20287] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1804.472417][T29575] can: request_module (can-proto-3) failed. [ 1804.848231][T29586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6525'. [ 1804.930376][T20287] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1804.961733][T20287] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1804.985376][T20287] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1805.016522][T20287] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1805.051104][T20287] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1805.468200][T20287] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1805.502600][T20287] usb 5-1: USB disconnect, device number 28 [ 1805.731289][T20288] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1805.766202][T20288] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1805.805106][T20288] usb 1-1: USB disconnect, device number 20 [ 1806.186117][T20090] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1806.338121][T20090] usb 3-1: Using ep0 maxpacket: 32 [ 1806.348193][T20090] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1806.374765][T20090] usb 3-1: config 0 has no interface number 0 [ 1806.399623][T20090] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1806.424835][T20090] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1806.458258][T20090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.484138][T20090] usb 3-1: Product: syz [ 1806.499159][T20090] usb 3-1: Manufacturer: syz [ 1806.515458][T20090] usb 3-1: SerialNumber: syz [ 1806.549724][T20090] usb 3-1: config 0 descriptor?? [ 1807.728349][T29619] libceph: resolve '0..' (ret=-3): failed [ 1807.974163][T29621] syzkaller0: entered promiscuous mode [ 1808.007641][T29621] syzkaller0: entered allmulticast mode [ 1808.495376][T20090] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 1808.529891][T20090] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1808.556767][T20090] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1808.587155][T20090] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1808.660709][T20090] usb 3-1: USB disconnect, device number 25 [ 1808.705331][T29626] can: request_module (can-proto-3) failed. [ 1809.589068][T29648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1809.840806][T29643] libceph: resolve '0..' (ret=-3): failed [ 1810.333412][T29653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1810.376244][T29653] batadv0: Device is already in use. [ 1810.516350][T29657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6541'. [ 1810.773896][T29657] IPVS: length: 149 != 17667290688 [ 1811.143408][T29673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6545'. [ 1811.174304][T29673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6545'. [ 1811.216838][T29676] xt_cgroup: xt_cgroup: no path or classid specified [ 1811.230727][T29673] netlink: 'syz.1.6545': attribute type 1 has an invalid length. [ 1811.234589][T29675] libceph: resolve '0..' (ret=-3): failed [ 1812.526510][T29694] libceph: resolve '0..' (ret=-3): failed [ 1813.760960][T29716] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 1813.809423][T29721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6555'. [ 1814.028100][T29720] IPVS: length: 149 != 17667290688 [ 1814.046786][T29726] tipc: Enabling of bearer rejected, already enabled [ 1814.753850][T29733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1814.791339][T29732] can: request_module (can-proto-3) failed. [ 1815.153202][T29745] veth0: entered promiscuous mode [ 1815.194337][T29745] veth0: left promiscuous mode [ 1816.060236][T29755] libceph: resolve '0..' (ret=-3): failed [ 1816.263869][T29766] libceph: resolve '0..' (ret=-3): failed [ 1817.007698][T29772] IPVS: length: 149 != 17667290688 [ 1817.627478][T29788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1818.040152][T29792] can: request_module (can-proto-3) failed. [ 1818.456511][T29805] can: request_module (can-proto-3) failed. [ 1818.597127][T29809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1818.690723][T29813] x_tables: ip_tables: state.0 match: invalid size 8 (kernel) != (user) 16 [ 1819.034994][T29815] tipc: Enabled bearer , priority 0 [ 1819.047144][T29815] syzkaller0: entered promiscuous mode [ 1819.052733][T29815] syzkaller0: entered allmulticast mode [ 1819.091482][T29815] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1819.151325][T29815] netlink: 'syz.2.6581': attribute type 13 has an invalid length. [ 1819.293193][T29822] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 1819.327865][T29823] tipc: Resetting bearer [ 1819.366783][T29820] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1819.384610][T29820] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1819.577043][T29814] tipc: Resetting bearer [ 1819.637926][T29814] tipc: Disabling bearer [ 1819.784543][T29835] syzkaller0: entered promiscuous mode [ 1819.790801][T29835] syzkaller0: entered allmulticast mode [ 1819.805826][T20287] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1819.885443][T29833] libceph: resolve '0..' (ret=-3): failed [ 1820.031681][T20287] usb 5-1: config 0 has no interfaces? [ 1820.045984][T20287] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1820.059385][T20287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.069422][T20287] usb 5-1: config 0 descriptor?? [ 1820.196532][T29840] can: request_module (can-proto-3) failed. [ 1820.330126][T20287] usb 5-1: USB disconnect, device number 29 [ 1820.637127][T29853] IPVS: length: 149 != 17667290688 [ 1821.313572][T20090] hid-generic 0003:0004:0000.008B: unknown main item tag 0x0 [ 1821.411653][T20090] hid-generic 0003:0004:0000.008B: unknown main item tag 0x0 [ 1821.442982][T20090] hid-generic 0003:0004:0000.008B: unknown main item tag 0x0 [ 1821.450918][T29866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6592'. [ 1821.511321][T29872] netlink: 'syz.3.6593': attribute type 12 has an invalid length. [ 1821.609873][T20090] hid-generic 0003:0004:0000.008B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1822.523684][T29879] can: request_module (can-proto-3) failed. [ 1822.626716][T29889] tipc: Enabling of bearer rejected, already enabled [ 1822.662850][T29889] netlink: 'syz.1.6597': attribute type 13 has an invalid length. [ 1822.760250][T29889] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 1823.965681][T29898] can: request_module (can-proto-3) failed. [ 1824.233840][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1824.267391][T29905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6601'. [ 1824.282277][T29908] xt_cgroup: xt_cgroup: no path or classid specified [ 1824.309424][T29905] netlink: 'syz.2.6601': attribute type 1 has an invalid length. [ 1825.943987][T29930] IPVS: length: 149 != 17667290688 [ 1826.152568][T29927] IPVS: length: 149 != 17667290688 [ 1826.200218][T29935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1826.260343][T29940] can: request_module (can-proto-3) failed. [ 1826.451821][T29952] netlink: 'syz.0.6610': attribute type 1 has an invalid length. [ 1826.528568][T29952] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1826.716975][T20287] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1826.784279][T29955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1826.816735][T29955] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1826.842727][T29955] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 1826.893129][T20287] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 1826.911384][T20287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.929826][T20287] usb 5-1: config 0 has no interface number 0 [ 1826.936738][T20287] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 1826.946983][T20287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.017066][T20287] usb 5-1: config 0 descriptor?? [ 1827.033916][T20287] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 1827.054016][T20287] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 1827.297289][T29954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.317668][T29954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.342465][T20090] usb 5-1: USB disconnect, device number 30 [ 1827.403243][T29961] can: request_module (can-proto-3) failed. [ 1828.042316][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1828.042329][ T30] audit: type=1326 audit(1768525286.003:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29975 comm="syz.4.6616" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67539 code=0x0 [ 1828.163467][T29984] loop5: detected capacity change from 0 to 6343 [ 1828.215273][T24952] buffer_io_error: 24 callbacks suppressed [ 1828.215286][T24952] Buffer I/O error on dev loop5, logical block 792, async page read [ 1828.456162][T20090] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1828.648510][T20090] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 1828.680499][T20090] usb 5-1: config 0 has no interface number 0 [ 1828.703974][T20090] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid maxpacket 36624, setting to 64 [ 1828.757644][T20090] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1828.781196][T20090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.804156][T20090] usb 5-1: Product: syz [ 1828.815538][T20090] usb 5-1: Manufacturer: syz [ 1828.830915][T20090] usb 5-1: SerialNumber: syz [ 1828.849320][T20090] usb 5-1: config 0 descriptor?? [ 1828.869088][T29984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1828.896246][T20090] kobil_sct 5-1:0.148: KOBIL USB smart card terminal converter detected [ 1828.914438][T20090] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1829.003629][T29995] libceph: resolve '0..' (ret=-3): failed [ 1829.981490][T30002] IPVS: length: 149 != 17667290688 [ 1830.324623][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6622'. [ 1830.609312][T30019] can: request_module (can-proto-3) failed. [ 1830.626071][T20090] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1830.787932][T20090] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1830.821140][T20090] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1830.853976][T20090] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1830.880605][T20090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1830.891949][T20090] usb 3-1: SerialNumber: syz [ 1831.023992][T20287] usb 5-1: USB disconnect, device number 31 [ 1831.065116][T20287] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1831.119872][T20287] kobil_sct 5-1:0.148: device disconnected [ 1831.273936][T30030] IPVS: length: 149 != 17667290688 [ 1833.367950][T20090] usb 3-1: 0:2 : does not exist [ 1833.383117][T20090] usb 3-1: unit 5: unexpected type 0x0d [ 1833.469240][T20090] usb 3-1: USB disconnect, device number 26 [ 1833.540817][T24952] udevd[24952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1833.670388][T30059] libceph: resolve '0..' (ret=-3): failed [ 1833.919767][T30057] fuse: Bad value for 'fd' [ 1834.188162][T30062] loop2: detected capacity change from 0 to 7 [ 1834.241053][T30062] Dev loop2: unable to read RDB block 7 [ 1834.260740][T30062] loop2: AHDI p1 p2 p3 [ 1834.284027][T30062] loop2: partition table partially beyond EOD, truncated [ 1834.308763][T30062] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1834.339499][T30062] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1835.318946][T30075] can: request_module (can-proto-3) failed. [ 1836.532904][ T30] audit: type=1800 audit(1768525294.493:700): pid=30095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6640" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1837.589193][T30112] IPVS: length: 149 != 17667290688 [ 1838.716693][T30126] libceph: resolve '0..' (ret=-3): failed [ 1839.265107][T30132] can: request_module (can-proto-3) failed. [ 1840.178398][T30148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1840.235787][T20287] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1840.433367][T20287] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1840.484547][T20287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1840.536940][T20287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1840.566610][T20287] usb 5-1: Product: syz [ 1840.579138][T20287] usb 5-1: Manufacturer: syz [ 1840.597095][T20287] usb 5-1: SerialNumber: syz [ 1840.842737][T20287] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1840.887067][T30157] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1840.928118][T30157] dvmrp1: linktype set to 808 [ 1842.839322][T30176] IPVS: length: 149 != 17667290688 [ 1843.018936][T20287] usb 5-1: USB disconnect, device number 32 [ 1843.040617][T20287] usblp0: removed [ 1843.446327][T30190] libceph: resolve '0..' (ret=-3): failed [ 1843.769131][T30193] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6661'. [ 1844.047894][T20277] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1844.206013][T20277] usb 3-1: Using ep0 maxpacket: 32 [ 1844.212812][T20277] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 1844.222299][T20277] usb 3-1: config 0 has no interface number 0 [ 1844.231506][T20277] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1844.246203][T20277] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 1844.261672][T20277] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 1844.307024][T20277] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 1844.324171][T20277] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1844.348775][T20277] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1844.414818][T20277] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 1844.426343][T20277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.435367][T20277] usb 3-1: Product: syz [ 1844.442272][T20277] usb 3-1: Manufacturer: syz [ 1844.447092][T20277] usb 3-1: SerialNumber: syz [ 