last executing test programs: 57.412779065s ago: executing program 2 (id=3834): r0 = epoll_create(0x6) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 54.755474462s ago: executing program 2 (id=3839): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 53.800686219s ago: executing program 2 (id=3841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, r2}}, 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0xa) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3}) syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x2, 0x12) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x2}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r8, &(0x7f0000007100)={0x2020}, 0x941f) 53.523135318s ago: executing program 2 (id=3843): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 52.51113563s ago: executing program 2 (id=3845): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 51.56484002s ago: executing program 2 (id=3847): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') r2 = syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfc37, 0x0, 0x3, 0xb9}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000800)}, 0x0, 0x4000001}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = timerfd_create(0x0, 0x800) read$FUSE(r5, &(0x7f000000ccc0)={0x2020}, 0x2020) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/netfilter\x00') openat$cgroup_ro(r8, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x275a, 0x0) r9 = dup3(r6, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r10 = msgget(0x0, 0x2c4) r11 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x24840, 0x0) fsetxattr$trusted_overlay_origin(r11, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) msgsnd(r10, 0x0, 0x2000, 0x800) msgctl$IPC_RMID(r10, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x5) socket(0x2, 0x3, 0x1) 36.264531404s ago: executing program 32 (id=3847): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') r2 = syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfc37, 0x0, 0x3, 0xb9}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000800)}, 0x0, 0x4000001}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r5 = timerfd_create(0x0, 0x800) read$FUSE(r5, &(0x7f000000ccc0)={0x2020}, 0x2020) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/netfilter\x00') openat$cgroup_ro(r8, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x275a, 0x0) r9 = dup3(r6, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r10 = msgget(0x0, 0x2c4) r11 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x24840, 0x0) fsetxattr$trusted_overlay_origin(r11, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) msgsnd(r10, 0x0, 0x2000, 0x800) msgctl$IPC_RMID(r10, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x5) socket(0x2, 0x3, 0x1) 13.983885912s ago: executing program 0 (id=3920): syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x2c2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r5, &(0x7f0000000200)=""/123, 0x9e, 0xc8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x2, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x8}, {0x4, 0x4, 0x4, '\x00', 0xc}, {0x0, 0x8, 0xf0, '\x00', 0xd}, {0x2, 0xe, 0x39, '\x00', 0x1f}, {0xf, 0x0, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x6, 0x7, '\x00', 0x4c}, {0x6, 0x2, 0x9, '\x00', 0x1}, {0x9, 0x8, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x6, 0x1, 0xe, '\x00', 0x7f}, {0x5, 0x6, 0x7, '\x00', 0x2}, {0x7, 0x10, 0x5, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xc}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x2, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x8}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7f, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) socket$netlink(0x10, 0x3, 0x0) 11.658630689s ago: executing program 0 (id=3923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xa, @remote}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20004040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) r8 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) wait4(r8, &(0x7f0000000340), 0x0, &(0x7f0000000680)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010100000000000000000a00000100000a40000000015c0004805800018000000100696e6e657200000000000280000002400000003800000240000000e0000004400000000f0000034000000008000002240000004800000140000000000000034000000000140000001100010000000000000000000100000a8d44c8ef138ef3017c5725f9aef55f756fc245eac9348c659bfbfa03f9b9dcebd5160c652b06dffba16b2642d6d7d3fe223e05d425200afe2623ebe85c42737a7e89bfeafbcbfdd6c1886744c1726f96c2a5d438f818f619dadec417ecc12b39737e"], 0x23}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 11.635377509s ago: executing program 3 (id=3924): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, r4}}, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0xa) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3}) syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x2, 0x12) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x2}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r10, &(0x7f0000007100)={0x2020}, 0x941f) 11.3879501s ago: executing program 5 (id=3926): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5207, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ustat(0x11, &(0x7f0000000600)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0xff, 0x400000) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000000c0)) r6 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x100010, r6, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x4) 11.072095766s ago: executing program 1 (id=3927): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xf66f, 0xfffffe0000000001, 0x800, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000100)) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, 0x0, &(0x7f0000000380)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b", @ANYRESOCT=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="342a339af7ece7d6460000000906010400000000000000000500ffff0c00078008000a40000000050900020073797a310000000005000100070000007762559c50771230de74cc59b8ee90dd1553a081c0e60b2cbb312eb548e9a950ecf8e0813070e23f16d8b11cd91bc89b9f1ccdab48e220191b01980498f85a919fd13c5a00ab016abb304bed4ad9f673a6502abdd6c35507e63108ed2021c966ac73b2895be3737f250aa4db2ef5c6b346"], 0x34}}, 0x4000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306250000a62a6ebcb23a68d10000000500010007000000"], 0x1c}}, 0x20000090) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x741040, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8926, &(0x7f0000002640)={'dvmrp1\x00', @broadcast}) 9.358951732s ago: executing program 5 (id=3928): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1f, 0xa, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r5, &(0x7f0000000100)=""/44, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x16010080) gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d2e5bf308000300", @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e640000000038000280040008800800070006000000080012007f0b000008001a"], 0x70}}, 0x0) syz_open_dev$midi(&(0x7f0000000140), 0x8008001, 0x101640) 9.358619332s ago: executing program 3 (id=3929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0xfffffffd) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x148100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x7f, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000880)="5ca86304000000f0099af29e96c8d42bf351039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf1", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) lseek(r7, 0xc6c3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f00000cc000/0x2000)=nil, 0x2000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r8 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/83, 0x53) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000080)="0ca1bb8e5f297fe9908206fb6c6c3a00", 0x10}], 0x1, 0x3, 0xd4bd) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0xa4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3042}, [@IFLA_LINK={0x8}, @IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6d8f5d40288e5ebba6e19d643b931101"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a0bb6f3e9f221375b427f136e085d050"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0707819bf796a7d66f2cc001bd1c1417"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6tnl0\x00'}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "7dd4ae4cc4eaf7eceaa5b7ac"}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0xa4}, 0x1, 0xba01, 0x0, 0x24000002}, 0x0) 9.28070258s ago: executing program 4 (id=3930): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 9.257842052s ago: executing program 1 (id=3931): syz_emit_ethernet(0x3e, &(0x7f0000003740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6308}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='ro'}]}}, 0x3, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a00000000000000040001000800"], 0x50}}, 0x4000850) r8 = socket(0x10, 0x80002, 0x0) fcntl$setlease(r5, 0x400, 0x1) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@bridge_setlink={0x2d4, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x20840}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1c0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_PHYS_SWITCH_ID={0xe, 0x24, "83eddaf31b5dd7248be5"}, @IFLA_AF_SPEC={0xd0, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x804}, 0x0) utime(0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8.672350504s ago: executing program 0 (id=3932): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) sched_getattr(r6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r5, 0x601}, 0x14}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r9, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10) 7.09580142s ago: executing program 5 (id=3933): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) unshare(0x8040480) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r5 = getpid() getpid() syz_pidfd_open(r5, 0x0) setns(r4, 0xa020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r4}}, 0x20) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000132400010325bd7000fcffffffe1ffffff03002d80"], 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014024000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace80ffcbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/213, 0xd5}], 0x1}, 0x0) fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) 7.073731496s ago: executing program 4 (id=3934): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) connect$vsock_stream(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r5, 0x2, r6, 0x1ff, 0x80000}) unshare(0x6e000000) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r9, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 6.987826179s ago: executing program 0 (id=3935): r0 = epoll_create(0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 6.868262038s ago: executing program 3 (id=3936): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, r4}}, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0xa) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3}) syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x2, 0x12) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x2}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r10, &(0x7f0000007100)={0x2020}, 0x941f) 6.072035258s ago: executing program 1 (id=3937): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 5.667990183s ago: executing program 3 (id=3938): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) recvmsg$kcm(r9, 0x0, 0x40) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0) openat$kvm(0xffffff9c, 0x0, 0x45c0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x3c) 5.348974857s ago: executing program 5 (id=3939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r2, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000240)={{@host, 0x804}, @any, 0x0, 0x8000000000, 0x0, 0x5d3, 0xffffffffffff7966, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000180)={{@host}, 0xfffffffffffffff8, 0x800000000000002, 0x20007fff}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$VT_SETMODE(r5, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x1) fchdir(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c00018006000600894f"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) openat$cgroup_ro(r6, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) 4.558431003s ago: executing program 0 (id=3940): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000000c0)=0x839352b8218490eb) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="c8010000", @ANYRESOCT=r8, @ANYRESDEC=r8], 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x14) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local, 0x8}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r10, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044001}, 0x40000) connect$qrtr(r0, &(0x7f0000000080), 0x20) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002224000000960c0000002a597c070900be008309390c0093"], 0x0}, 0x0) read(r0, &(0x7f00000000c0)=""/66, 0x42) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r12, 0x0, 0x0) 3.403094771s ago: executing program 1 (id=3941): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 3.264198245s ago: executing program 5 (id=3942): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x2, &(0x7f00000001c0)=[{0x4, 0x8c, 0x5, 0xeb16}, {0x9, 0x2, 0xb, 0x7fffffff}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') lseek(r4, 0x5, 0x0) lseek(r4, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=@ipv6_getaddr={0x40, 0x16, 0x401, 0x70bd2b, 0x25dfdbfb, {0xa, 0x1f, 0x4, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0) r9 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r9) keyctl$unlink(0x9, r10, r9) keyctl$unlink(0x9, r10, r9) 2.870725135s ago: executing program 4 (id=3943): r0 = epoll_create(0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 2.753217533s ago: executing program 3 (id=3944): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.731625633s ago: executing program 4 (id=3945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bdef18fa78bcb9616de723023034"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, &(0x7f00000001c0)={0x9, 