last executing test programs: 7m2.155606954s ago: executing program 4 (id=577): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r4, 0x80000}) 7m1.057563339s ago: executing program 4 (id=579): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r4, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) 6m57.667041679s ago: executing program 4 (id=588): r0 = socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x3e, &(0x7f0000000040)="d84f7390", 0x4) sendto$inet6(r5, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) recvfrom(r5, 0x0, 0x0, 0x10002, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009", 0xe) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mknod$loop(0x0, 0x8fff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$phonet(r0, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10) 6m56.579810964s ago: executing program 4 (id=591): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f21", 0xd9}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m54.623915917s ago: executing program 4 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) 6m48.6610176s ago: executing program 4 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/443], 0x310) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000002c0)=r0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x3, 0x0) 6m32.54624949s ago: executing program 32 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/443], 0x310) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000002c0)=r0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x3, 0x0) 14.335572339s ago: executing program 3 (id=1914): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x60321) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, 0x0, 0x102, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x2]}, {0x3, 0x8, 0x82, 0xfffffffffffffffe}}, 0x77, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8745}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req={0x2, 0xffffffff, 0x10, 0x7fffffff}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x2, 0x0, 0x4}, 0x50) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r7, 0x400455c8, 0x2) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0xfb) 13.228336505s ago: executing program 3 (id=1920): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 12.211270778s ago: executing program 3 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r4, 0x2) pselect6(0x40, &(0x7f0000000840)={0x7, 0x1ff, 0x4, 0x7, 0x1, 0x2, 0x5, 0x9}, 0x0, &(0x7f00000008c0)={0x9, 0x9, 0x401, 0x9, 0x6, 0x8000000000000001, 0xa94f, 0x2}, &(0x7f0000000900), 0x0) close_range(r3, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4) 10.393509506s ago: executing program 3 (id=1927): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000180)={0x20, 0x11, 0x1, "1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) 7.373252753s ago: executing program 2 (id=1939): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82ba", 0x2d, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39a", 0xaf}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d", 0x9a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.323081775s ago: executing program 5 (id=1940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg(r5, 0x0, 0x0, 0x12000885) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r2, 0xdb689000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x60, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 7.078790943s ago: executing program 0 (id=1941): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 6.368961046s ago: executing program 0 (id=1943): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x27d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044181}, 0x8c1) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) socket$nl_netfilter(0x10, 0x3, 0xc) 6.305161757s ago: executing program 5 (id=1944): syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x7, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff, 0x101, 0x0, 0x0, 0x10000000, {0x41, 0x1000, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x7c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x301, 0x200000000005) clock_adjtime(0x0, &(0x7f0000000640)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x2407, 0x3f, 0x5, 0x2, 0x0, 0xfffffffffffffffd, 0x1fff, 0xffffbffffffffffc, 0x4, 0x0, 0x0, 0x9, 0x100000000003f89, 0x0, 0x18ab}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) close(r5) 6.194430641s ago: executing program 3 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x29380, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3044}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000440)=@svm={0x1, 0x1, 0x1080, {}, {"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"}}) 6.181111082s ago: executing program 2 (id=1946): socket$nl_xfrm(0x10, 0x3, 0x6) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40), 0x0, 0x4814) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0, 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)}, 0xffffff0b}], 0x2, 0x2001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4080) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x183442, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x1, 0x2]}) 5.185532773s ago: executing program 1 (id=1947): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="a413c8be1b78d019fa39dd7dad5fb73953b58ad06811bf34ca2cb9893efc46987b815bc016d0e32c62448fcb57e83d87aaff432e67f3a1143ecd707dfa33d05b81031ce10a4e598a587f166efc6b5dee1904aefd2584d1da9678f0", 0x5b}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005) open(&(0x7f00000000c0)='./file0\x00', 0x210102, 0x88) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x35, 0x10000004, 0xa}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.179069273s ago: executing program 5 (id=1948): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$pagemap(0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab08", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 4.507749455s ago: executing program 0 (id=1949): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e4", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 4.491977196s ago: executing program 2 (id=1950): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000814}, 0x4040) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0xf9a6, 0x4069a064, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1, &(0x7f0000000940)) madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2) 4.281218882s ago: executing program 1 (id=1951): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-5lx \x00'}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x2, 0x0}, 0x8) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r10, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005d80)='/sys/kernel/fscaps', 0x80000, 0x1) fremovexattr(r11, &(0x7f0000005fc0)=@known='user.incfs.size\x00') r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00'}, 0x18) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r14, 0x1, &(0x7f00000013c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r13, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x1c, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f00000003c0)='GPL\x00', 0x2, 0x57, &(0x7f0000000400)=""/87, 0x41100, 0x0, '\x00', r6, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x5, 0x9, 0x2}, 0x10, r7, r8, 0x1, &(0x7f0000000a00)=[r9, r10, 0x1, r11, r12, r13], &(0x7f0000000a40)=[{0x0, 0x5, 0x3, 0x6}], 0x10, 0x2}, 0x94) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc0, 0x3b, 0x63, 0x10, 0x16c0, 0x5df, 0x2b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x6, 0x10, 0x4, "", [{{0x9, 0x4, 0x7f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x7a, &(0x7f0000000100)=@string={0x7a, 0x3, "3887eb5381043a4cb3d1bde800000000000000004a04e4d0f6e197217998a3423f42c63f71d25016912bc9639688ae7cf153f25863f7182c51636efbe643c04bc875a82b9adf9d339296c4c3770447be31ca29972f04bd5d961a5e7748ae57e16a7646c2b528ce4f0cd9c3dfab08a320b9022b3ecab6c48e"}}, {0x0, 0x0}]}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) 3.992273662s ago: executing program 5 (id=1952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000041) r1 = socket(0x10, 0x3, 0x0) mknod$loop(0x0, 0xfff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x11, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4bfb, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x7, 0x6, {{0x5, 0x4, 0x3, 0xd, 0x14, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @empty}}}}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0d1e150090b102b02e58a6240c8774ead2580761677a4a0b18ce03e21f0175118b6487b98127d4efc749780a27ce7899dd366ca5d476ed22f132e26", @ANYRES16=r4, @ANYBLOB="200027bd7000fddbdf25040000000800110000000000080009000200000006001a004e20000006001d0003000000140020000000000000000000000000000000000108000a000400"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41800) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) write$tun(r0, 0x0, 0x3b) 3.558971476s ago: executing program 0 (id=1953): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x2}}]}, 0x90}}, 0x20000000) 3.306868204s ago: executing program 2 (id=1954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg(r5, 0x0, 0x0, 0x12000885) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r2, 0xdb689000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x60, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.006818463s ago: executing program 1 (id=1955): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r1, &(0x7f0000003f80)=""/4101, 0x1005) 2.112856732s ago: executing program 2 (id=1956): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82ba", 0x2d, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39a", 0xaf}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d", 0x9a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.803288732s ago: executing program 0 (id=1957): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) 1.802398352s ago: executing program 5 (id=1958): syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x7, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff, 0x101, 0x0, 0x0, 0x10000000, {0x41, 0x1000, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x7c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x301, 0x200000000005) clock_adjtime(0x0, &(0x7f0000000640)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x2407, 0x3f, 0x5, 0x2, 0x0, 0xfffffffffffffffd, 0x1fff, 0xffffbffffffffffc, 0x4, 0x0, 0x0, 0x9, 0x100000000003f89, 0x0, 0x18ab}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) close(r5) 1.697344005s ago: executing program 3 (id=1959): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67", 0x20}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x3, 0x7, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa8, 0x4d, 0x6, 0x5f, 0x9, 0xb, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x7, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x8, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x1c, 0x80, 0x0, 0xfd71, 0x0, 0xfffff800, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffdfff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x5, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x0, 0xd, 0x3a3, 0x66abcbd2, 0xea4, 0x0, 0x0, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x6, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x3, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xfffff800, 0x40000005, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0x8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0x6, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0xf7fffffc, 0xa, 0x5, 0x80000000, 0x5, 0x5, 0xc8, 0x3c8bd8b4, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x1, 0x1, 0x0, 0x77, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000200)={0x72be92819639f682, 0xb9cd8224dab94072}) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={0x0, 0xfffffffffffffffc}}, 0x20) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000014}, 0xc010) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.696872205s ago: executing program 0 (id=1960): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x27d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044181}, 0x8c1) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) socket$nl_netfilter(0x10, 0x3, 0xc) 1.615126718s ago: executing program 1 (id=1961): socket$nl_xfrm(0x10, 0x3, 0x6) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a40), 0x0, 0x4814) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0, 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)}, 0xffffff0b}], 0x2, 0x2001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4080) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x183442, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x1, 0x2]}) 1.028792427s ago: executing program 5 (id=1962): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f0000000680)={0x40, 0x11, 0x6, "1869164d738f"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x1c, 0x1, "81"}, 0x0, 0x0, 0x0, 0x0}) 973.328649ms ago: executing program 1 (id=1963): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e4", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 590.838851ms ago: executing program 2 (id=1964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[], 0x184}}, 0x8814) 0s ago: executing program 1 (id=1965): open_by_handle_at(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) kernel console output (not intermixed with test programs): 59.483307][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.484166][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.503439][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.513794][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.524490][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.534460][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.545099][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.556476][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.567249][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.577817][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.587857][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.600433][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.611361][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.622040][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.633681][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.643259][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.653858][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.665386][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.675843][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.685671][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.696283][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.706813][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.717299][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.728446][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.737596][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.746817][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.755583][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.765837][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.774394][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.783071][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.791661][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.819710][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.828407][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.844077][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.853662][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.868488][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.882924][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.892931][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.899303][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 59.904164][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.915025][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 59.919425][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.925518][ T4239] Bluetooth: hci4: command 0x040f tx timeout [ 59.935626][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.935637][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.935649][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.941895][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.952416][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 