last executing test programs: 9m36.952200303s ago: executing program 4 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20048844) 9m35.838260373s ago: executing program 4 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x90) 9m35.259006721s ago: executing program 4 (id=706): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 9m34.003225887s ago: executing program 4 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1", 0x79}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x10007fff}], 0x1, 0x2101, 0x0) 9m32.152782819s ago: executing program 4 (id=721): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)={[0x0]}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 9m30.553993223s ago: executing program 4 (id=724): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 9m15.470649736s ago: executing program 32 (id=724): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1m23.786382972s ago: executing program 0 (id=2097): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 1m22.931792977s ago: executing program 0 (id=2101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000800000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f0000000000000800000000000000010003"], 0xc4}}, 0x8044) 1m22.771157166s ago: executing program 0 (id=2105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000801}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r4, 0x4) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) 1m21.847643525s ago: executing program 0 (id=2106): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1m19.954927646s ago: executing program 0 (id=2111): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1m19.570342956s ago: executing program 0 (id=2112): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m4.229025859s ago: executing program 33 (id=2112): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 17.092804221s ago: executing program 6 (id=2269): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x191c) 12.987393984s ago: executing program 6 (id=2280): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x9, 0x100, 0x3, {0xf, 0xfdfffe00, 0x20000009, 0x4}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x56, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) semtimedop(0x0, &(0x7f0000000180)=[{0x2, 0x5, 0x1000}], 0x1f4, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 12.496906887s ago: executing program 3 (id=2282): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000002b40)={0x2020}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, 0x0) 9.348038665s ago: executing program 5 (id=2288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0xb49, 0x19, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x5, 0x300) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$isdn(0x22, 0x3, 0x4) syz_open_dev$amidi(&(0x7f0000000200), 0xdda, 0x484042) 9.194754235s ago: executing program 6 (id=2290): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x191c) 7.145341704s ago: executing program 3 (id=2293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c0000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000800000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a00100001"], 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xfffffff5, @local, 0x9}, 0x1c) 6.884301508s ago: executing program 3 (id=2295): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000500)={0x0, 0xac26, 0x0, 0x0, 0x40008333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.702397955s ago: executing program 1 (id=2296): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0xff1f, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000001a40)={{r4}, "d22d928b74f7d70cbf8c33da5dff79d39108c0cc17d150675d7f7ce88d30be12e9e97a672202ea9965fa2f1ea99fc26da7b47d8c8139f8e3e53d2ed706368cf07086b4a4f0cff0b468162e0043de5ace7c589a7f491bc29f71a349c27be7fa4b72ab2bf642ff1932490d4c0928b7b7b198d79c07979361bf96fdc7e37400e8bdb97bc767619e6cf1fc54cd939749051dbf75e4585df7cc7354e389dc76e72b882d537497cb116e694a148688fff098bf9ad930586cc5861e2f1e81227739dd9c301e4e841e747dab779beefb29aca92ee8498c4feeb9378a79d80df354806a046068493e8cec4731095359e51de75ff5dd0d587e766e41abb07935673429b1a50ca189d7757f0eab178949fe0a950d6992c7cc442860498756e18daf9e09e2c40ae4f602b0317e584fecae048e0692c7f36819dc92333f543218ecd1c2428e88ba82f93ec61e987e1a05c439b592e30aeae633a8478dd3495e39906f3b23ea09a271b3e3268eba79af70915aa9ad1ee01bef950a07ca3e5db2f16aaa36b9236bf19048fd0cedb3b27d83b1e3eaa005cfc9418c7a66de298b8da0bf6534583c3be1e21f1d5abcf8a9a5c05a6d435ff7fb83c90de7efa9239f4bd1683b8af79829fbc70d69b66096805d0adeac34fc7d2af9fb0d667806d74dc76d97e5567e76c5308dc7d7275f6952f544fa42afb333a1376904d02af7e02fa745cd65ebe3fe1ca6e056ae03c6ba0f2c632a2081ac18d837c0fb7b78a8209becb5c7e1ff8345dc5cdfe749456b6dddb5d517f2687e33cac4f4d2da2f9b4b9c761e2e8d53a746aee370e16f349b002299ef61f45cbb7697027167e00a866ad300a78e16173f69b5387c71a89f1f9a92d69113ed6eb5f77b11633ecab476f618f82c591f8a68c008c99657b80cf264a457e10f1449f827cb206e1dc93604d099f0ac5bb71a779175557ee67d4a569392a1bba002438f27b9947c6169381c5b6a4def83d5543dab69a7afc050e608dc6dad98da90f341a8300098cfa4fc171f2d7d24ee52ac1db936a6c0626f04e5f7d4a194012e2f5b9b363b14e625cff3d3bd357f21712ada3c60f4ac01cfe299602a432ecdcd5684a299f6d638c27389e5ea2dae86a2595f4949f7854419eff5539737dab0f18ea9b12e25e82ed6027cf6e6b6c2c86b73d28293330e335ec676cc54efd0034c75b29d24bc3cee58de7646b09bcf57951d0e6183398b48dd601932825d4aa698ab24a8fb7d04c19908e9a7f0746341b1f7517901600865eefb33cf4504a730e8251d30b370e372eaec4c4796bc44b2d257d881e14d19ade4e7cf83ea9eb4e5104afe817b5b89262e0a1da0f1cb322adc262d98ca2b485f88f7f3950bdade492d83731dc6593db9c71a25658e5f1843104a16ac9ac14896dc91b0ca9db02e08d8f3b2ec8378323ac84d2e71847460f935876c977d195a3240e2c79d797e90ed64d121d6c0290193f0790639acfcac6a57c4eead9e600340ee220a0942f50c5aba9ed68a424405ebbd1fc7421b05cec0076f046ee1bcecbf56366cceec2bb104771fa673b9fd37de5d55a6a6749abd35ef2f74cf440512eaf11f99857214c6efd94235e799443406c18580b51e37252ba61bf00004da654d060575c65cc68b56a92f2b1b3df632e2958a47d04663333584906ccb14235253a685ec6ee1861e380f8ece6f8353b5fab76a52a384922dcafd4fb3b4b9f8cc32c64da4b07782de1f99911da9aa2d691214ffed0c8e3834fdd496437be75cb0f5c6ba7ec9bd706e2c8d0971e2cd09de12cce06249ba4a0be6224f842742015fb0841fe0c0124015633dc5af252cf97ac46b5d3d31eb68016542a17c8b7d6fe9517af95673e645d73d5d996d1fad3630a83c0642388667e35f07d7580d3003a674f0a2179be4af06fdef620a3aaaf6a2118f49092a046b4d222e525b066865fe07c1f7b6d1eaa2688a8b73d20dc51a3dd55e7a0483b3209a6848388c7fde1f884ef6b6d918ecf9e816b94fcc1e26ed093b5082fb5c7c1e8ef7ca7cb2be4e4b2990a90c569cbf16677fab362e91885011aa311ccb9c0ab0ddb4561df051a90f9c925ad19cd400ce38c57521f8ae31beb9663ab0f49525dac38f16ea0a1f09b293580e47ce331035691c23f1c6f7eccacf9ae11302158501224183658a522fe6b6c2fa9c644ce86e301c3120d10083cc288ebaa2bfd18b456bf1896b5d7950745903bb5ef2490ccab12ee9b5bf43e4ba29b16c9f5ee5d2fe88e887744608e0f6cc0c39edd0e0e8b56fbc52bac4dc86633e6ec21e139c0f44a93c855bfa87530528e3f357e782a89458b1f350291c2f69f9ef81c73062cd960dc04f7921706ec85a2cf869844678bf7b55071fc3cfc3e40b466ebdf9f41dbbb9ef85bebdaeda13ad5f72bd50e7882d22061771ef6cbc862a87e650b2ca367d4b57ae1f0672969a3b03cacba23eb0d19fb6f78c058995de165d17da87bb0c25f9dee16622fd89960cbf6bb076505bb0316dbf410648153b9528e255171496446bedad8fbdda1a3f1e7520cd81e39ba43a32cf51d50ea6e4e06e2d4c3fe8df15392d6ce4d58af850feeedc5f5337546a640482a61407a7ba866d02a96b808240c885c42c31a6a095b0ef6beb681b55412b16f1f8561311bf0999ed9c368b2af49c920bd7e107dde613c38ea2df26dc25a8e70134812781cec994403188d3eaa9fa9a5370dca68b19bb73e8d73b16a8a5d36a59bc99cfa79e7097323aa10bae5b1f832c5f2cf3d26a59fbe88559dda423b9a95290f968a57d253ca97be75453d5505159727757d2ba8deb7f9c229c6d9e08d7cb812ccb8dd36f9a7ece4e565e4b39e8ef830be4a81e2c0d13f1f274b4f43bb32eae8549eb92d25c42660df36feaa8fbe9710055933fcc3f3439f1d72afec31624db21452b2ce95092eb6a8c9478589150bfa37f1e42773b40ca213fb618dbaf4f64920648b1b6399ed0f4781218f97bef8dc61dba3a1394b4d0dd7cb6eb5deb768b231d716f3092036e00ee1d7882ae7b7c4b86fac882033651e81ef95a11cdb3ddd765d30574ce654e746b6b471632525fadd29bdad285f3337b959d9cd7e35012b4c161b4ca281346bd0e15318d5bdf9fc579c574abaa84031a8ac01e18723df03cb25710d91b1afc2169224e603e054d184d6dce61199390fe8fe9ab8744a2838ea7c1cba90eb2affff0337b5f5751ecf29a94e8ff67040215c715daa04107b252cfc8b3649bcb0de5102f6ee4c171ec5d605c98f1441a924e952191f1bf6cd9ddbcdbbdc7b38fe7042854765572352a4db7df672fb31b35291a5d342f4f1d5548395d359f8e16c7852e65b0f6bc1572621c9d557122e9152150294385b8bdf6d5db595063f6eacce573c021d80a7b33663e5c8fe5506084529c9258aa5200508bf16bda36af507539c83333887db18867d0b5d2f4502db985c9d5d04c99d96667558d2247d42f5eb4fdd665219c1081b9545612a436137b62135040477f5435b3d639cf0e9846bb8e457f5db024491ff719986ad367befa23fd8eca35627387749a1b3762a24b1c64e938e346dab57e2a1ac07d3f91e6edc5a79507e5b814eabb9939058032a2a50dc323355ecca133a6243921af4d2024ea8a34e81836526a5402dd81d59ac001e7a16b72e34b32e431af7769a9464fb18472c75c4d20f362f6db8a4f02ad826a8b8866971c1ed22939f1578a42b380083b3a22a163256b9abb4dae70b2b388f708903ad13f6e2abd4c691b268f972fdca30f728337fce59c79926b46df783cca11e615ebe9fa11a3cfa934e216767a71b5f0e00fe2d7e2448fb0816c0b9321223297e1ce4b3c279f84218fa0b7fca40cda6ae833519827349f2ac487a4a7a4146a808bd2eec2fba0bcad9ebbd244e92fd988a0902a64012184cb1f0d3939b532658f45a4fc87c1215a0f74eebc55d5c6b2018510c697ed69408bcf8ba552d8a3fcdbd82263c458d964810ee5b00535bd30cee23ba79bbddde6fd35133dca4a428d0cd894271e836bb7c1d03e9a692bbf90d04df2b686cec18cf27b21785bf54ea1b8ed26b49f0ce5fd8ac38ab706b09731a16306d823d125f802a4bc250ec066196ba90663d511c8fb17e69fb5cc46d78c2a222b91ac47087a2827e2d91f7f3404f886c7f66c26335359f99bfafbad66e56e1b443a07505adc2dded3712c3eff9f1aa1d7ccf84944602c05f38ef5a842725cdb66870832fc7ade72f297a2c889809a8bc13ecccc8d72fcbaa9d8042cf7b0fdd83625ef1386922888d56b22ba23f80dbb280edcec68f13a9d145d67f33bfc3a60913ed5ee2876e732bcc2ebb389c48866a7add618a6be969e73c1b9ce3bb74c1b1fa1b7fa0cb09d501c7df7c0c402b02b935ff0bbb5f67f68097afbc46e401bd70df69aa5f705d3f832e1e6858fa8c9b494cd6b05f8db4d70bbb35e49bbf637bfd3dfc989c77f369043bd59acbd5b55d6c1d37957774a3224540a4632abf04d54c23db64065cbd899bb3a75cd2e78f89c0676c39178b8f291d02829d103a6cc55d3e7eace1c0edea8fc497d6538ee4b0537630d308a4b34b72187f2357a3ac2bb05fc379305920e9cb7a617ecb1d3ad2d1bd4b1c67e669505028ac77e6c99f21ec3bd24694520de439a2114ce3ddec5e8c2313692e330c60b9e4be5946f13d81c9e00f0217b1972a6a9a77e8925d2dd09abce6574734a0588eab867f78df3adbcb73fd40ab8d1821e421b65cd39bb431f0ae29d58b7b94f58236167279a4ca24156f760113f81168da142302e29fd85c0d395b8bb00077ac1b588b6ac37902eda7a2bbbd54584aad8160d8b024596ce59239738a3ed488e1c4148f217dd8c3d907d5c91563e747f45611e5488bfb7c9e27be0c121f8279c17342465345dffc6eb538c45841e6b33130a2c1e7873bb93f30972f4d0cca7d2695f02f91497da5152de5b3432288cf0f1dd2f47584ee5e3c91eda0d008e1d78ae5183edee79dcf5d9bec71cba41a68d78de2109fb83651fb91430e458bd9e19793d95cf7ab4acf90922c981906f100f9a7cca8ae53489b4afe8964a3481a81f66349e4fc1fc82ae4390b40162ef51bcf81f8c81f178287f6efa840c627db48b2cf647475d7e36947944f9f623eadf4224c3451b8a1fa708cb4f32e4c902791e2aea08366b2a645d17fea983e131e73a3684a03b4071c0f7d58751436193dc221e99cfdcc6b992b2eefbda9244538a99ab993809b61a8db8d0f06e18464dbedd89c05ce3c2c8db8ed6d91686b827cb1fcff81aaaf5dd27b35ab8bf913d5f6bdceec66875da6eaa7b66d2d3fcbc4f02381526b9afb770edb0122557b3ab7d5bb144fb2361f3489b3aa506d41a72cc66b734e8c7511b677178fb4f8259957234385da107f20ca14fbaf3a1feff01669c4716c3bbfb0769ffb2306d30f90bdca4c830216eff041ff645baab20294fc79045d70d4b8b0194aaafc918427b7fc98556be82e70bee8a6a46422c1eed51825cf8264d0b16853b431e56ab7b8cd954b0eae070a9da8b9ef7c3a6cb3f5460e3751fc8d169925c3e076d09e5641ef62b376f24eeeb98c9341e7caf155c5cfc3316fa6439ff9d1581fcb1bcd1983249fda2e3bc0c015fa303bcce0ec8518057c8644b7ecbf18b0cc04d9b626b91d186c0a18dd557afc7e2850b012e857494d6c10a43f2fc526bbb703d039efe0b76ea04de1e795e19d18c44ae7e2e6fb6aef120fca0126350ab21aa117db586c7f61399687eeb594efcaf1a2d5dcc8894067701a5484289bf8065c83443c4"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000010400416e0a99036b98a5ffffffffff000000400000000000000000000000001a000000000000000100000000"], 0xc4}}, 0x8044) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 6.667388879s ago: executing program 3 (id=2297): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2e9}], 0x1}}], 0x1, 0x400c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x2000000000b09c, 0x0) 6.551119095s ago: executing program 2 (id=2298): mkdir(&(0x7f0000000300)='./bus\x00', 0x120) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0, 0x1400) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$kcm(0x10, 0x3, 0x10) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6.377216653s ago: executing program 2 (id=2299): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) 5.668932182s ago: executing program 3 (id=2300): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x9, 0x100, 0x3, {0xf, 0xfdfffe00, 0x20000009, 0x4}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x56, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) semtimedop(0x0, &(0x7f0000000180)=[{0x2, 0x5, 0x1000}], 0x1f4, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 5.521023819s ago: executing program 6 (id=2301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002"], 0x0) 5.390589025s ago: executing program 1 (id=2302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 5.334360281s ago: executing program 2 (id=2303): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 5.198113154s ago: executing program 5 (id=2304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setrlimit(0xd, &(0x7f0000000080)={0x3, 0xf}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)="90"}) 5.139037529s ago: executing program 6 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, 0x0, 0x0, 0x1, 0x3000) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000"], 0x8, 0x0) msgrcv(r4, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000180), &(0x7f0000000200), 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) setregid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000}, 0x0, 0x0, 0x64, 0x845, 0x7f, 0x1ff, 0x5, 0x57, 0x6bb, 0x90, r0, r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x64000600) 4.957910543s ago: executing program 1 (id=2306): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00"/155], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000800000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a00100001"], 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xfffffff5, @local, 0x9}, 0x1c) 4.957779635s ago: executing program 5 (id=2307): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000500)={0x0, 0xac26, 0x0, 0x0, 0x40008333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.333678384s ago: executing program 5 (id=2308): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e220000040012000800040000080000"], 0x54}}, 0x0) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd8}, "017cac080f91a39588b9d334787f5bbede229bc710bfe84064342d50f819dcb3aacea8d5edf5ea5dc0fd5600a511a5e8ca030aca7a388754e1e02bcff7b497547fc8bb7df3f74cce86d58cf83087e2f8fe8b0f402f20c34766cfcad832505ebf89ffffc06ad94754c4d7617f5aaddfb0d59a2360fa73bae23d0c06e28d607c329f69f510e9c4fd76397fc031359c8e2489509fc1000efa30dd276ab58825ece31b8f1e8299b592f14a93bdff16d99c4238988216503e9f86324e6b98a616ff87413eabb3859aea66deab6b929dcf9b857cf78b32b6f4c4a1"}, 0xdc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$6lowpan_enable(r9, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f00000cd000/0x1000)=nil, 0x1000, 0x100000f, 0x11, r4, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x44, 0x4}, 0x100, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)) 