0x0, 0x7, 0x6, 0x5, 0x5, 0x4, 0xfffffffffffffff7}, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000010000104fcffffff000000000000", @ANYRES32=0x0, @ANYBLOB="0025000000000000400012800b000100690900746e6c0000300002800600100002000000140003002001000000000000000002000000000106000f00010000000800140002000000"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socket$nl_netfilter(0x10, 0x3, 0xc) 1.70553729s ago: executing program 1 (id=3946): r0 = epoll_create(0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.613483038s ago: executing program 1 (id=3947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x28802, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet(0x2, 0x2, 0x307fea7b) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1}, 0x10}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000140)=[{0x8, 0x3, 0x6, 0xdd}, {0x2, 0x1, 0x3, 0xfffffffd}, {0xb, 0x5, 0x0, 0x800}, {0x16cd, 0x5, 0xa, 0x5}, {0x5, 0x0, 0x0, 0x7}]}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x10001d, 0x18b, &(0x7f0000000440)}) r9 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x8}, {r2, 0x80}, {r8, 0x2004}, {r3, 0x2002}, {r0, 0x3000}, {r3, 0x20}, {r6, 0x23}, {r7, 0x6025}, {r6, 0x80}, {r9, 0x288}], 0xa, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000686000/0x1000)=nil, 0x1000, 0x0, 0x600, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff0800"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.574137271s ago: executing program 4 (id=3948): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, r4}}, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x280, 0x55a6}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0xa) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3}) syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x2, 0x12) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x2}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r10, &(0x7f0000007100)={0x2020}, 0x941f) 938.879445ms ago: executing program 5 (id=3949): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') fremovexattr(r4, &(0x7f00000000c0)=@random={'user.', '\x00'}) r5 = socket$unix(0x1, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r7 = eventfd2(0x0, 0x800) fcntl$dupfd(r0, 0x0, r4) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, &(0x7f0000000680)="1cabe66a055516a56bd83fbe96d83bca72fe0d921a5b686ddfa2185235db9552fb8fb71627069f2849f9f12047b55638d838c57a3c2f1ea06f35e9b9dcef8f291a74a44208c87a189060629fda0bb92631c777ea68e981fb25b06aa06a5d17e2b7f7a04c5bd590614e58009f1d50d9992202b08c1942ebb72395a218d78e2bc2210d1f7fa3460ff52ddd5b0cbc17c4ad09a48c44eb8f9a044c4e84db25e48002157e010000000000008022537f69013733703de101729126ea3d4b8084f6aff0658eecb2471c24f9845947658326020a4583f7869536cf003ce4d0f21d23de886f9897", 0xe3, 0x7fffffffffffffff, 0x0, 0x3, r7}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) io_getevents(r6, 0x0, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000080)={0x0, 0x989680}) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev\x00') preadv(r8, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f00000004c0)=""/55, 0x37}], 0x7, 0x0, 0x800) 938.570027ms ago: executing program 3 (id=3950): r0 = epoll_create(0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 919.257934ms ago: executing program 0 (id=3951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="24000000180001000000000000000000021410000100fea3000000000800050000000000"], 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x44850) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[]) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0xffff, 0x1}, {0x45, 0x407}, @const={0x4, {0x400, 0x5, 0x9, 0x101}}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) getsockname$packet(r5, &(0x7f0000000700), &(0x7f0000000540)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x40, 0x40, 0x1000, 0x2054000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @remote}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4008010) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40488d0}, 0x4050) 0s ago: executing program 4 (id=3952): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) kernel console output (not intermixed with test programs): 1761440731.232:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1695.009676][T30277] netlink: 'syz.0.3558': attribute type 10 has an invalid length. [ 1695.056948][T30277] team0: Device dummy0 failed to register rx_handler [ 1695.232010][T30277] netlink: 'syz.0.3558': attribute type 10 has an invalid length. [ 1695.489820][ T30] audit: type=1326 audit(1761440731.232:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1695.520552][ T30] audit: type=1326 audit(1761440731.232:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1695.548059][ T30] audit: type=1326 audit(1761440731.232:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1695.591677][ T30] audit: type=1326 audit(1761440731.252:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1695.615753][ T939] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1695.624215][ T30] audit: type=1326 audit(1761440731.262:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1695.833402][ T939] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1695.959267][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.036009][ T30] audit: type=1326 audit(1761440731.262:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1696.099565][ T939] usb 1-1: config 0 descriptor?? [ 1696.153905][ T939] pwc: Creative Labs Webcam Pro Ex detected. [ 1696.264634][ T30] audit: type=1326 audit(1761440731.262:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1696.311538][ T30] audit: type=1326 audit(1761440731.262:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1697.872300][ T939] pwc: Failed to set LED on/off time (-71) [ 1697.879829][ T939] pwc: send_video_command error -71 [ 1697.887953][ T939] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1697.895644][ T939] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1697.938412][ T939] usb 1-1: USB disconnect, device number 82 [ 1698.516306][ T939] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1698.666761][ T939] usb 2-1: Using ep0 maxpacket: 32 [ 1698.679122][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.694270][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1698.789717][ T939] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1698.937789][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.201257][ T939] usb 2-1: config 0 descriptor?? [ 1699.714283][ T939] savu 0003:1E7D:2D5A.0062: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1700.026398][T30316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3566'. [ 1701.167179][T13345] usb 2-1: reset high-speed USB device number 89 using dummy_hcd [ 1701.781467][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 1701.791127][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 1702.476244][ T10] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1702.897149][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1702.910694][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.261383][ T10] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1703.490076][ T939] usb 2-1: USB disconnect, device number 89 [ 1703.624753][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.781675][ T10] usb 4-1: config 0 descriptor?? [ 1704.199619][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1704.205646][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1704.225495][ T10] usb 4-1: USB disconnect, device number 75 [ 1704.869061][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1707.275926][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 1707.275946][ T30] audit: type=1326 audit(1761440743.712:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1707.536707][ T30] audit: type=1326 audit(1761440743.712:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1707.559553][ T30] audit: type=1326 audit(1761440743.712:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1707.582321][ T30] audit: type=1326 audit(1761440743.712:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1708.001177][ T30] audit: type=1326 audit(1761440743.712:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1708.177108][ T30] audit: type=1326 audit(1761440743.712:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1708.276440][ T30] audit: type=1326 audit(1761440743.712:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1708.456084][ T30] audit: type=1326 audit(1761440743.712:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1708.921947][ T30] audit: type=1326 audit(1761440743.712:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1709.078512][T30619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3584'. [ 1709.097648][ T30] audit: type=1326 audit(1761440743.712:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30593 comm="syz.4.3581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1709.119763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1709.178894][T30620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3585'. [ 1709.200349][T30620] input: syz1 as /devices/virtual/input/input101 [ 1709.789495][T30632] netlink: 'syz.0.3588': attribute type 12 has an invalid length. [ 1709.840502][T13489] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1709.900404][T30631] gtp2: entered promiscuous mode [ 1709.918427][T30631] gtp2: entered allmulticast mode [ 1710.573232][T13489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1710.587297][T13489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1710.626407][T13489] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 1710.636361][T13489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.714698][T13489] usb 2-1: Product: syz [ 1710.725991][T13489] usb 2-1: Manufacturer: syz [ 1710.737003][T13489] usb 2-1: SerialNumber: syz [ 1710.786960][T13489] usb 2-1: config 0 descriptor?? [ 1710.830324][T13489] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1711.157190][T13489] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 1711.639667][T13489] usb 2-1: USB disconnect, device number 90 [ 1712.640518][T30660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1712.729184][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 1712.732828][ T30] audit: type=1326 audit(1761440749.192:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30656 comm="syz.1.3595" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 1712.932346][ T30] audit: type=1326 audit(1761440749.382:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1712.966882][ T30] audit: type=1326 audit(1761440749.382:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1712.994713][ T30] audit: type=1326 audit(1761440749.382:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1713.307790][ T30] audit: type=1326 audit(1761440749.392:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1713.366696][ T30] audit: type=1326 audit(1761440749.392:7468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1713.422409][ T30] audit: type=1326 audit(1761440749.392:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1713.448380][ T30] audit: type=1326 audit(1761440749.392:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1713.475696][ T30] audit: type=1326 audit(1761440749.392:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1713.499077][ T30] audit: type=1326 audit(1761440749.392:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30664 comm="syz.3.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1716.026333][ T939] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1716.177573][ T939] usb 5-1: Using ep0 maxpacket: 32 [ 1716.188798][ T939] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 1716.200025][ T939] usb 5-1: config 0 has no interface number 0 [ 1716.221133][ T939] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1716.230918][ T939] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1716.255529][ T939] usb 5-1: Product: syz [ 1716.265680][ T939] usb 5-1: Manufacturer: syz [ 1716.287216][ T939] usb 5-1: config 0 descriptor?? [ 1716.384620][T30815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1716.587822][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3606'. [ 1718.539027][ T10] usb 5-1: USB disconnect, device number 99 [ 1719.236491][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 1719.236504][ T30] audit: type=1326 audit(1761440755.682:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.265583][ T30] audit: type=1326 audit(1761440755.682:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.314043][ T30] audit: type=1326 audit(1761440755.692:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.337221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1719.383414][ T30] audit: type=1326 audit(1761440755.692:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.405709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1719.546032][ T30] audit: type=1326 audit(1761440755.692:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.673668][ T30] audit: type=1326 audit(1761440755.692:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.763103][ T30] audit: type=1326 audit(1761440755.692:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.916156][ T30] audit: type=1326 audit(1761440755.692:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1719.938291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1720.624432][ T30] audit: type=1326 audit(1761440755.692:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1720.709634][ T30] audit: type=1326 audit(1761440755.692:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30835 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1722.006088][T13489] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1722.197561][T13489] usb 4-1: Using ep0 maxpacket: 32 [ 1722.301926][T13489] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 1722.361039][T13489] usb 4-1: config 0 has no interface number 0 [ 1722.420548][T31086] netlink: 'syz.4.3622': attribute type 10 has an invalid length. [ 1722.529321][T13489] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1722.930105][T13489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.978053][T13489] usb 