59.976603][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.994349][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 59.997764][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.044739][ T4268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.062041][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.077514][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.087666][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.103571][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.119168][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.127872][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.141863][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.162914][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.172986][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.173756][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.195427][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.219346][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.243226][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.288733][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.296986][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.345394][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.389043][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.396873][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.440195][ T4275] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 60.459906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.487183][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 60.679006][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.729330][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.758131][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.945825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.957921][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.999549][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.173607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.192701][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.426470][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.540995][ T4289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6'. [ 61.780741][ T4291] block nbd3: shutting down sockets [ 61.939358][ T4300] trusted_key: encrypted_key: insufficient parameters specified [ 61.952438][ T4300] netlink: 'syz.2.3': attribute type 40 has an invalid length. [ 61.991825][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 62.005232][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 62.595831][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 62.624714][ T4303] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.678673][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 62.730577][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 62.732098][ T4303] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 64.576896][ T4339] vivid-001: ================= START STATUS ================= [ 64.587149][ T4339] vivid-001: Test Pattern: 75% Colorbar [ 64.605390][ T4339] vivid-001: Fill Percentage of Frame: 100 [ 64.613326][ T4339] vivid-001: Horizontal Movement: No Movement [ 64.620495][ T4339] vivid-001: Vertical Movement: No Movement [ 64.643635][ T4339] vivid-001: OSD Text Mode: All [ 64.678277][ T4339] vivid-001: Show Border: false [ 64.706581][ T4339] vivid-001: Show Square: false [ 64.716576][ T4339] vivid-001: Sensor Flipped Horizontally: false [ 64.723291][ T4339] vivid-001: Sensor Flipped Vertically: false [ 64.729994][ T4339] vivid-001: Insert SAV Code in Image: false [ 64.736491][ T4339] vivid-001: Insert EAV Code in Image: false [ 64.742762][ T4339] vivid-001: Reduced Framerate: false [ 64.748311][ T4339] vivid-001: Enable Capture Cropping: true [ 64.754571][ T4339] vivid-001: Enable Capture Composing: true [ 64.761223][ T4339] vivid-001: Enable Capture Scaler: true [ 64.766946][ T4339] vivid-001: Timestamp Source: End of Frame [ 64.773207][ T4339] vivid-001: Colorspace: sRGB [ 64.778138][ T4339] vivid-001: Transfer Function: Default [ 64.784019][ T4339] vivid-001: Y'CbCr Encoding: Default [ 64.791035][ T4339] vivid-001: HSV Encoding: Hue 0-179 [ 64.843907][ T4339] vivid-001: Quantization: Default [ 64.883064][ T4346] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 64.890969][ T4346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22'. [ 64.900458][ T4346] bridge0: port 3(dummy0) entered blocking state [ 64.907024][ T4346] bridge0: port 3(dummy0) entered disabled state [ 64.920437][ T4346] device dummy0 entered promiscuous mode [ 64.928242][ T4346] bridge0: port 3(dummy0) entered blocking state [ 64.934797][ T4346] bridge0: port 3(dummy0) entered forwarding state [ 65.309428][ T4339] vivid-001: Apply Alpha To Red Only: false [ 65.319769][ T4339] vivid-001: Standard Aspect Ratio: 4x3 [ 65.376956][ T4348] device syzkaller0 entered promiscuous mode [ 65.395007][ T4339] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 65.425521][ T4339] vivid-001: DV Timings: 640x480p59 inactive [ 65.464960][ T4339] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 65.504104][ T4339] vivid-001: Maximum EDID Blocks: 2 [ 65.509756][ T4339] vivid-001: Limited RGB Range (16-235): false [ 65.517366][ T4339] vivid-001: Rx RGB Quantization Range: Automatic [ 65.557585][ T4339] vivid-001: Power Present: 0x00000001 [ 65.576506][ T4339] tpg source WxH: 640x360 (Y'CbCr) [ 65.583621][ T4339] tpg field: 1 [ 65.588127][ T4339] tpg crop: 640x360@0x0 [ 65.596121][ T4339] tpg compose: 640x360@0x0 [ 65.603583][ T4339] tpg colorspace: 8 [ 65.669734][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.780343][ T4339] tpg transfer function: 0/0 [ 65.919617][ T4339] tpg Y'CbCr encoding: 0/0 [ 66.071845][ T4339] tpg quantization: 0/0 [ 66.076233][ T4339] tpg RGB range: 0/2 [ 66.080838][ T4339] vivid-001: ================== END STATUS ================== [ 66.328789][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 67.194180][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 67.855906][ T4366] 9pnet: p9_fd_create_tcp (4366): problem connecting socket to 127.0.0.1 [ 67.881312][ T25] audit: type=1326 audit(1781702661.826:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.0.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424d603e59 code=0x7fc00000 [ 67.905051][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.969706][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.033035][ T13] usb 2-1: Product: syz [ 68.127511][ T13] usb 2-1: Manufacturer: syz [ 68.132717][ T13] usb 2-1: SerialNumber: syz [ 68.139201][ T25] audit: type=1326 audit(1781702661.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4358 comm="syz.0.29" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424d603e59 code=0x7fc00000 [ 68.168573][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.178567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.188585][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 68.264667][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 68.316362][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 68.329513][ T4372] Zero length message leads to an empty skb [ 68.386654][ T4378] loop0: detected capacity change from 0 to 128 [ 68.433243][ T4378] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.449268][ T13] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 68.477178][ T4378] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.486706][ T13] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 68.500345][ T13] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 68.509045][ T13] usb 2-1: media controller created [ 68.562131][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.617104][ T13] usb 2-1: selecting invalid altsetting 2 [ 68.634273][ T13] set interface failed [ 68.634699][ T13] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 68.652126][ T13] error writing reg: 0xff, val: 0x00 [ 68.734517][ T13] dvb_usb_mxl111sf: probe of 2-1:123.0 failed with error -22 [ 68.786653][ T13] usb 2-1: USB disconnect, device number 2 [ 68.977544][ T4384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 69.028631][ T4266] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.319877][ T4363] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.398774][ T4266] usb 3-1: config 1 interface 0 has no altsetting 0 [ 69.843959][ T4401] xt_connbytes: Forcing CT accounting to be enabled [ 69.851140][ T4401] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.863178][ T4401] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 74.213246][ T4402] 9pnet: p9_fd_create_tcp (4402): problem connecting socket to 127.0.0.1 [ 74.259047][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.283593][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.308653][ T4266] usb 3-1: string descriptor 0 read error: -71 [ 74.316053][ T4266] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 74.368587][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.401432][ T4266] usb 3-1: can't set config #1, error -71 [ 74.426440][ T4266] usb 3-1: USB disconnect, device number 2 [ 76.180476][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.303601][ T4442] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 76.868819][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.125871][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 77.540258][ T4455] 9pnet: p9_fd_create_tcp (4455): problem connecting socket to 127.0.0.1 [ 77.588886][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 77.619273][ T21] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 77.652419][ T21] usb 2-1: config 0 has no interface number 0 [ 77.704580][ T21] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 77.779056][ T4233] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 77.801720][ T21] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 77.830244][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.945257][ T4233] usb 5-1: config 0 descriptor?? [ 78.100885][ T4233] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 78.119509][ T21] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 78.176531][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.208653][ T21] usb 2-1: Product: syz [ 78.212846][ T21] usb 2-1: Manufacturer: syz [ 78.247928][ T21] usb 2-1: SerialNumber: syz [ 78.262504][ T21] usb 2-1: config 0 descriptor?? [ 78.278884][ T4428] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.286186][ T4428] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.532552][ T4428] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.573658][ T4428] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.248768][ T21] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 79.749241][ T4233] gspca_nw80x: reg_r err -110 [ 79.754074][ T4233] nw80x: probe of 5-1:0.0 failed with error -110 [ 80.065509][ T4496] netlink: 476 bytes leftover after parsing attributes in process `syz.0.68'. [ 80.458815][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 80.478194][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 80.560875][ T4502] 9pnet: p9_fd_create_tcp (4502): problem connecting socket to 127.0.0.1 [ 81.271867][ T4266] Bluetooth: hci4: command 0x0405 tx timeout [ 81.329488][ T21] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 81.338553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 81.348906][ T21] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 81.351638][ T1325] cfg80211: failed to load regulatory.db [ 81.361146][ T21] asix: probe of 2-1:0.34 failed with error -71 [ 81.376908][ T21] usb 2-1: USB disconnect, device number 3 [ 81.462542][ T4266] usb 5-1: USB disconnect, device number 2 [ 82.468551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 83.570802][ T1325] Bluetooth: hci5: command 0x1001 tx timeout [ 83.578132][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 85.671706][ T1325] Bluetooth: hci5: command 0x1009 tx timeout [ 86.912888][ T4560] IPVS: lc: FWM 3 0x00000003 - no destination available [ 88.462844][ T144] Bluetooth: (null): Invalid header checksum [ 88.477811][ T144] Bluetooth: (null): Invalid header checksum [ 88.569429][ T144] Bluetooth: (null): Invalid header checksum [ 88.679387][ T4404] Bluetooth: (null): Invalid header checksum [ 88.789338][ T526] Bluetooth: (null): Invalid header checksum [ 88.827579][ T4600] loop1: detected capacity change from 0 to 4096 [ 88.900403][ T526] Bluetooth: (null): Invalid header checksum [ 88.956910][ T4600] EXT4-fs (loop1): Test dummy encryption mode enabled [ 88.966391][ T4600] EXT4-fs (loop1): Ignoring removed nobh option [ 89.159587][ T4600] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nobh,,errors=continue. Quota mode: writeback. [ 89.275992][ T4600] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 90.624396][ T4642] syz.4.109 (4642): attempted to duplicate a private mapping with mremap. This is not supported. [ 91.758549][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 96.563307][ T4713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 96.869452][ T4345] Bluetooth: (null): Invalid header checksum [ 96.875815][ T4345] Bluetooth: (null): Invalid header checksum [ 96.981650][ T4449] Bluetooth: (null): Invalid header checksum [ 97.091821][ T4449] Bluetooth: (null): Invalid header checksum [ 97.187881][ T4726] loop2: detected capacity change from 0 to 4096 [ 97.198805][ T4282] Bluetooth: (null): Invalid header checksum [ 97.231303][ T4726] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.250371][ T4726] EXT4-fs (loop2): Ignoring removed nobh option [ 97.308809][ T4282] Bluetooth: (null): Invalid header checksum [ 97.335687][ T4726] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nobh,,errors=continue. Quota mode: writeback. [ 97.459434][ T4726] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 99.257658][ T4762] binder_alloc: 4758: binder_alloc_buf, no vma [ 99.908543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 99.918548][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 99.928532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 99.938532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 104.853090][ T4817] binder_alloc: 4811: binder_alloc_buf, no vma [ 108.586936][ T4859] trusted_key: encrypted_key: insufficient parameters specified [ 108.597740][ T4859] netlink: 'syz.4.158': attribute type 40 has an invalid length. [ 109.936230][ T4872] binder_alloc: 4867: binder_alloc_buf, no vma [ 111.088905][ T25] audit: type=1107 audit(1781702704.986:4): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 113.639221][ T4912] trusted_key: encrypted_key: insufficient parameters specified [ 113.652677][ T4912] netlink: 'syz.3.172': attribute type 40 has an invalid length. [ 114.408991][ T4914] xt_connbytes: Forcing CT accounting to be enabled [ 114.415749][ T4914] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 114.667466][ T4921] syz.3.173 uses obsolete (PF_INET,SOCK_PACKET) [ 118.166691][ T4960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 119.373121][ T4981] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 123.080261][ T5001] device syzkaller0 entered promiscuous mode [ 123.949983][ T5011] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 124.045199][ T5011] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 124.053752][ T5017] unsupported nla_type 142 [ 131.787667][ T5044] binder: BINDER_SET_CONTEXT_MGR already set [ 131.794045][ T5044] binder: 5042:5044 ioctl 4018620d 200000004a80 returned -16 [ 131.827098][ T5044] binder: 5042:5044 ioctl c0306201 2000000004c0 returned -22 [ 135.714807][ T5097] xt_connbytes: Forcing CT accounting to be enabled [ 135.858182][ T5097] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 136.485854][ T5111] vivid-001: ================= START STATUS ================= [ 136.509646][ T4265] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.517266][ T5111] vivid-001: Radio HW Seek Mode: Bounded [ 136.565946][ T5111] vivid-001: Radio Programmable HW Seek: false [ 136.576271][ T5111] vivid-001: RDS Rx I/O Mode: Block I/O [ 136.613744][ T5111] vivid-001: Generate RBDS Instead of RDS: false [ 