3.113297654s ago: executing program 1 (id=2309): mkdir(&(0x7f0000000300)='./bus\x00', 0x120) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0, 0x1400) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$kcm(0x10, 0x3, 0x10) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.931067238s ago: executing program 2 (id=2310): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2e9}], 0x1}}], 0x1, 0x400c0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) fadvise64(0xffffffffffffffff, 0xfffffffffffffff8, 0x2000000000b09c, 0x0) 2.565619492s ago: executing program 1 (id=2311): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x191c) 1.785523768s ago: executing program 3 (id=2312): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.607116041s ago: executing program 2 (id=2313): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) 1.485601629s ago: executing program 6 (id=2314): syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.275937365s ago: executing program 2 (id=2315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0xb49, 0x19, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socket$kcm(0x11, 0x5, 0x300) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$isdn(0x22, 0x3, 0x4) syz_open_dev$amidi(&(0x7f0000000200), 0xdda, 0x484042) 362.743542ms ago: executing program 5 (id=2316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x1000000, 0x0}) 42.583825ms ago: executing program 5 (id=2317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 1 (id=2318): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000500)={0x0, 0xac26, 0x0, 0x0, 0x40008333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1 Normal: 183*4kB (UM) 41*8kB (UME) 45*16kB (UME) 142*32kB (UME) 40*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898804kB [ 308.453729][ T7781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.453748][ T7781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.453764][ T7781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.453780][ T7781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.453796][ T7781] 63666 total pagecache pages [ 308.453810][ T7781] 0 pages in swap cache [ 308.453819][ T7781] Free swap = 124996kB [ 308.453828][ T7781] Total swap = 124996kB [ 308.453837][ T7781] 2097051 pages RAM [ 308.453845][ T7781] 0 pages HighMem/MovableOnly [ 308.453854][ T7781] 424695 pages reserved [ 308.453862][ T7781] 0 pages cma reserved [ 316.154285][ T5972] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 316.506532][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 316.568209][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.649021][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.787388][ T5972] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 316.826325][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.853632][ T5972] usb 2-1: config 0 descriptor?? [ 316.870277][ T7968] sd 0:0:1:0: device reset [ 317.058198][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.984230][ T7966] comedi comedi2: reset error (fatal) [ 319.108849][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.643920][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 321.653229][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 322.269061][ T5972] usbhid 2-1:0.0: can't add hid device: -32 [ 322.294549][ T5972] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 323.712495][ T5913] usb 2-1: USB disconnect, device number 6 [ 325.623642][ T8022] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 325.695334][ T8022] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 331.313594][ T8087] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 331.333324][ T8087] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 331.417649][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 332.377819][ T8104] syzkaller0: entered promiscuous mode [ 332.402037][ T8104] syzkaller0: entered allmulticast mode [ 332.814743][ T8117] sd 0:0:1:0: device reset [ 338.730550][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.635'. [ 338.975560][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 340.050635][ T30] audit: type=1326 audit(1755833853.770:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8192 comm="syz.1.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x0 [ 342.539008][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.647'. [ 342.895998][ T30] audit: type=1326 audit(1755833856.620:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.4.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfaaf8ebe9 code=0x0 [ 344.670884][ T8272] tipc: Started in network mode [ 344.678211][ T8272] tipc: Node identity 8, cluster identity 117 [ 344.704391][ T8272] tipc: Node number set to 8 [ 346.270563][ T30] audit: type=1326 audit(1755833859.990:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8294 comm="syz.1.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x0 [ 349.706230][ T8344] gfs2: not a GFS2 filesystem [ 352.042130][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'. [ 353.361074][ T8389] dummy0: entered allmulticast mode [ 354.949920][ T5927] IPVS: starting estimator thread 0... [ 355.055513][ T8407] IPVS: using max 34 ests per chain, 81600 per kthread [ 356.830002][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 360.283724][ T8499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 361.322391][ T8509] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 363.991558][ T8529] tipc: Enabled bearer , priority 0 [ 364.008217][ T8529] tipc: Resetting bearer [ 364.044425][ T8528] tipc: Disabling bearer [ 365.562535][ T5860] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 365.562568][ T5860] Bluetooth: hci4: adv larger than maximum supported [ 365.574301][ T5860] Bluetooth: hci4: Malformed LE Event: 0x0d [ 365.588421][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 370.898593][ T8588] Lens A: ================= START STATUS ================= [ 370.926482][ T8588] Lens A: Focus, Absolute: 0 [ 370.939237][ T8588] Lens A: ================== END STATUS ================== [ 375.254956][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.266476][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.275185][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.285092][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.293383][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.454290][ T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 375.616453][ T55] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.634407][ T55] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.644265][ T55] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.661937][ T55] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 375.671144][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.679219][ T55] usb 1-1: Product: syz [ 375.683686][ T55] usb 1-1: Manufacturer: syz [ 375.688937][ T55] usb 1-1: SerialNumber: syz [ 375.751248][ T8629] chnl_net:caif_netlink_parms(): no params data found [ 375.771065][ T55] hub 1-1:1.0: bad descriptor, ignoring hub [ 375.845130][ T55] hub 1-1:1.0: probe with driver hub failed with error -5 [ 376.220430][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.271242][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.291665][ T55] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 376.736134][ T5962] usb 1-1: USB disconnect, device number 8 [ 376.775890][ T8649] netlink: 76 bytes leftover after parsing attributes in process `syz.2.767'. [ 377.198525][ T8501] Set syz1 is full, maxelem 65536 reached [ 377.224750][ T5962] usblp0: removed [ 377.374457][ T5858] Bluetooth: hci5: command tx timeout [ 377.496913][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.523137][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.551668][ T8629] bridge_slave_0: entered allmulticast mode [ 377.687122][ T8629] bridge_slave_0: entered promiscuous mode [ 377.710846][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.288372][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.295707][ T8629] bridge_slave_1: entered allmulticast mode [ 378.303079][ T8629] bridge_slave_1: entered promiscuous mode [ 378.500857][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.507260][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.644216][ T8629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.238213][ T8629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.454595][ T5858] Bluetooth: hci5: command tx timeout [ 379.456315][ T8629] team0: Port device team_slave_0 added [ 379.527738][ T8629] team0: Port device team_slave_1 added [ 379.576891][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.583874][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.648210][ T8629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.722676][ T8629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.742760][ T8629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.880051][ T8629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.260216][ T5913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 380.441873][ T5913] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 380.589699][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.634646][ T5913] usb 1-1: config 0 descriptor?? [ 380.692905][ T8629] hsr_slave_0: entered promiscuous mode [ 380.724984][ T8629] hsr_slave_1: entered promiscuous mode [ 380.762114][ T8629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.792975][ T8629] Cannot create hsr debugfs directory [ 380.853109][ T5913] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 380.970231][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.064855][ T8684] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 381.117369][ T8690] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 381.131080][ T8684] team0: Port device dummy0 added [ 381.226658][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.489596][ T8690] team0 (unregistering): Port device team_slave_0 removed [ 381.534484][ T8690] team0 (unregistering): Port device team_slave_1 removed [ 381.537657][ T5858] Bluetooth: hci5: command tx timeout [ 381.642886][ T8690] team0 (unregistering): Port device dummy0 removed [ 382.092482][ T8700] netlink: 76 bytes leftover after parsing attributes in process `syz.2.778'. [ 382.798275][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.805487][ T24] usb 1-1: USB disconnect, device number 9 [ 383.517068][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.604238][ T30] audit: type=1326 audit(1755833897.320:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8708 comm="syz.2.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea8058ebe9 code=0x0 [ 383.624321][ T5858] Bluetooth: hci5: command tx timeout [ 384.396131][ T8629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.479280][ T8629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.494961][ T8629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.279169][ T8629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.412707][ T36] bridge_slave_1: left allmulticast mode [ 385.430135][ T36] bridge_slave_1: left promiscuous mode [ 385.449650][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.501414][ T36] bridge_slave_0: left allmulticast mode [ 385.517622][ T36] bridge_slave_0: left promiscuous mode [ 385.635173][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.659568][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.685582][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.710461][ T36] bond0 (unregistering): Released all slaves [ 387.774334][ T5860] Bluetooth: hci5: command 0x0405 tx timeout [ 387.897314][ T36] tipc: Left network mode [ 388.151149][ T8629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.896656][ T8629] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.059343][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.066540][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.127005][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.134252][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.715477][ T8799] ceph: No mds server is up or the cluster is laggy [ 389.733335][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 389.783007][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 390.908342][ T36] hsr_slave_0: left promiscuous mode [ 391.480014][ T36] hsr_slave_1: left promiscuous mode [ 391.615781][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.623276][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.677316][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.700206][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.749592][ T36] veth1_macvtap: left promiscuous mode [ 391.777081][ T36] veth0_macvtap: left promiscuous mode [ 391.796108][ T36] veth1_vlan: left promiscuous mode [ 391.811682][ T36] veth0_vlan: left promiscuous mode [ 392.220949][ T5972] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 392.400966][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 392.414547][ T5972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 392.428837][ T5972] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.439166][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.449434][ T5972] usb 4-1: Product: syz [ 392.458066][ T5972] usb 4-1: Manufacturer: syz [ 392.468284][ T5972] usb 4-1: SerialNumber: syz [ 392.504916][ T5972] usb 4-1: config 0 descriptor?? [ 392.518492][ T8825] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.348897][ T8846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.811'. [ 393.532899][ T36] team0 (unregistering): Port device team_slave_1 removed [ 393.651176][ T36] team0 (unregistering): Port device team_slave_0 removed [ 395.235723][ T8629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.721131][ T5888] usb 4-1: USB disconnect, device number 2 [ 397.615048][ T8893] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 397.684390][ T8893] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 397.736634][ T8895] program syz.3.823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.994762][ C1] sd 0:0:1:0: [sda] tag#5416 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 398.005223][ C1] sd 0:0:1:0: [sda] tag#5416 CDB: Write(6) 0a 00 00 00 00 00 [ 398.582670][ T8629] veth0_vlan: entered promiscuous mode [ 398.655311][ T8629] veth1_vlan: entered promiscuous mode [ 399.491817][ T8629] veth0_macvtap: entered promiscuous mode [ 399.728803][ T8629] veth1_macvtap: entered promiscuous mode [ 399.757878][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.831759][ T8920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.826'. [ 400.376199][ T8629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.386724][ T8917] tipc: Enabling of bearer rejected, failed to enable media [ 400.588702][ T8629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.730003][ T8629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.816381][ T8930] loop6: detected capacity change from 0 to 1 [ 400.822807][ T8629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.867622][ T8930] Dev loop6: unable to read RDB block 1 [ 400.874250][ T8629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.883514][ T8930] loop6: unable to read partition table [ 400.948742][ T8930] loop6: partition table beyond EOD, truncated [ 400.999135][ T8930] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.202457][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.245855][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.047654][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.074440][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.318900][ T9014] syzkaller0: create flow: hash 3588866081 index 1 [ 406.498444][ T9012] syzkaller0: entered promiscuous mode [ 406.504215][ T9012] syzkaller0: entered allmulticast mode [ 406.555003][ T3478] syzkaller0: tun_net_xmit 48 [ 406.836228][ T9011] syzkaller0: delete flow: hash 3588866081 index 1 [ 407.404431][ T5858] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 408.645778][ T9035] netlink: 76 bytes leftover after parsing attributes in process `syz.5.848'. [ 415.168920][ T5972] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 415.944910][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 416.012688][ T5972] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 416.051713][ T5972] usb 6-1: config 179 has no interface number 0 [ 416.076734][ T5972] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 416.153582][ T5972] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 416.224342][ T5972] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.269899][ T5972] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 416.360597][ T5972] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 416.380243][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.434888][ T9113] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 416.816569][ T5972] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input8 [ 417.270117][ T5962] usb 6-1: USB disconnect, device number 2 [ 417.276286][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 417.276338][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 417.499387][ T9158] netlink: 6 bytes leftover after parsing attributes in process `syz.1.877'. [ 417.582676][ T9158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.203956][ T9170] tipc: Started in network mode [ 418.233725][ T9170] tipc: Node identity 8, cluster identity 117 [ 418.400987][ T9170] tipc: Node number set to 8 [ 418.965857][ T9193] mmap: syz.5.885 (9193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 423.177532][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 423.398162][ T9254] veth0_to_bond: entered allmulticast mode [ 425.744295][ T9280] comedi comedi2: reset error (fatal) [ 429.754098][ T5858] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 429.754206][ T5858] Bluetooth: hci1: adv larger than maximum supported [ 429.761320][ T5858] Bluetooth: hci1: Malformed LE Event: 0x0d [ 432.732027][ T9351] fuse: Bad value for 'fd' [ 433.713090][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 433.722232][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 436.728457][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 436.728555][ T5860] Bluetooth: hci2: adv larger than maximum supported [ 436.737654][ T5860] Bluetooth: hci2: Malformed LE Event: 0x0d [ 439.939946][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.946856][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.121616][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.939'. [ 441.355237][ T8906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 441.524322][ T8906] usb 4-1: Using ep0 maxpacket: 32 [ 441.856264][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 443.231987][ T9483] ptrace attach of "./syz-executor exec"[8629] was attempted by "./syz-executor exec"[9483] [ 444.014255][ T8906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 444.128804][ T8906] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 444.166026][ T8906] usb 4-1: can't read configurations, error -71 [ 465.872871][ T9767] ceph: No mds server is up or the cluster is laggy [ 465.880371][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 465.892644][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 476.277236][ T9887] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 476.658211][ T9897] sd 0:0:1:0: device reset [ 478.094468][ T5972] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 479.006776][ T5972] usb 1-1: not running at top speed; connect to a high speed hub [ 479.027781][ T5972] usb 1-1: config 3 has an invalid interface number: 40 but max is 0 [ 479.116524][ T5972] usb 1-1: config 3 has no interface number 0 [ 479.227184][ T5972] usb 1-1: config 3 interface 40 altsetting 246 endpoint 0xF has invalid maxpacket 256, setting to 64 [ 479.259385][ T5972] usb 1-1: config 3 interface 40 has no altsetting 0 [ 479.398670][ T5972] usb 1-1: New USB device found, idVendor=0079, idProduct=214c, bcdDevice=1b.cf [ 479.414279][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.435115][ T5972] usb 1-1: Product: syz [ 479.477992][ T5972] usb 1-1: Manufacturer: syz [ 479.482640][ T5972] usb 1-1: SerialNumber: syz [ 479.518435][ T9923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 479.758876][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 479.777792][ T5858] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 479.777942][ T5858] Bluetooth: hci4: adv larger than maximum supported [ 479.786702][ T5858] Bluetooth: hci4: Malformed LE Event: 0x0d [ 481.519710][ T5972] usb 1-1: USB disconnect, device number 10 [ 485.254397][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 485.544365][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 486.320806][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 488.067801][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 488.076545][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 488.112499][ T10] usb 4-1: can't read configurations, error -71 [ 493.385624][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 494.124199][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 494.895102][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 495.229244][ T30] audit: type=1326 audit(1755834008.920:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 495.269545][ T30] audit: type=1326 audit(1755834008.920:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 495.291052][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.458263][ T30] audit: type=1326 audit(1755834008.920:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 495.480536][ T30] audit: type=1326 audit(1755834008.920:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 495.502456][ T30] audit: type=1326 audit(1755834008.920:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 495.915691][ T30] audit: type=1326 audit(1755834008.920:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 495.938262][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.947711][ T30] audit: type=1326 audit(1755834008.920:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 496.101598][ T30] audit: type=1326 audit(1755834008.930:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 496.214212][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 496.226592][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 496.234808][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 496.242436][ T24] usb 1-1: can't read configurations, error -71 [ 496.281098][ T30] audit: type=1326 audit(1755834008.930:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 496.320421][ T30] audit: type=1326 audit(1755834008.930:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10106 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 496.485747][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 496.523700][ T10] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 496.533817][ T10] usb 4-1: config 0 has no interface number 0 [ 496.563241][ T10] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 496.593001][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.616537][ T10] usb 4-1: Product: syz [ 496.628739][ T10] usb 4-1: Manufacturer: syz [ 496.636793][ T10] usb 4-1: SerialNumber: syz [ 496.659711][ T10] usb 4-1: config 0 descriptor?? [ 498.454321][ T5858] Bluetooth: hci5: command 0x0405 tx timeout [ 499.370977][ T10] cp210x 4-1:0.79: cp210x converter detected [ 499.377968][ T10] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 499.407090][ T10] cp210x 4-1:0.79: querying part number failed [ 499.475289][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 499.549374][ T10] usb 4-1: USB disconnect, device number 7 [ 499.581650][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.674001][ T10] cp210x 4-1:0.79: device disconnected [ 500.307523][ T5913] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 500.499094][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 500.839893][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 501.503867][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.514981][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.832320][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 503.008253][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 503.130694][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 503.145853][ T5913] usb 4-1: can't read configurations, error -71 [ 504.499385][T10189] comedi comedi2: reset error (fatal) [ 505.306342][T10213] pim6reg: entered allmulticast mode [ 505.314802][T10213] pim6reg: left allmulticast mode [ 506.994592][ T5913] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 507.204213][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 507.710479][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 509.464653][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 510.180641][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 510.194239][ T5913] usb 2-1: can't read configurations, error -71 [ 511.370678][T10262] sd 0:0:1:0: device reset [ 512.254741][T10253] kvm: pic: non byte write [ 513.865583][T10286] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 513.931013][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 514.305821][T10286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.394179][T10301] comedi comedi2: reset error (fatal) [ 515.544251][ T5858] Bluetooth: hci5: command 0x0405 tx timeout [ 516.954272][ T5913] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 517.106410][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 517.113412][ T5913] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 517.127005][ T5913] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 517.172140][ T5913] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 517.211225][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.261800][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.313405][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 517.382652][ T5913] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 517.475757][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.635306][ T5913] usb 1-1: config 0 descriptor?? [ 517.666206][T10324] sd 0:0:1:0: device reset [ 517.858188][ T5913] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 518.878317][ T5913] usb 1-1: USB disconnect, device number 13 [ 518.888278][ T5913] usblp0: removed [ 521.358723][ T5860] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 522.436233][T10378] sd 0:0:1:0: device reset [ 523.671266][T10395] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1158'. [ 526.240806][T10408] comedi comedi2: reset error (fatal) [ 526.291898][ T5860] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 528.579075][T10424] syz.0.1166 (10424): drop_caches: 2 [ 529.577631][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1171'. [ 529.586720][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1171'. [ 532.444179][T10460] comedi comedi2: reset error (fatal) [ 533.509349][T10470] pim6reg: entered allmulticast mode [ 533.599570][T10461] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 533.609267][T10461] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 533.638130][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 533.660774][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 533.667303][T10461] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 533.674566][T10461] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 533.813434][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 533.837638][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 533.854218][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 533.866848][T10461] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 533.904721][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 533.934332][T10461] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 533.979151][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 533.991975][T10461] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 533.994330][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 534.001747][T10461] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 534.005808][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 534.005869][T10469] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 534.188098][T10461] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 534.203506][T10461] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 535.898529][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 535.908498][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 537.026754][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'. [ 538.764270][T10513] comedi comedi2: reset error (fatal) [ 540.673216][T10515] netlink: 'syz.0.1191': attribute type 11 has an invalid length. [ 540.983423][T10521] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 541.612214][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 541.621540][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 543.698626][T10553] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 545.683924][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1210'. [ 545.693356][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1210'. [ 547.222779][T10596] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 550.827259][ T979] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 551.388164][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 551.446649][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 551.567821][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 551.648917][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 551.693036][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.731879][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.773527][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.802286][ T979] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 551.814155][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.832454][ T979] usb 4-1: Product: syz [ 551.838969][ T979] usb 4-1: Manufacturer: syz [ 551.853900][ T979] usb 4-1: SerialNumber: syz [ 551.867970][ T979] usb 4-1: config 0 descriptor?? [ 553.217129][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 555.037954][ T24] usb 4-1: USB disconnect, device number 10 [ 558.098427][T10723] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1245'. [ 558.113928][T10723] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 559.823706][ T5962] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 560.005720][T10752] syzkaller0: entered promiscuous mode [ 560.024516][ T5913] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 560.025379][T10752] syzkaller0: entered allmulticast mode [ 560.044201][ T5962] usb 2-1: Using ep0 maxpacket: 8 [ 560.059345][ T5962] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 560.091862][ T5962] usb 2-1: config 179 has no interface number 0 [ 560.124344][ T5962] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 560.124377][ T5962] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 560.124403][ T5962] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.289744][ T5962] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 560.300101][ T5962] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 560.324162][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 560.350404][ T5913] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 560.368759][ T5913] usb 6-1: config 0 has no interface number 0 [ 560.395416][ T5962] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 560.427131][ T5913] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.448487][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.488023][ T5913] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 560.521528][T10742] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 560.547644][ T5962] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 560.565860][ T5913] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.595784][ T5913] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 560.611956][ T5913] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 560.629921][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.651750][ T5913] usb 6-1: config 0 descriptor?? [ 560.673364][ T5913] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 561.154800][ T5913] usb 2-1: USB disconnect, device number 9 [ 561.211835][ T5927] usb 6-1: USB disconnect, device number 3 [ 561.251728][ T5927] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 561.544332][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 561.906288][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.470896][ T5913] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 562.479058][ T24] usb 4-1: config 0 has no interface number 0 [ 562.501986][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 562.540563][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.566786][ T24] usb 4-1: Product: syz [ 562.571002][ T24] usb 4-1: Manufacturer: syz [ 562.586764][ T24] usb 4-1: SerialNumber: syz [ 562.605588][ T24] usb 4-1: config 0 descriptor?? [ 562.817894][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.823465][ T24] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 562.872668][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 563.358110][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 563.363327][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.377617][ T5913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.455297][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.465324][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.475321][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.608704][ T24] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 563.638852][ T24] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 563.661587][ T5913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.695368][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.837873][T10788] sd 0:0:1:0: device reset [ 564.031658][ T5913] usb 1-1: GET_CAPABILITIES returned 0 [ 564.038146][ T5913] usbtmc 1-1:16.0: can't read capabilities [ 564.262424][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.303780][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.312911][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.321979][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.331059][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.340123][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.349195][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.358246][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.367353][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.449742][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.458861][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.467924][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.476981][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.486072][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.504697][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.513805][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.522893][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.531977][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 564.600270][ T5913] usb 1-1: USB disconnect, device number 14 [ 564.904199][ T979] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 565.056909][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 565.068923][ T979] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 565.082894][ T979] usb 6-1: config 179 has no interface number 0 [ 565.203241][ T979] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 565.239602][T10827] sp0: Synchronizing with TNC [ 565.491732][ T979] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 565.528662][ T979] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 565.566847][ T979] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 565.605206][ T979] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 565.620244][ T979] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 565.638727][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.773984][T10811] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 565.785967][ T979] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 566.401589][ T5888] usb 6-1: USB disconnect, device number 4 [ 566.873103][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'. [ 568.054186][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 568.211763][T10842] sd 0:0:1:0: device reset [ 568.227431][ T5913] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.235888][ T5913] usb 2-1: config 0 has no interface number 0 [ 568.244446][ T5913] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 568.254001][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.262201][ T5913] usb 2-1: Product: syz [ 568.272542][ T5913] usb 2-1: Manufacturer: syz [ 568.291918][ T5913] usb 2-1: SerialNumber: syz [ 568.316706][ T5913] usb 2-1: config 0 descriptor?? [ 568.621391][ T5913] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 569.035885][T10823] [U] è [ 575.844200][ T5962] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 576.006183][ T5962] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 576.014730][ T5962] usb 6-1: config 0 has no interface number 0 [ 576.026687][ T5962] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 576.036519][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.045706][ T5962] usb 6-1: Product: syz [ 576.054498][ T5962] usb 6-1: Manufacturer: syz [ 576.059181][ T5962] usb 6-1: SerialNumber: syz [ 576.092706][ T5962] usb 6-1: config 0 descriptor?? [ 576.358112][ T5962] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 583.973062][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1334'. [ 584.062332][T11030] validate_nla: 43 callbacks suppressed [ 584.062351][T11030] netlink: 'syz.3.1334': attribute type 10 has an invalid length. [ 592.474208][ T5914] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 593.247185][ T5914] usb 1-1: device descriptor read/64, error -71 [ 593.514448][ T5914] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 593.760254][ T5914] usb 1-1: device descriptor read/64, error -71 [ 594.010038][ T5914] usb usb1-port1: attempt power cycle [ 595.004227][ T5914] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 595.090818][T11140] binder: 11136:11140 ioctl c0306201 0 returned -14 [ 595.570930][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 595.593401][ T5914] usb 1-1: device descriptor read/8, error -71 [ 595.604971][T11117] vlan2: entered promiscuous mode [ 595.713181][T11117] gretap0: entered promiscuous mode [ 595.874172][ T5914] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 595.937112][ T5914] usb 1-1: device descriptor read/8, error -71 [ 596.089245][ T5914] usb usb1-port1: unable to enumerate USB device [ 596.319307][T11032] Set syz1 is full, maxelem 65536 reached [ 599.452841][T11186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.987067][T11189] use of bytesused == 0 is deprecated and will be removed in the future, [ 599.996007][T11189] use the actual size instead. [ 604.635911][T11235] sd 0:0:1:0: device reset [ 607.637976][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 609.480391][T11286] bridge_slave_0: default FDB implementation only supports local addresses [ 609.992267][T11294] netlink: 'syz.0.1404': attribute type 10 has an invalid length. [ 610.995881][T11294] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 611.088345][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 611.088356][ T30] audit: type=1326 audit(1755834124.810:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11307 comm="syz.5.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f27d8ebe9 code=0x0 [ 619.718174][T11406] netlink: 4832 bytes leftover after parsing attributes in process `syz.2.1440'. [ 620.204254][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.211748][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.450300][T11460] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1454'. [ 623.506780][T11458] loop2: detected capacity change from 0 to 7 [ 623.559650][T11458] Dev loop2: unable to read RDB block 7 [ 623.581774][T11458] loop2: unable to read partition table [ 623.589791][T11458] loop2: partition table beyond EOD, truncated [ 623.600945][T11458] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.259311][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.265937][ T24] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 624.280424][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.288294][ T5913] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 624.289952][ T24] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 624.313490][ T5962] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 624.332184][ T5913] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 624.343056][ T5962] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 624.362664][ T5913] usb 2-1: USB disconnect, device number 10 [ 624.372417][ T5962] usb 6-1: USB disconnect, device number 5 [ 624.451454][ T24] usb 4-1: USB disconnect, device number 11 [ 625.316916][T11478] sd 0:0:1:0: device reset [ 627.009348][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 627.174744][ T5914] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 627.374291][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 627.823709][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 627.869231][ T5914] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 627.883512][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 628.014350][ T5914] usb 6-1: Product: syz [ 628.018606][ T5914] usb 6-1: Manufacturer: syz [ 628.023802][ T5914] usb 6-1: SerialNumber: syz [ 628.032689][ T5914] usb 6-1: config 0 descriptor?? [ 628.038769][T11495] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 628.614207][ T5914] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 629.464698][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 629.488371][ T5914] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 629.508173][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 629.526670][ T5914] usb 1-1: Product: syz [ 629.536779][ T5914] usb 1-1: Manufacturer: syz [ 629.551650][ T5914] usb 1-1: SerialNumber: syz [ 629.725873][ T5914] usb 1-1: config 0 descriptor?? [ 630.013492][ T5914] usbtest 1-1:0.0: FX2 device [ 630.038669][ T5914] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 630.069700][ T5914] usb 1-1: USB disconnect, device number 19 [ 630.213293][ T5962] usb 6-1: USB disconnect, device number 6 [ 634.094775][ T5913] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 634.290278][ T5913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 634.300409][ T5913] usb 4-1: config 0 has no interface number 0 [ 634.312843][ T5913] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 634.322992][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.340074][ T5913] usb 4-1: Product: syz [ 634.349035][ T5913] usb 4-1: Manufacturer: syz [ 634.359236][ T5913] usb 4-1: SerialNumber: syz [ 634.467067][ T5913] usb 4-1: config 0 descriptor?? [ 634.679485][ T5913] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 634.719211][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 634.733135][ T5913] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 634.746684][ T5913] usb 4-1: media controller created [ 634.880959][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.984168][ T5962] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 635.037049][ T5913] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 635.164857][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 635.212293][ T5962] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 635.265614][ T5962] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 635.293657][ T5913] usb 4-1: USB disconnect, device number 12 [ 635.307002][ T5962] usb 1-1: config 2 has no interface number 1 [ 635.466168][ T5962] usb 1-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.604214][ T5962] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 635.824194][ T5962] usb 1-1: config 2 interface 0 has no altsetting 0 [ 636.781754][ T5962] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 636.828104][T11602] Set syz1 is full, maxelem 65536 reached [ 637.424464][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.432517][ T5962] usb 1-1: Product: syz [ 637.567077][ T5962] usb 1-1: Manufacturer: syz [ 637.571734][ T5962] usb 1-1: SerialNumber: syz [ 637.722941][T11606] tipc: Enabling of bearer rejected, failed to enable media [ 637.746764][T11606] syzkaller0: entered promiscuous mode [ 637.752926][T11606] syzkaller0: entered allmulticast mode [ 637.800328][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1496'. [ 637.810240][T11611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1496'. [ 637.827183][T11609] loop6: detected capacity change from 0 to 2098 [ 639.345499][ T5962] usb 1-1: can't set config #2, error -71 [ 639.394896][ T5962] usb 1-1: USB disconnect, device number 20 [ 639.476344][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'. [ 639.748219][T11631] tipc: Enabled bearer , priority 10 [ 639.754598][T11122] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 639.947544][T11122] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 640.137885][T11122] usb 4-1: config 0 has no interface number 0 [ 640.170276][T11122] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 640.179892][T11122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.222355][T11122] usb 4-1: Product: syz [ 640.262377][T11122] usb 4-1: Manufacturer: syz [ 640.272475][T11122] usb 4-1: SerialNumber: syz [ 640.323917][T11122] usb 4-1: config 0 descriptor?? [ 640.726470][T11122] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 640.768558][T11122] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 641.044532][T11122] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 641.224189][T11122] usb 4-1: media controller created [ 641.422838][T11648] tipc: Enabling of bearer rejected, failed to enable media [ 641.483901][T11122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.802265][T11658] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 642.327428][T11122] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 642.503560][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 642.554027][T11122] usb 4-1: USB disconnect, device number 13 [ 643.763758][T11667] bridge: RTM_NEWNEIGH with invalid ether address [ 643.815577][T11667] bridge: RTM_NEWNEIGH with invalid ether address [ 644.494389][ T5888] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 