4-1: Product: syz [ 1722.982266][T13489] usb 4-1: Manufacturer: syz [ 1723.035199][T13489] usb 4-1: SerialNumber: syz [ 1723.055988][T28798] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1723.104320][T13489] usb 4-1: config 0 descriptor?? [ 1723.170105][T13489] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 1723.203937][T13489] usb 4-1: Detected SIO [ 1723.226799][T28798] usb 5-1: Using ep0 maxpacket: 32 [ 1723.262005][T13489] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1723.276396][T28798] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 1723.284821][T28798] usb 5-1: config 0 has no interface number 0 [ 1723.324621][T28798] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1723.344192][T28798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.391363][T28798] usb 5-1: Product: syz [ 1723.400450][T28798] usb 5-1: Manufacturer: syz [ 1723.487456][T28798] usb 5-1: SerialNumber: syz [ 1723.548766][T28798] usb 5-1: config 0 descriptor?? [ 1723.594265][T28798] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 1723.613185][T28798] usb 5-1: Detected SIO [ 1723.625119][T28798] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1723.640718][T31100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3624'. [ 1724.343270][T31106] syz.0.3626 (31106): drop_caches: 2 [ 1725.030650][ T939] usb 4-1: USB disconnect, device number 76 [ 1725.040808][ T939] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1725.063663][ T939] ftdi_sio 4-1:0.217: device disconnected [ 1725.747807][T13489] usb 5-1: USB disconnect, device number 100 [ 1725.854820][T13489] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1725.900304][T13489] ftdi_sio 5-1:0.217: device disconnected [ 1726.176466][ T939] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1726.446374][ T939] usb 1-1: Using ep0 maxpacket: 8 [ 1726.532747][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.544302][ T939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.555403][ T939] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1726.628266][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.707220][ T939] usb 1-1: config 0 descriptor?? [ 1726.717585][ T939] usbhid 1-1:0.0: can't add hid device: -22 [ 1726.723732][ T939] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1728.341477][T31258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1728.426470][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 1728.426489][ T30] audit: type=1326 audit(1761440764.862:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31252 comm="syz.4.3637" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6539 code=0x0 [ 1728.454104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.940115][T13345] usb 1-1: USB disconnect, device number 83 [ 1730.606029][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.612469][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.796778][ T30] audit: type=1326 audit(1761440767.262:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1730.818875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.954126][ T30] audit: type=1326 audit(1761440767.262:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1731.097862][ T30] audit: type=1326 audit(1761440767.262:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1731.122734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.134952][T13345] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1731.175570][ T30] audit: type=1326 audit(1761440767.262:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1731.360211][T31283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'. [ 1731.533081][ T30] audit: type=1326 audit(1761440767.262:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1731.555194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.738338][ T30] audit: type=1326 audit(1761440767.262:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1731.774843][T13345] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1731.784537][T13345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.843131][T13345] usb 5-1: Product: syz [ 1731.848224][T13345] usb 5-1: Manufacturer: syz [ 1731.853062][T13345] usb 5-1: SerialNumber: syz [ 1731.868033][T13345] usb 5-1: config 0 descriptor?? [ 1731.873084][ T30] audit: type=1326 audit(1761440767.262:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1731.913170][T13345] usb 5-1: interface 1 not found [ 1731.932075][ T30] audit: type=1326 audit(1761440767.262:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1731.954165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.961189][ T30] audit: type=1326 audit(1761440767.262:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31270 comm="syz.0.3640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1732.293357][T31287] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3643'. [ 1733.344105][T31297] macvtap1: entered allmulticast mode [ 1733.377809][T31297] veth0_macvtap: entered allmulticast mode [ 1733.737373][T19199] usb 5-1: USB disconnect, device number 101 [ 1735.775708][T31422] QAT: failed to copy from user. [ 1736.296400][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1736.296419][ T30] audit: type=1326 audit(1761440772.692:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.324623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.346111][T28798] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1736.420324][ T30] audit: type=1326 audit(1761440772.692:7704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.442739][ T30] audit: type=1326 audit(1761440772.692:7705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.471125][ T30] audit: type=1326 audit(1761440772.692:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.506542][ T30] audit: type=1326 audit(1761440772.692:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.581475][T28798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.597616][T28798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.610797][ T30] audit: type=1326 audit(1761440772.692:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.652874][T28798] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1736.671401][T28798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.693876][ T30] audit: type=1326 audit(1761440772.692:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.718420][T28798] usb 4-1: config 0 descriptor?? [ 1736.773712][ T30] audit: type=1326 audit(1761440772.692:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.882742][ T30] audit: type=1326 audit(1761440772.692:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1736.934827][ T30] audit: type=1326 audit(1761440772.692:7712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31428 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1737.339417][T28798] usbhid 4-1:0.0: can't add hid device: -71 [ 1737.346469][T28798] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1737.366875][T28798] usb 4-1: USB disconnect, device number 77 [ 1737.866607][T31558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3658'. [ 1737.883262][T31558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3658'. [ 1739.486971][T31576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1741.765660][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1741.765680][ T30] audit: type=1326 audit(1761440778.202:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1741.847878][T31693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3668'. [ 1742.128969][ T30] audit: type=1326 audit(1761440778.202:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1742.306587][ T30] audit: type=1326 audit(1761440778.202:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1742.425946][ T30] audit: type=1326 audit(1761440778.212:7776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1742.536170][T19199] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1742.627465][ T30] audit: type=1326 audit(1761440778.212:7777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1742.806283][T19199] usb 5-1: Using ep0 maxpacket: 32 [ 1742.813078][T19199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1742.824804][T19199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.868431][T19199] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1742.915121][ T30] audit: type=1326 audit(1761440778.212:7778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1742.953357][T19199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.135937][ T30] audit: type=1326 audit(1761440778.212:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1743.138143][T19199] usb 5-1: config 0 descriptor?? [ 1743.371634][ T30] audit: type=1326 audit(1761440778.212:7780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1743.425979][ T30] audit: type=1326 audit(1761440778.212:7781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1743.492764][ T30] audit: type=1326 audit(1761440778.212:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1743.822253][T19199] hid_parser_main: 118 callbacks suppressed [ 1743.822276][T19199] macally 0003:060B:0001.0063: unknown main item tag 0x0 [ 1743.852118][T19199] macally 0003:060B:0001.0063: unknown main item tag 0x0 [ 1743.874398][T19199] macally 0003:060B:0001.0063: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 1744.386676][T13489] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1744.525737][T19199] usb 5-1: USB disconnect, device number 102 [ 1744.595922][T13489] usb 4-1: Using ep0 maxpacket: 8 [ 1744.633286][T13489] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1744.687466][T13489] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1745.082630][T31738] netlink: 'syz.1.3677': attribute type 10 has an invalid length. [ 1745.172755][T13489] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1745.194394][T31740] netlink: 'syz.1.3677': attribute type 10 has an invalid length. [ 1745.241360][T13489] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1745.283565][T31738] team0: Port device dummy0 added [ 1745.336515][T31740] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1745.486623][T31740] team0: Failed to send options change via netlink (err -105) [ 1745.494528][T31740] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1745.504336][T31740] team0: Port device dummy0 removed [ 1745.746570][T19199] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1745.824871][T13489] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1745.838142][T13489] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1745.847526][T13489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.018506][T19199] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1746.028070][T19199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.041247][T19199] usb 2-1: config 0 descriptor?? [ 1746.053696][T19199] pwc: Creative Labs Webcam Pro Ex detected. [ 1746.194209][T13489] usb 4-1: usb_control_msg returned -32 [ 1746.204944][T13489] usbtmc 4-1:16.0: can't read capabilities [ 1746.233933][T31747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 1746.787362][T31726] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1747.707729][T31861] syz.2.3681 (31861): drop_caches: 2 [ 1748.059832][T31867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1748.364381][T13489] usb 4-1: USB disconnect, device number 78 [ 1748.570065][T19199] pwc: Failed to set LED on/off time (-71) [ 1748.576812][T19199] pwc: send_video_command error -71 [ 1748.585297][T19199] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1748.593686][T19199] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1748.609888][T19199] usb 2-1: USB disconnect, device number 91 [ 1750.571930][T31894] syz.1.3688 (31894): drop_caches: 2 [ 1751.090136][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1751.090150][ T30] audit: type=1326 audit(1761440787.452:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.321212][ T30] audit: type=1326 audit(1761440787.452:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.644619][ T30] audit: type=1326 audit(1761440787.452:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.698155][ T30] audit: type=1326 audit(1761440787.452:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.731614][ T30] audit: type=1326 audit(1761440787.462:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.760244][ T30] audit: type=1326 audit(1761440787.462:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.808461][ T30] audit: type=1326 audit(1761440787.462:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.836297][ T30] audit: type=1326 audit(1761440787.462:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.862057][ T30] audit: type=1326 audit(1761440787.462:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1751.890998][ T30] audit: type=1326 audit(1761440787.462:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31898 comm="syz.4.3689" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1752.635964][T13489] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1753.116951][T13489] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1753.146091][T13489] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1753.324579][T13489] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1753.335010][T13489] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1753.357440][T13489] usb 2-1: Product: syz [ 1753.363004][T13489] usb 2-1: Manufacturer: syz [ 1753.370974][T13489] usb 2-1: SerialNumber: syz [ 1753.385785][T13489] usb 2-1: config 0 descriptor?? [ 1753.428265][T13489] usb 2-1: selecting invalid altsetting 0 [ 1753.838012][T32037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1754.052999][T13489] usb 2-1: USB disconnect, device number 92 [ 1754.255428][T32046] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3696'. [ 1756.204247][T32069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1756.912436][T32078] netlink: 'syz.2.3703': attribute type 12 has an invalid length. [ 1757.034921][T32079] gtp0: entered promiscuous mode [ 1757.042973][T32079] gtp0: entered allmulticast mode [ 1758.467444][T32087] syz.3.3704 (32087): drop_caches: 2 [ 1760.039823][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1760.039842][ T30] audit: type=1326 