136.653600][ T5111] vivid-001: RDS Reception: true [ 136.662189][ T5111] vivid-001: RDS Program Type: 0 inactive [ 136.687094][ T5111] vivid-001: RDS PS Name: inactive [ 136.700725][ T5111] vivid-001: RDS Radio Text: inactive [ 136.733493][ T5111] vivid-001: RDS Traffic Announcement: false inactive [ 136.770654][ T5111] vivid-001: RDS Traffic Program: [ 136.773731][ T4265] usb 5-1: Using ep0 maxpacket: 8 [ 136.788866][ T5111] false inactive [ 136.820808][ T5111] vivid-001: RDS Music: false inactive [ 136.846323][ T5111] vivid-001: ================== END STATUS ================== [ 137.074581][ T4265] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 137.083824][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.114306][ T4265] usb 5-1: Product: syz [ 137.118479][ T4265] usb 5-1: Manufacturer: syz [ 137.123111][ T4265] usb 5-1: SerialNumber: syz [ 137.155346][ T4265] usb 5-1: config 0 descriptor?? [ 137.201866][ T4265] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 137.372271][ T5116] xt_TCPMSS: Only works on TCP SYN packets [ 137.680941][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.687959][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.148953][ T4265] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 140.156398][ T4265] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 140.179316][ T4265] usb 5-1: USB disconnect, device number 3 [ 141.274114][ T5160] xt_connbytes: Forcing CT accounting to be enabled [ 141.328747][ T5160] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 152.049220][ T5247] ======================================================= [ 152.049220][ T5247] WARNING: The mand mount option has been deprecated and [ 152.049220][ T5247] and is ignored by this kernel. Remove the mand [ 152.049220][ T5247] option from the mount to silence this warning. [ 152.049220][ T5247] ======================================================= [ 152.084945][ T5247] 9pnet: Insufficient options for proto=fd [ 152.170140][ T5250] cgroup: noprefix used incorrectly [ 153.768488][ C0] sched: RT throttling activated [ 155.869315][ T5278] trusted_key: encrypted_key: insufficient parameters specified [ 155.877982][ T5278] netlink: 'syz.0.273': attribute type 40 has an invalid length. [ 157.118574][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.489105][ T26] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.518174][ T26] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.539079][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.548071][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 157.604739][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 157.644282][ T4195] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.738944][ T26] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.758272][ T26] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.804913][ T26] usb 5-1: Product: syz [ 157.819466][ T26] usb 5-1: Manufacturer: syz [ 158.059004][ T4195] usb 2-1: Using ep0 maxpacket: 8 [ 158.224058][ T4195] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 158.313733][ T4195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 158.726768][ T4195] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 158.879479][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.043884][ T4195] usb 2-1: config 0 descriptor?? [ 159.547437][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x0 [ 159.566002][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x0 [ 159.583946][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x1 [ 159.614187][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x0 [ 159.631984][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x0 [ 159.650447][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x0 [ 159.668145][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x0 [ 159.686235][ T4195] thrustmaster 0003:044F:B323.0001: unknown main item tag 0x0 [ 159.704096][ T4195] thrustmaster 0003:044F:B323.0001: invalid report_count 41699 [ 159.727618][ T4195] thrustmaster 0003:044F:B323.0001: item 0 2 1 9 parsing failed [ 159.744954][ T5293] udc-core: couldn't find an available UDC or it's busy [ 159.758952][ T4195] thrustmaster 0003:044F:B323.0001: parse failed [ 159.765463][ T5293] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.769407][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 159.778124][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 159.942725][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 159.957925][ T26] cdc_wdm 5-1:1.0: Unknown control protocol [ 160.016719][ T26] usb 5-1: USB disconnect, device number 4 [ 160.028906][ T4195] thrustmaster: probe of 0003:044F:B323.0001 failed with error -22 [ 160.072718][ T5308] loop4: detected capacity change from 0 to 4096 [ 160.104959][ T5312] overlayfs: failed to clone upperpath [ 160.674653][ T5308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 160.692909][ T5308] EXT4-fs (loop4): Ignoring removed nobh option [ 160.791610][ T5308] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nobh,,errors=continue. Quota mode: writeback. [ 160.914226][ T4195] usb 2-1: USB disconnect, device number 4 [ 161.307146][ T5332] process 'syz.2.289' launched './file1' with NULL argv: empty string added [ 162.069141][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.408627][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 162.568845][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.582766][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 162.592400][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.260759][ T4195] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 163.281676][ T1108] usb 4-1: config 0 descriptor?? [ 163.363737][ T1108] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 163.464086][ T5363] netlink: 268 bytes leftover after parsing attributes in process `syz.0.298'. [ 163.778872][ T1108] gspca_vc032x: reg_w err -71 [ 163.783912][ T1108] vc032x: probe of 4-1:0.0 failed with error -71 [ 164.151165][ T1108] usb 4-1: USB disconnect, device number 2 [ 165.138642][ T4195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.158541][ T4195] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 165.178517][ T4195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.052868][ T5380] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 167.052868][ T5380] program syz.3.302 not setting count and/or reply_len properly [ 167.488617][ T4195] usb 2-1: string descriptor 0 read error: -71 [ 167.504226][ T4195] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 167.526546][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 167.649005][ T4195] usb 2-1: config 0 descriptor?? [ 167.678847][ T4195] usb 2-1: can't set config #0, error -71 [ 167.744040][ T4195] usb 2-1: USB disconnect, device number 5 [ 168.051962][ T5391] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 170.791694][ T5416] loop1: detected capacity change from 0 to 128 [ 170.843230][ T5416] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.730834][ T5416] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.243596][ T5427] ubi16: attaching mtd0 [ 174.117476][ T5427] ubi16: scanning is finished [ 174.122206][ T5427] ubi16: empty MTD device detected [ 174.214104][ T5427] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 174.221730][ T5427] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 174.229070][ T5427] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 174.236078][ T5427] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 174.243545][ T5427] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 174.250522][ T5427] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 174.258624][ T5427] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 275603849 [ 174.268597][ T5427] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 174.309227][ T5436] ubi16: background thread "ubi_bgt16d" started, PID 5436 [ 177.406375][ T5461] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 177.415169][ T5461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 177.435051][ T5461] bridge0: port 3(dummy0) entered blocking state [ 177.442260][ T5461] bridge0: port 3(dummy0) entered disabled state [ 177.466894][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.689500][ T5461] device dummy0 entered promiscuous mode [ 177.749349][ T5461] bridge0: port 3(dummy0) entered blocking state [ 177.755906][ T5461] bridge0: port 3(dummy0) entered forwarding state [ 180.379893][ T5481] ubi: mtd0 is already attached to ubi16 [ 182.059222][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 182.080826][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 182.816941][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 182.893651][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 184.889924][ T5524] netlink: 'syz.1.343': attribute type 10 has an invalid length. [ 184.897849][ T5524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.343'. [ 184.907479][ T5524] bridge0: port 3(dummy0) entered blocking state [ 184.914181][ T5524] bridge0: port 3(dummy0) entered disabled state [ 184.924932][ T5524] device dummy0 entered promiscuous mode [ 184.960343][ T5524] bridge0: port 3(dummy0) entered blocking state [ 184.966851][ T5524] bridge0: port 3(dummy0) entered forwarding state [ 188.005654][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 188.019357][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 188.029567][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 188.040115][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 188.049612][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 191.653195][ T5571] device syzkaller0 entered promiscuous mode [ 194.899450][ T5601] trusted_key: encrypted_key: insufficient parameters specified [ 194.929347][ T5601] netlink: 'syz.0.366': attribute type 40 has an invalid length. [ 196.583831][ T5630] loop1: detected capacity change from 0 to 128 [ 196.626595][ T5630] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.717758][ T5630] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.678934][ T4363] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.458951][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.465285][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.517697][ T5659] trusted_key: encrypted_key: insufficient parameters specified [ 200.528349][ T5659] netlink: 'syz.2.381': attribute type 40 has an invalid length. [ 205.743555][ T5713] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 205.751712][ T5713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.395'. [ 208.254730][ T5731] device syzkaller0 entered promiscuous mode [ 209.183377][ T5753] netlink: 'syz.1.407': attribute type 10 has an invalid length. [ 209.191152][ T5753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.407'. [ 218.112885][ T5860] netlink: 'syz.0.435': attribute type 10 has an invalid length. [ 218.120736][ T5860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'. [ 218.966680][ T5860] bridge0: port 3(dummy0) entered blocking state [ 218.973125][ T5860] bridge0: port 3(dummy0) entered disabled state [ 218.980062][ T5860] device dummy0 entered promiscuous mode [ 218.985946][ T5860] bridge0: port 3(dummy0) entered blocking state [ 218.992299][ T5860] bridge0: port 3(dummy0) entered forwarding state [ 222.185625][ T5901] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 227.684689][ T5954] trusted_key: encrypted_key: insufficient parameters specified [ 228.450444][ T5967] xt_connbytes: Forcing CT accounting to be enabled [ 228.457377][ T5967] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 232.869341][ T6011] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 232.878062][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.469'. [ 236.962032][ T6074] tipc: Enabling of bearer rejected, failed to enable media [ 237.122769][ T6075] trusted_key: encrypted_key: insufficient parameters specified [ 240.708483][ T25] audit: type=1326 audit(1781702832.389:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.1.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38d5425e59 code=0x0 [ 244.774222][ T25] audit: type=1326 audit(1781702836.164:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6154 comm="syz.4.508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7d5d41e59 code=0x0 [ 245.120789][ T6161] trusted_key: encrypted_key: insufficient parameters specified [ 246.163196][ T6168] overlayfs: failed to clone upperpath [ 248.498423][ T6192] device syzkaller0 entered promiscuous mode [ 257.218379][ T6289] device syzkaller0 entered promiscuous mode [ 257.597276][ T6297] trusted_key: encrypted_key: insufficient parameters specified [ 257.607451][ T6297] netlink: 'syz.0.548': attribute type 40 has an invalid length. [ 258.752400][ T6310] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.889942][ T6326] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 261.396821][ T6344] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 264.652846][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.659408][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.146612][ T6418] trusted_key: encrypted_key: insufficient parameters specified [ 268.156763][ T6418] netlink: 'syz.3.583': attribute type 40 has an invalid length. [ 269.130911][ T4195] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 269.412541][ T4195] usb 4-1: Using ep0 maxpacket: 16 [ 269.542892][ T4195] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 269.576416][ T4195] usb 4-1: config 0 has no interface number 0 [ 269.672542][ T4195] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 269.682600][ T4195] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 269.943174][ C1] hrtimer: interrupt took 31732 ns [ 269.944443][ T4195] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 269.992872][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.004045][ T4195] usb 4-1: Product: syz [ 270.014218][ T4195] usb 4-1: Manufacturer: syz [ 270.018936][ T4195] usb 4-1: SerialNumber: syz [ 270.184401][ T4195] usb 4-1: config 0 descriptor?? [ 270.203589][ T6422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 270.210913][ T6422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 270.503895][ T6422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 270.513089][ T6422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 271.252188][ T4195] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 271.409908][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 273.230300][ T4195] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 273.247762][ T4195] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 273.259463][ T4195] asix: probe of 4-1:0.34 failed with error -71 [ 273.268637][ T4195] usb 4-1: USB disconnect, device number 3 [ 275.281446][ T6477] netlink: 'syz.3.600': attribute type 10 has an invalid length. [ 275.289615][ T6477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.600'. [ 276.433467][ T6487] overlayfs: failed to clone lowerpath [ 278.802336][ T4195] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 279.197715][ T4195] usb 4-1: Using ep0 maxpacket: 16 [ 280.487424][ T4195] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.562510][ T4195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.595359][ T4195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 280.624660][ T4195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.655854][ T6531] Invalid option length (772) for dns_resolver key [ 280.679257][ T4195] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.711839][ T4195] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 280.733887][ T4195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.766689][ T4195] usb 4-1: config 0 descriptor?? [ 282.459489][ T4195] rc_core: IR keymap rc-hauppauge not found [ 282.465455][ T4195] Registered IR keymap rc-empty [ 282.491752][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.629996][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 283.669403][ T4195] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 283.951502][ T4195] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 284.204399][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.236850][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 