644.804338][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 644.924830][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.956766][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.982748][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 645.110626][ T5888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.172040][ T5888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.227914][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.565188][ T5888] usb 4-1: GET_CAPABILITIES returned 0 [ 645.570858][ T5888] usbtmc 4-1:16.0: can't read capabilities [ 645.770005][ T5888] usb 4-1: USB disconnect, device number 14 [ 646.037333][T11696] tipc: Enabling of bearer rejected, failed to enable media [ 646.451474][T11707] vlan2: entered promiscuous mode [ 646.457102][T11707] vlan2: entered allmulticast mode [ 646.462340][T11707] hsr_slave_1: entered allmulticast mode [ 647.499578][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 647.669221][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 647.763895][T11708] syz.3.1523 (11708): drop_caches: 2 [ 647.884175][T11122] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 648.050082][T11122] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 648.059776][T11122] usb 1-1: config 0 has no interface number 0 [ 648.083153][T11122] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 648.118386][T11122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.189741][T11122] usb 1-1: Product: syz [ 648.199378][T11122] usb 1-1: Manufacturer: syz [ 648.216380][T11122] usb 1-1: SerialNumber: syz [ 648.245098][T11122] usb 1-1: config 0 descriptor?? [ 648.479726][T11122] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 648.491284][T11122] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 648.566347][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1531'. [ 648.597544][T11728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1531'. [ 648.684636][T11122] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 648.698158][T11122] usb 1-1: media controller created [ 648.719797][T11122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.772723][T11122] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 648.996149][T11122] usb 1-1: USB disconnect, device number 21 [ 650.594269][T11745] comedi comedi2: reset error (fatal) [ 654.490685][T11755] syz.1.1537 (11755): drop_caches: 2 [ 655.724166][T11785] comedi comedi2: reset error (fatal) [ 656.625660][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 657.433772][T11797] tipc: New replicast peer: 255.255.255.255 [ 657.442520][T11797] tipc: Enabled bearer , priority 10 [ 657.452101][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1550'. [ 657.472001][T11797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.300501][T11806] loop7: detected capacity change from 0 to 7 [ 658.509647][T11806] Dev loop7: unable to read RDB block 7 [ 658.515521][T11806] loop7: unable to read partition table [ 658.530296][T11806] loop7: partition table beyond EOD, truncated [ 658.579138][T11806] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 660.593017][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 660.851516][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 660.869842][ T24] usb 1-1: config 0 has no interface number 0 [ 660.894452][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 660.904826][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.912860][ T24] usb 1-1: Product: syz [ 660.923968][ T24] usb 1-1: Manufacturer: syz [ 660.939136][ T24] usb 1-1: SerialNumber: syz [ 660.983625][ T24] usb 1-1: config 0 descriptor?? [ 661.402155][ T24] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 661.432187][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 661.468603][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 661.477272][ T24] usb 1-1: media controller created [ 661.590516][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.882321][ T24] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 662.180775][ T24] usb 1-1: USB disconnect, device number 22 [ 664.231660][ T5888] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 664.394974][ T5888] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 667.111931][ T30] audit: type=1326 audit(1755834180.800:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 667.152144][ T30] audit: type=1326 audit(1755834180.800:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 667.404224][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 667.946677][ T30] audit: type=1326 audit(1755834180.800:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 667.976635][ T30] audit: type=1326 audit(1755834180.800:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 668.304196][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 668.334786][ T5888] usb 6-1: config 0 has an invalid interface number: 79 but max is 0 [ 668.343399][ T5888] usb 6-1: config 0 has no interface number 0 [ 668.357299][ T5888] usb 6-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 668.374545][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.382669][ T5888] usb 6-1: Product: syz [ 668.387368][ T5888] usb 6-1: Manufacturer: syz [ 668.391990][ T5888] usb 6-1: SerialNumber: syz [ 668.421663][ T30] audit: type=1326 audit(1755834180.800:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 668.497210][ T5888] usb 6-1: config 0 descriptor?? [ 668.595716][ T30] audit: type=1326 audit(1755834180.800:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 668.763401][ T30] audit: type=1326 audit(1755834180.800:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 668.786059][T11911] input: syz0 as /devices/virtual/input/input13 [ 668.819508][ T30] audit: type=1326 audit(1755834180.800:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 668.948961][ T30] audit: type=1326 audit(1755834180.800:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 669.118538][ T30] audit: type=1326 audit(1755834180.800:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11902 comm="syz.5.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f27d8ebe9 code=0x7ffc0000 [ 669.928333][ T5888] cp210x 6-1:0.79: cp210x converter detected [ 669.947012][ T5888] cp210x 6-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 670.144779][ T5888] cp210x 6-1:0.79: querying part number failed [ 670.217162][ T5888] usb 6-1: cp210x converter now attached to ttyUSB0 [ 670.252350][ T5888] usb 6-1: USB disconnect, device number 7 [ 670.281520][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 670.300250][ T5888] cp210x 6-1:0.79: device disconnected [ 670.553915][ T5962] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 670.583906][ T5962] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 671.944170][ T5888] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 672.424421][ T5888] usb 2-1: device descriptor read/64, error -71 [ 672.714336][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 672.856761][ T5888] usb 2-1: device descriptor read/64, error -71 [ 672.966982][ T5888] usb usb2-port1: attempt power cycle [ 673.414266][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 673.934634][ T5888] usb 2-1: device descriptor read/8, error -71 [ 674.294534][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 674.314824][ T5962] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 674.847188][ T5888] usb 2-1: device descriptor read/8, error -71 [ 675.011536][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.041841][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 675.052543][ T5888] usb usb2-port1: unable to enumerate USB device [ 675.071074][ T5962] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.117507][ T5962] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.254255][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.309326][ T5962] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 676.720841][T12014] kvm: pic: non byte write [ 677.848083][ T5962] usb 1-1: USB disconnect, device number 23 [ 682.440822][T12065] vlan2: entered promiscuous mode [ 682.481459][T12065] vlan2: entered allmulticast mode [ 682.528430][T12065] hsr_slave_1: entered allmulticast mode [ 683.894166][ T5913] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 684.666155][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.786615][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 684.814976][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.840518][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 684.850071][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.906780][ T5913] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 685.754863][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.761397][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.351886][ T5962] usb 4-1: USB disconnect, device number 15 [ 687.464724][T12146] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 687.625309][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 692.515482][T12197] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 692.580595][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 692.704186][ T5962] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 692.953200][ T5972] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 692.976065][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.986131][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 693.053282][ T5962] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.094125][ T5962] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 693.103217][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.111501][ T5972] usb 6-1: device descriptor read/64, error -71 [ 693.185424][ T5962] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 694.066888][ T5972] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 694.305006][ T5972] usb 6-1: device descriptor read/64, error -71 [ 694.610853][ T5972] usb usb6-port1: attempt power cycle [ 695.104254][ T5972] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 695.135088][ T5972] usb 6-1: device descriptor read/8, error -71 [ 695.821622][ T5962] usb 1-1: USB disconnect, device number 24 [ 696.302006][T12254] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 698.274188][ T5972] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 698.454544][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 698.493086][ T5972] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 698.529970][T12283] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 698.538210][T12283] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 698.726607][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.421381][ T5972] usb 2-1: config 0 descriptor?? [ 699.672396][ T5972] usb 2-1: can't set config #0, error -71 [ 699.715384][ T5972] usb 2-1: USB disconnect, device number 15 [ 699.851787][T12291] kvm: pic: non byte write [ 702.874424][T12343] loop8: detected capacity change from 0 to 7 [ 703.363968][T12343] Dev loop8: unable to read RDB block 7 [ 703.369624][T12343] loop8: AHDI p1 p2 p3 [ 703.373816][T12343] loop8: partition table partially beyond EOD, truncated [ 703.381153][T12343] loop8: p1 start 1601398130 is beyond EOD, truncated [ 703.388015][T12343] loop8: p2 start 1702059890 is beyond EOD, truncated [ 705.113567][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 705.113605][ T30] audit: type=1800 audit(1755834218.740:118): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1679" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 708.133421][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 709.286969][T12390] ======================================================= [ 709.286969][T12390] WARNING: The mand mount option has been deprecated and [ 709.286969][T12390] and is ignored by this kernel. Remove the mand [ 709.286969][T12390] option from the mount to silence this warning. [ 709.286969][T12390] ======================================================= [ 711.224128][ T5913] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 711.568584][ T5913] usb 6-1: device descriptor read/64, error -71 [ 711.630248][ T5888] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 711.808829][ T5888] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 711.818332][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.826655][ T5888] usb 4-1: Product: syz [ 711.831093][ T5888] usb 4-1: Manufacturer: syz [ 711.835920][ T5888] usb 4-1: SerialNumber: syz [ 711.868111][ T5888] usb 4-1: config 0 descriptor?? [ 711.884276][ T5913] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 711.894188][ T5888] gspca_main: sq930x-2.14.0 probing 2770:930c [ 712.051639][ T5913] usb 6-1: device descriptor read/64, error -71 [ 712.174579][ T5913] usb usb6-port1: attempt power cycle [ 713.218196][ T5913] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 713.344788][ T5913] usb 6-1: device descriptor read/8, error -71 [ 713.588453][ T5913] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 713.654383][ T5888] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 713.665513][ T5913] usb 6-1: device descriptor read/8, error -71 [ 713.803963][ T5913] usb usb6-port1: unable to enumerate USB device [ 713.894222][ T5888] gspca_sq930x: Sensor ov9630 not yet treated [ 713.908585][ T5888] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 713.984906][ T5888] usb 4-1: USB disconnect, device number 16 [ 715.506733][T12469] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 715.587525][T12469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 721.334478][ T5972] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 721.545905][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.592815][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.617618][ T5972] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 721.651324][ T5972] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 721.754068][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.781231][ T5972] usb 1-1: config 0 descriptor?? [ 721.844787][T12527] usb usb8: usbfs: process 12527 (syz.1.1729) did not claim interface 0 before use [ 721.961971][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'. [ 722.277661][ T5972] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xe [ 722.295326][ T5972] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 722.375986][ T5972] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 722.806798][ T5972] usb 1-1: USB disconnect, device number 25 [ 722.843644][T12539] fido_id[12539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 725.068234][T12569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1739'. [ 727.046762][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 727.576334][T12596] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 727.595050][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.603447][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.631710][T12593] tipc: Enabled bearer , priority 0 [ 728.036490][T12593] tipc: Resetting bearer [ 728.084753][T12592] tipc: Disabling bearer [ 728.154544][T12607] option changes via remount are deprecated (pid=12598 comm=syz.5.1751) [ 734.933630][T12677] option changes via remount are deprecated (pid=12671 comm=syz.3.1767) [ 741.205354][ T30] audit: type=1326 audit(1755834254.900:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.226931][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.270780][ T30] audit: type=1326 audit(1755834254.900:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.292392][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.393754][ T30] audit: type=1326 audit(1755834254.910:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.426261][T12742] input: syz0 as /devices/virtual/input/input14 [ 741.466763][ T30] audit: type=1326 audit(1755834254.910:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.492023][ T30] audit: type=1326 audit(1755834254.910:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.516866][ T30] audit: type=1326 audit(1755834254.910:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.564846][ T30] audit: type=1326 audit(1755834254.910:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.588807][ T30] audit: type=1326 audit(1755834254.910:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.610362][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.721003][ T30] audit: type=1326 audit(1755834254.920:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.742591][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.802089][ T30] audit: type=1326 audit(1755834254.970:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12732 comm="syz.1.