1844.465457][T20277] usb 3-1: config 0 descriptor?? [ 1844.481753][T30193] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1844.489731][T30193] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1844.505095][T20277] ipaq 3-1:0.19: PocketPC PDA converter detected [ 1844.516752][T20277] usb 3-1: active config #0 != 1 ?? [ 1844.592264][T30203] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1844.760016][T20277] usb 3-1: USB disconnect, device number 27 [ 1845.245028][T30207] libceph: resolve '0..' (ret=-3): failed [ 1845.654931][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1845.689812][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6665'. [ 1847.039212][T30230] netlink: 'syz.2.6669': attribute type 1 has an invalid length. [ 1847.144618][T30230] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1847.260932][T30233] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1847.286281][T30233] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1847.317728][T30233] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 1847.408158][T30236] fuse: Bad value for 'fd' [ 1848.106787][T30244] IPVS: length: 149 != 17667290688 [ 1848.784895][T30257] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1850.192592][T30272] libceph: resolve '0..' (ret=-3): failed [ 1851.234625][T30277] can: request_module (can-proto-3) failed. [ 1852.400492][T30301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6692'. [ 1853.180849][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.194536][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.994799][T30297] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1854.538949][T30319] sit0: left promiscuous mode [ 1854.688645][T30321] IPVS: length: 149 != 17667290688 [ 1855.059824][T30327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1855.147198][T30319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1855.464471][T30333] loop2: detected capacity change from 0 to 7 [ 1855.534198][T30333] Dev loop2: unable to read RDB block 7 [ 1855.566827][T30333] loop2: AHDI p1 p2 p3 [ 1855.580056][T30333] loop2: partition table partially beyond EOD, truncated [ 1855.662476][T30333] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1855.765600][T30333] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1855.836101][T20277] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1855.986306][T20277] usb 5-1: Using ep0 maxpacket: 16 [ 1856.008489][T20277] usb 5-1: config 0 has no interfaces? [ 1856.028090][T20277] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1856.061295][T20277] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1856.093624][T20277] usb 5-1: Manufacturer: syz [ 1856.143957][T20277] usb 5-1: config 0 descriptor?? [ 1856.892161][T30345] support for the xor transformation has been removed. [ 1858.136000][T30359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6693'. [ 1858.160923][T30359] netlink: 'syz.1.6693': attribute type 13 has an invalid length. [ 1858.446538][T20287] usb 5-1: USB disconnect, device number 33 [ 1858.517627][T30359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1858.872615][ T30] audit: type=1804 audit(1768525316.833:701): pid=30365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6694" name="/newroot/1368/bus" dev="tmpfs" ino=7035 res=1 errno=0 [ 1860.862193][T30375] libceph: resolve '0..' (ret=-3): failed [ 1861.791787][T30385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6697'. [ 1862.700004][T30400] hsr1: left allmulticast mode [ 1862.705120][T30400] dummy0: left allmulticast mode [ 1862.715255][T30400] bond0: left allmulticast mode [ 1862.727107][T30400] bond_slave_0: left allmulticast mode [ 1862.733332][T30400] bond_slave_1: left allmulticast mode [ 1862.807450][T30400] bridge0: left allmulticast mode [ 1862.815073][T30400] batadv_slave_0: left allmulticast mode [ 1862.996823][T30400] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1863.089765][T30400] gtp0: left allmulticast mode [ 1863.868686][T30414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6704'. [ 1863.887168][T30414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6704'. [ 1863.956781][T30414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6704'. [ 1864.853663][T30426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1865.125767][T20287] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1865.196412][T20277] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1865.339764][T20287] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1865.356284][T20277] usb 3-1: Using ep0 maxpacket: 16 [ 1865.367095][T20277] usb 3-1: config 0 has no interfaces? [ 1865.387872][T20287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1865.427462][T20277] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1865.447807][T20277] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1865.457881][T20287] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1865.492496][T20287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1865.501160][T20277] usb 3-1: Manufacturer: syz [ 1865.532007][T20287] usb 5-1: SerialNumber: syz [ 1865.549397][T20277] usb 3-1: config 0 descriptor?? [ 1865.809970][T30439] libceph: resolve '0..' (ret=-3): failed [ 1866.859813][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6711'. [ 1866.879351][T30446] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1866.933200][T30446] dvmrp1: linktype set to 808 [ 1866.992858][T30453] netlink: 'syz.1.6711': attribute type 10 has an invalid length. [ 1867.980006][T20286] usb 3-1: USB disconnect, device number 28 [ 1868.044051][T20287] usb 5-1: 0:2 : does not exist [ 1868.076671][T20287] usb 5-1: unit 5: unexpected type 0x0d [ 1868.106424][T20287] usb 5-1: USB disconnect, device number 34 [ 1868.180835][T24952] udevd[24952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1868.484406][T30466] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1868.501711][T30471] libceph: resolve '0..' (ret=-3): failed [ 1869.158501][T30482] tipc: Resetting bearer [ 1869.354254][T30482] tipc: Resetting bearer [ 1870.087036][T30491] libceph: resolve '0..' (ret=-3): failed [ 1870.215811][T20277] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1870.396170][T20277] usb 5-1: Using ep0 maxpacket: 32 [ 1870.412073][T20277] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1870.430824][T20277] usb 5-1: config 0 has no interface number 0 [ 1870.458761][T20277] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1870.476835][T20277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.525315][T20277] usb 5-1: Product: syz [ 1870.535385][T20277] usb 5-1: Manufacturer: syz [ 1870.554010][T20277] usb 5-1: SerialNumber: syz [ 1870.589473][T20277] usb 5-1: config 0 descriptor?? [ 1870.666596][T20277] hub 5-1:0.89: bad descriptor, ignoring hub [ 1870.689365][T20277] hub 5-1:0.89: probe with driver hub failed with error -5 [ 1870.726551][T20277] option 5-1:0.89: GSM modem (1-port) converter detected [ 1870.807044][T20277] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1871.639124][T30502] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1872.097121][T30504] can: request_module (can-proto-3) failed. [ 1873.300275][T30525] fuse: Bad value for 'fd' [ 1874.008556][T20286] usb 5-1: USB disconnect, device number 35 [ 1874.031969][T20286] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1874.060382][T20286] option 5-1:0.89: device disconnected [ 1874.991720][T30538] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1875.016780][T30538] dvmrp1: linktype set to 808 [ 1876.230110][T30550] fuse: Bad value for 'fd' [ 1876.582349][T30557] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1876.736806][T30564] libceph: resolve '0..' (ret=-3): failed [ 1876.848874][T30566] fuse: Bad value for 'fd' [ 1877.143130][T30569] can: request_module (can-proto-3) failed. [ 1877.715580][T30578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1877.858125][T30583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6736'. [ 1879.106125][T30592] binfmt_misc: register: failed to install interpreter file ./file0 [ 1879.276857][T30592] input: syz0 as /devices/virtual/input/input316 [ 1879.384611][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6740'. [ 1879.415042][T30601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6740'. [ 1881.225880][ T36] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1881.714701][T30624] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1881.723594][T30624] dvmrp1: linktype set to 808 [ 1881.885578][T20286] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1882.346296][T20277] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1882.419522][T20286] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.438878][T20286] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1882.476311][T20286] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1882.507603][T20286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.757818][T20277] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1882.781740][T20277] usb 5-1: config 0 has no interface number 0 [ 1882.815273][T20277] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1882.879462][T20277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.925379][T20277] usb 5-1: Product: syz [ 1882.954441][T20277] usb 5-1: Manufacturer: syz [ 1882.972781][T20277] usb 5-1: SerialNumber: syz [ 1882.994119][T20277] usb 5-1: config 0 descriptor?? [ 1883.046306][T30621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.071932][T30638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6745'. [ 1883.120690][T30638] netlink: 'syz.2.6745': attribute type 10 has an invalid length. [ 1883.234092][T30640] libceph: resolve '0..' (ret=-3): failed [ 1883.270384][T30621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.362238][ T30] audit: type=1326 audit(1768525341.283:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1883.403379][T30621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.491790][ T30] audit: type=1326 audit(1768525341.323:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1883.587312][T30621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.708715][ T30] audit: type=1326 audit(1768525341.323:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1883.807688][ T30] audit: type=1326 audit(1768525341.323:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1883.911892][ T30] audit: type=1326 audit(1768525341.763:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1884.068718][ T30] audit: type=1326 audit(1768525341.843:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1884.292821][ T30] audit: type=1326 audit(1768525342.233:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1884.376681][ T30] audit: type=1326 audit(1768525342.253:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30613 comm="syz.0.6753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1884.545288][T30649] can: request_module (can-proto-3) failed. [ 1885.443068][T30647] picdev_read: 77 callbacks suppressed [ 1885.443119][T30647] kvm: pic: non byte read [ 1885.457800][T30647] kvm: pic: non byte read [ 1885.483226][T30647] kvm: pic: non byte read [ 1885.501987][T30647] kvm: pic: non byte read [ 1885.571223][T30647] kvm: pic: non byte read [ 1885.618661][T30647] kvm: pic: non byte read [ 1885.623327][T30647] kvm: pic: non byte read [ 1885.749886][T30647] kvm: pic: non byte read [ 1885.754579][T30647] kvm: pic: non byte read [ 1885.866443][T30647] kvm: pic: non byte read [ 1886.357231][T30675] libceph: resolve '0..' (ret=-3): failed [ 1887.248969][T30680] libceph: resolve '0..' (ret=-3): failed [ 1887.318184][T20277] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1887.341530][T20277] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1887.351863][T20277] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1887.393824][T20277] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1887.414604][T20277] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1887.465537][T20277] usb 5-1: USB disconnect, device number 36 [ 1887.479380][T30688] binder: 30687:30688 ioctl c018620c 0 returned -14 [ 1887.496845][T20277] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1887.512967][T20277] keyspan 5-1:0.133: device disconnected [ 1887.900250][T20286] usb 1-1: USB disconnect, device number 21 [ 1887.984580][T30697] input: syz0 as /devices/virtual/input/input317 [ 1889.268232][T30712] F2FS-fs: Conflicting test_dummy_encryption options [ 1889.386090][T20090] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1889.516062][T20090] usb 1-1: device descriptor read/64, error -71 [ 1889.766172][T20090] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1889.936279][T20090] usb 1-1: device descriptor read/64, error -71 [ 1890.064367][T20090] usb usb1-port1: attempt power cycle [ 1890.081528][T30719] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1890.426365][T20090] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1890.490209][T20090] usb 1-1: device descriptor read/8, error -71 [ 1890.746003][T20090] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1890.770483][T20090] usb 1-1: device descriptor read/8, error -71 [ 1890.887931][T20090] usb usb1-port1: unable to enumerate USB device [ 1890.971372][T30728] can: request_module (can-proto-3) failed. [ 1891.620838][T30737] libceph: resolve '0..' (ret=-3): failed [ 1892.433542][T30745] picdev_read: 77 callbacks suppressed [ 1892.433564][T30745] kvm: pic: non byte read [ 1892.454552][T30745] kvm: pic: non byte read [ 1892.469786][T30745] kvm: pic: non byte read [ 1892.475593][T30745] kvm: pic: non byte read [ 1892.495961][T30745] kvm: pic: non byte read [ 1892.501631][T30745] kvm: pic: non byte read [ 1892.518552][T30745] kvm: pic: non byte read [ 1892.527693][T30745] kvm: pic: non byte read [ 1892.539254][T30745] kvm: pic: non byte read [ 