audit(1761440796.492:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.074032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1760.080502][ T30] audit: type=1326 audit(1761440796.492:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.102510][ T30] audit: type=1326 audit(1761440796.492:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.124634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1760.186197][ T30] audit: type=1326 audit(1761440796.502:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.233484][T32111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1760.296865][ T30] audit: type=1326 audit(1761440796.502:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.383778][ T30] audit: type=1326 audit(1761440796.502:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.405897][ C0] vkms_vblank_simulate: vblank timer overrun [ 1760.475959][ T30] audit: type=1326 audit(1761440796.502:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.582871][ T30] audit: type=1326 audit(1761440796.502:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1760.605043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1760.754525][ T30] audit: type=1326 audit(1761440796.502:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1761.004711][ T30] audit: type=1326 audit(1761440796.502:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.3709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1762.571032][T32131] syz.1.3714 (32131): drop_caches: 2 [ 1763.086143][T13489] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1763.401532][T32157] netlink: 'syz.4.3720': attribute type 2 has an invalid length. [ 1764.375625][T13489] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1764.391405][T13489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.399954][T13489] usb 3-1: Product: syz [ 1764.404268][T13489] usb 3-1: Manufacturer: syz [ 1764.409922][T13489] usb 3-1: SerialNumber: syz [ 1764.429083][T13489] usb 3-1: config 0 descriptor?? [ 1764.705979][T13489] hso 3-1:0.0: Failed to find INT IN ep [ 1764.712304][T13489] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1765.102241][T32145] wg1: left promiscuous mode [ 1765.117197][T32145] bridge2: left promiscuous mode [ 1765.126591][T32145] gtp0: left promiscuous mode [ 1766.298298][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 1766.298316][ T30] audit: type=1326 audit(1761440802.762:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1766.761467][T32187] syz.4.3721 (32187): drop_caches: 2 [ 1766.791627][ T30] audit: type=1326 audit(1761440802.762:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1766.834861][ T30] audit: type=1326 audit(1761440802.772:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1766.882582][ T30] audit: type=1326 audit(1761440803.072:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1767.117860][ T5866] usb 3-1: USB disconnect, device number 76 [ 1767.146240][T28798] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1767.303611][ T30] audit: type=1326 audit(1761440803.122:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1767.585459][T28798] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.627254][T28798] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1767.673616][ T30] audit: type=1326 audit(1761440803.122:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1767.696011][T28798] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1767.746574][T28798] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1767.755619][T28798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.778629][ T30] audit: type=1326 audit(1761440803.242:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1768.023469][ T30] audit: type=1326 audit(1761440803.242:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1768.067993][T28798] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1768.086197][T28798] usb 2-1: invalid MIDI out EP 0 [ 1768.116152][ T30] audit: type=1326 audit(1761440803.332:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1768.185077][ T30] audit: type=1326 audit(1761440803.332:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32164 comm="syz.0.3731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1768.393940][T28798] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1768.430162][T32173] delete_channel: no stack [ 1768.490039][T28798] usb 2-1: USB disconnect, device number 93 [ 1768.585959][T13489] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1768.857127][T13489] usb 3-1: Using ep0 maxpacket: 8 [ 1769.112250][T13489] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1769.152815][T13489] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1769.815315][T13489] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1769.846504][T13489] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1769.985920][T13489] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1770.021536][T13489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.342196][T13489] usb 3-1: GET_CAPABILITIES returned 0 [ 1770.347786][T13489] usbtmc 3-1:16.0: can't read capabilities [ 1770.566435][T13489] usb 3-1: USB disconnect, device number 77 [ 1772.509712][T32251] macvtap1: entered allmulticast mode [ 1772.524556][T32251] veth0_macvtap: entered allmulticast mode [ 1773.400449][T32243] netlink: 'syz.4.3733': attribute type 10 has an invalid length. [ 1773.494683][T32250] netlink: 'syz.4.3733': attribute type 10 has an invalid length. [ 1773.509258][T32243] team0: Port device dummy0 added [ 1773.683803][T32250] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1773.956960][T32250] team0: Failed to send options change via netlink (err -105) [ 1774.007943][T32250] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1774.040242][T32250] team0: Port device dummy0 removed [ 1774.305660][T13489] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1774.600787][T13489] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1774.610967][T13489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.634102][T13489] usb 5-1: config 0 descriptor?? [ 1774.679134][T13489] pwc: Creative Labs Webcam Pro Ex detected. [ 1775.076821][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1775.076840][ T30] audit: type=1326 audit(1761440811.522:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.143367][ T30] audit: type=1326 audit(1761440811.522:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.165513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1775.212441][ T30] audit: type=1326 audit(1761440811.522:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.288624][ T30] audit: type=1326 audit(1761440811.522:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.433982][ T30] audit: type=1326 audit(1761440811.522:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.560116][ T30] audit: type=1326 audit(1761440811.522:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.593777][ T30] audit: type=1326 audit(1761440811.532:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.691534][ T30] audit: type=1326 audit(1761440811.532:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.733078][ T30] audit: type=1326 audit(1761440811.532:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1775.795676][ T30] audit: type=1326 audit(1761440811.532:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32366 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1776.221866][T13489] pwc: Failed to set LED on/off time (-71) [ 1776.395397][T13489] pwc: send_video_command error -71 [ 1776.726269][T13489] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1776.749169][T13489] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1776.816251][T13489] usb 5-1: USB disconnect, device number 103 [ 1777.309910][T32494] netlink: 'syz.1.3741': attribute type 10 has an invalid length. [ 1777.725920][T13489] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1777.886191][T13489] usb 2-1: Using ep0 maxpacket: 32 [ 1777.904070][T13489] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 1777.913285][T13489] usb 2-1: config 0 has no interface number 0 [ 1777.936283][T13489] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1777.947201][T13489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.955696][T13489] usb 2-1: Product: syz [ 1777.960406][T13489] usb 2-1: Manufacturer: syz [ 1777.965081][T13489] usb 2-1: SerialNumber: syz [ 1777.971879][T13489] usb 2-1: config 0 descriptor?? [ 1777.983330][T13489] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 1777.993582][T13489] usb 2-1: Detected SIO [ 1778.030875][T13489] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1779.456403][ T939] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1779.610661][ T939] usb 4-1: Using ep0 maxpacket: 8 [ 1779.771495][ T939] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1779.787295][ T939] usb 4-1: config 6 has no interface number 0 [ 1779.793448][ T939] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1779.814982][ T939] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.844966][ T939] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1779.928402][ T939] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1780.201321][ T939] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1780.210945][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.226280][ T939] usb 4-1: Product: syz [ 1780.234615][ T939] usb 4-1: Manufacturer: syz [ 1780.245497][ T939] usb 4-1: SerialNumber: syz [ 1780.303931][ T939] hso 4-1:6.2: Failed to find BULK IN ep [ 1781.273565][T19199] usb 2-1: USB disconnect, device number 94 [ 1781.288964][T19199] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1781.812491][T19199] ftdi_sio 2-1:0.217: device disconnected [ 1782.322106][T19199] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1782.496829][T19199] usb 2-1: Using ep0 maxpacket: 16 [ 1782.507469][T19199] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1782.518566][T19199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.731476][T19199] usb 2-1: Product: syz [ 1782.760521][T19199] usb 2-1: Manufacturer: syz [ 1782.846414][T19199] usb 2-1: SerialNumber: syz [ 1782.872421][T19199] usb 2-1: config 0 descriptor?? [ 1782.912619][T19199] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1783.170934][T32643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.202870][T32643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.290097][T13489] usb 4-1: USB disconnect, device number 79 [ 1783.627367][T19199] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1783.685949][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1783.685971][ T30] audit: type=1326 audit(1761440820.122:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1783.857479][ T30] audit: type=1326 audit(1761440820.122:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1783.886740][ T30] audit: type=1326 audit(1761440820.122:8147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1783.911716][ T30] audit: type=1326 audit(1761440820.132:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1783.992123][T13489] usb 2-1: USB disconnect, device number 95 [ 1784.011253][ T30] audit: type=1326 audit(1761440820.132:8149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1784.124839][T13489] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1784.135725][T13489] visor 2-1:0.0: device disconnected [ 1784.169737][ T30] audit: type=1326 audit(1761440820.132:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1784.477928][ T30] audit: type=1326 audit(1761440820.132:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1784.568519][ T30] audit: type=1326 audit(1761440820.132:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1784.682008][ T30] audit: type=1326 audit(1761440820.132:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1785.232287][ T30] audit: type=1326 audit(1761440820.132:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32660 comm="syz.3.3756" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1785.409967][T13489] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 1785.546420][T13489] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1785.804722][T32695] netlink: 'syz.3.3762': attribute type 10 has an invalid length. [ 1786.276245][T13489] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1786.446199][T13489] usb 4-1: Using ep0 maxpacket: 32 [ 1786.457242][T13489] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 1786.465997][T13489] usb 4-1: config 0 has no interface number 0 [ 1786.528688][T13489] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1786.559593][T13489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.575873][T13489] usb 4-1: Product: syz [ 1786.586770][T13489] usb 4-1: Manufacturer: syz [ 1786.591913][T13489] usb 4-1: SerialNumber: syz [ 1786.608376][T13489] usb 4-1: config 0 descriptor?? [ 1786.637117][T13489] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 1786.679514][T13489] usb 4-1: Detected SIO [ 1786.693808][T13489] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1787.416525][T19199] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1787.569003][T19199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.582255][T19199] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1787.614714][T19199] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1787.654360][T19199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.707604][T19199] usb 5-1: config 0 descriptor?? [ 1787.866277][T19199] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1787.872909][T19199] dvb-usb: bulk message failed: -22 (3/0) [ 1788.139929][T19199] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1788.234813][T19199] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1788.257437][T19199] usb 5-1: media controller created [ 1788.331229][T19199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1788.380580][T19199] dvb-usb: bulk message failed: -22 (6/0) [ 1788.406063][T19199] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1788.428708][T19199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input102 [ 1788.480584][T19199] dvb-usb: schedule remote query interval to 150 msecs. [ 1788.516273][T19199] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1788.676543][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 1788.682444][ T5866] dvb-usb: error while querying for an remote control event. [ 1788.708565][ T5866] usb 5-1: USB disconnect, device number 104 [ 1788.784456][ T5866] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1788.898886][T19199] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1788.969452][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 1788.969467][ T30] audit: type=1326 audit(1761440825.392:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=349 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1789.086181][ T30] audit: type=1326 audit(1761440825.402:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=349 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1789.166536][T19199] usb 1-1: Using ep0 maxpacket: 8 [ 1789.175762][T19199] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1789.230722][T19199] usb 1-1: config 6 has no interface number 0 [ 1789.264442][T19199] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1789.280893][T19199] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1789.303320][T19199] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1789.379982][T19199] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1789.428768][T19199] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1789.501266][T19199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.530617][T13489] usb 4-1: USB disconnect, device number 80 [ 1789.541039][T13489] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1789.591421][T13489] ftdi_sio 4-1:0.217: device disconnected [ 1789.655034][T19199] usb 1-1: Product: syz [ 1789.715233][T19199] usb 1-1: Manufacturer: syz [ 1789.834784][ T30] audit: type=1326 audit(1761440826.292:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1789.862514][T19199] usb 1-1: SerialNumber: syz [ 1789.939993][T19199] hso 1-1:6.2: Failed to find BULK IN ep [ 1790.187589][ T30] audit: type=1326 audit(1761440826.322:8302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1790.235307][ T30] audit: type=1326 audit(1761440826.322:8303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1790.686319][ T30] audit: type=1326 audit(1761440826.322:8304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1790.718650][ T30] audit: type=1326 audit(1761440826.322:8305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1790.760804][ T30] audit: type=1326 audit(1761440826.342:8306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1790.919418][ T30] audit: type=1326 audit(1761440826.342:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1790.994517][ T30] audit: type=1326 audit(1761440826.342:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=367 comm="syz.3.3771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1791.782193][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.789113][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.221888][T13345] usb 1-1: USB disconnect, device number 84 [ 1792.729140][ T508] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3773'. [ 1794.794914][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1794.794933][ T30] audit: type=1326 audit(1761440831.222:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1794.895098][ T30] audit: type=1326 audit(1761440831.222:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.078997][ T30] audit: type=1326 audit(1761440831.222:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.146341][ T30] audit: type=1326 audit(1761440831.222:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.366902][ T30] audit: type=1326 audit(1761440831.222:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.518829][ T30] audit: type=1326 audit(1761440831.222:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.667052][ T30] audit: type=1326 audit(1761440831.222:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.703389][ T30] audit: type=1326 audit(1761440831.222:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.727748][ T30] audit: type=1326 audit(1761440831.222:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1795.775511][ T30] audit: type=1326 audit(1761440831.222:8397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1796.926118][T28798] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1797.167925][T28798] usb 1-1: Using ep0 maxpacket: 8 [ 1797.177995][T28798] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1797.187317][T28798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.195353][T28798] usb 1-1: Product: syz [ 1797.204300][T28798] usb 1-1: Manufacturer: syz [ 1797.213745][T28798] usb 1-1: SerialNumber: syz [ 1797.270284][ T663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3789'. [ 1797.543670][T28798] usb 1-1: config 0 descriptor?? [ 1797.586880][T28798] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1798.681035][T28798] gspca_sonixj: reg_w1 err -110 [ 1798.890686][T28798] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1799.079739][T13345] usb 1-1: USB disconnect, device number 85 [ 1799.370011][ T690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3793'. [ 1800.172787][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1800.172800][ T30] audit: type=1326 audit(1761440836.602:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1800.329987][ T30] audit: type=1326 audit(1761440836.602:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1800.620185][ T30] audit: type=1326 audit(1761440836.602:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1800.846364][ T30] audit: type=1326 audit(1761440836.612:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1800.917151][ T30] audit: type=1326 audit(1761440836.622:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1800.989661][ T30] audit: type=1326 audit(1761440836.622:8419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1801.113943][ T30] audit: type=1326 audit(1761440836.822:8420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1801.269288][ T30] audit: type=1326 audit(1761440836.822:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1801.452254][ T30] audit: type=1326 audit(1761440836.822:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=693 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1802.008116][T28798] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1802.639121][T13489] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1802.646991][T28798] usb 3-1: Using ep0 maxpacket: 32 [ 1802.709387][T28798] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1802.719742][T28798] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1802.773888][T28798] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1802.784030][T28798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.794802][T28798] usb 3-1: Product: syz [ 1802.803967][T28798] usb 3-1: Manufacturer: syz [ 1802.813178][T28798] usb 3-1: SerialNumber: syz [ 1802.836099][T13489] usb 4-1: Using ep0 maxpacket: 8 [ 1802.845138][T28798] usb 3-1: config 0 descriptor?? [ 1803.112690][T13345] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 1803.127317][T13345] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1803.225362][T13489] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1803.283300][T13489] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1803.315914][T13489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1803.350911][T13489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1803.401915][ T716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.411918][ T716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.454580][T13489] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1803.517529][T13489] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1803.558388][T13489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.580004][T13489] usb 4-1: Product: syz [ 1803.599026][T13489] usb 4-1: Manufacturer: syz [ 1803.957431][T13489] usb 4-1: SerialNumber: syz [ 1804.039162][T13489] usb 4-1: config 0 descriptor?? [ 1804.125761][T13489] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input103 [ 1804.196515][T13345] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1804.458119][T13345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.511465][T13345] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1804.536805][T13345] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1804.608624][T13345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.729518][T13345] usb 1-1: config 0 descriptor?? [ 1804.872486][T13345] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1804.881092][T28798] usb 3-1: USB disconnect, device number 78 [ 1804.957169][T13345] dvb-usb: bulk message failed: -22 (3/0) [ 1804.979593][T13345] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1805.028190][T13345] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1805.043335][T13345] usb 1-1: media controller created [ 1805.070689][T13345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1805.416419][T28798] usb 4-1: USB disconnect, device number 81 [ 1805.565054][T13345] dvb-usb: bulk message failed: -22 (6/0) [ 1805.665163][T13345] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1805.680414][T13345] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input104 [ 1805.770197][ T749] netlink: 'syz.2.3805': attribute type 10 has an invalid length. [ 1805.811172][ T749] wg1: entered promiscuous mode [ 1805.962220][T13345] dvb-usb: schedule remote query interval to 150 msecs. [ 1805.987993][T13345] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1806.059094][T13345] usb 1-1: USB disconnect, device number 86 [ 1806.116553][ T5866] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1806.221036][T13345] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1806.276512][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 1806.319157][ T5866] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 1806.327919][ T5866] usb 3-1: config 0 has no interface number 0 [ 1806.350880][ T5866] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1806.361222][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.370832][ T5866] usb 3-1: Product: syz [ 1806.382570][ T5866] usb 3-1: Manufacturer: syz [ 1806.391343][ T5866] usb 3-1: SerialNumber: syz [ 1806.422729][ T5866] usb 3-1: config 0 descriptor?? [ 1806.442038][ T5866] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected [ 1806.453845][ T5866] usb 3-1: Detected SIO [ 1806.461624][ T5866] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1807.271668][ T764] netlink: 'syz.1.3808': attribute type 2 has an invalid length. [ 1808.371288][ T30] audit: type=1326 audit(1761440844.832:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1808.555979][ T30] audit: type=1326 audit(1761440844.832:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1808.578839][ T30] audit: type=1326 audit(1761440844.832:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1808.665615][ T30] audit: type=1326 audit(1761440844.832:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1808.746761][ T30] audit: type=1326 audit(1761440844.832:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1808.774063][ T30] audit: type=1326 audit(1761440844.832:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1808.816926][ T30] audit: type=1326 audit(1761440844.832:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1808.917160][T13489] usb 3-1: USB disconnect, device number 79 [ 1808.926333][T13489] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1808.947753][T13489] ftdi_sio 3-1:0.217: device disconnected [ 1809.068817][ T30] audit: type=1326 audit(1761440844.832:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1809.163829][ T30] audit: type=1326 audit(1761440844.832:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1809.213193][ T30] audit: type=1326 audit(1761440844.832:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=773 comm="syz.4.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1812.862101][T13489] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1812.907367][ T928] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 1813.260523][T13489] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1813.268869][T13489] usb 1-1: config 7 has no interface number 0 [ 1813.285527][T13489] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1813.313351][T13489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.576182][T13489] usb 1-1: Product: syz [ 1813.581590][T13489] usb 1-1: Manufacturer: syz [ 1813.599995][T13489] usb 1-1: SerialNumber: syz [ 1814.963814][T13489] as10x_usb: device has been detected [ 1814.972565][T13489] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1815.160482][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.170577][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.233276][T13489] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1815.303326][T13489] as10x_usb: error during firmware upload part1 [ 1815.361679][T13489] Registered device Elgato EyeTV DTT Deluxe [ 1815.843054][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1815.843067][ T30] audit: type=1326 audit(1761440852.302:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.019769][ T30] audit: type=1326 audit(1761440852.302:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.133479][T13345] usb 1-1: USB disconnect, device number 87 [ 1816.147906][ T30] audit: type=1326 audit(1761440852.302:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.210442][T13345] Unregistered device Elgato EyeTV DTT Deluxe [ 1816.219132][T13345] as10x_usb: device has been disconnected [ 1816.235276][ T30] audit: type=1326 audit(1761440852.302:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.333562][ T30] audit: type=1326 audit(1761440852.322:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.595894][ T30] audit: type=1326 audit(1761440852.322:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.732161][ T30] audit: type=1326 audit(1761440852.322:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.755725][ T30] audit: type=1326 audit(1761440852.352:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.794294][ T30] audit: type=1326 audit(1761440852.352:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1816.820990][ T1096] binder: BINDER_SET_CONTEXT_MGR already set [ 1816.827282][ T1096] binder: 1090:1096 ioctl 4018620d 80000040 returned -16 [ 1817.586241][ T30] audit: type=1326 audit(1761440852.352:8472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1081 comm="syz.4.3824" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1817.729113][ T1096] syz.0.3828 (1096): drop_caches: 2 [ 1817.795346][ T1113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3831'. [ 1819.006476][T13345] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1819.322811][T13345] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1819.333592][T13345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.790451][ T1138] kernel profiling enabled (shift: 63) [ 1819.797498][T13345] usb 4-1: config 0 descriptor?? [ 1819.802661][ T1138] profiling shift: 63 too large [ 1820.139922][T13345] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1821.136230][T13345] gspca_spca508: reg_read err -110 [ 1821.151576][T13345] gspca_spca508: reg_read err -32 [ 1821.169564][T13345] gspca_spca508: reg_read err -32 [ 1821.176655][T13345] gspca_spca508: reg_read err -32 [ 1821.196622][T13345] gspca_spca508: reg write: error -32 [ 1821.215918][T13345] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 1821.618236][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1821.618248][ T30] audit: type=1326 audit(1761440858.082:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1821.894371][ T30] audit: type=1326 audit(1761440858.082:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1821.925767][ T30] audit: type=1326 audit(1761440858.082:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1821.949659][ T30] audit: type=1326 audit(1761440858.082:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1821.973548][ T30] audit: type=1326 audit(1761440858.082:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1822.010183][ T30] audit: type=1326 audit(1761440858.112:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1822.141140][ T30] audit: type=1326 audit(1761440858.112:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1822.184246][ T30] audit: type=1326 audit(1761440858.112:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1822.224246][ T30] audit: type=1326 audit(1761440858.112:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1822.247484][ T30] audit: type=1326 audit(1761440858.112:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1148 comm="syz.2.3839" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 1822.624810][T13489] usb 4-1: USB disconnect, device number 82 [ 1822.717937][T28798] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1822.908714][T28798] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1822.918308][T28798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.944163][T28798] usb 2-1: config 0 descriptor?? [ 1822.970333][T28798] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input105 [ 1822.992858][ T1173] netlink: 'syz.3.3842': attribute type 10 has an invalid length. [ 1823.276578][T13345] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1823.526290][T13345] usb 4-1: Using ep0 maxpacket: 32 [ 1823.571365][T13345] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 1823.582976][T13345] usb 4-1: config 0 has no interface number 0 [ 1823.640641][T13345] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1823.650925][T13345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.659391][T13345] usb 4-1: Product: syz [ 1823.663688][T13345] usb 4-1: Manufacturer: syz [ 1823.668718][T13345] usb 4-1: SerialNumber: syz [ 1823.713592][T13345] usb 4-1: config 0 descriptor?? [ 1823.773700][T13345] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 1823.789311][T13345] usb 4-1: Detected SIO [ 1823.825368][T13345] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1824.365201][ T1187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3846'. [ 1826.105897][T13489] usb 4-1: USB disconnect, device number 83 [ 1826.116878][T13489] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1826.149848][ T5184] bcm5974 2-1:0.0: could not read from device [ 1826.161498][ T5184] bcm5974 2-1:0.0: could not read from device [ 1826.194775][ T1305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1826.198581][T13489] ftdi_sio 4-1:0.217: device disconnected [ 1826.288342][ T5184] bcm5974 2-1:0.0: could not read from device [ 1826.290758][T28798] usb 2-1: USB disconnect, device number 96 [ 1826.380111][T32185] udevd[32185]: Error opening device "/dev/input/event4": No such file or directory [ 1826.401816][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1826.417922][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1826.425577][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1826.444197][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1826.884942][ T1326] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 1828.000366][ T1338] bridge6: entered promiscuous mode [ 1828.005750][ T1338] bridge6: entered allmulticast mode [ 1829.032253][ T1352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3853'. [ 1831.823643][ T1376] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1832.626002][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 1832.626020][ T30] audit: type=1326 audit(1761440869.072:8643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1832.835904][T28798] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1832.956353][ T30] audit: type=1326 audit(1761440869.072:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1832.986418][ T30] audit: type=1326 audit(1761440869.072:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1833.018428][ T30] audit: type=1326 audit(1761440869.072:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1833.071934][T28798] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1833.087169][T28798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.103853][ T30] audit: type=1326 audit(1761440869.072:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1833.146275][T28798] usb 4-1: Product: syz [ 1833.154709][T28798] usb 4-1: Manufacturer: syz [ 1833.189040][T28798] usb 4-1: SerialNumber: syz [ 1833.218038][T28798] usb 4-1: config 0 descriptor?? [ 1833.230843][ T30] audit: type=1326 audit(1761440869.072:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1833.528055][ T30] audit: type=1326 audit(1761440869.072:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1833.661178][ T30] audit: type=1326 audit(1761440869.072:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1833.786499][ T30] audit: type=1326 audit(1761440869.072:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1833.816016][ T30] audit: type=1326 audit(1761440869.082:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1379 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1834.865937][T28798] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1835.095141][T28798] usb 2-1: Using ep0 maxpacket: 8 [ 1835.167150][T28798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.178254][T28798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.191053][T28798] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1835.205651][T28798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.284814][T28798] usb 2-1: config 0 descriptor?? [ 1836.362581][ T1394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1836.402398][T13489] usb 4-1: USB disconnect, device number 84 [ 1837.572135][T28798] usbhid 2-1:0.0: can't add hid device: -71 [ 1837.578614][T28798] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1837.615428][T28798] usb 2-1: USB disconnect, device number 97 [ 1837.936813][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1838.003936][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1838.003949][ T30] audit: type=1326 audit(1761440874.422:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.045135][ T30] audit: type=1326 audit(1761440874.422:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.068102][ T30] audit: type=1326 audit(1761440874.422:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.176231][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1838.289021][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.379600][ T10] usb 5-1: Product: syz [ 1838.397467][ T10] usb 5-1: Manufacturer: syz [ 1838.416867][ T10] usb 5-1: SerialNumber: syz [ 1838.426991][ T30] audit: type=1326 audit(1761440874.422:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.481041][ T10] usb 5-1: config 0 descriptor?? [ 1838.500021][ T30] audit: type=1326 audit(1761440874.422:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.527132][ T30] audit: type=1326 audit(1761440874.422:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.549368][ T30] audit: type=1326 audit(1761440874.422:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.572041][ T30] audit: type=1326 audit(1761440874.422:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.597581][ T30] audit: type=1326 audit(1761440874.422:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.645008][ T30] audit: type=1326 audit(1761440874.422:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1435 comm="syz.1.3872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1838.703395][ T10] hso 5-1:0.0: Failed to find INT IN ep [ 1838.719944][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1838.984034][ T1449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3874'. [ 1839.499703][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1839.828279][ T1429] wg1: left promiscuous mode [ 1839.833249][ T1429] batadv_slave_0: left promiscuous mode [ 1839.849864][ T1429] bond1: left promiscuous mode [ 1839.854650][ T1429] bridge1: left promiscuous mode [ 1839.916591][ T1429] wireguard0: left promiscuous mode [ 1839.946090][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1840.006174][ T1429] ip6gretap1: left promiscuous mode [ 1840.012044][ T1429] bridge4: left promiscuous mode [ 1840.023720][ T10] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1840.055096][ T1429] bridge6: left promiscuous mode [ 1840.063291][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1840.250555][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1840.278887][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.314162][ T10] usb 4-1: Product: syz [ 1840.331024][ T10] usb 4-1: Manufacturer: syz [ 1840.348081][ T10] usb 4-1: SerialNumber: syz [ 1840.376438][ T10] usb 4-1: config 0 descriptor?? [ 1840.624018][ T1451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.635499][ T1451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.729764][ T8261] vhci_hcd: connection reset by peer [ 1840.735273][ T1121] vhci_hcd: stop threads [ 1840.742172][ T1121] vhci_hcd: release socket [ 1840.761264][ T1121] vhci_hcd: disconnect device [ 1840.783682][ T1462] binder: 1457:1462 ioctl 4018620d 0 returned -22 [ 1840.795491][ T1462] binder: 1457:1462 ioctl c0306201 80000080 returned -14 [ 1841.458048][T28798] usb 5-1: USB disconnect, device number 105 [ 1841.762405][ T1471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1841.804318][ T1473] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1841.813789][ T1473] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1841.822004][ T1473] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1841.830807][ T1473] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1841.838629][ T1473] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1841.862668][T11339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1841.870056][T11339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1841.877532][T11339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1841.885268][T11339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1841.892937][T11339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1842.057288][ T10] usb 4-1: USB disconnect, device number 85 [ 1842.166622][T28798] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1842.335953][T28798] usb 5-1: Using ep0 maxpacket: 8 [ 1842.345199][T28798] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1842.380955][T28798] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1842.415972][T28798] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1842.449407][T28798] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1842.493926][T28798] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1842.533799][T28798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.764148][T28798] usb 5-1: GET_CAPABILITIES returned 0 [ 1842.770009][T28798] usbtmc 5-1:16.0: can't read capabilities [ 1843.638796][ T1489] random: crng reseeded on system resumption [ 1843.932282][T11339] Bluetooth: hci5: command tx timeout [ 1844.031695][ T1475] chnl_net:caif_netlink_parms(): no params data found [ 1844.668832][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.691523][ T1475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.769726][ T1470] delete_channel: no stack [ 1844.774662][T28798] usb 5-1: USB disconnect, device number 106 [ 1844.815114][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1844.815130][ T30] audit: type=1326 audit(1761440881.272:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1844.849471][ T1475] bridge_slave_0: entered allmulticast mode [ 1844.857939][ T1475] bridge_slave_0: entered promiscuous mode [ 1845.005481][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.031907][ T30] audit: type=1326 audit(1761440881.272:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.031973][ T1475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.105994][ T30] audit: type=1326 audit(1761440881.272:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.175274][ T1475] bridge_slave_1: entered allmulticast mode [ 1845.196894][ T30] audit: type=1326 audit(1761440881.332:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.221958][ T30] audit: type=1326 audit(1761440881.332:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.244306][T13489] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1845.264033][ T1475] bridge_slave_1: entered promiscuous mode [ 1845.621251][T13489] usb 1-1: Using ep0 maxpacket: 8 [ 1845.654541][ T30] audit: type=1326 audit(1761440881.332:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.676774][ T30] audit: type=1326 audit(1761440881.332:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.698903][ T30] audit: type=1326 audit(1761440881.332:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.718598][ T1475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.723462][ T30] audit: type=1326 audit(1761440881.332:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.752641][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.775565][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.827148][T13489] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1845.846517][ T30] audit: type=1326 audit(1761440881.332:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1503 comm="syz.1.3884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1845.849525][ T1475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.949085][T13489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.020098][T11339] Bluetooth: hci5: command tx timeout [ 1846.030044][T13489] usb 1-1: config 0 descriptor?? [ 1846.296653][ T1475] team0: Port device team_slave_0 added [ 1846.308575][ T1475] team0: Port device team_slave_1 added [ 1847.052912][ T1475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.061182][ T1475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1847.434846][ T1475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1847.532192][ T1475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1847.588260][ T1475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1847.736488][ T1475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.974101][T13489] usbhid 1-1:0.0: can't add hid device: -71 [ 1847.986511][T13489] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1848.005977][ T3486] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1848.015367][T13489] usb 1-1: USB disconnect, device number 88 [ 1848.076441][T11339] Bluetooth: hci5: command tx timeout [ 1848.370207][ T3486] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1849.420340][ T3486] bond1 (unregistering): Released all slaves [ 1849.820073][ T3486] bond2 (unregistering): Released all slaves [ 1849.841530][ T3486] bond0 (unregistering): Released all slaves [ 1849.978188][ T1475] hsr_slave_0: entered promiscuous mode [ 1850.006256][ T1475] hsr_slave_1: entered promiscuous mode [ 1850.023720][ T1475] debugfs: 'hsr0' already exists in 'hsr' [ 1850.043829][ T1475] Cannot create hsr debugfs directory [ 1850.057595][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 1850.057613][ T30] audit: type=1326 audit(1761440886.522:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1556 comm="syz.3.3893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1850.156406][T11339] Bluetooth: hci5: command tx timeout [ 1850.212715][ T3486] : left promiscuous mode [ 1850.237932][ T30] audit: type=1326 audit(1761440886.522:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1556 comm="syz.3.3893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 1850.319282][ T30] audit: type=1326 audit(1761440886.682:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.362165][ T30] audit: type=1326 audit(1761440886.682:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.412008][ T3486] tipc: Left network mode [ 1850.446934][ T30] audit: type=1326 audit(1761440886.682:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.519027][ T30] audit: type=1326 audit(1761440886.682:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.555935][T13489] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1850.586746][ T30] audit: type=1326 audit(1761440886.682:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.641099][ T30] audit: type=1326 audit(1761440886.682:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.675586][ T30] audit: type=1326 audit(1761440886.682:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.699737][ T30] audit: type=1326 audit(1761440886.682:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1564 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1850.750400][T13489] usb 1-1: Using ep0 maxpacket: 16 [ 1850.762754][T13489] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 1850.802977][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1850.871662][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1850.931652][T13489] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1850.946897][ T3486] hsr_slave_0: left promiscuous mode [ 1850.954577][T13489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.970373][T13489] usb 1-1: Product: syz [ 1850.975536][ T3486] hsr_slave_1: left promiscuous mode [ 1850.984224][T13489] usb 1-1: Manufacturer: syz [ 1850.991672][ T3486] veth0_macvtap: left allmulticast mode [ 1850.997863][T13489] usb 1-1: SerialNumber: syz [ 1851.012006][T13489] usb 1-1: config 0 descriptor?? [ 1851.104314][ T3486] pim6reg (unregistering): left allmulticast mode [ 1852.252720][ T1597] cgroup: fork rejected by pids controller in /syz0 [ 1852.427664][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.437048][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.213631][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.224435][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.043058][T13489] usb 1-1: USB disconnect, device number 89 [ 1854.622643][ T1624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3903'. [ 1854.786370][ T5866] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1854.972525][ T5866] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1854.984455][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.242811][ T5866] usb 1-1: config 0 descriptor?? [ 1855.282879][ T5866] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1855.799112][ T1475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1856.013764][ T1475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1856.057965][ T5866] gspca_spca508: reg_read err -110 [ 1856.079236][ T5866] gspca_spca508: reg_read err -32 [ 1856.120634][ T5866] gspca_spca508: reg_read err -32 [ 1856.131865][ T1475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1856.150880][ T5866] gspca_spca508: reg_read err -32 [ 1856.366674][ T5866] gspca_spca508: reg write: error -32 [ 1856.372631][ T5866] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 1856.391624][ T1475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1857.049445][ T3486] IPVS: stop unused estimator thread 0... [ 1857.120833][ T1475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.275172][ T1475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.380770][T15449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.387913][T15449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.424114][T15449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.431264][T15449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.928429][ T1475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1858.071674][ T1475] veth0_vlan: entered promiscuous mode [ 1858.132514][ T1475] veth1_vlan: entered promiscuous mode [ 1858.244992][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1858.245011][ T30] audit: type=1326 audit(1761440894.702:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.285376][ T30] audit: type=1326 audit(1761440894.732:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.341870][ T5866] usb 1-1: USB disconnect, device number 90 [ 1858.399978][ T1475] veth0_macvtap: entered promiscuous mode [ 1858.439621][ T30] audit: type=1326 audit(1761440894.732:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.439675][ T1475] veth1_macvtap: entered promiscuous mode [ 1858.536387][ T30] audit: type=1326 audit(1761440894.742:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.576205][ T30] audit: type=1326 audit(1761440894.742:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.615522][ T30] audit: type=1326 audit(1761440894.742:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.650329][ T30] audit: type=1326 audit(1761440894.742:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.686833][ T30] audit: type=1326 audit(1761440894.742:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.710024][ T30] audit: type=1326 audit(1761440894.742:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.743705][ T30] audit: type=1326 audit(1761440894.742:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1664 comm="syz.4.3907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1858.774522][ T1475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.828555][ T1475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.958014][ T3486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.996570][ T3486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.038967][ T3486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.074415][ T3486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.335170][ T1688] netlink: 'syz.0.3912': attribute type 10 has an invalid length. [ 1859.560806][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.622636][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.672548][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.681649][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.746212][ T5903] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1860.226688][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 1860.410158][ T5903] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 1860.470153][ T5903] usb 1-1: config 0 has no interface number 0 [ 1860.485613][ T5903] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1860.495325][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.504617][ T5903] usb 1-1: Product: syz [ 1860.586415][ T5903] usb 1-1: Manufacturer: syz [ 1860.610726][ T5903] usb 1-1: SerialNumber: syz [ 1860.665098][ T5903] usb 1-1: config 0 descriptor?? [ 1860.693274][ T5903] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 1860.927517][ T5903] usb 1-1: Detected SIO [ 1860.934549][ T5903] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1861.302683][ T1722] pim6reg: entered allmulticast mode [ 1862.012107][ T1729] netlink: 'syz.1.3917': attribute type 10 has an invalid length. [ 1862.043490][ T1729] syz_tun: entered promiscuous mode [ 1862.267823][T28798] usb 1-1: USB disconnect, device number 91 [ 1862.275600][T28798] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1862.346434][T28798] ftdi_sio 1-1:0.217: device disconnected [ 1862.523012][ T1740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1865.151589][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1865.151601][ T30] audit: type=1326 audit(1761440901.612:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1865.294058][ T30] audit: type=1326 audit(1761440901.652:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1865.759381][ T30] audit: type=1326 audit(1761440901.652:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1865.788627][ T30] audit: type=1326 audit(1761440901.652:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1865.810632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1866.365952][ T30] audit: type=1326 audit(1761440901.652:9025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1866.595883][ T30] audit: type=1326 audit(1761440901.652:9026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1866.715954][ T30] audit: type=1326 audit(1761440901.672:9027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1866.804539][ T30] audit: type=1326 audit(1761440901.672:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1866.826545][ C0] vkms_vblank_simulate: vblank timer overrun [ 1866.969217][ T30] audit: type=1326 audit(1761440901.672:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1867.067887][ T30] audit: type=1326 audit(1761440901.672:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1774 comm="syz.4.3925" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1868.219432][ T1812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1870.156458][T13489] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1870.319038][T13489] usb 5-1: config 0 has no interfaces? [ 1870.328025][T13489] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1870.337275][T13489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.378957][T13489] usb 5-1: Product: syz [ 1870.561877][T13489] usb 5-1: Manufacturer: syz [ 1870.612823][T13489] usb 5-1: SerialNumber: syz [ 1870.638459][T13489] usb 5-1: config 0 descriptor?? [ 1870.748779][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1870.748791][ T30] audit: type=1326 audit(1761440907.212:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1870.966673][ T30] audit: type=1326 audit(1761440907.212:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1871.013876][ T30] audit: type=1326 audit(1761440907.242:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1871.176206][ T1836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.206214][ T1836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.226530][ T30] audit: type=1326 audit(1761440907.242:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1871.289150][ T30] audit: type=1326 audit(1761440907.242:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1871.796018][ T30] audit: type=1326 audit(1761440907.242:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1872.043154][ T30] audit: type=1326 audit(1761440907.242:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1872.574581][ T30] audit: type=1326 audit(1761440907.242:9118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1872.625082][ T1862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3939'. [ 1872.695080][ T30] audit: type=1326 audit(1761440907.242:9119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1872.718949][ T30] audit: type=1326 audit(1761440907.242:9120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1847 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1872.916414][T28798] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1872.918404][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b8db000: rx timeout, send abort [ 1873.078370][T28798] usb 1-1: device descriptor read/64, error -71 [ 1873.350917][T28798] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1873.433665][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b8db000: abort rx timeout. Force session deactivation [ 1873.447532][ T5866] usb 5-1: USB disconnect, device number 107 [ 1873.529841][T28798] usb 1-1: device descriptor