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 741.823738][ C1] vkms_vblank_simulate: vblank timer overrun [ 742.108586][T12757] netlink: 'syz.0.1792': attribute type 11 has an invalid length. [ 742.117032][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 744.012366][ T5962] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 744.830709][ T5962] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 744.841391][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.863819][ T5962] usb 1-1: Product: syz [ 744.883564][ T5962] usb 1-1: Manufacturer: syz [ 744.904563][ T5962] usb 1-1: SerialNumber: syz [ 744.986472][ T5962] usb 1-1: config 0 descriptor?? [ 745.122749][ T5962] gspca_main: sq930x-2.14.0 probing 2770:930c [ 745.699037][T12790] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 746.154066][ T5962] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 746.379156][ T5962] gspca_sq930x: Sensor ov9630 not yet treated [ 747.147148][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.172517][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.344575][ T5962] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 747.418148][ T5962] usb 1-1: USB disconnect, device number 26 [ 748.838616][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 750.145318][T12827] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 751.615708][T12836] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 753.026656][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1818'. [ 757.726887][T12885] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 758.254393][ T5972] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 758.494243][ T5972] usb 2-1: device descriptor read/64, error -71 [ 758.745888][ T5972] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 758.944198][ T5972] usb 2-1: device descriptor read/64, error -71 [ 759.576125][ T5972] usb usb2-port1: attempt power cycle [ 760.465726][ T5972] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 761.088925][ T5972] usb 2-1: device descriptor read/8, error -71 [ 762.477247][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 762.846822][T12926] input: syz1 as /devices/virtual/input/input15 [ 764.042521][T12935] tmpfs: Unknown parameter 'uid<00000000000000036800' [ 765.151022][T12936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.648551][T12936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.088440][T12936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.331234][T12936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.682091][T12936] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.871966][T12936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.074674][T12936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.546784][T12936] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.494493][ T5972] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 778.553026][ T5913] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 778.770903][ T5913] usb 2-1: device descriptor read/64, error -71 [ 779.064315][ T5913] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 779.215370][ T5913] usb 2-1: device descriptor read/64, error -71 [ 779.326166][ T5913] usb usb2-port1: attempt power cycle [ 780.618598][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 780.649787][ T5913] usb 2-1: device descriptor read/8, error -71 [ 781.384197][ T5913] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 781.624664][ T5913] usb 2-1: device not accepting address 23, error -71 [ 781.640600][ T5913] usb usb2-port1: unable to enumerate USB device [ 784.244111][ T5888] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 784.394121][ T5888] usb 1-1: device descriptor read/64, error -71 [ 785.106410][ T5888] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 785.657670][ T5888] usb 1-1: device descriptor read/64, error -71 [ 785.821874][ T5888] usb usb1-port1: attempt power cycle [ 786.234159][ T5888] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 786.257215][ T5888] usb 1-1: device descriptor read/8, error -71 [ 786.271062][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 787.654393][ T5888] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 788.352762][ T5888] usb 1-1: device descriptor read/8, error -71 [ 788.566251][ T5888] usb usb1-port1: unable to enumerate USB device [ 790.617431][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 790.682325][T13200] comedi comedi2: dt2801: I/O port conflict (0x4f27,2) [ 790.864847][ T5888] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 791.010096][T13206] openvswitch: netlink: Missing valid actions attribute. [ 791.017297][ T5888] usb 4-1: device descriptor read/64, error -71 [ 791.054269][T13206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.394074][ T5888] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 792.045593][ T5888] usb 4-1: device descriptor read/64, error -71 [ 792.164491][ T5888] usb usb4-port1: attempt power cycle [ 792.244719][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 793.661077][ T5888] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 794.280485][ T5888] usb 4-1: device descriptor read/8, error -71 [ 796.316044][T13240] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 796.444861][T13245] netlink: 'syz.0.1926': attribute type 29 has an invalid length. [ 796.464137][T13245] netlink: 'syz.0.1926': attribute type 29 has an invalid length. [ 796.505758][T13245] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1926'. [ 796.894813][ T5888] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 797.544315][ T5888] usb 2-1: device descriptor read/64, error -71 [ 798.104077][ T5888] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 798.266894][T13288] netlink: 'syz.2.1943': attribute type 29 has an invalid length. [ 798.286412][T13288] netlink: 'syz.2.1943': attribute type 29 has an invalid length. [ 798.296770][T13288] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1943'. [ 798.314481][ T5888] usb 2-1: device descriptor read/64, error -71 [ 798.810792][ T5888] usb usb2-port1: attempt power cycle [ 800.467830][ T5888] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 800.570189][T13311] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 800.687217][ T5888] usb 2-1: device not accepting address 26, error -71 [ 802.524338][ T5888] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 803.256894][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.384357][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.395348][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 803.414385][ T5888] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 803.423471][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.468503][ T5888] usb 2-1: config 0 descriptor?? [ 803.505096][T13346] tipc: Enabled bearer , priority 0 [ 803.512897][T13346] syzkaller0: entered promiscuous mode [ 803.524907][T13346] syzkaller0: entered allmulticast mode [ 803.566712][T13346] tipc: Resetting bearer [ 803.577557][T13345] tipc: Resetting bearer [ 804.463204][T13345] tipc: Disabling bearer [ 804.660335][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 804.681290][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 805.199218][ T5888] usb 2-1: USB disconnect, device number 27 [ 805.544610][ T5913] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 805.737941][ T5913] usb 4-1: device descriptor read/64, error -71 [ 805.994965][ T5913] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 806.227373][ T5913] usb 4-1: device descriptor read/64, error -71 [ 806.451329][ T5913] usb usb4-port1: attempt power cycle [ 807.062020][ T5913] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 807.282507][ T5913] usb 4-1: device descriptor read/8, error -71 [ 807.537418][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1968'. [ 807.624103][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1969'. [ 808.608307][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.614625][ T5913] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 808.626856][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.821655][ T5913] usb 4-1: device descriptor read/8, error -71 [ 809.070343][T13394] tipc: Enabled bearer , priority 0 [ 809.089042][T13394] syzkaller0: entered promiscuous mode [ 809.114308][T13394] syzkaller0: entered allmulticast mode [ 809.134847][ T5913] usb usb4-port1: unable to enumerate USB device [ 809.273889][T13395] tipc: Resetting bearer [ 809.308304][T13393] tipc: Resetting bearer [ 809.544671][T13393] tipc: Disabling bearer [ 810.066277][ T5927] tipc: Node number set to 3923248416 [ 813.077768][T13437] loop8: detected capacity change from 0 to 7 [ 813.337615][T13437] Dev loop8: unable to read RDB block 7 [ 813.343332][T13437] loop8: AHDI p1 p2 p3 [ 813.347805][T13437] loop8: partition table partially beyond EOD, truncated [ 813.355281][T13437] loop8: p1 start 1601398130 is beyond EOD, truncated [ 813.362118][T13437] loop8: p2 start 1702059890 is beyond EOD, truncated [ 815.153061][ T5972] IPVS: starting estimator thread 0... [ 815.254652][T13460] IPVS: using max 28 ests per chain, 67200 per kthread [ 816.691482][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 816.691502][ T30] audit: type=1326 audit(1755834330.360:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 816.754733][ T5972] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 816.908357][ T30] audit: type=1326 audit(1755834330.360:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 816.929931][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.975107][ T30] audit: type=1326 audit(1755834330.360:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.001086][ T30] audit: type=1326 audit(1755834330.360:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.025133][ T5913] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 817.031867][ T30] audit: type=1326 audit(1755834330.370:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.070801][ T5972] usb 1-1: Using ep0 maxpacket: 8 [ 817.072247][ T30] audit: type=1326 audit(1755834330.370:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.151162][ T30] audit: type=1326 audit(1755834330.370:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.191527][ T5972] usb 1-1: config 179 has an invalid descriptor of length 252, skipping remainder of the config [ 817.218723][ T5972] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 817.229173][ T30] audit: type=1326 audit(1755834330.370:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.278378][ T30] audit: type=1326 audit(1755834330.370:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.304933][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 817.311817][ T5972] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 817.353514][ T5913] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 817.364282][ T30] audit: type=1326 audit(1755834330.370:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13483 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa29ff8ebe9 code=0x7ffc0000 [ 817.390954][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.417293][T13497] binder: 13496:13497 ioctl 4018620d 0 returned -22 [ 817.424717][T13497] binder: 13496:13497 unknown command 0 [ 817.427826][ T5913] usb 4-1: config 0 has no interface number 0 [ 817.434304][T13497] binder: 13496:13497 ioctl c0306201 200000000080 returned -22 [ 817.520158][ T5913] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 817.532369][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.545180][ T5913] usb 4-1: Product: syz [ 817.549424][ T5913] usb 4-1: Manufacturer: syz [ 817.559955][ T5913] usb 4-1: SerialNumber: syz [ 817.571340][ T5913] usb 4-1: config 0 descriptor?? [ 817.698752][T11122] usb 1-1: USB disconnect, device number 31 [ 818.658998][T13505] input: syz0 as /devices/virtual/input/input16 [ 820.222975][T13528] option changes via remount are deprecated (pid=13519 comm=syz.0.2009) [ 821.279424][T13531] 8021q: VLANs not supported on gre0 [ 821.337949][ T5913] cp210x 4-1:0.79: cp210x converter detected [ 821.363361][ T5913] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 821.391754][ T5913] cp210x 4-1:0.79: querying part number failed [ 821.412227][ T5913] usb 4-1: cp210x converter now attached to ttyUSB0 [ 821.441684][ T5913] usb 4-1: USB disconnect, device number 25 [ 821.505961][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 821.622374][ T5913] cp210x 4-1:0.79: device disconnected [ 821.695944][T13543] netlink: 'syz.0.2014': attribute type 4 has an invalid length. [ 821.703767][T13543] netlink: 'syz.0.2014': attribute type 5 has an invalid length. [ 821.711602][T13543] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2014'. [ 822.364556][T11122] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 822.545594][T11122] usb 6-1: Using ep0 maxpacket: 8 [ 822.569395][T11122] usb 6-1: config 179 has an invalid descriptor of length 252, skipping remainder of the config [ 822.596393][T11122] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 822.669332][T11122] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 822.716660][T11122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.726172][T13563] netlink: 'syz.2.2023': attribute type 29 has an invalid length. [ 822.785731][T13565] netlink: 'syz.2.2023': attribute type 29 has an invalid length. [ 822.855583][T13563] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2023'. [ 823.024671][T13569] option changes via remount are deprecated (pid=13564 comm=syz.0.2025) [ 823.571004][T11122] usb 6-1: USB disconnect, device number 16 [ 823.703681][T13572] 8021q: VLANs not supported on ip6gre0 [ 824.769214][T13582] kvm: pic: non byte write [ 826.135175][T13610] option changes via remount are deprecated (pid=13605 comm=syz.1.2037) [ 826.746379][ T5927] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 828.347369][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 828.363266][ T5927] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 828.374146][ T5927] usb 1-1: config 0 has no interface number 0 [ 828.380237][ T5927] usb 1-1: config 0 interface 184 has no altsetting 0 [ 828.390189][ T5927] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 828.404880][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.479869][ T5927] usb 1-1: Product: syz [ 828.493557][ T5927] usb 1-1: Manufacturer: syz [ 828.503260][ T5927] usb 1-1: SerialNumber: syz [ 828.513626][ T5927] usb 1-1: config 0 descriptor?? [ 828.588679][ T5927] smsc75xx v1.0.0 [ 828.609170][ T5927] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 828.656476][ T5927] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 828.667918][ T5888] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 828.904378][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 829.735993][ T5888] usb 4-1: config 179 has an invalid descriptor of length 252, skipping remainder of the config [ 829.754204][ T5888] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 829.763395][ T5888] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 829.773796][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.069276][ T5972] usb 4-1: USB disconnect, device number 26 [ 830.268711][T13632] kvm: pic: non byte write [ 831.016878][T11122] usb 1-1: USB disconnect, device number 32 [ 831.548836][T13649] option changes via remount are deprecated (pid=13643 comm=syz.5.2049) [ 832.832926][T13662] ALSA: mixer_oss: invalid index 40000 [ 833.480910][T13672] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 833.493730][T13672] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 833.559895][T13678] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2057'. [ 833.964142][T11122] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 834.034060][ T5888] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 834.134358][T11122] usb 2-1: device descriptor read/64, error -71 [ 834.194229][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 834.203604][ T5888] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 834.213074][ T5888] usb 1-1: config 0 has no interface number 0 [ 834.220604][ T5888] usb 1-1: config 0 interface 184 has no altsetting 0 [ 834.238147][ T5888] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 834.251637][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.261005][ T5888] usb 1-1: Product: syz [ 834.276297][ T5888] usb 1-1: Manufacturer: syz [ 834.281296][ T5888] usb 1-1: SerialNumber: syz [ 834.292533][ T5888] usb 1-1: config 0 descriptor?? [ 834.364142][ T5888] smsc75xx v1.0.0 [ 834.388377][ T5888] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 834.429492][ T5888] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 834.454783][T11122] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 834.624107][T11122] usb 2-1: device descriptor read/64, error -71 [ 835.288970][T11122] usb usb2-port1: attempt power cycle [ 836.021471][T11122] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 836.205476][T11122] usb 2-1: device descriptor read/8, error -71 [ 836.591697][T11122] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 837.240999][T11122] usb 2-1: device descriptor read/8, error -71 [ 837.376559][T11122] usb usb2-port1: unable to enumerate USB device [ 837.639832][T13716] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2068'. [ 837.731394][ T5888] usb 1-1: USB disconnect, device number 33 [ 838.504265][ T5972] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 838.808056][ T5972] usb 1-1: config 0 has no interfaces? [ 838.818292][ T5972] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 838.911551][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.772034][ T5972] usb 1-1: Product: syz [ 839.796710][ T5972] usb 1-1: Manufacturer: syz [ 839.839865][ T5972] usb 1-1: SerialNumber: syz [ 839.887294][ T5972] usb 1-1: config 0 descriptor?? [ 840.404612][T11122] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 840.476881][T13762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.634153][T11122] usb 4-1: device descriptor read/64, error -71 [ 840.830405][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 840.874254][T11122] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 841.122745][T11122] usb 4-1: device descriptor read/64, error -71 [ 841.219075][T13771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.247021][T11122] usb usb4-port1: attempt power cycle [ 841.524198][ T979] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 841.542791][ T5972] usb 1-1: USB disconnect, device number 34 [ 841.597423][T11122] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 841.628745][T11122] usb 4-1: device descriptor read/8, error -71 [ 841.684103][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 841.691260][ T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 841.701931][ T979] usb 2-1: config 0 has no interface number 0 [ 841.718375][ T979] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 841.747722][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.756131][ T979] usb 2-1: Product: syz [ 841.760315][ T979] usb 2-1: Manufacturer: syz [ 841.788356][ T979] usb 2-1: SerialNumber: syz [ 841.827477][ T979] usb 2-1: config 0 descriptor?? [ 841.857247][ T979] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 842.034545][T11122] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 842.068606][T11122] usb 4-1: device descriptor read/8, error -71 [ 842.227212][T11122] usb usb4-port1: unable to enumerate USB device [ 842.716715][ T979] gspca_spca1528: reg_w err -71 [ 842.724174][ T5888] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 842.744248][ T979] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 842.756552][ T979] usb 2-1: USB disconnect, device number 32 [ 842.886218][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.897884][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.908119][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 842.921194][ T5888] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 842.930379][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.940930][ T5888] usb 6-1: config 0 descriptor?? [ 843.360923][ T5888] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xe [ 843.399370][ T5888] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 843.423734][ T5888] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 843.704339][ T5888] usb 6-1: USB disconnect, device number 17 [ 846.160980][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'. [ 847.174956][T13834] kvm: pic: non byte write [ 848.134578][ T5888] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 848.304239][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 848.321093][ T5888] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 848.342046][ T5888] usb 6-1: config 0 has no interface number 0 [ 848.359481][ T5888] usb 6-1: config 0 interface 184 has no altsetting 0 [ 848.420729][ T5888] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 848.788311][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.807738][ T5888] usb 6-1: Product: syz [ 848.811955][ T5888] usb 6-1: Manufacturer: syz [ 848.826844][ T5888] usb 6-1: SerialNumber: syz [ 848.844841][ T5888] usb 6-1: config 0 descriptor?? [ 848.904832][ T5888] smsc75xx v1.0.0 [ 848.913005][ T5888] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 848.933165][ T5888] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 849.140869][T13860] netlink: 'syz.0.2111': attribute type 29 has an invalid length. [ 849.300531][T13860] netlink: 'syz.0.2111': attribute type 29 has an invalid length. [ 849.331536][T13860] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2111'. [ 850.214688][T11122] usb 6-1: USB disconnect, device number 18 [ 852.273532][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 852.273551][ T30] audit: type=1326 audit(1755834365.970:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 852.391391][ T30] audit: type=1326 audit(1755834365.970:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 852.544119][ T5888] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 852.715235][ T30] audit: type=1326 audit(1755834365.970:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.104488][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 853.113826][ T5888] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 853.132334][ T5888] usb 2-1: config 0 has no interface number 0 [ 853.139634][ T30] audit: type=1326 audit(1755834365.970:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.161177][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.227780][T13897] block device autoloading is deprecated and will be removed. [ 853.282001][ T5888] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 853.321639][ T30] audit: type=1326 audit(1755834365.970:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.354164][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.385376][ T5888] usb 2-1: Product: syz [ 853.399834][ T5888] usb 2-1: Manufacturer: syz [ 853.405674][ T5888] usb 2-1: SerialNumber: syz [ 853.423000][ T30] audit: type=1326 audit(1755834365.970:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.444461][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.452454][ T5888] usb 2-1: config 0 descriptor?? [ 853.458923][ T30] audit: type=1326 audit(1755834365.970:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.480900][ T30] audit: type=1326 audit(1755834365.970:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.524094][ T30] audit: type=1326 audit(1755834365.970:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.644099][ T30] audit: type=1326 audit(1755834365.970:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13884 comm="syz.1.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843798ebe9 code=0x7ffc0000 [ 853.761543][T13889] input: syz0 as /devices/virtual/input/input17 [ 855.479658][ T5888] cp210x 2-1:0.79: cp210x converter detected [ 855.617805][ T5888] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 855.639085][ T5888] cp210x 2-1:0.79: querying part number failed [ 855.653618][ T5888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 855.672902][ T5888] usb 2-1: USB disconnect, device number 33 [ 855.687359][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 855.797300][ T5888] cp210x 2-1:0.79: device disconnected [ 859.396857][T13945] sctp: [Deprecated]: syz.2.2132 (pid 13945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 859.396857][T13945] Use struct sctp_sack_info instead [ 861.210097][T13970] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2141'. [ 861.275316][T11122] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 861.442726][T11122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.852736][T11122] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 861.865194][T11122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.878315][T11122] usb 2-1: config 0 descriptor?? [ 863.014520][ T5972] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 863.244174][ T5972] usb 6-1: Using ep0 maxpacket: 32 [ 863.251850][ T5972] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 863.264664][ T5972] usb 6-1: config 0 has no interface number 0 [ 863.287888][ T5972] usb 6-1: config 0 interface 184 has no altsetting 0 [ 863.332998][ T5972] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 863.519856][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.545113][ T5972] usb 6-1: Product: syz [ 864.309501][T11122] usbhid 2-1:0.0: can't add hid device: -71 [ 864.334858][ T5972] usb 6-1: Manufacturer: syz [ 864.340131][T11122] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 864.357801][ T5972] usb 6-1: SerialNumber: syz [ 864.389441][ T5972] usb 6-1: config 0 descriptor?? [ 864.426444][T11122] usb 2-1: USB disconnect, device number 34 [ 864.471493][ T5972] smsc75xx v1.0.0 [ 864.489695][ T5972] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 864.507953][ T5972] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 865.192223][T13869] Set syz1 is full, maxelem 65536 reached [ 865.821283][ T5972] usb 6-1: USB disconnect, device number 19 [ 866.050013][T13999] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2148'. [ 866.457773][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 866.467617][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 866.476722][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 866.486896][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 866.496675][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 866.510527][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 866.536880][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 866.559893][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 866.577456][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 866.586194][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.304068][ T5888] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 868.355638][ T5888] usb 2-1: device descriptor read/64, error -71 [ 869.178527][ T5888] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 869.186245][ T5860] Bluetooth: hci0: command tx timeout [ 869.216373][ T3584] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.314389][ T5888] usb 2-1: device descriptor read/64, error -71 [ 869.397394][ T3584] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.408674][T14030] xt_cgroup: invalid path, errno=-2 [ 869.437591][ T5888] usb usb2-port1: attempt power cycle [ 869.443820][T14002] chnl_net:caif_netlink_parms(): no params data found [ 869.719947][ T3584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.841747][ T3584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.019452][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.025894][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.086709][T14002] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.104106][T14002] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.132595][T14002] bridge_slave_0: entered allmulticast mode [ 870.134568][ T5888] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 870.170001][T14002] bridge_slave_0: entered promiscuous mode [ 870.286177][ T5888] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 870.367862][T14002] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.384682][T14002] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.392138][T14002] bridge_slave_1: entered allmulticast mode [ 870.406073][T14002] bridge_slave_1: entered promiscuous mode [ 870.575721][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 870.613095][ T5888] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 870.946174][ T5888] usb 2-1: config 0 has no interface number 0 [ 870.952902][ T5888] usb 2-1: config 0 interface 184 has no altsetting 0 [ 870.994793][ T5888] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 871.010121][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.215180][ T5860] Bluetooth: hci0: command tx timeout [ 871.666915][T14002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.680351][ T5888] usb 2-1: Product: syz [ 871.686744][ T5888] usb 2-1: Manufacturer: syz [ 871.691372][ T5888] usb 2-1: SerialNumber: syz [ 871.712291][ T5888] usb 2-1: config 0 descriptor?? [ 871.755548][T14002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.766015][ T5888] smsc75xx v1.0.0 [ 871.769655][ T5888] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 871.794317][ T5888] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 871.828946][T14053] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 871.899814][ T3584] bridge_slave_1: left allmulticast mode [ 871.966278][ T5888] usb 2-1: USB disconnect, device number 38 [ 871.991358][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2164'. [ 872.009864][ T3584] bridge_slave_1: left promiscuous mode [ 872.756435][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.820646][ T3584] bridge_slave_0: left allmulticast mode [ 872.837334][ T3584] bridge_slave_0: left promiscuous mode [ 872.858686][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.110022][T14073] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 