1892.546101][T30745] kvm: pic: non byte read [ 1893.074642][T30758] libceph: resolve '0..' (ret=-3): failed [ 1894.573098][T30792] libceph: resolve '0..' (ret=-3): failed [ 1895.249345][T30791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6777'. [ 1895.412309][T30791] netlink: 'syz.0.6777': attribute type 13 has an invalid length. [ 1895.578998][T30791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1895.746595][T30802] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1896.051612][T30808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6781'. [ 1896.143974][T30808] netlink: 'syz.4.6781': attribute type 10 has an invalid length. [ 1896.653371][T30813] loop2: detected capacity change from 0 to 2640 [ 1896.664384][T30813] Buffer I/O error on dev loop2, logical block 0, async page read [ 1896.693830][T30813] Buffer I/O error on dev loop2, logical block 0, async page read [ 1896.735405][T30813] Buffer I/O error on dev loop2, logical block 0, async page read [ 1896.841168][T30812] Buffer I/O error on dev loop2, logical block 49, async page read [ 1896.841168][T30810] Buffer I/O error on dev loop2, logical block 1, async page read [ 1896.841430][T30812] Buffer I/O error on dev loop2, logical block 49, async page read [ 1896.852109][T30810] Buffer I/O error on dev loop2, logical block 1, async page read [ 1896.947184][T30810] Buffer I/O error on dev loop2, logical block 1, async page read [ 1896.955133][T30810] Buffer I/O error on dev loop2, logical block 1, async page read [ 1897.008817][T30810] Buffer I/O error on dev loop2, logical block 1, async page read [ 1897.101558][T30813] ldm_validate_partition_table(): Disk read failed. [ 1897.108585][T30813] Dev loop2: unable to read RDB block 0 [ 1897.126411][T30813] loop2: unable to read partition table [ 1897.136197][T30813] loop_reread_partitions: partition scan of loop2 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1897.481377][T30820] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1898.082274][T30834] can: request_module (can-proto-3) failed. [ 1898.147742][T20277] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1898.336377][T20277] usb 3-1: Using ep0 maxpacket: 16 [ 1898.364805][T20277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.403166][T20277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1898.450407][T20277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1898.564956][T20277] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1898.588065][T20277] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1898.674665][T20277] usb 3-1: Manufacturer: syz [ 1898.737107][T20277] usb 3-1: config 0 descriptor?? [ 1899.171566][T30846] libceph: resolve '0..' (ret=-3): failed [ 1900.476037][T30858] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1900.510048][T30858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1900.876963][T30868] libceph: resolve '0..' (ret=-3): failed [ 1900.915608][T30869] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 1901.978373][T20287] usb 3-1: USB disconnect, device number 29 [ 1902.371669][T30886] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1904.751005][T30921] libceph: resolve '0..' (ret=-3): failed [ 1907.246327][T30934] support for the xor transformation has been removed. [ 1908.106380][T30961] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6808'. [ 1908.370206][T30963] IPVS: length: 149 != 17667290688 [ 1910.388660][T30997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1911.924933][T31011] netlink: 'syz.2.6817': attribute type 29 has an invalid length. [ 1912.076716][T31011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6817'. [ 1912.179327][T31018] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6819'. [ 1912.316290][T20090] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1912.336302][T20277] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1912.476922][T20090] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1912.486208][T20090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.497695][T20277] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1912.506140][T20277] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1912.547759][T20090] usb 1-1: Product: syz [ 1912.553408][T20277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1912.571944][T20090] usb 1-1: Manufacturer: syz [ 1912.595101][T20090] usb 1-1: SerialNumber: syz [ 1912.602908][T20277] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1912.627100][T20090] usb 1-1: config 0 descriptor?? [ 1912.645453][T20277] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1912.694570][T20277] usb 3-1: Product: syz [ 1912.709053][T20277] usb 3-1: Manufacturer: syz [ 1912.743828][T20277] usb 3-1: SerialNumber: syz [ 1912.788904][T20277] usb 3-1: config 0 descriptor?? [ 1912.828274][T20277] hub 3-1:0.0: bad descriptor, ignoring hub [ 1912.875218][T20277] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1912.919381][T20277] usb 3-1: selecting invalid altsetting 0 [ 1913.083428][T20277] usb 3-1: USB disconnect, device number 30 [ 1913.589884][T20277] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1913.834250][T20277] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1913.859590][T20277] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1913.905501][T20277] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1913.988429][T20090] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1914.015012][T20090] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 1914.066876][T20277] usb 3-1: string descriptor 0 read error: -22 [ 1914.099552][T20277] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1914.130788][T20277] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1914.206462][T20090] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1914.223422][T20277] usb 3-1: config 0 descriptor?? [ 1914.300418][T20090] usb 1-1: USB disconnect, device number 26 [ 1914.599467][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.606076][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.728288][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1914.922483][T20277] usb 3-1: can't set config #0, error -71 [ 1915.024123][T20277] usb 3-1: USB disconnect, device number 31 [ 1915.235845][T20287] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 1915.306750][T31053] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6824'. [ 1915.418877][T20287] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1915.434460][T20287] usb 5-1: config 0 has no interface number 0 [ 1915.459255][T20287] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1915.496095][T20287] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1915.531142][ T30] audit: type=1804 audit(1768525373.493:710): pid=31056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6826" name="/newroot/1318/bus" dev="tmpfs" ino=6758 res=1 errno=0 [ 