284.826740][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.279563][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.318723][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.369683][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.407938][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.596080][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.769575][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.813186][ T4195] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 285.854057][ T4195] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 285.879871][ T4195] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 285.944114][ T4195] usb 4-1: USB disconnect, device number 4 [ 297.861866][ T4191] syz-executor (4191) used greatest stack depth: 20688 bytes left [ 298.043930][ T6698] chnl_net:caif_netlink_parms(): no params data found [ 298.176602][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.312035][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.352090][ T6698] device bridge_slave_0 entered promiscuous mode [ 298.361503][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.368636][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.376802][ T6698] device bridge_slave_1 entered promiscuous mode [ 298.400321][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.572751][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.837826][ T4306] Bluetooth: hci5: command 0x0409 tx timeout [ 298.867044][ T6698] team0: Port device team_slave_0 added [ 298.876857][ T6698] team0: Port device team_slave_1 added [ 298.917341][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.924481][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.142958][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.822578][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.829630][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.855751][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.084582][ T6698] device hsr_slave_0 entered promiscuous mode [ 300.092331][ T6698] device hsr_slave_1 entered promiscuous mode [ 300.111402][ T6698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.118966][ T6698] Cannot create hsr debugfs directory [ 300.904910][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 302.045330][ T6698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.117469][ T6698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.166974][ T6698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.186950][ T6698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.916055][ T4235] Bluetooth: hci5: command 0x040f tx timeout [ 303.189656][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.352263][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.380895][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.587337][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.840589][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.958685][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.015814][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.022959][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.037076][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.050563][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.059872][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.066959][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.097113][ T6698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.129563][ T6698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.172602][ T6776] binder: BINDER_SET_CONTEXT_MGR already set [ 304.178616][ T6776] binder: 6775:6776 ioctl 4018620d 200000004a80 returned -16 [ 304.228269][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.253840][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.293904][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.329296][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.367380][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.398004][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.459223][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.507451][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.962694][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.982190][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.000172][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.020342][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.038553][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.040568][ T4306] Bluetooth: hci5: command 0x0419 tx timeout [ 307.420856][ T4233] Bluetooth: hci5: command 0x0405 tx timeout [ 307.687785][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.880981][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.889534][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.108805][ T6818] IPVS: lc: FWM 3 0x00000003 - no destination available [ 309.334326][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.353915][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.417998][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.461778][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.495957][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.515274][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.538248][ T6698] device veth0_vlan entered promiscuous mode [ 309.566177][ T6698] device veth1_vlan entered promiscuous mode [ 309.648770][ T6698] device veth0_macvtap entered promiscuous mode [ 309.677570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.739173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.764933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.800199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.843388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.026709][ T6698] device veth1_macvtap entered promiscuous mode [ 310.089412][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.122848][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.155603][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.188170][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.209495][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.231022][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.268330][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.289624][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.299906][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.343400][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.376078][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.387027][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.807971][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.826107][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.836669][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.875883][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.903452][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.918904][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.933492][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.950328][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.962781][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.159463][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.561098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.770783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.818134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.994909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.038020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.644439][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 312.910504][ T6698] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.932037][ T6698] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.947736][ T6872] binder: 6871:6872 ioctl c0306201 0 returned -14 [ 312.954281][ T6698] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.963464][ T6698] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.202546][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.221524][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.287529][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.340858][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.383606][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.455805][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 314.598008][ T526] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 314.783167][ T6884] trusted_key: encrypted_key: insufficient parameters specified [ 314.793613][ T6884] netlink: 'syz.1.706': attribute type 40 has an invalid length. [ 316.615269][ T6905] binder: 6904:6905 ioctl c0306201 0 returned -14 [ 317.633478][ T4195] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 317.904067][ T4195] usb 6-1: Using ep0 maxpacket: 16 [ 318.038172][ T4195] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 318.066315][ T4195] usb 6-1: config 0 has no interface number 0 [ 318.105348][ T4195] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 318.155351][ T4195] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 318.383765][ T4195] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 318.416681][ T4195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.438540][ T4195] usb 6-1: Product: syz [ 318.442717][ T4195] usb 6-1: Manufacturer: syz [ 318.464676][ T4195] usb 6-1: SerialNumber: syz [ 318.492685][ T4195] usb 6-1: config 0 descriptor?? [ 318.521161][ T6917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 318.536638][ T6917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 318.815514][ T6917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 318.841830][ T6917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.031258][ T6936] tipc: Enabling of bearer rejected, failed to enable media [ 319.105462][ T4195] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 320.415431][ T4195] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 320.425560][ T4195] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 320.601022][ T4195] asix: probe of 6-1:0.34 failed with error -71 [ 321.822140][ T6954] IPVS: lc: FWM 3 0x00000003 - no destination available [ 322.134605][ T4195] usb 6-1: USB disconnect, device number 2 [ 325.494030][ T6998] trusted_key: encrypted_key: insufficient parameters specified [ 325.504402][ T6998] netlink: 'syz.2.739': attribute type 40 has an invalid length. [ 329.516709][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.523970][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.168121][ T7037] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 336.994147][ T7101] overlayfs: failed to resolve './file0': -2 [ 340.704022][ T4195] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 341.002166][ T4195] usb 6-1: Using ep0 maxpacket: 32 [ 341.175715][ T4195] usb 6-1: unable to get BOS descriptor or descriptor too short [ 341.274380][ T4195] usb 6-1: config 14 has an invalid interface number: 23 but max is 0 [ 341.291745][ T4195] usb 6-1: config 14 has no interface number 0 [ 341.311499][ T4195] usb 6-1: config 14 interface 23 has no altsetting 0 [ 341.500612][ T4195] usb 6-1: New USB device found, idVendor=067b, idProduct=23d3, bcdDevice=90.e8 [ 341.531865][ T4195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.564839][ T4195] usb 6-1: Product: syz [ 341.569604][ T4195] usb 6-1: Manufacturer: syz [ 341.575561][ T4195] usb 6-1: SerialNumber: syz [ 342.661686][ T4195] pl2303 6-1:14.23: required endpoints missing [ 342.679710][ T4195] usb 6-1: USB disconnect, device number 3 [ 352.681065][ T7288] IPVS: lc: FWM 3 0x00000003 - no destination available [ 359.273291][ T4195] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 359.558731][ T4195] usb 4-1: Using ep0 maxpacket: 8 [ 359.704446][ T4195] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 359.946613][ T4195] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 360.012358][ T526] Bluetooth: (null): Invalid header checksum [ 360.032941][ T526] Bluetooth: (null): Invalid header checksum [ 360.081308][ T4195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.241215][ T4195] usb 4-1: Product: syz [ 360.321297][ T4195] usb 4-1: Manufacturer: syz [ 360.375463][ T4195] usb 4-1: SerialNumber: syz [ 360.401502][ T4195] usb 4-1: config 0 descriptor?? [ 360.454413][ T4195] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 360.681819][ T4195] gspca_zc3xx: reg_w_i err -71 [ 361.406310][ T4195] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 361.645344][ T4195] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 361.880022][ T4195] usb 4-1: USB disconnect, device number 5 [ 364.201528][ T7390] overlayfs: failed to clone upperpath [ 364.799535][ T7406] IPVS: lc: FWM 3 0x00000003 - no destination available [ 365.977256][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'. [ 366.670128][ T7422] binder: BINDER_SET_CONTEXT_MGR already set [ 366.676617][ T7422] binder: 7417:7422 ioctl 4018620d 200000004a80 returned -16 [ 368.737903][ T7456] binder: BINDER_SET_CONTEXT_MGR already set [ 368.743967][ T7456] binder: 7453:7456 ioctl 4018620d 200000004a80 returned -16 [ 370.507370][ T7475] Device name cannot be null; rc = [-22] [ 373.797860][ T7506] device syzkaller0 entered promiscuous mode [ 376.019780][ T7529] IPVS: lc: FWM 3 0x00000003 - no destination available [ 378.755008][ T4266] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 379.090251][ T4266] usb 3-1: Using ep0 maxpacket: 16 [ 379.164802][ T7581] IPVS: lc: FWM 3 0x00000003 - no destination available [ 379.820550][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.847040][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.957387][ T4266] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 379.966473][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.067481][ T4266] usb 3-1: config 0 descriptor?? [ 380.825716][ T4266] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 380.831591][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 380.834483][ T4266] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 380.850807][ T4266] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 380.858227][ T4266] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 380.871902][ T4266] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 380.883724][ T7599] bridge_slave_0: default FDB implementation only supports local addresses [ 381.963766][ T4266] usb 3-1: USB disconnect, device number 3 [ 385.429619][ T4266] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 386.035747][ T4266] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 386.047942][ T4266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.073594][ T4266] usb 6-1: Product: syz [ 386.077846][ T4266] usb 6-1: Manufacturer: syz [ 386.084743][ T4266] usb 6-1: SerialNumber: syz [ 386.427432][ T4266] usb 6-1: config 0 descriptor?? [ 386.751027][ T4266] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 387.044698][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 387.682884][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 387.814068][ T7] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 387.847455][ T7] usb 4-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xCF, skipping [ 387.928004][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.999289][ T4192] ODEBUG: Out of memory. ODEBUG disabled [ 388.279432][ T7] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 388.301497][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.346132][ T7] usb 4-1: Product: syz [ 388.368320][ T7] usb 4-1: Manufacturer: syz [ 388.395953][ T7] usb 4-1: SerialNumber: syz [ 388.473897][ T7] usb 4-1: config 0 descriptor?? [ 389.070527][ T7] usb 4-1: USB disconnect, device number 6 [ 389.525853][ T4266] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 389.605439][ T4266] usb 6-1: USB disconnect, device number 4 [ 390.680833][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 392.111854][ T7726] IPVS: lc: FWM 3 0x00000003 - no destination available [ 393.338161][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.5.955'. [ 395.519247][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.525679][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.046055][ T7782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.184532][ T7782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.223661][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 399.278469][ T26] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 399.313902][ T7782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.466702][ T7782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.484685][ T26] usb 6-1: device descriptor read/64, error -71 [ 399.748739][ T7790] Device name cannot be null; rc = [-22] [ 399.916446][ T7782] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.934216][ T7782] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.951588][ T7782] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.966365][ T7782] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.079763][ T1108] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.095568][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.123118][ T26] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 400.340694][ T26] usb 6-1: device descriptor read/64, error -71 [ 400.372702][ T1108] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 400.411216][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.430867][ T1108] usb 4-1: Product: syz [ 400.439689][ T1108] usb 4-1: Manufacturer: syz [ 400.450007][ T1108] usb 4-1: SerialNumber: syz [ 400.481142][ T26] usb usb6-port1: attempt power cycle [ 400.915337][ T1108] usb 4-1: 0:1 : does not exist [ 400.953015][ T1108] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 401.011890][ T26] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.072568][ T1108] usb 4-1: unit 0 not found! [ 401.131911][ T26] usb 6-1: device descriptor read/8, error -71 [ 401.149943][ T1108] usb 4-1: USB disconnect, device number 7 [ 401.543251][ T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 401.651238][ T26] usb 6-1: device descriptor read/8, error -71 [ 401.661251][ T5120] udevd[5120]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.814616][ T26] usb usb6-port1: unable to enumerate USB device [ 402.953616][ T7823] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 405.458172][ T7847] sctp: failed to load transform for md5: -2 [ 405.756465][ T1108] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 406.300461][ T1108] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 406.417520][ T1108] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 406.663855][ T1108] usb 6-1: config 0 interface 0 has no altsetting 0 [ 406.790552][ T1108] usb 6-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 406.937523][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.977583][ T1108] usb 6-1: config 0 descriptor?? [ 407.716203][ T7890] netlink: 'syz.3.1003': attribute type 29 has an invalid length. [ 407.744690][ T7890] netlink: 'syz.3.1003': attribute type 29 has an invalid length. [ 408.584350][ T1108] hid (null): unknown global tag 0xc [ 408.601006][ T1108] logitech-hidpp-device 0003:046D:C343.0003: collection stack underflow [ 408.622976][ T1108] logitech-hidpp-device 0003:046D:C343.0003: item 0 2 0 12 parsing failed [ 408.632297][ T1108] logitech-hidpp-device 0003:046D:C343.0003: hidpp_probe:parse failed [ 408.649413][ T1108] logitech-hidpp-device: probe of 0003:046D:C343.0003 failed with error -22 [ 408.843701][ T1108] usb 6-1: USB disconnect, device number 9 [ 408.995082][ T7922] IPVS: lc: FWM 3 0x00000003 - no destination available [ 409.487137][ T26] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 409.505610][ T26] Bluetooth: hci1: Injecting HCI hardware error event [ 409.521582][ T4203] Bluetooth: hci1: hardware error 0x00 [ 411.546392][ T7945] bridge0: port 3(dummy0) entered disabled state [ 411.552922][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.560195][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.379190][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.423276][ T7945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.324013][ T7945] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.333184][ T7945] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.342066][ T7945] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.351382][ T7945] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.504674][ T7945] syz.1.1015 (7945) used greatest stack depth: 20304 bytes left [ 413.818039][ T26] Process accounting resumed [ 414.606298][ T7981] Process accounting resumed [ 416.930175][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 416.947954][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 417.395248][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 420.016513][ T8048] xt_hashlimit: size too large, truncated to 1048576 [ 420.892749][ T8041] netlink: 'syz.5.1042': attribute type 10 has an invalid length. [ 420.900745][ T8041] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1042'. [ 420.909755][ T8041] bridge0: port 3(dummy0) entered blocking state [ 420.916149][ T8041] bridge0: port 3(dummy0) entered disabled state [ 420.923161][ T8041] device dummy0 entered promiscuous mode [ 420.929044][ T8041] bridge0: port 3(dummy0) entered blocking state [ 420.935382][ T8041] bridge0: port 3(dummy0) entered forwarding state [ 423.516191][ T8091] TCP: TCP_TX_DELAY enabled [ 424.094030][ T8093] netlink: 'syz.2.1056': attribute type 10 has an invalid length. [ 424.102259][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1056'. [ 428.760264][ T8145] netlink: 'syz.0.1070': attribute type 10 has an invalid length. [ 428.768118][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1070'. [ 429.067803][ T8141] Bluetooth: hci5: command 0x0406 tx timeout [ 430.650459][ T8161] IPVS: lc: FWM 3 0x00000003 - no destination available [ 435.664814][ T7971] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 435.806689][ T8230] autofs4:pid:8230:autofs_fill_super: called with bogus options [ 437.477466][ T7971] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 437.495111][ T7971] usb 3-1: can't read configurations, error -71 [ 440.194618][ T8246] netlink: 'syz.5.1099': attribute type 10 has an invalid length. [ 440.305790][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1099'. [ 441.520128][ T8285] binder: 8281:8285 unknown command 1074553619 [ 441.526585][ T8285] binder: 8281:8285 ioctl c0306201 200000000040 returned -22 [ 442.486717][ T7971] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 443.660053][ T7971] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 443.683622][ T7971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.712161][ T7971] usb 3-1: Product: syz [ 443.716501][ T7971] usb 3-1: Manufacturer: syz [ 443.721192][ T7971] usb 3-1: SerialNumber: syz [ 443.741626][ T7971] usb 3-1: config 0 descriptor?? [ 443.785344][ T7971] ch341 3-1:0.0: ch341-uart converter detected [ 445.096678][ T7971] usb 3-1: failed to send control message: -71 [ 445.106170][ T7971] ch341-uart: probe of ttyUSB0 failed with error -71 [ 445.239903][ T7971] usb 3-1: USB disconnect, device number 6 [ 445.353972][ T7971] ch341 3-1:0.0: device disconnected [ 445.424489][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1117'. [ 447.961277][ T8340] device syzkaller0 entered promiscuous mode [ 448.532328][ T8350] netlink: 'syz.1.1130': attribute type 10 has an invalid length. [ 448.636179][ T8350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1130'. [ 448.753012][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1129'. [ 449.605971][ T8359] netlink: 'syz.5.1133': attribute type 29 has an invalid length. [ 449.639404][ T8359] netlink: 'syz.5.1133': attribute type 29 has an invalid length. [ 450.079664][ T8390] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8390] [ 451.279249][ T8402] netlink: 'syz.0.1144': attribute type 10 has an invalid length. [ 451.353783][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1143'. [ 451.944026][ T8402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1144'. [ 453.489936][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1155'. [ 454.492158][ T4266] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 454.607560][ T8462] device erspan0 entered promiscuous mode [ 454.629511][ T8462] device erspan0 left promiscuous mode [ 454.771208][ T4266] usb 6-1: Using ep0 maxpacket: 32 [ 454.943303][ T4266] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 454.955012][ T4266] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.990688][ T4266] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.060766][ T4266] usb 6-1: config 0 has no interface number 0 [ 455.297004][ T4266] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 455.338651][ T4266] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 455.404288][ T4266] usb 6-1: Product: syz [ 455.436000][ T4266] usb 6-1: Manufacturer: syz [ 455.444613][ T4266] usb 6-1: SerialNumber: syz [ 455.465419][ T4266] usb 6-1: config 0 descriptor?? [ 455.480543][ T8472] device syzkaller0 entered promiscuous mode [ 455.854051][ T8141] usb 6-1: USB disconnect, device number 10 [ 456.245262][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1167'. [ 458.037879][ T8511] device syzkaller0 entered promiscuous mode [ 458.225538][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.231961][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.737135][ T8521] IPVS: lc: FWM 3 0x00000003 - no destination available [ 459.047925][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 459.372403][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 459.673645][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 459.682810][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.815111][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1180'. [ 460.310674][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 460.322978][ T7] pvrusb2: ********** [ 460.327022][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 460.337519][ T7] pvrusb2: Important functionality might not be entirely working. [ 460.345636][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 460.357004][ T7] pvrusb2: ********** [ 460.558580][ T2426] pvrusb2: Invalid write control endpoint [ 460.608478][ T8540] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1184'. [ 460.660878][ T2426] pvrusb2: Invalid write control endpoint [ 460.676243][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 460.710740][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 460.742827][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 460.792867][ T2426] pvrusb2: Device being rendered inoperable [ 460.814736][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 460.843377][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 460.890284][ T2426] pvrusb2: Attached sub-driver cx25840 [ 460.908371][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 460.950105][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 462.345593][ T7] usb 3-1: USB disconnect, device number 7 [ 462.815845][ T8569] IPVS: lc: FWM 3 0x00000003 - no destination available [ 464.549212][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'. [ 465.286508][ T8586] netlink: 'syz.0.1196': attribute type 29 has an invalid length. [ 465.308233][ T8586] netlink: 'syz.0.1196': attribute type 29 has an invalid length. [ 466.706572][ T8612] binder: 8608:8612 ioctl 4018620d 0 returned -22 [ 466.738421][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 466.747802][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1204'. [ 466.756893][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1204'. [ 467.782192][ T8141] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 468.283672][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'. [ 468.952266][ T8141] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 469.169172][ T8141] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 469.188605][ T8141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.219961][ T8141] usb 3-1: Product: syz [ 469.235403][ T8141] usb 3-1: Manufacturer: syz [ 469.240256][ T8141] usb 3-1: SerialNumber: syz [ 469.301212][ T8141] usb 3-1: config 0 descriptor?? [ 471.487650][ T4235] usb 3-1: USB disconnect, device number 8 [ 471.974391][ T8663] netlink: 'syz.5.1218': attribute type 29 has an invalid length. [ 472.084445][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1217'. [ 472.159569][ T8663] netlink: 'syz.5.1218': attribute type 29 has an invalid length. [ 473.288688][ T4345] Bluetooth: (null): Invalid header checksum [ 473.306893][ T4345] Bluetooth: (null): Invalid header checksum [ 473.376336][ T4404] Bluetooth: (null): Invalid header checksum [ 473.486901][ T4363] Bluetooth: (null): Invalid header checksum [ 473.561316][ T8670] sctp: failed to load transform for md5: -2 [ 473.591873][ T4285] Bluetooth: (null): Invalid header checksum [ 474.195832][ T8699] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 474.276731][ T8699] team0: Port device virt_wifi0 added [ 474.870321][ T8708] IPVS: lc: FWM 3 0x00000003 - no destination available [ 475.913512][ T8141] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 476.465865][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 477.750677][ T8141] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 477.779771][ T8141] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 477.996065][ T8141] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.030504][ T8141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 478.051483][ T8141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 478.605444][ T8141] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 478.628686][ T8141] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 478.809220][ T8141] usb 6-1: Product: syz [ 478.813417][ T8141] usb 6-1: Manufacturer: syz [ 478.989399][ T8141] usb 6-1: can't set config #1, error -71 [ 479.708207][ T8751] input: syz0 as /devices/virtual/input/input7 [ 479.783338][ T8141] usb 6-1: USB disconnect, device number 11 [ 483.827266][ T8800] fuse: Bad value for 'fd' [ 489.574406][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 489.587756][ T8858] device dummy0 left promiscuous mode [ 489.608258][ T8858] bridge0: port 3(dummy0) entered disabled state [ 489.702271][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.276546][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.285676][ T8858] device bridge_slave_0 left promiscuous mode [ 490.292034][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.346655][ T8858] device bridge_slave_1 left promiscuous mode [ 490.352959][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.295992][ T8878] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1276'. [ 491.859481][ T8858] bond0: (slave bond_slave_0): Releasing backup interface [ 492.025600][ T8858] bond0: (slave bond_slave_1): Releasing backup interface [ 492.140872][ T8858] team0: Port device team_slave_0 removed [ 492.234101][ T8858] team0: Port device team_slave_1 removed [ 492.243043][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.251251][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.262035][ T8858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.269609][ T8858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.758628][ T8918] binder: 8917:8918 ioctl 4018620d 0 returned -22 [ 501.507818][ T8995] syz.5.1307: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 501.751338][ T8995] CPU: 0 PID: 8995 Comm: syz.5.1307 Not tainted syzkaller #0 [ 501.758755][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.768808][ T8995] Call Trace: [ 501.772137][ T8995] [ 501.775100][ T8995] dump_stack_lvl+0x188/0x250 [ 501.779873][ T8995] ? rcu_lock_release+0x5/0x20 [ 501.784679][ T8995] ? show_regs_print_info+0x20/0x20 [ 501.789857][ T8995] ? load_image+0x400/0x400 [ 501.794367][ T8995] warn_alloc+0x243/0x320 [ 501.798704][ T8995] ? zone_watermark_ok_safe+0x240/0x240 [ 501.804237][ T8995] ? __mutex_lock_common+0x465/0x2400 [ 501.809718][ T8995] ? verify_lock_unused+0x140/0x140 [ 501.814979][ T8995] __vmalloc_node_range+0x2b1/0x8b0 [ 501.820170][ T8995] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 501.825261][ T8995] vmalloc+0x75/0x80 [ 501.829142][ T8995] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 501.834149][ T8995] dvb_dvr_do_ioctl+0x12a/0x220 [ 501.838986][ T8995] dvb_usercopy+0x191/0x2b0 [ 501.843469][ T8995] ? dvb_dvr_release+0x3d0/0x3d0 [ 501.848386][ T8995] ? dvb_generic_ioctl+0xb0/0xb0 [ 501.853321][ T8995] ? dvb_dvr_poll+0x230/0x230 [ 501.857993][ T8995] dvb_dvr_ioctl+0x25/0x30 [ 501.862394][ T8995] __se_sys_ioctl+0xfa/0x170 [ 501.867082][ T8995] do_syscall_64+0x4c/0xa0 [ 501.871548][ T8995] ? clear_bhb_loop+0x30/0x80 [ 501.876249][ T8995] ? clear_bhb_loop+0x30/0x80 [ 501.880909][ T8995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.886790][ T8995] RIP: 0033:0x7ff00dc69e59 [ 501.891234][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.910850][ T8995] RSP: 002b:00007ff00bec3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.919251][ T8995] RAX: ffffffffffffffda RBX: 00007ff00dee2fa0 RCX: 00007ff00dc69e59 [ 501.927206][ T8995] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 501.935160][ T8995] RBP: 00007ff00dcffd6f R08: 0000000000000000 R09: 0000000000000000 [ 501.943115][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.951066][ T8995] R13: 00007ff00dee3038 R14: 00007ff00dee2fa0 R15: 00007ffd2edde988 [ 501.959183][ T8995] [ 501.968248][ T8995] Mem-Info: [ 502.013018][ T8995] active_anon:274 inactive_anon:8607 isolated_anon:0 [ 502.013018][ T8995] active_file:12922 inactive_file:42573 isolated_file:0 [ 502.013018][ T8995] unevictable:768 dirty:62 writeback:0 [ 502.013018][ T8995] slab_reclaimable:20853 slab_unreclaimable:96294 [ 502.013018][ T8995] mapped:33017 shmem:4524 pagetables:622 bounce:0 [ 502.013018][ T8995] kernel_misc_reclaimable:0 [ 502.013018][ T8995] free:1371992 free_pcp:5392 free_cma:0 [ 502.073777][ T8995] Node 0 active_anon:1064kB inactive_anon:33920kB active_file:51484kB inactive_file:170292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132068kB dirty:244kB writeback:0kB shmem:16020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10732kB pagetables:2488kB all_unreclaimable? no [ 502.118660][ T8995] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 503.504369][ T8995] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.116819][ T8995] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 504.122907][ T8995] Node 0 DMA32 free:1523624kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1064kB inactive_anon:56940kB active_file:51492kB inactive_file:170292kB unevictable:1536kB writepending:264kB present:3129332kB managed:2606536kB mlocked:0kB bounce:0kB free_pcp:24380kB local_pcp:18436kB free_cma:0kB [ 504.153644][ T8995] lowmem_reserve[]: 0 0 0 0 0 [ 504.158361][ T8995] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 504.184919][ T8995] lowmem_reserve[]: 0 0 0 0 0 [ 504.189626][ T8995] Node 1 Normal free:3919748kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2740kB local_pcp:0kB free_cma:0kB [ 504.221624][ T8995] lowmem_reserve[]: 0 0 0 0 0 [ 504.227491][ T8995] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 504.241838][ T8995] Node 0 DMA32: 16*4kB (UME) 3*8kB (E) 351*16kB (UME) 308*32kB (UME) 214*64kB (UME) 75*128kB (UME) 35*256kB (UME) 24*512kB (ME) 9*1024kB (M) 4*2048kB (UM) 353*4096kB (M) = 1523400kB [ 504.260517][ T8995] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 504.360264][ T8995] Node 1 Normal: 231*4kB (UME) 47*8kB (UME) 45*16kB (UME) 207*32kB (UME) 81*64kB (UME) 21*128kB (UE) 21*256kB (UME) 5*512kB (U) 2*1024kB (UE) 1*2048kB (M) 950*4096kB (M) = 3919748kB [ 504.382897][ T8995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.394032][ T8995] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 504.405189][ T8995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.076828][ T8995] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.101850][ T8995] 68631 total pagecache pages [ 505.106639][ T8995] 0 pages in swap cache [ 505.167231][ T8995] Swap cache stats: add 2595, delete 2595, find 322/396 [ 505.181631][ T8995] Free swap = 124424kB [ 505.188890][ T8995] Total swap = 124996kB [ 505.193170][ T8995] 2097051 pages RAM [ 505.211930][ T8995] 0 pages HighMem/MovableOnly [ 505.216997][ T8995] 411494 pages reserved [ 505.221279][ T8995] 0 pages cma reserved [ 506.346885][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 513.054177][ T9102] netlink: 'syz.2.1336': attribute type 10 has an invalid length. [ 513.062168][ T9102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1336'. [ 513.974887][ T9116] netlink: 'syz.3.1340': attribute type 29 has an invalid length. [ 514.091215][ T9116] netlink: 'syz.3.1340': attribute type 29 has an invalid length. [ 515.906421][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'. [ 515.948566][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1346'. [ 516.483058][ T9145] netlink: 'syz.5.1349': attribute type 10 has an invalid length. [ 516.490937][ T9145] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1349'. [ 521.147126][ T9208] 9pnet: Insufficient options for proto=fd [ 522.481799][ T9222] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1373'. [ 522.595028][ T9227] IPVS: lc: FWM 3 0x00000003 - no destination available [ 522.639866][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.647378][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.462906][ T9273] IPVS: lc: FWM 3 0x00000003 - no destination available [ 527.275571][ T9275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1389'. [ 529.846353][ T9312] IPVS: lc: FWM 3 0x00000003 - no destination available [ 530.680698][ T9314] Can't find a SQUASHFS superblock on nullb0 [ 532.210739][ T9331] trusted_key: encrypted_key: insufficient parameters specified [ 532.219406][ T9331] netlink: 'syz.5.1402': attribute type 40 has an invalid length. [ 534.807418][ T9364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1415'. [ 535.098215][ T9364] bridge0: port 3(dummy0) entered disabled state [ 535.104710][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.111875][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.141850][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 535.254916][ T9366] device hsr_slave_1 left promiscuous mode [ 537.142408][ T9405] trusted_key: encrypted_key: insufficient parameters specified [ 537.151360][ T9405] netlink: 'syz.2.1424': attribute type 40 has an invalid length. [ 537.479782][ T9407] netlink: 'syz.0.1431': attribute type 29 has an invalid length. [ 537.556027][ T9407] netlink: 'syz.0.1431': attribute type 29 has an invalid length. [ 539.281007][ T9441] sctp: [Deprecated]: syz.1.1442 (pid 9441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.281007][ T9441] Use struct sctp_sack_info instead [ 540.497108][ T9449] netlink: 'syz.0.1444': attribute type 29 has an invalid length. [ 540.522253][ T9449] netlink: 'syz.0.1444': attribute type 29 has an invalid length. [ 543.413473][ T9495] netlink: 'syz.5.1457': attribute type 29 has an invalid length. [ 543.429196][ T9495] netlink: 'syz.5.1457': attribute type 29 has an invalid length. [ 543.496609][ T9497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'. [ 544.057122][ T9503] trusted_key: encrypted_key: insufficient parameters specified [ 544.065902][ T9503] netlink: 'syz.3.1450': attribute type 40 has an invalid length. [ 544.859965][ T9499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.200327][ T9508] binder: 9504:9508 ioctl 4018620d 0 returned -22 [ 547.771448][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1470'. [ 548.421187][ T9545] netlink: 'syz.1.1472': attribute type 10 has an invalid length. [ 548.429396][ T9545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1472'. [ 549.221766][ T4405] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 549.265785][ T9565] device bridge1 entered promiscuous mode [ 549.505706][ T9550] trusted_key: encrypted_key: insufficient parameters specified [ 549.612021][ T4405] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.622143][ T4405] usb 6-1: config 0 has no interfaces? [ 550.089559][ T4405] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 550.128448][ T4405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.162154][ T4405] usb 6-1: Product: syz [ 550.183128][ T4405] usb 6-1: Manufacturer: syz [ 550.194059][ T4405] usb 6-1: SerialNumber: syz [ 550.225171][ T4405] usb 6-1: config 0 descriptor?? [ 550.724614][ T4306] usb 6-1: USB disconnect, device number 12 [ 552.358750][ T9591] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 552.366628][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1486'. [ 553.455382][ T9621] trusted_key: encrypted_key: insufficient parameters specified [ 555.287138][ T9638] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 555.295113][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1501'. [ 555.506952][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'. [ 556.646608][ T9667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1513'. [ 557.341363][ T9669] 8021q: VLANs not supported on nlmon0 [ 557.628688][ T9675] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 557.636623][ T9675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1515'. [ 560.334477][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'. [ 560.452930][ T9711] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1528'. [ 561.099568][ T9729] MPI: mpi too large (109640 bits) [ 561.108327][ T4284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.218154][ T9725] netlink: 'syz.5.1532': attribute type 10 has an invalid length. [ 561.226007][ T9725] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1532'. [ 561.257958][ T4284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.309430][ T9741] netlink: 'syz.2.1536': attribute type 29 has an invalid length. [ 561.432410][ T9741] netlink: 'syz.2.1536': attribute type 29 has an invalid length. [ 561.505306][ T4284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.317749][ T4284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.533989][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1544'. [ 563.646250][ T9766] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1543'. [ 565.163158][ T9776] netlink: 'syz.5.1547': attribute type 10 has an invalid length. [ 565.171001][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1547'. [ 565.252158][ T9784] netlink: 'syz.1.1549': attribute type 29 has an invalid length. [ 565.448952][ T9784] netlink: 'syz.1.1549': attribute type 29 has an invalid length. [ 567.118246][ T9804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 567.125200][ T9804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 567.133747][ T9804] vhci_hcd vhci_hcd.0: Device attached [ 567.139666][ T1325] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 567.206281][ T9822] vhci_hcd: connection closed [ 567.209335][ T154] vhci_hcd: stop threads [ 567.246259][ T154] vhci_hcd: release socket [ 567.250748][ T154] vhci_hcd: disconnect device [ 567.270439][ T9831] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1561'. [ 567.437449][ T1325] usb 6-1: Using ep0 maxpacket: 8 [ 567.439643][ T9838] netlink: 'syz.1.1563': attribute type 29 has an invalid length. [ 567.481528][ T9838] netlink: 'syz.1.1563': attribute type 29 has an invalid length. [ 567.567785][ T1325] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 567.751776][ T1325] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 567.780864][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.820864][ T1325] usb 6-1: Product: syz [ 567.843180][ T1325] usb 6-1: Manufacturer: syz [ 567.872781][ T1325] usb 6-1: SerialNumber: syz [ 567.895250][ T1325] usb 6-1: config 0 descriptor?? [ 567.954221][ T1325] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 568.798644][ T4284] device hsr_slave_0 left promiscuous mode [ 568.825370][ T4284] device hsr_slave_1 left promiscuous mode [ 568.935157][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.989082][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.261575][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.328017][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.336710][ T9833] syz.2.1562 (9833) used greatest stack depth: 18512 bytes left [ 569.454947][ T4284] device bridge_slave_1 left promiscuous mode [ 569.473073][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.502794][ T4284] device bridge_slave_0 left promiscuous mode [ 570.176040][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.300382][ T4284] device veth1_macvtap left promiscuous mode [ 570.319334][ T4284] device veth0_macvtap left promiscuous mode [ 570.330280][ T4284] device veth1_vlan left promiscuous mode [ 570.345557][ T4284] device veth0_vlan left promiscuous mode [ 570.637575][ T7971] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 570.691392][ T9880] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1573'. [ 571.598812][ T1325] gspca_zc3xx: reg_r err -110 [ 571.698696][ T7971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.720183][ T7971] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 571.745770][ T7971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.775876][ T7971] usb 4-1: config 0 descriptor?? [ 571.782535][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 571.808709][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 571.843719][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.866083][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.051523][ T4284] bond0 (unregistering): Released all slaves [ 572.140585][ T7971] usbhid 4-1:0.0: can't add hid device: -71 [ 572.153385][ T7971] usbhid: probe of 4-1:0.0 failed with error -71 [ 572.220206][ T7971] usb 4-1: USB disconnect, device number 8 [ 572.303048][ T1325] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 572.310401][ T1325] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 [ 572.409755][ T1325] usb 6-1: USB disconnect, device number 13 [ 572.804742][ T7971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 573.267729][ T7971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.295691][ T7971] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 573.417732][ T7971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.454183][ T7971] usb 4-1: config 0 descriptor?? [ 573.625128][ T7971] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 573.657562][ T7971] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 573.745265][ T7971] usb 4-1: USB disconnect, device number 9 [ 573.765891][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 575.973962][ T8141] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 576.454614][ T8141] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.594883][ T8141] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 576.734215][ T8141] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 576.784236][ T8141] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 576.836396][ T8141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.958335][ T8141] hub 6-1:1.0: bad descriptor, ignoring hub [ 576.966150][ T8141] hub: probe of 6-1:1.0 failed with error -5 [ 577.113943][ T8141] cdc_wdm 6-1:1.0: skipping garbage [ 577.803252][ T8141] cdc_wdm 6-1:1.0: skipping garbage [ 577.808843][ T8141] cdc_wdm 6-1:1.0: skipping garbage [ 577.814333][ T8141] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 577.917132][ T8141] usb 6-1: USB disconnect, device number 14 [ 579.087742][ T9987] tipc: Enabling of bearer rejected, failed to enable media [ 581.016216][T10015] tipc: Started in network mode [ 581.021206][T10015] tipc: Node identity 127902d9802e, cluster identity 4711 [ 581.130528][T10015] tipc: Enabled bearer , priority 0 [ 581.215727][T10023] device syzkaller0 entered promiscuous mode [ 582.165585][T10034] tipc: Resetting bearer [ 582.226246][T10034] tipc: Disabling bearer [ 585.339518][ T1325] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 585.850911][ T1325] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 585.892181][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.925219][ T1325] usb 6-1: config 0 descriptor?? [ 585.981689][ T1325] cp210x 6-1:0.0: cp210x converter detected [ 586.456367][ T1325] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 586.488214][ T2304] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 586.511288][ T1325] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 586.533417][ T1325] usb 6-1: cp210x converter now attached to ttyUSB0 [ 586.829451][ T2304] usb 3-1: Using ep0 maxpacket: 32 [ 586.845192][ T7971] usb 6-1: USB disconnect, device number 15 [ 586.857268][ T7971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 586.888082][ T7971] cp210x 6-1:0.0: device disconnected [ 587.593507][ T2304] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 587.612106][ T2304] usb 3-1: config 0 has no interface number 0 [ 587.707108][ T2304] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.762594][ T2304] usb 3-1: config 0 interface 85 has no altsetting 0 [ 587.973100][ T2304] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 588.078237][ T2304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.087506][T10136] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 588.130371][T10136] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 588.141940][ T2304] usb 3-1: Product: syz [ 588.150018][ T2304] usb 3-1: Manufacturer: syz [ 588.173726][ T2304] usb 3-1: SerialNumber: syz [ 588.212184][ T2304] usb 3-1: config 0 descriptor?? [ 588.530690][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 589.191429][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.428286][ T2304] appletouch 3-1:0.85: Geyser mode initialized. [ 589.450009][ T2304] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input9 [ 589.679432][ T7971] usb 3-1: USB disconnect, device number 9 [ 589.685353][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 590.619060][ T7971] appletouch 3-1:0.85: input: appletouch disconnected [ 596.923746][ T4306] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 596.972157][ T2304] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 597.183760][ T4306] usb 6-1: Using ep0 maxpacket: 16 [ 597.324765][ T4306] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.356922][ T4306] usb 6-1: config 0 has no interfaces? [ 597.381432][ T2304] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 597.402791][ T2304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.522853][ T2304] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 597.547781][ T2304] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 597.568337][ T2304] usb 3-1: Manufacturer: syz [ 597.574289][ T4306] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 597.575250][ T2304] usb 3-1: config 0 descriptor?? [ 597.599187][ T4306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.626670][ T4306] usb 6-1: Product: syz [ 597.631336][ T4306] usb 6-1: Manufacturer: syz [ 597.635957][ T4306] usb 6-1: SerialNumber: syz [ 597.658748][ T4306] usb 6-1: config 0 descriptor?? [ 597.689354][ T4207] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 597.699902][ T4207] CPU: 0 PID: 4207 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 597.707471][ T4207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.717539][ T4207] Workqueue: hci0 hci_rx_work [ 597.722371][ T4207] Call Trace: [ 597.725649][ T4207] [ 597.728582][ T4207] dump_stack_lvl+0x188/0x250 [ 597.733271][ T4207] ? show_regs_print_info+0x20/0x20 [ 597.738560][ T4207] ? load_image+0x400/0x400 [ 597.743079][ T4207] sysfs_create_dir_ns+0x26a/0x290 [ 597.748311][ T4207] ? sysfs_warn_dup+0xa0/0xa0 [ 597.752987][ T4207] ? process_one_work+0x85f/0x1010 [ 597.758178][ T4207] ? do_raw_spin_unlock+0x11d/0x230 [ 597.763384][ T4207] kobject_add_internal+0x6e0/0xd90 [ 597.768683][ T4207] kobject_add+0x160/0x230 [ 597.773107][ T4207] ? kobject_init+0x1d0/0x1d0 [ 597.777802][ T4207] ? klist_children_get+0x50/0x50 [ 597.782931][ T4207] ? get_device_parent+0x121/0x3f0 [ 597.788052][ T4207] device_add+0x48c/0x1000 [ 597.792473][ T4207] hci_conn_add_sysfs+0xd1/0x1e0 [ 597.797478][ T4207] le_conn_complete_evt+0xc4b/0x15c0 [ 597.802755][ T4207] ? cs_le_create_conn+0x5e0/0x5e0 [ 597.807853][ T4207] ? __mutex_trylock_common+0x155/0x260 [ 597.813394][ T4207] hci_le_meta_evt+0xd62/0x3cb0 [ 597.818230][ T4207] ? hci_event_packet+0x37e/0x1370 [ 597.823324][ T4207] ? __lock_acquire+0x7d10/0x7d10 [ 597.828342][ T4207] ? hci_remote_host_features_evt+0x290/0x290 [ 597.834396][ T4207] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 597.840015][ T4207] ? mark_lock+0x94/0x320 [ 597.844325][ T4207] ? mutex_unlock+0x10/0x10 [ 597.848813][ T4207] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 597.854781][ T4207] ? lock_chain_count+0x20/0x20 [ 597.859616][ T4207] ? __rwlock_init+0x140/0x140 [ 597.864366][ T4207] hci_event_packet+0xe4b/0x1370 [ 597.869288][ T4207] ? lockdep_hardirqs_on+0x94/0x140 [ 597.874477][ T4207] ? rcu_lock_release+0x20/0x20 [ 597.879317][ T4207] ? hci_send_to_monitor+0x9c/0x4a0 [ 597.884500][ T4207] hci_rx_work+0x255/0xa10 [ 597.888917][ T4207] process_one_work+0x85f/0x1010 [ 597.893849][ T4207] ? worker_detach_from_pool+0x240/0x240 [ 597.899465][ T4207] ? lockdep_hardirqs_off+0x70/0x100 [ 597.904737][ T4207] ? _raw_spin_lock_irq+0xb7/0xf0 [ 597.909746][ T4207] ? _raw_spin_lock_irqsave+0x100/0x100 [ 597.915274][ T4207] ? wq_worker_running+0x97/0x170 [ 597.920281][ T4207] worker_thread+0xaa6/0x1290 [ 597.924950][ T4207] ? lockdep_hardirqs_on+0x94/0x140 [ 597.930135][ T4207] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 597.936015][ T4207] kthread+0x436/0x520 [ 597.940136][ T4207] ? rcu_lock_release+0x20/0x20 [ 597.944968][ T4207] ? kthread_blkcg+0xd0/0xd0 [ 597.949542][ T4207] ret_from_fork+0x1f/0x30 [ 597.953978][ T4207] [ 597.958026][ T4207] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 597.974636][ T4207] Bluetooth: hci0: failed to register connection device [ 597.996509][ T2304] rc_core: IR keymap rc-hauppauge not found [ 598.002461][ T2304] Registered IR keymap rc-empty [ 598.018932][ T2304] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 598.030880][ T2304] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 598.104979][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 598.165808][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1659'. [ 598.179620][T10283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 598.189797][T10283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 598.208851][ T2304] usb 3-1: USB disconnect, device number 10 [ 598.244273][T10283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 598.316226][T10287] tipc: Enabled bearer , priority 0 [ 598.331186][T10248] device syzkaller0 entered promiscuous mode [ 598.392644][T10248] tipc: Resetting bearer [ 598.408866][ T4306] usb 6-1: USB disconnect, device number 16 [ 598.439106][T10247] tipc: Resetting bearer [ 598.466285][T10247] tipc: Disabling bearer [ 600.595483][T10328] input: syz0 as /devices/virtual/input/input11 [ 602.342061][ T4306] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 602.634583][ T4306] usb 4-1: Using ep0 maxpacket: 32 [ 602.783533][ T4306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.927212][ T4306] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 602.938178][ T4306] usb 4-1: can't read configurations, error -71 [ 607.090409][ T7971] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 607.336391][ T7971] usb 4-1: Using ep0 maxpacket: 32 [ 607.377569][ T7971] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 607.469809][ T7971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 607.477847][ T7971] usb 4-1: config 0 has no interface number 0 [ 607.505012][ T7971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 607.539460][ T7971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 607.639188][ T7971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 607.682075][ T7971] usb 4-1: config 0 has no interface number 0 [ 607.695286][ T7971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 607.741788][ T7971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 607.839466][ T7971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 607.862505][ T7971] usb 4-1: config 0 has no interface number 0 [ 607.905798][ T7971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.461332][ T7971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 608.625689][ T7971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 608.647100][ T7971] usb 4-1: config 0 has no interface number 0 [ 608.660326][ T7971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.670380][ T7971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 608.757712][ T7971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 608.786081][ T7971] usb 4-1: config 0 has no interface number 0 [ 608.945137][ T7971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.144573][ T7971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.421221][ T7971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.445451][ T7971] usb 4-1: config 0 has no interface number 0 [ 609.480386][ T7971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.513821][ T7971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.705136][ T7971] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.713180][ T7971] usb 4-1: config 0 has no interface number 0 [ 609.758876][ T7971] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.936545][ T7971] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 610.001229][ T7971] usb 4-1: unable to read config index 7 descriptor/start: -71 [ 610.008885][ T7971] usb 4-1: can't read configurations, error -71 [ 612.946486][ T4306] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 613.268793][ T4306] usb 6-1: Using ep0 maxpacket: 16 [ 613.403504][ T4306] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 613.440236][ T4306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.466562][ T4306] usb 6-1: config 0 descriptor?? [ 613.517060][ T4306] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 613.727200][ T4306] usb 6-1: Detected FT232BM [ 613.934183][T10575] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 614.191383][ T4306] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 614.207607][ T4306] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 614.250093][ T4306] usb 6-1: USB disconnect, device number 17 [ 614.307373][ T4306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 614.343478][ T4306] ftdi_sio 6-1:0.0: device disconnected [ 618.488643][ T4306] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 619.865256][ T4306] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.885280][ T4306] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 619.915621][ T4306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.933445][ T4306] usb 6-1: config 0 descriptor?? [ 620.005369][ T4306] pwc: Askey VC010 type 2 USB webcam detected. [ 620.453481][ T4306] pwc: recv_control_msg error -32 req 02 val 2b00 [ 620.515304][ T4306] pwc: recv_control_msg error -32 req 02 val 2700 [ 620.579135][ T4306] pwc: recv_control_msg error -32 req 02 val 2c00 [ 620.641313][ T4306] pwc: recv_control_msg error -32 req 04 val 1000 [ 620.711770][ T4306] pwc: recv_control_msg error -32 req 04 val 1300 [ 620.777916][ T4306] pwc: recv_control_msg error -32 req 04 val 1400 [ 620.840747][ T4306] pwc: recv_control_msg error -32 req 02 val 2000 [ 620.882723][ T4306] pwc: recv_control_msg error -32 req 02 val 2100 [ 620.935250][ T4306] pwc: recv_control_msg error -32 req 04 val 1500 [ 620.987965][ T4306] pwc: recv_control_msg error -32 req 02 val 2500 [ 621.284379][ T4306] pwc: recv_control_msg error -71 req 02 val 2600 [ 621.326257][ T4306] pwc: recv_control_msg error -71 req 02 val 2900 [ 621.358022][ T4306] pwc: recv_control_msg error -71 req 02 val 2800 [ 621.400299][ T4306] pwc: recv_control_msg error -71 req 04 val 1100 [ 621.438124][ T4306] pwc: recv_control_msg error -71 req 04 val 1200 [ 621.459977][ T4306] pwc: Registered as video103. [ 621.474349][ T4306] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 621.511146][ T4306] usb 6-1: USB disconnect, device number 18 [ 628.417342][T10775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1774'. [ 628.450528][T10775] usb usb8: usbfs: process 10775 (syz.2.1774) did not claim interface 0 before use [ 629.958967][T10779] netlink: 'syz.0.1776': attribute type 10 has an invalid length. [ 629.966994][T10779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1776'. [ 629.976318][T10779] bridge0: port 1(dummy0) entered blocking state [ 629.982665][T10779] bridge0: port 1(dummy0) entered disabled state [ 629.989662][T10779] device dummy0 entered promiscuous mode [ 629.995665][T10779] bridge0: port 1(dummy0) entered blocking state [ 630.002031][T10779] bridge0: port 1(dummy0) entered forwarding state [ 633.190449][T10818] netlink: 'syz.5.1787': attribute type 10 has an invalid length. [ 633.198296][T10818] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1787'. [ 633.577707][ T4306] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 633.967562][ T4306] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 633.989243][ T4306] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.002743][ T4306] usb 6-1: config 0 interface 0 has no altsetting 0 [ 634.009583][ T4306] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 634.019123][ T4306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.036208][ T4306] usb 6-1: config 0 descriptor?? [ 634.054343][T10820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 635.131160][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 635.198745][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 635.213153][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 635.220435][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 635.228133][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 635.235966][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 635.243318][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 635.250871][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 636.100446][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 636.108021][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 636.115483][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 636.180111][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 637.749125][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 637.774835][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 637.808067][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 637.979134][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 637.986687][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 637.993737][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.001562][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.009086][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.016134][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.023634][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.774617][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.782041][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.804652][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.812129][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.819184][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.826599][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.834060][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.842090][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.849141][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.856609][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.864096][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.871136][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.878570][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.886030][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.893066][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.900548][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.907996][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.915038][ T4306] a4tech 0003:09DA:022B.0004: unknown main item tag 0x0 [ 638.935275][ T4306] a4tech 0003:09DA:022B.0004: hidraw0: USB HID v0.20 Device [HID 09da:022b] on usb-dummy_hcd.5-1/input0 [ 638.969036][ T4306] usb 6-1: USB disconnect, device number 19 [ 639.275448][T10854] netlink: 'syz.2.1798': attribute type 10 has an invalid length. [ 639.283538][T10854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1798'. [ 639.593794][T10857] fido_id[10857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 642.494345][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1809'. [ 644.164274][ T4233] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 645.451179][ T4233] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.471125][ T4233] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 645.502343][ T4233] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 645.555629][ T4233] usb 6-1: config 1 interface 1 