873.116796][T14073] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 873.127900][T14073] vhci_hcd vhci_hcd.0: Device attached [ 873.222734][T14075] vhci_hcd: connection closed [ 873.272628][ T3478] vhci_hcd: stop threads [ 873.290112][ T3478] vhci_hcd: release socket [ 873.297307][ T5860] Bluetooth: hci0: command tx timeout [ 873.331635][ T3478] vhci_hcd: disconnect device [ 873.899173][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.912022][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.924771][ T3584] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 873.934607][ T3584] bond0 (unregistering): Released all slaves [ 873.958903][T14053] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 873.967397][T14002] team0: Port device team_slave_0 added [ 874.086715][T14002] team0: Port device team_slave_1 added [ 874.100790][ T3584] tipc: Left network mode [ 875.384080][ T5860] Bluetooth: hci0: command tx timeout [ 876.597935][T14002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.615181][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.641128][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.790220][T14002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.064969][T14121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.507312][T14002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.519373][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.545295][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.551890][T14002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.614413][ T979] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 878.774098][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 878.784208][ T979] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 878.792817][ T979] usb 2-1: config 0 has no interface number 0 [ 878.799271][ T979] usb 2-1: config 0 interface 184 has no altsetting 0 [ 878.878360][ T979] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 878.884123][T14002] hsr_slave_0: entered promiscuous mode [ 878.890041][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.934853][ T979] usb 2-1: Product: syz [ 878.940879][T14002] hsr_slave_1: entered promiscuous mode [ 878.943681][ T979] usb 2-1: Manufacturer: syz [ 878.963782][ T979] usb 2-1: SerialNumber: syz [ 878.989056][T14002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.010943][ T979] usb 2-1: config 0 descriptor?? [ 879.018543][T14002] Cannot create hsr debugfs directory [ 879.039587][ T979] smsc75xx v1.0.0 [ 879.046548][ T979] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 879.080376][ T979] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 879.252829][T11122] usb 2-1: USB disconnect, device number 39 [ 879.306184][ T3584] hsr_slave_0: left promiscuous mode [ 879.323404][ T3584] hsr_slave_1: left promiscuous mode [ 879.339775][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.365161][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.402079][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.422455][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.459725][ T3584] veth1_macvtap: left promiscuous mode [ 879.477800][ T3584] veth0_macvtap: left promiscuous mode [ 879.498105][ T3584] veth1_vlan: left promiscuous mode [ 879.523361][ T3584] veth0_vlan: left promiscuous mode [ 879.905843][T14142] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 880.072398][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 883.370824][T14142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 883.403449][T14144] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 883.902051][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2194'. [ 884.726285][T14183] vlan2: entered promiscuous mode [ 884.774828][T14183] gretap0: entered promiscuous mode [ 884.984061][ T979] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 885.139460][T14002] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 885.156925][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 885.179156][ T979] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 885.198896][T14002] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 885.214486][ T979] usb 6-1: config 179 has no interface number 0 [ 885.231526][ T979] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 885.253018][T14002] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 885.279640][ T979] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 885.299607][T14002] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 885.316263][ T979] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 885.350155][ T979] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 885.390114][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.428358][T14190] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 885.691077][T11122] usb 6-1: USB disconnect, device number 20 [ 885.915804][T14002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.947504][T14002] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.970329][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.977552][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.053245][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.060567][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.819074][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2202'. [ 888.918795][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2202'. [ 889.037282][T14002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.395930][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2206'. [ 890.409994][T14266] vlan2: entered promiscuous mode [ 890.809535][T14002] veth0_vlan: entered promiscuous mode [ 890.910041][T14002] veth1_vlan: entered promiscuous mode [ 891.099991][T14002] veth0_macvtap: entered promiscuous mode [ 891.175753][T14002] veth1_macvtap: entered promiscuous mode [ 891.351149][T14002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.416055][T14002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.529834][T14002] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.545736][ T5888] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 891.555621][T14002] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.585624][T14002] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.594801][T14002] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.735358][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 891.743754][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 891.806156][ T5888] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 891.840366][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 891.883770][ T5888] usb 4-1: Product: syz [ 891.905798][ T5888] usb 4-1: Manufacturer: syz [ 891.926918][ T5888] usb 4-1: SerialNumber: syz [ 891.945832][ T5888] usb 4-1: config 0 descriptor?? [ 891.957858][T14277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 891.977933][ T6343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.999557][ T6343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.115561][ T6343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.170056][ T6343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.014389][ T5972] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 893.053144][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'. [ 893.212940][ T5972] usb 6-1: config 0 has no interfaces? [ 893.214490][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 893.312822][ T5972] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 893.409016][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.458381][ T5972] usb 6-1: Product: syz [ 893.475601][ T5972] usb 6-1: Manufacturer: syz [ 893.480245][ T5972] usb 6-1: SerialNumber: syz [ 893.542151][ T5972] usb 6-1: config 0 descriptor?? [ 894.734301][ T979] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 894.861078][ T5972] usb 4-1: USB disconnect, device number 31 [ 894.874325][ T979] usb 7-1: device descriptor read/64, error -71 [ 895.841741][ T979] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 895.860698][ T5962] usb 6-1: USB disconnect, device number 21 [ 895.987296][ T979] usb 7-1: device descriptor read/64, error -71 [ 896.018591][T14354] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2223'. [ 896.124198][ T979] usb usb7-port1: attempt power cycle [ 896.487912][ T979] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 896.518222][ T979] usb 7-1: device descriptor read/8, error -71 [ 896.794405][ T979] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 897.686312][ T979] usb 7-1: device descriptor read/8, error -71 [ 898.009152][ T979] usb usb7-port1: unable to enumerate USB device [ 899.422389][T14403] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 901.974250][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 902.374078][ T24] usb 2-1: device descriptor read/64, error -71 [ 903.214778][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 903.757223][ T24] usb 2-1: device descriptor read/64, error -71 [ 903.894798][ T24] usb usb2-port1: attempt power cycle [ 904.305391][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 904.555682][ T24] usb 2-1: device descriptor read/8, error -71 [ 904.878210][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2252'. [ 906.811111][T14507] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 906.917032][T14507] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 909.254222][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 909.394644][ T24] usb 6-1: device descriptor read/64, error -71 [ 909.634378][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 909.774188][ T24] usb 6-1: device descriptor read/64, error -71 [ 909.884611][ T24] usb usb6-port1: attempt power cycle [ 910.274189][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 910.325186][ T24] usb 6-1: device descriptor read/8, error -71 [ 910.574377][T14554] loop8: detected capacity change from 0 to 7 [ 910.725707][T14554] Dev loop8: unable to read RDB block 7 [ 910.731417][T14554] loop8: AHDI p1 p2 p3 [ 910.735934][T14554] loop8: partition table partially beyond EOD, truncated [ 910.743145][T14554] loop8: p1 start 1601398130 is beyond EOD, truncated [ 910.750224][T14554] loop8: p2 start 1702059890 is beyond EOD, truncated [ 910.757332][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 910.784555][ T24] usb 6-1: device descriptor read/8, error -71 [ 910.910034][ T24] usb usb6-port1: unable to enumerate USB device [ 911.070411][ T979] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 911.218987][T14566] netlink: 'syz.6.2267': attribute type 9 has an invalid length. [ 911.846087][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.163727][ T979] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 912.289293][ T979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 912.424289][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.480140][ T979] usb 2-1: config 0 descriptor?? [ 913.865204][ T979] usb 2-1: USB disconnect, device number 44 [ 916.414364][ T979] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 916.554096][ T979] usb 7-1: device descriptor read/64, error -71 [ 916.854083][ T979] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 916.984536][ T979] usb 7-1: device descriptor read/64, error -71 [ 917.124424][ T979] usb usb7-port1: attempt power cycle [ 918.374094][ T979] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 919.025050][ T979] usb 7-1: device descriptor read/8, error -71 [ 919.719148][ T979] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 920.015203][ T979] usb 7-1: device not accepting address 9, error -71 [ 920.321861][ T979] usb usb7-port1: unable to enumerate USB device [ 923.739908][ T979] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 923.884180][ T979] usb 4-1: device descriptor read/64, error -71 [ 924.224411][ T979] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 925.647269][ T979] usb 4-1: device descriptor read/64, error -71 [ 925.837066][ T979] usb usb4-port1: attempt power cycle [ 926.277373][ T979] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 926.287687][T14734] loop8: detected capacity change from 0 to 7 [ 926.313701][T14734] Dev loop8: unable to read RDB block 7 [ 926.319368][T14734] loop8: AHDI p1 p2 p3 [ 926.323529][T14734] loop8: partition table partially beyond EOD, truncated [ 926.330864][T14734] loop8: p1 start 1601398130 is beyond EOD, truncated [ 926.338280][T14734] loop8: p2 start 1702059890 is beyond EOD, truncated [ 926.526140][ T979] usb 4-1: device descriptor read/8, error -71 [ 929.254441][T14767] [ 929.256927][T14767] ============================= [ 929.261790][T14767] WARNING: suspicious RCU usage [ 929.266805][T14767] 6.16.0-syzkaller #0 Not tainted [ 929.271824][T14767] ----------------------------- [ 929.276720][T14767] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 929.285930][T14767] [ 929.285930][T14767] other info that might help us debug this: [ 929.285930][T14767] [ 929.296389][T14767] [ 929.296389][T14767] rcu_scheduler_active = 2, debug_locks = 1 [ 929.304484][T14767] 1 lock held by syz.5.2317/14767: [ 929.309712][T14767] #0: ffffffff8e13f2c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 929.320386][T14767] [ 929.320386][T14767] stack backtrace: [ 929.326352][T14767] CPU: 1 UID: 0 PID: 14767 Comm: syz.5.2317 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 929.326367][T14767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 929.326377][T14767] Call Trace: [ 929.326384][T14767] [ 929.326389][T14767] dump_stack_lvl+0x189/0x250 [ 929.326407][T14767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.326419][T14767] ? __pfx__printk+0x10/0x10 [ 929.326434][T14767] ? print_lock_name+0xde/0x100 [ 929.326450][T14767] lockdep_rcu_suspicious+0x140/0x1d0 [ 929.326466][T14767] task_cls_state+0x1a5/0x1d0 [ 929.326478][T14767] bpf_get_cgroup_classid_curr+0x18/0x60 [ 929.326492][T14767] bpf_prog_c235ee0544d7207c+0x23/0x29 [ 929.326502][T14767] bpf_prog_run_pin_on_cpu+0x67/0x150 [ 929.326520][T14767] bpf_prog_test_run_syscall+0x312/0x4b0 [ 929.326537][T14767] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 929.326555][T14767] ? __fget_files+0x2a/0x420 [ 929.326570][T14767] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 929.326586][T14767] bpf_prog_test_run+0x2c7/0x340 [ 929.326604][T14767] __sys_bpf+0x4a4/0x860 [ 929.326619][T14767] ? __pfx___sys_bpf+0x10/0x10 [ 929.326644][T14767] ? rcu_is_watching+0x15/0xb0 [ 929.326660][T14767] __x64_sys_bpf+0x7c/0x90 [ 929.326673][T14767] do_syscall_64+0xfa/0x3b0 [ 929.326685][T14767] ? lockdep_hardirqs_on+0x9c/0x150 [ 929.326696][T14767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.326706][T14767] ? clear_bhb_loop+0x60/0xb0 [ 929.326718][T14767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.326728][T14767] RIP: 0033:0x7f1f27d8ebe9 [ 929.326738][T14767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.326747][T14767] RSP: 002b:00007f1f28c24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 929.326759][T14767] RAX: ffffffffffffffda RBX: 00007f1f27fb5fa0 RCX: 00007f1f27d8ebe9 [ 929.326767][T14767] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 929.326774][T14767] RBP: 00007f1f27e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 929.326780][T14767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.326786][T14767] R13: 00007f1f27fb6038 R14: 00007f1f27fb5fa0 R15: 00007ffe421ceb58 [ 929.326802][T14767] [ 931.458204][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.464688][ T1303] ieee802154 phy1 wpan1: encryption failed: -22