1915.566528][T20287] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1915.608114][T20287] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1915.656067][T20287] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1915.683196][T20287] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1915.703466][T20287] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1915.743931][T20287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.745317][T31053] IPVS: length: 149 != 176933024328 [ 1915.851389][T20287] usb 5-1: config 0 descriptor?? [ 1915.858960][T31043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1916.540851][T31043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1917.108105][T31065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6827'. [ 1917.125380][T31065] : entered promiscuous mode [ 1917.682742][T20287] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1918.136380][T31043] ldusb 5-1:0.55: Write buffer overflow, 1685414111 bytes dropped [ 1919.201085][T20277] usb 5-1: USB disconnect, device number 37 [ 1919.225037][T20277] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1919.579245][T31093] netlink: 'syz.4.6833': attribute type 3 has an invalid length. [ 1919.752790][T31095] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003 [ 1921.876633][T31113] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1923.405885][T31119] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1923.866139][T20277] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1925.112971][T31128] ipip1: entered promiscuous mode [ 1925.164328][T31128] ipip1: entered allmulticast mode [ 1925.909082][T31140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6840'. [ 1926.348147][T31141] IPVS: length: 149 != 17667290688 [ 1927.299634][T31155] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1927.394113][T31153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6842'. [ 1927.879268][T31160] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1929.046267][T20277] usb 3-1: device descriptor read/64, error -110 [ 1930.245470][T31188] F2FS-fs: Conflicting test_dummy_encryption options [ 1932.317284][T31211] [ 1932.319858][T31211] ===================================================== [ 1932.326803][T31211] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1932.334434][T31211] syzkaller #0 Tainted: G L [ 1932.340399][T31211] ----------------------------------------------------- [ 1932.347317][T31211] syz.2.6851/31211 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1932.355018][T31211] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1932.364059][T31211] [ 1932.364059][T31211] and this task is already holding: [ 1932.371443][T31211] ffff888078660620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1932.380155][T31211] which would create a new lock dependency: [ 1932.386204][T31211] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1932.393762][T31211] [ 1932.393762][T31211] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1932.403233][T31211] (&dev->event_lock#2){..-.}-{3:3} [ 1932.403261][T31211] [ 1932.403261][T31211] ... which became SOFTIRQ-irq-safe at: [ 1932.416125][T31211] lock_acquire+0x107/0x340 [ 1932.420724][T31211] _raw_spin_lock_irqsave+0x40/0x60 [ 1932.425995][T31211] input_event+0x76/0xe0 [ 1932.430330][T31211] xpad360_process_packet+0x1fe/0xdd0 [ 1932.435784][T31211] xpad_irq_in+0x1583/0x25f0 [ 1932.440470][T31211] __usb_hcd_giveback_urb+0x376/0x540 [ 1932.445925][T31211] dummy_timer+0x85f/0x45b0 [ 1932.450578][T31211] __hrtimer_run_queues+0x51c/0xc30 [ 1932.455855][T31211] hrtimer_run_softirq+0x187/0x2b0 [ 1932.461079][T31211] handle_softirqs+0x22b/0x7c0 [ 1932.465920][T31211] __irq_exit_rcu+0x60/0x150 [ 1932.470602][T31211] irq_exit_rcu+0x9/0x30 [ 1932.474942][T31211] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1932.480654][T31211] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1932.486711][T31211] pv_native_safe_halt+0x13/0x20 [ 1932.491720][T31211] default_idle+0x13/0x20 [ 1932.496127][T31211] default_idle_call+0x73/0xb0 [ 1932.501089][T31211] do_idle+0x1be/0x4d0 [ 1932.505277][T31211] cpu_startup_entry+0x44/0x60 [ 1932.510122][T31211] start_secondary+0x101/0x110 [ 1932.514966][T31211] common_startup_64+0x13e/0x147 [ 1932.519977][T31211] [ 1932.519977][T31211] to a SOFTIRQ-irq-unsafe lock: [ 1932.526977][T31211] (tasklist_lock){.+.+}-{3:3} [ 1932.526999][T31211] [ 1932.526999][T31211] ... which became SOFTIRQ-irq-unsafe at: [ 1932.539594][T31211] ... [ 1932.539601][T31211] lock_acquire+0x107/0x340 [ 1932.546737][T31211] _raw_read_lock+0x36/0x50 [ 1932.551307][T31211] __do_wait+0xde/0x740 [ 1932.555532][T31211] do_wait+0x1e8/0x4f0 [ 1932.559726][T31211] kernel_wait+0xab/0x170 [ 1932.564129][T31211] call_usermodehelper_exec_work+0xbe/0x230 [ 1932.570095][T31211] process_scheduled_works+0xad1/0x1770 [ 1932.575712][T31211] worker_thread+0x8a0/0xda0 [ 1932.580392][T31211] kthread+0x711/0x8a0 [ 1932.584537][T31211] ret_from_fork+0x510/0xa50 [ 1932.589194][T31211] ret_from_fork_asm+0x1a/0x30 [ 1932.594031][T31211] [ 1932.594031][T31211] other info that might help us debug this: [ 1932.594031][T31211] [ 1932.604246][T31211] Chain exists of: [ 1932.604246][T31211] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1932.604246][T31211] [ 1932.617273][T31211] Possible interrupt unsafe locking scenario: [ 1932.617273][T31211] [ 1932.625580][T31211] CPU0 CPU1 [ 1932.630931][T31211] ---- ---- [ 1932.636276][T31211] lock(tasklist_lock); [ 1932.640503][T31211] local_irq_disable(); [ 1932.647237][T31211] lock(&dev->event_lock#2); [ 1932.654418][T31211] lock(&f_owner->lock); [ 1932.661255][T31211] [ 1932.664695][T31211] lock(&dev->event_lock#2); [ 1932.669532][T31211] [ 1932.669532][T31211] *** DEADLOCK *** [ 1932.669532][T31211] [ 1932.677669][T31211] 5 locks held by syz.2.6851/31211: [ 1932.682865][T31211] #0: ffff888054c38420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1932.691991][T31211] #1: ffff88802b438fb8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb47/0x3dd0 [ 1932.702224][T31211] #2: ffffffff9992eaf8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x72c/0x1ab0 [ 1932.711697][T31211] #3: ffff8880533084e8 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1932.721335][T31211] #4: ffff888078660620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1932.730374][T31211] [ 1932.730374][T31211] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1932.740986][T31211] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1932.746838][T31211] IN-SOFTIRQ-W at: [ 1932.751086][T31211] lock_acquire+0x107/0x340 [ 1932.757750][T31211] _raw_spin_lock_irqsave+0x40/0x60 [ 1932.765192][T31211] input_event+0x76/0xe0 [ 1932.771595][T31211] xpad360_process_packet+0x1fe/0xdd0 [ 1932.779569][T31211] xpad_irq_in+0x1583/0x25f0 [ 1932.786842][T31211] __usb_hcd_giveback_urb+0x376/0x540 [ 1932.794375][T31211] dummy_timer+0x85f/0x45b0 [ 1932.801038][T31211] __hrtimer_run_queues+0x51c/0xc30 [ 