has no altsetting 0 [ 645.852128][ T4233] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 645.896043][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.955307][ T4233] usb 6-1: Product: syz [ 645.959556][ T4233] usb 6-1: Manufacturer: syz [ 646.036470][ T4233] usb 6-1: can't set config #1, error -71 [ 646.061953][ T4233] usb 6-1: USB disconnect, device number 20 [ 646.502931][ T4233] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 646.816439][ T4233] usb 6-1: Using ep0 maxpacket: 16 [ 646.968464][ T4233] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 647.079705][T10953] device syzkaller0 entered promiscuous mode [ 647.111764][T10953] tipc: Started in network mode [ 647.125132][T10953] tipc: Node identity c24cd4037569, cluster identity 4711 [ 647.169942][T10953] tipc: Enabled bearer , priority 0 [ 647.185021][ T4233] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 647.313578][T10952] tipc: Resetting bearer [ 647.515546][T10952] tipc: Disabling bearer [ 648.053120][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.061196][ T4233] usb 6-1: Product: syz [ 648.069022][ T4233] usb 6-1: Manufacturer: syz [ 648.073880][ T4233] usb 6-1: SerialNumber: syz [ 648.080371][ T4233] r8152-cfgselector 6-1: config 0 descriptor?? [ 648.415618][ T4233] r8152-cfgselector 6-1: Unknown version 0x0000 [ 648.917844][T10967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 649.152978][ T4233] r8152-cfgselector 6-1: Unknown version 0x0000 [ 649.161164][ T4233] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 650.703413][T10987] trusted_key: encrypted_key: insufficient parameters specified [ 650.712640][T10987] netlink: 'syz.2.1839': attribute type 40 has an invalid length. [ 653.528245][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.534601][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.721746][T11039] trusted_key: encrypted_key: insufficient parameters specified [ 655.730433][T11039] netlink: 'syz.2.1851': attribute type 40 has an invalid length. [ 658.330826][T11078] trusted_key: encrypted_key: insufficient parameters specified [ 658.339501][T11078] netlink: 'syz.1.1865': attribute type 40 has an invalid length. [ 662.980039][T11128] trusted_key: encrypted_key: insufficient parameters specified [ 662.988678][T11128] netlink: 'syz.0.1876': attribute type 40 has an invalid length. [ 665.238923][T11152] netlink: 'syz.5.1885': attribute type 29 has an invalid length. [ 665.761875][T11152] netlink: 'syz.5.1885': attribute type 29 has an invalid length. [ 666.919789][T11163] netlink: 'syz.1.1887': attribute type 3 has an invalid length. [ 667.959410][T11178] IPVS: lc: FWM 3 0x00000003 - no destination available [ 668.208859][T11183] trusted_key: encrypted_key: insufficient parameters specified [ 668.217540][T11183] netlink: 'syz.1.1893': attribute type 40 has an invalid length. [ 668.878529][T11196] netlink: 'syz.5.1898': attribute type 29 has an invalid length. [ 668.887886][T11196] netlink: 'syz.5.1898': attribute type 29 has an invalid length. [ 668.925473][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 669.822866][T11205] binder: 11198:11205 ioctl 4018620d 0 returned -22 [ 670.299371][ T4306] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 670.933622][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.970007][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 671.101831][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 671.137789][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 671.208483][ T7] usb 4-1: SerialNumber: syz [ 671.678905][ T4306] usb 3-1: device descriptor read/64, error -71 [ 671.730629][ T7] hub 4-1:1.0: bad descriptor, ignoring hub [ 671.902983][ T7] hub: probe of 4-1:1.0 failed with error -5 [ 671.909984][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 671.913632][T11232] netlink: 'syz.1.1910': attribute type 29 has an invalid length. [ 671.942130][T11232] netlink: 'syz.1.1910': attribute type 29 has an invalid length. [ 671.979157][ T4306] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 672.015074][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1909'. [ 672.598597][ T7] usb 4-1: USB disconnect, device number 14 [ 672.869127][ T4306] usb 3-1: device descriptor read/64, error -71 [ 673.017212][ T4306] usb usb3-port1: attempt power cycle [ 673.536622][ T4306] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 673.699885][ T4306] usb 3-1: device descriptor read/8, error -71 [ 673.908132][ T4404] Bluetooth: (null): Too short H5 packet [ 673.914128][ T4404] Bluetooth: (null): Invalid header checksum [ 673.927986][ T4404] Bluetooth: (null): Invalid header checksum [ 674.094992][ T1237] Bluetooth: (null): Invalid header checksum [ 674.296276][ T1237] Bluetooth: (null): Invalid header checksum [ 674.303416][ T1237] Bluetooth: (null): Invalid header checksum [ 675.569220][T11274] netlink: 'syz.2.1922': attribute type 29 has an invalid length. [ 675.593246][T11274] netlink: 'syz.2.1922': attribute type 29 has an invalid length. [ 677.776601][ T4265] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 678.651434][T11308] tipc: Enabled bearer , priority 0 [ 678.659670][ T4265] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 678.675926][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.676670][T11308] device syzkaller0 entered promiscuous mode [ 678.684162][ T4265] usb 4-1: Product: syz [ 678.695208][ T4265] usb 4-1: Manufacturer: syz [ 678.699903][ T4265] usb 4-1: SerialNumber: syz [ 678.713785][ T4265] usb 4-1: config 0 descriptor?? [ 679.403687][T11318] IPVS: lc: FWM 3 0x00000003 - no destination available [ 679.423439][T11320] netlink: 'syz.2.1935': attribute type 29 has an invalid length. [ 679.456801][T11320] netlink: 'syz.2.1935': attribute type 29 has an invalid length. [ 679.627307][T11323] tipc: Resetting bearer [ 679.696353][T11307] tipc: Resetting bearer [ 679.704741][T11307] tipc: Disabling bearer [ 680.753140][ T4265] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 680.761810][ T4265] usb 4-1: Firmware version (0.0) predates our first public release. [ 680.770161][ T4265] usb 4-1: Please update to version 0.2 or newer [ 680.794280][ T4265] usb 4-1: atusb_probe: initialization failed, error = -71 [ 680.875410][ T4265] atusb: probe of 4-1:0.0 failed with error -71 [ 681.070277][ T4265] usb 4-1: USB disconnect, device number 15 [ 682.633931][T11354] netlink: 'syz.2.1946': attribute type 29 has an invalid length. [ 682.645622][T11354] netlink: 'syz.2.1946': attribute type 29 has an invalid length. [ 683.273024][T11363] IPVS: lc: FWM 3 0x00000003 - no destination available [ 684.393986][T11378] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1952'. [ 684.406183][T11378] bridge0: port 3(dummy0) entered disabled state [ 684.412648][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.419902][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.779940][T11410] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 686.876393][T11410] netlink: 'syz.1.1961': attribute type 29 has an invalid length. [ 687.871831][ T2304] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 687.883393][T11399] [ 687.885764][T11399] ====================================================== [ 687.892777][T11399] WARNING: possible circular locking dependency detected [ 687.899819][T11399] syzkaller #0 Not tainted [ 687.904230][T11399] ------------------------------------------------------ [ 687.911242][T11399] syz.3.1959/11399 is trying to acquire lock: [ 687.917303][T11399] ffff8880788d1028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 687.928366][T11399] [ 687.928366][T11399] but task is already holding lock: [ 687.935730][T11399] ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 687.945526][T11399] [ 687.945526][T11399] which lock already depends on the new lock. [ 687.945526][T11399] [ 687.955935][T11399] [ 687.955935][T11399] the existing dependency chain (in reverse order) is: [ 687.964956][T11399] [ 687.964956][T11399] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 687.972974][T11399] __mutex_lock_common+0x1e3/0x2400 [ 687.978711][T11399] mutex_lock_nested+0x17/0x20 [ 687.984017][T11399] rfkill_register+0x33/0x980 [ 687.989317][T11399] hci_register_dev+0x452/0x970 [ 687.994678][T11399] vhci_create_device+0x32c/0x5c0 [ 688.000376][T11399] vhci_write+0x391/0x450 [ 688.005210][T11399] vfs_write+0x745/0xd60 [ 688.010016][T11399] ksys_write+0x152/0x260 [ 688.014847][T11399] do_syscall_64+0x4c/0xa0 [ 688.019772][T11399] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 688.026188][T11399] [ 688.026188][T11399] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 688.033978][T11399] __mutex_lock_common+0x1e3/0x2400 [ 688.039683][T11399] mutex_lock_nested+0x17/0x20 [ 688.044970][T11399] vhci_send_frame+0x88/0x100 [ 688.050169][T11399] hci_send_frame+0x1a9/0x2e0 [ 688.055364][T11399] hci_tx_work+0x9f9/0x1710 [ 688.060371][T11399] process_one_work+0x85f/0x1010 [ 688.065817][T11399] worker_thread+0xaa6/0x1290 [ 688.070998][T11399] kthread+0x436/0x520 [ 688.075566][T11399] ret_from_fork+0x1f/0x30 [ 688.080489][T11399] [ 688.080489][T11399] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 688.089667][T11399] __flush_work+0x116/0x210 [ 688.094670][T11399] hci_dev_do_open+0xc58/0x1270 [ 688.100020][T11399] hci_power_on+0x1c1/0x610 [ 688.105026][T11399] process_one_work+0x85f/0x1010 [ 688.110464][T11399] worker_thread+0xaa6/0x1290 [ 688.115639][T11399] kthread+0x436/0x520 [ 688.120207][T11399] ret_from_fork+0x1f/0x30 [ 688.125134][T11399] [ 688.125134][T11399] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 688.132781][T11399] __mutex_lock_common+0x1e3/0x2400 [ 688.138484][T11399] mutex_lock_nested+0x17/0x20 [ 688.143754][T11399] bg_scan_update+0x44/0x3b0 [ 688.148934][T11399] process_one_work+0x85f/0x1010 [ 688.154375][T11399] worker_thread+0xaa6/0x1290 [ 688.159552][T11399] kthread+0x436/0x520 [ 688.164119][T11399] ret_from_fork+0x1f/0x30 [ 688.169041][T11399] [ 688.169041][T11399] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 688.178834][T11399] __lock_acquire+0x2c42/0x7d10 [ 688.184213][T11399] lock_acquire+0x19e/0x400 [ 688.189255][T11399] __flush_work+0x116/0x210 [ 688.194271][T11399] __cancel_work_timer+0x3f4/0x560 [ 688.199878][T11399] hci_request_cancel_all+0xcc/0x300 [ 688.205683][T11399] hci_dev_do_close+0x4e/0x1030 [ 688.211041][T11399] hci_rfkill_set_block+0x10a/0x190 [ 688.216739][T11399] rfkill_set_block+0x1c9/0x3d0 [ 688.222088][T11399] rfkill_fop_write+0x452/0x560 [ 688.227433][T11399] vfs_write+0x30b/0xd60 [ 688.232171][T11399] ksys_write+0x152/0x260 [ 688.236996][T11399] do_syscall_64+0x4c/0xa0 [ 688.241910][T11399] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 688.248304][T11399] [ 688.248304][T11399] other info that might help us debug this: [ 688.248304][T11399] [ 688.258506][T11399] Chain exists of: [ 688.258506][T11399] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 688.258506][T11399] [ 688.274198][T11399] Possible unsafe locking scenario: [ 688.274198][T11399] [ 688.281653][T11399] CPU0 CPU1 [ 688.287005][T11399] ---- ---- [ 688.292343][T11399] lock(rfkill_global_mutex); [ 688.297107][T11399] lock(&data->open_mutex); [ 688.304190][T11399] lock(rfkill_global_mutex); [ 688.311448][T11399] lock((work_completion)(&hdev->bg_scan_update)); [ 688.318008][T11399] [ 688.318008][T11399] *** DEADLOCK *** [ 688.318008][T11399] [ 688.326125][T11399] 1 lock held by syz.3.1959/11399: [ 688.331211][T11399] #0: ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 688.341269][T11399] [ 688.341269][T11399] stack backtrace: [ 688.347133][T11399] CPU: 0 PID: 11399 Comm: syz.3.1959 Not tainted syzkaller #0 [ 688.354565][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.364607][T11399] Call Trace: [ 688.367868][T11399] [ 688.370779][T11399] dump_stack_lvl+0x188/0x250 [ 688.375432][T11399] ? load_image+0x400/0x400 [ 688.379911][T11399] ? show_regs_print_info+0x20/0x20 [ 688.385087][T11399] ? print_circular_bug+0x12b/0x1a0 [ 688.390261][T11399] check_noncircular+0x296/0x330 [ 688.395178][T11399] ? add_chain_block+0x940/0x940 [ 688.400088][T11399] ? lockdep_lock+0xf1/0x1f0 [ 688.404657][T11399] ? __lock_acquire+0x12e8/0x7d10 [ 688.409658][T11399] ? mark_lock+0x94/0x320 [ 688.413962][T11399] __lock_acquire+0x2c42/0x7d10 [ 688.418796][T11399] ? verify_lock_unused+0x140/0x140 [ 688.423973][T11399] ? mark_lock+0x94/0x320 [ 688.428288][T11399] lock_acquire+0x19e/0x400 [ 688.432768][T11399] ? __flush_work+0xfa/0x210 [ 688.437337][T11399] ? __lock_acquire+0x7d10/0x7d10 [ 688.442469][T11399] ? read_lock_is_recursive+0x10/0x10 [ 688.447838][T11399] ? start_flush_work+0x776/0x820 [ 688.452853][T11399] __flush_work+0x116/0x210 [ 688.457342][T11399] ? __flush_work+0xfa/0x210 [ 688.461911][T11399] ? flush_work+0x20/0x20 [ 688.466218][T11399] ? try_to_grab_pending+0xfa/0x7f0 [ 688.471394][T11399] ? mark_lock+0x94/0x320 [ 688.475725][T11399] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 688.481684][T11399] ? lock_chain_count+0x20/0x20 [ 688.486516][T11399] ? mark_lock+0x94/0x320 [ 688.490943][T11399] ? __cancel_work_timer+0x36a/0x560 [ 688.496218][T11399] __cancel_work_timer+0x3f4/0x560 [ 688.501311][T11399] ? cancel_work_sync+0x20/0x20 [ 688.506140][T11399] ? __cancel_work+0x1f9/0x2e0 [ 688.510882][T11399] ? lockdep_hardirqs_on+0x94/0x140 [ 688.516060][T11399] ? __cancel_work+0x27b/0x2e0 [ 688.520800][T11399] ? cancel_work+0x20/0x20 [ 688.525194][T11399] ? lock_chain_count+0x20/0x20 [ 688.530026][T11399] hci_request_cancel_all+0xcc/0x300 [ 688.535289][T11399] hci_dev_do_close+0x4e/0x1030 [ 688.540118][T11399] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 688.545987][T11399] ? _raw_spin_unlock+0x40/0x40 [ 688.550814][T11399] hci_rfkill_set_block+0x10a/0x190 [ 688.555998][T11399] ? rcu_lock_release+0x20/0x20 [ 688.560837][T11399] rfkill_set_block+0x1c9/0x3d0 [ 688.565671][T11399] rfkill_fop_write+0x452/0x560 [ 688.570501][T11399] ? rfkill_fop_read+0x520/0x520 [ 688.575414][T11399] ? common_file_perm+0xb0/0x1c0 [ 688.580427][T11399] ? fsnotify_perm+0x5d/0x560 [ 688.585143][T11399] ? security_file_permission+0x75/0xa0 [ 688.590670][T11399] ? rfkill_fop_read+0x520/0x520 [ 688.595587][T11399] vfs_write+0x30b/0xd60 [ 688.599815][T11399] ? file_end_write+0x250/0x250 [ 688.604643][T11399] ? __fget_files+0x40f/0x480 [ 688.609319][T11399] ? __fdget_pos+0x1e2/0x370 [ 688.613904][T11399] ? ksys_write+0x71/0x260 [ 688.618296][T11399] ksys_write+0x152/0x260 [ 688.622601][T11399] ? __ia32_sys_read+0x80/0x80 [ 688.627346][T11399] ? lockdep_hardirqs_on+0x94/0x140 [ 688.632521][T11399] do_syscall_64+0x4c/0xa0 [ 688.636914][T11399] ? clear_bhb_loop+0x30/0x80 [ 688.641567][T11399] ? clear_bhb_loop+0x30/0x80 [ 688.646245][T11399] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 688.652230][T11399] RIP: 0033:0x7f3756ebbe59 [ 688.656649][T11399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.676242][T11399] RSP: 002b:00007f3755115028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.684641][T11399] RAX: ffffffffffffffda RBX: 00007f3757134fa0 RCX: 00007f3756ebbe59 [ 688.692597][T11399] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 688.700547][T11399] RBP: 00007f3756f51d6f R08: 0000000000000000 R09: 0000000000000000 [ 688.708496][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.716443][T11399] R13: 00007f3757135038 R14: 00007f3757134fa0 R15: 00007ffeb13f7298 [ 688.724401][T11399] [ 688.729672][ T4306] Bluetooth: hci4: command 0x0409 tx timeout [ 689.189617][ T2304] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 689.197828][ T2304] usb 6-1: config 0 has no interface number 0 [ 689.410992][ T2304] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 689.420063][ T2304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.428351][ T2304] usb 6-1: Product: syz [ 689.433454][ T2304] usb 6-1: Manufacturer: syz [ 689.438030][ T2304] usb 6-1: SerialNumber: syz [ 689.443981][ T2304] usb 6-1: config 0 descriptor?? [ 690.408525][ T2304] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 690.418656][ T2304] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 690.429160][ T2304] asix: probe of 6-1:0.251 failed with error -71 [ 690.437327][ T2304] usb 6-1: USB disconnect, device number 22