1932.808492][T31211] hrtimer_run_softirq+0x187/0x2b0 [ 1932.815775][T31211] handle_softirqs+0x22b/0x7c0 [ 1932.822714][T31211] __irq_exit_rcu+0x60/0x150 [ 1932.829467][T31211] irq_exit_rcu+0x9/0x30 [ 1932.835877][T31211] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1932.843701][T31211] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1932.851855][T31211] pv_native_safe_halt+0x13/0x20 [ 1932.858962][T31211] default_idle+0x13/0x20 [ 1932.865452][T31211] default_idle_call+0x73/0xb0 [ 1932.872376][T31211] do_idle+0x1be/0x4d0 [ 1932.878608][T31211] cpu_startup_entry+0x44/0x60 [ 1932.885531][T31211] start_secondary+0x101/0x110 [ 1932.892461][T31211] common_startup_64+0x13e/0x147 [ 1932.899562][T31211] INITIAL USE at: [ 1932.903702][T31211] lock_acquire+0x107/0x340 [ 1932.910275][T31211] _raw_spin_lock_irqsave+0x40/0x60 [ 1932.917545][T31211] input_inject_event+0xa5/0x340 [ 1932.924588][T31211] kbd_led_trigger_activate+0xbc/0x100 [ 1932.932145][T31211] led_trigger_set+0x52d/0x950 [ 1932.939078][T31211] led_trigger_set_default+0x260/0x2a0 [ 1932.946751][T31211] led_classdev_register_ext+0x73d/0x960 [ 1932.954738][T31211] input_leds_connect+0x517/0x790 [ 1932.961930][T31211] input_register_device+0xd00/0x1170 [ 1932.969432][T31211] atkbd_connect+0x73b/0xa50 [ 1932.976120][T31211] serio_driver_probe+0x82/0xd0 [ 1932.983065][T31211] really_probe+0x26d/0xad0 [ 1932.989650][T31211] __driver_probe_device+0x18c/0x320 [ 1932.997006][T31211] driver_probe_device+0x4f/0x240 [ 1933.004103][T31211] __driver_attach+0x349/0x650 [ 1933.010943][T31211] bus_for_each_dev+0x233/0x2b0 [ 1933.017870][T31211] serio_handle_event+0x1f9/0x8d0 [ 1933.024972][T31211] process_scheduled_works+0xad1/0x1770 [ 1933.032585][T31211] worker_thread+0x8a0/0xda0 [ 1933.039256][T31211] kthread+0x711/0x8a0 [ 1933.045417][T31211] ret_from_fork+0x510/0xa50 [ 1933.052074][T31211] ret_from_fork_asm+0x1a/0x30 [ 1933.058919][T31211] } [ 1933.061665][T31211] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1933.070933][T31211] -> (&client->buffer_lock){....}-{3:3} { [ 1933.076823][T31211] INITIAL USE at: [ 1933.080871][T31211] lock_acquire+0x107/0x340 [ 1933.087269][T31211] _raw_spin_lock+0x2e/0x40 [ 1933.093669][T31211] evdev_pass_values+0xb9/0xbd0 [ 1933.100411][T31211] evdev_events+0x1e6/0x340 [ 1933.106811][T31211] input_pass_values+0x288/0x890 [ 1933.113812][T31211] input_event_dispose+0x330/0x6b0 [ 1933.120818][T31211] input_inject_event+0x1dd/0x340 [ 1933.127746][T31211] evdev_write+0x2fc/0x480 [ 1933.134069][T31211] vfs_write+0x27e/0xb30 [ 1933.140237][T31211] ksys_write+0x145/0x250 [ 1933.146463][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1933.153558][T31211] do_fast_syscall_32+0x34/0x80 [ 1933.160329][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.168565][T31211] } [ 1933.171224][T31211] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1933.179541][T31211] ... acquired at: [ 1933.183506][T31211] _raw_spin_lock+0x2e/0x40 [ 1933.188250][T31211] evdev_pass_values+0xb9/0xbd0 [ 1933.193273][T31211] evdev_events+0x1e6/0x340 [ 1933.197941][T31211] input_pass_values+0x288/0x890 [ 1933.203481][T31211] input_event_dispose+0x330/0x6b0 [ 1933.208992][T31211] input_inject_event+0x1dd/0x340 [ 1933.214188][T31211] evdev_write+0x2fc/0x480 [ 1933.218769][T31211] vfs_write+0x27e/0xb30 [ 1933.223170][T31211] ksys_write+0x145/0x250 [ 1933.227778][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1933.233148][T31211] do_fast_syscall_32+0x34/0x80 [ 1933.238183][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.244672][T31211] [ 1933.246978][T31211] -> (&new->fa_lock){....}-{3:3} { [ 1933.252194][T31211] INITIAL USE at: [ 1933.256158][T31211] lock_acquire+0x107/0x340 [ 1933.262382][T31211] _raw_write_lock_irq+0x3d/0x50 [ 1933.269041][T31211] fasync_remove_entry+0xf1/0x1c0 [ 1933.275795][T31211] tun_chr_fasync+0x87/0x1a0 [ 1933.282125][T31211] __fput+0x8a2/0xa70 [ 1933.287852][T31211] task_work_run+0x1d4/0x260 [ 1933.294170][T31211] exit_to_user_mode_loop+0xef/0x4e0 [ 1933.301178][T31211] __do_fast_syscall_32+0x398/0x570 [ 1933.308104][T31211] do_fast_syscall_32+0x34/0x80 [ 1933.314677][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.322739][T31211] INITIAL READ USE at: [ 1933.327156][T31211] lock_acquire+0x107/0x340 [ 1933.333829][T31211] _raw_read_lock_irqsave+0x48/0x60 [ 1933.341223][T31211] kill_fasync+0x199/0x4d0 [ 1933.347845][T31211] sock_wake_async+0x137/0x160 [ 1933.354773][T31211] sk_wake_async+0x184/0x280 [ 1933.361531][T31211] mptcp_destroy_common+0x15c/0x330 [ 1933.368890][T31211] mptcp_disconnect+0x240/0x730 [ 1933.375909][T31211] inet_shutdown+0x1c4/0x390 [ 1933.382717][T31211] __ia32_sys_shutdown+0x13f/0x1a0 [ 1933.389993][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1933.397442][T31211] do_fast_syscall_32+0x34/0x80 [ 1933.404477][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.412973][T31211] } [ 1933.415546][T31211] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1933.424292][T31211] ... acquired at: [ 1933.428238][T31211] _raw_read_lock_irqsave+0x48/0x60 [ 1933.433680][T31211] kill_fasync+0x199/0x4d0 [ 1933.438258][T31211] evdev_pass_values+0x627/0xbd0 [ 1933.443355][T31211] evdev_events+0x1e6/0x340 [ 1933.448015][T31211] input_pass_values+0x288/0x890 [ 1933.453181][T31211] input_event_dispose+0x330/0x6b0 [ 1933.458459][T31211] input_inject_event+0x1dd/0x340 [ 1933.463661][T31211] evdev_write+0x2fc/0x480 [ 1933.468241][T31211] vfs_write+0x27e/0xb30 [ 1933.472641][T31211] ksys_write+0x145/0x250 [ 1933.477124][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1933.482486][T31211] do_fast_syscall_32+0x34/0x80 [ 1933.487498][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.493987][T31211] [ 1933.496311][T31211] -> (&f_owner->lock){....}-{3:3} { [ 1933.501503][T31211] INITIAL USE at: [ 1933.505377][T31211] lock_acquire+0x107/0x340 [ 1933.511428][T31211] _raw_write_lock_irq+0x3d/0x50 [ 1933.517915][T31211] __f_setown+0x67/0x370 [ 1933.523707][T31211] fcntl_dirnotify+0x3fa/0x6a0 [ 1933.530015][T31211] do_fcntl+0x745/0x1a50 [ 1933.535815][T31211] do_compat_fcntl64+0x477/0x720 [ 1933.542326][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1933.549083][T31211] do_fast_syscall_32+0x34/0x80 [ 1933.555750][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.563661][T31211] INITIAL READ USE at: [ 1933.567986][T31211] lock_acquire+0x107/0x340 [ 1933.574479][T31211] _raw_read_lock_irqsave+0x48/0x60 [ 1933.581684][T31211] send_sigio+0x38/0x370 [ 1933.588131][T31211] dnotify_handle_event+0x169/0x440 [ 1933.595350][T31211] fsnotify+0x1668/0x1ab0 [ 1933.601677][T31211] __fsnotify_parent+0x4c9/0x5d0 [ 1933.608604][T31211] vfs_readv+0x6e2/0x850 [ 1933.614832][T31211] __ia32_compat_sys_preadv+0x1bf/0x2c0 [ 1933.622363][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1933.629562][T31211] do_fast_syscall_32+0x34/0x80 [ 1933.636436][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1933.644864][T31211] } [ 1933.647350][T31211] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1933.656189][T31211] ... acquired at: [ 1933.659987][T31211] _raw_read_lock_irqsave+0x48/0x60 [ 1933.665340][T31211] send_sigio+0x38/0x370 [ 1933.669763][T31211] kill_fasync+0x24d/0x4d0 [ 1933.674341][T31211] tun_net_xmit+0x10af/0x1610 [ 1933.679180][T31211] dev_hard_start_xmit+0x2cd/0x800 [ 1933.684453][T31211] sch_direct_xmit+0x241/0x4b0 [ 1933.689377][T31211] __dev_queue_xmit+0x132d/0x3100 [ 1933.694560][T31211] ip6_output+0x340/0x550 [ 1933.699054][T31211] ndisc_send_skb+0xbce/0x1510 [ 1933.703997][T31211] addrconf_dad_completed+0x7ae/0xd60 [ 1933.709570][T31211] addrconf_dad_work+0xc36/0x14b0 [ 1933.714857][T31211] process_scheduled_works+0xad1/0x1770 [ 1933.720565][T31211] worker_thread+0x8a0/0xda0 [ 1933.725313][T31211] kthread+0x711/0x8a0 [ 1933.729634][T31211] ret_from_fork+0x510/0xa50 [ 1933.734474][T31211] ret_from_fork_asm+0x1a/0x30 [ 1933.739397][T31211] [ 1933.741704][T31211] [ 1933.741704][T31211] the dependencies between the lock to be acquired [ 1933.741711][T31211] and SOFTIRQ-irq-unsafe lock: [ 1933.755335][T31211] -> (tasklist_lock){.+.+}-{3:3} { [ 1933.760459][T31211] HARDIRQ-ON-R at: [ 1933.764427][T31211] lock_acquire+0x107/0x340 [ 1933.770578][T31211] _raw_read_lock+0x36/0x50 [ 1933.776724][T31211] __do_wait+0xde/0x740 [ 1933.782610][T31211] do_wait+0x1e8/0x4f0 [ 1933.788328][T31211] kernel_wait+0xab/0x170 [ 1933.794779][T31211] call_usermodehelper_exec_work+0xbe/0x230 [ 1933.802394][T31211] process_scheduled_works+0xad1/0x1770 [ 1933.809579][T31211] worker_thread+0x8a0/0xda0 [ 1933.815808][T31211] kthread+0x711/0x8a0 [ 1933.821534][T31211] ret_from_fork+0x510/0xa50 [ 1933.827932][T31211] ret_from_fork_asm+0x1a/0x30 [ 1933.834335][T31211] SOFTIRQ-ON-R at: [ 1933.838301][T31211] lock_acquire+0x107/0x340 [ 1933.844528][T31211] _raw_read_lock+0x36/0x50 [ 1933.850705][T31211] __do_wait+0xde/0x740 [ 1933.856588][T31211] do_wait+0x1e8/0x4f0 [ 1933.862383][T31211] kernel_wait+0xab/0x170 [ 1933.868351][T31211] call_usermodehelper_exec_work+0xbe/0x230 [ 1933.875979][T31211] process_scheduled_works+0xad1/0x1770 [ 1933.883182][T31211] worker_thread+0x8a0/0xda0 [ 1933.889409][T31211] kthread+0x711/0x8a0 [ 1933.895115][T31211] ret_from_fork+0x510/0xa50 [ 1933.901337][T31211] ret_from_fork_asm+0x1a/0x30 [ 1933.907743][T31211] INITIAL USE at: [ 1933.911724][T31211] lock_acquire+0x107/0x340 [ 1933.917779][T31211] _raw_write_lock_irq+0x3d/0x50 [ 1933.924268][T31211] copy_process+0x2185/0x3950 [ 1933.930523][T31211] kernel_clone+0x21e/0x820 [ 1933.936584][T31211] user_mode_thread+0xdd/0x140 [ 1933.942905][T31211] rest_init+0x23/0x300 [ 1933.948631][T31211] start_kernel+0x381/0x3d0 [ 1933.954692][T31211] x86_64_start_reservations+0x24/0x30 [ 1933.961716][T31211] x86_64_start_kernel+0x143/0x1c0 [ 1933.968390][T31211] common_startup_64+0x13e/0x147 [ 1933.974892][T31211] INITIAL READ USE at: [ 1933.979212][T31211] lock_acquire+0x107/0x340 [ 1933.985713][T31211] _raw_read_lock+0x36/0x50 [ 1933.992216][T31211] __do_wait+0xde/0x740 [ 1933.998371][T31211] do_wait+0x1e8/0x4f0 [ 1934.004451][T31211] kernel_wait+0xab/0x170 [ 1934.010771][T31211] call_usermodehelper_exec_work+0xbe/0x230 [ 1934.018654][T31211] process_scheduled_works+0xad1/0x1770 [ 1934.026190][T31211] worker_thread+0x8a0/0xda0 [ 1934.032783][T31211] kthread+0x711/0x8a0 [ 1934.038840][T31211] ret_from_fork+0x510/0xa50 [ 1934.045412][T31211] ret_from_fork_asm+0x1a/0x30 [ 1934.052164][T31211] } [ 1934.054648][T31211] ... key at: [] tasklist_lock+0x18/0x40 [ 1934.062369][T31211] ... acquired at: [ 1934.066162][T31211] _raw_read_lock+0x36/0x50 [ 1934.070841][T31211] send_sigio+0x101/0x370 [ 1934.075342][T31211] dnotify_handle_event+0x169/0x440 [ 1934.080702][T31211] fsnotify+0x180b/0x1ab0 [ 1934.085199][T31211] path_openat+0x1aa1/0x3dd0 [ 1934.089957][T31211] do_filp_open+0x1fa/0x410 [ 1934.094650][T31211] do_sys_openat2+0x121/0x200 [ 1934.099574][T31211] __ia32_compat_sys_openat+0x131/0x160 [ 1934.105299][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1934.110738][T31211] do_fast_syscall_32+0x34/0x80 [ 1934.115760][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1934.122293][T31211] [ 1934.124615][T31211] [ 1934.124615][T31211] stack backtrace: [ 1934.130522][T31211] CPU: 1 UID: 0 PID: 31211 Comm: syz.2.6851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1934.130541][T31211] Tainted: [L]=SOFTLOCKUP [ 1934.130545][T31211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1934.130555][T31211] Call Trace: [ 1934.130566][T31211] [ 1934.130576][T31211] dump_stack_lvl+0xe8/0x150 [ 1934.130602][T31211] __lock_acquire+0x2a95/0x2cf0 [ 1934.130626][T31211] ? send_sigio+0x101/0x370 [ 1934.130640][T31211] lock_acquire+0x107/0x340 [ 1934.130650][T31211] ? send_sigio+0x101/0x370 [ 1934.130663][T31211] ? do_raw_spin_lock+0x121/0x290 [ 1934.130677][T31211] _raw_read_lock+0x36/0x50 [ 1934.130688][T31211] ? send_sigio+0x101/0x370 [ 1934.130700][T31211] send_sigio+0x101/0x370 [ 1934.130714][T31211] dnotify_handle_event+0x169/0x440 [ 1934.130727][T31211] fsnotify+0x180b/0x1ab0 [ 1934.130744][T31211] ? fsnotify+0x72c/0x1ab0 [ 1934.130757][T31211] ? __pfx_fsnotify+0x10/0x10 [ 1934.130768][T31211] ? do_raw_spin_unlock+0x122/0x240 [ 1934.130782][T31211] ? d_make_persistent+0x10f/0x180 [ 1934.130792][T31211] ? shmem_mknod+0x2ea/0x360 [ 1934.130803][T31211] path_openat+0x1aa1/0x3dd0 [ 1934.130819][T31211] ? __pfx_path_openat+0x10/0x10 [ 1934.130832][T31211] do_filp_open+0x1fa/0x410 [ 1934.130841][T31211] ? __pfx_do_filp_open+0x10/0x10 [ 1934.130854][T31211] ? _raw_spin_unlock+0x28/0x50 [ 1934.130863][T31211] ? alloc_fd+0x64c/0x6c0 [ 1934.130877][T31211] do_sys_openat2+0x121/0x200 [ 1934.130890][T31211] ? __se_sys_futex_time32+0x360/0x3e0 [ 1934.130903][T31211] ? __pfx_do_sys_openat2+0x10/0x10 [ 1934.130926][T31211] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1934.130939][T31211] __ia32_compat_sys_openat+0x131/0x160 [ 1934.130953][T31211] __do_fast_syscall_32+0x1dc/0x570 [ 1934.130966][T31211] ? do_fast_syscall_32+0x34/0x80 [ 1934.130979][T31211] do_fast_syscall_32+0x34/0x80 [ 1934.130991][T31211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1934.131004][T31211] RIP: 0023:0xf7f51539 [ 1934.131055][T31211] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1934.131066][T31211] RSP: 002b:00000000f4bbe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1934.131078][T31211] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 1934.131086][T31211] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 1934.131093][T31211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1934.131099][T31211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1934.131105][T31211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1934.131115][T31211] [ 1934.860386][T31213] fuse: Bad value for 'fd'