read/64, error -71 [ 1873.827452][ T1883] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3945'. [ 1873.906596][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c653c00: rx timeout, send abort [ 1874.013368][T28798] usb usb1-port1: attempt power cycle [ 1874.414827][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c653c00: abort rx timeout. Force session deactivation [ 1874.534897][T28798] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1874.641544][T28798] usb 1-1: device descriptor read/8, error -71 [ 1875.216445][T28798] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1875.426951][T28798] usb 1-1: device not accepting address 95, error -71 [ 1875.435349][T28798] usb usb1-port1: unable to enumerate USB device [ 1876.079070][T13489] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1876.309742][T13489] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1876.320656][T13489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.335857][T13489] usb 6-1: Product: syz [ 1876.356542][T13489] usb 6-1: Manufacturer: syz [ 1876.361222][T13489] usb 6-1: SerialNumber: syz [ 1876.557036][T13489] usb 6-1: config 0 descriptor?? [ 1876.783310][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 1876.783330][ T30] audit: type=1326 audit(1761440913.122:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1876.840193][ T30] audit: type=1326 audit(1761440913.132:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1876.924804][ T30] audit: type=1326 audit(1761440913.132:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1877.006194][ T30] audit: type=1326 audit(1761440913.132:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1877.496400][ T30] audit: type=1326 audit(1761440913.132:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1877.581078][ T30] audit: type=1326 audit(1761440913.132:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1877.696175][ T30] audit: type=1326 audit(1761440913.132:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1877.850857][ T30] audit: type=1326 audit(1761440913.132:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1878.014188][ T30] audit: type=1326 audit(1761440913.132:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1878.073141][ T30] audit: type=1326 audit(1761440913.132:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.4.3952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 1878.926658][T28798] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1879.086605][T28798] usb 5-1: Using ep0 maxpacket: 32 [ 1879.094196][T28798] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1879.106517][T28798] usb 5-1: config 0 has no interface number 0 [ 1879.115543][T28798] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1879.127113][T28798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.139870][T28798] usb 5-1: Product: syz [ 1879.151326][T28798] usb 5-1: Manufacturer: syz [ 1879.169885][T28798] usb 5-1: SerialNumber: syz [ 1879.189538][T28798] usb 5-1: config 0 descriptor?? [ 1879.221499][T28798] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1879.250086][T28798] usb 5-1: selecting invalid altsetting 1 [ 1879.270586][T28798] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1879.298369][T28798] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1879.333178][T28798] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1879.359621][T28798] usb 5-1: media controller created [ 1879.471168][T28798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1879.520675][ T1917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1879.532499][ T10] usb 6-1: USB disconnect, device number 2 [ 1879.728417][T28798] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1879.745859][T28798] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1879.767551][T28798] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1879.973280][ T1981] tipc: Can't bind to reserved service type 2 [ 1879.984842][ T1981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1880.164105][T28798] usb 5-1: USB disconnect, device number 108 [ 1880.202602][ T1981] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1880.220063][ T1981] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1880.616444][T13345] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1881.087140][T13345] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1881.096668][T13345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.126707][T13345] usb 6-1: config 0 descriptor?? [ 1881.141095][T13345] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input106 [ 1882.700559][ T5184] bcm5974 6-1:0.0: could not read from device [ 1882.709801][ T5184] bcm5974 6-1:0.0: could not read from device [ 1882.724875][T13345] usb 6-1: USB disconnect, device number 3 [ 1882.742793][T32185] bcm5974 6-1:0.0: could not read from device [ 1882.752340][ T5184] bcm5974 6-1:0.0: could not read from device [ 1882.776607][T32185] udevd[32185]: Error opening device "/dev/input/event4": No such device [ 1882.785156][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1882.811828][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1882.820493][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1882.831622][T32185] udevd[32185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1882.843477][T32185] udevd[32185]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1882.874266][ T5199] udevd[5199]: worker [32185] terminated by signal 6 (Aborted) [ 1882.882742][ T5199] udevd[5199]: worker [32185] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input106/event4' [ 1914.639572][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.646586][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1967.916656][ T1473] Bluetooth: hci5: command 0x0406 tx timeout [ 1976.078758][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.085050][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.518631][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.524963][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.436544][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 2039.444558][ T31] Not tainted syzkaller #0 [ 2039.450102][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2039.459173][ T31] task:kworker/1:0 state:D stack:21544 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2039.471710][ T31] Workqueue: usb_hub_wq hub_event [ 2039.477069][ T31] Call Trace: [ 2039.480357][ T31] [ 2039.483276][ T31] __schedule+0x1798/0x4cc0 [ 2039.488345][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2039.493729][ T31] ? __pfx___schedule+0x10/0x10 [ 2039.499033][ T31] ? schedule+0x91/0x360 [ 2039.503314][ T31] schedule+0x165/0x360 [ 2039.508097][ T31] usb_kill_urb+0x1be/0x2d0 [ 2039.512616][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2039.517706][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2039.523795][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2039.528925][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2039.534490][ T31] ? usb_alloc_urb+0x46/0x150 [ 2039.539591][ T31] usb_control_msg+0x232/0x3e0 [ 2039.544413][ T31] hub_port_init+0xbf9/0x2800 [ 2039.549959][ T31] hub_event+0x2532/0x4a20 [ 2039.554416][ T31] ? __pfx_hub_event+0x10/0x10 [ 2039.559651][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2039.565387][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2039.571050][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2039.577180][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2039.582892][ T31] process_scheduled_works+0xae1/0x17b0 [ 2039.588886][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2039.594868][ T31] worker_thread+0x8a0/0xda0 [ 2039.599999][ T31] kthread+0x711/0x8a0 [ 2039.604065][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2039.609742][ T31] ? __pfx_kthread+0x10/0x10 [ 2039.614397][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2039.620062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2039.625262][ T31] ? __pfx_kthread+0x10/0x10 [ 2039.630415][ T31] ret_from_fork+0x4bc/0x870 [ 2039.635056][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2039.640770][ T31] ? __switch_to_asm+0x39/0x70 [ 2039.645553][ T31] ? __switch_to_asm+0x33/0x70 [ 2039.651171][ T31] ? __pfx_kthread+0x10/0x10 [ 2039.656448][ T31] ret_from_fork_asm+0x1a/0x30 [ 2039.661241][ T31] [ 2039.664322][ T31] INFO: task kworker/1:5:5896 blocked for more than 143 seconds. [ 2039.672511][ T31] Not tainted syzkaller #0 [ 2039.678038][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2039.687120][ T31] task:kworker/1:5 state:D stack:23272 pid:5896 tgid:5896 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2039.699566][ T31] Workqueue: usb_hub_wq hub_event [ 2039.704605][ T31] Call Trace: [ 2039.708346][ T31] [ 2039.711278][ T31] __schedule+0x1798/0x4cc0 [ 2039.716374][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2039.721762][ T31] ? __pfx___schedule+0x10/0x10 [ 2039.727019][ T31] ? schedule+0x91/0x360 [ 2039.731255][ T31] schedule+0x165/0x360 [ 2039.735408][ T31] usb_kill_urb+0x1be/0x2d0 [ 2039.740424][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2039.745467][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2039.752450][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2039.760894][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2039.766991][ T31] ? usb_alloc_urb+0x46/0x150 [ 2039.771696][ T31] usb_control_msg+0x232/0x3e0 [ 2039.777082][ T31] hub_port_init+0xbf9/0x2800 [ 2039.781782][ T31] hub_event+0x2532/0x4a20 [ 2039.786626][ T31] ? __pfx_hub_event+0x10/0x10 [ 2039.791381][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2039.797544][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2039.802734][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2039.808887][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2039.814609][ T31] process_scheduled_works+0xae1/0x17b0 [ 2039.820583][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2039.826624][ T31] worker_thread+0x8a0/0xda0 [ 2039.831219][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2039.837611][ T31] ? __kthread_parkme+0x7b/0x200 [ 2039.842564][ T31] kthread+0x711/0x8a0 [ 2039.847162][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2039.852727][ T31] ? __pfx_kthread+0x10/0x10 [ 2039.857836][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2039.863030][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2039.868698][ T31] ? __pfx_kthread+0x10/0x10 [ 2039.873286][ T31] ret_from_fork+0x4bc/0x870 [ 2039.878423][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2039.883555][ T31] ? __switch_to_asm+0x39/0x70 [ 2039.888870][ T31] ? __switch_to_asm+0x33/0x70 [ 2039.893648][ T31] ? __pfx_kthread+0x10/0x10 [ 2039.898889][ T31] ret_from_fork_asm+0x1a/0x30 [ 2039.903675][ T31] [ 2039.907201][ T31] [ 2039.907201][ T31] Showing all locks held in the system: [ 2039.914918][ T31] 5 locks held by kworker/1:0/24: [ 2039.920644][ T31] #0: ffff888021ec9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2039.932451][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2039.944720][ T31] #2: ffff88823be72998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2039.954114][ T31] #3: ffff888145738518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2039.964898][ T31] #4: ffff888140bc5668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2039.975080][ T31] 1 lock held by khungtaskd/31: [ 2039.980370][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2039.990661][ T31] 2 locks held by getty/5589: [ 2039.995329][ T31] #0: ffff888033ac00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2040.006603][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2040.017248][ T31] 5 locks held by kworker/1:5/5896: [ 2040.022436][ T31] #0: ffff888021ec9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2040.034333][ T31] #1: ffffc9000500fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2040.046632][ T31] #2: ffff888144fd3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2040.055501][ T31] #3: ffff888144fa6518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2040.066582][ T31] #4: ffff888140b9c068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2040.076956][ T31] [ 2040.079296][ T31] ============================================= [ 2040.079296][ T31] [ 2040.088290][ T31] NMI backtrace for cpu 1 [ 2040.088306][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2040.088327][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2040.088338][ T31] Call Trace: [ 2040.088347][ T31] [ 2040.088356][ T31] dump_stack_lvl+0x189/0x250 [ 2040.088387][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2040.088412][ T31] ? __pfx__printk+0x10/0x10 [ 2040.088449][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2040.088471][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2040.088492][ T31] ? __pfx__printk+0x10/0x10 [ 2040.088515][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2040.088547][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2040.088567][ T31] watchdog+0xf60/0xfa0 [ 2040.088590][ T31] ? watchdog+0x1e2/0xfa0 [ 2040.088612][ T31] kthread+0x711/0x8a0 [ 2040.088637][ T31] ? __pfx_watchdog+0x10/0x10 [ 2040.088653][ T31] ? __pfx_kthread+0x10/0x10 [ 2040.088677][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2040.088698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2040.088717][ T31] ? __pfx_kthread+0x10/0x10 [ 2040.088740][ T31] ret_from_fork+0x4bc/0x870 [ 2040.088762][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2040.088788][ T31] ? __switch_to_asm+0x39/0x70 [ 2040.088803][ T31] ? __switch_to_asm+0x33/0x70 [ 2040.088819][ T31] ? __pfx_kthread+0x10/0x10 [ 2040.088844][ T31] ret_from_fork_asm+0x1a/0x30 [ 2040.088874][ T31] [ 2040.088882][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2040.238245][ C0] NMI backtrace for cpu 0 [ 2040.238262][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2040.238282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2040.238294][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2040.238319][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2040.238336][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2040.238352][ C0] RAX: fcbb4bfe5155f100 RBX: ffffffff81967b97 RCX: fcbb4bfe5155f100 [ 2040.238366][ C0] RDX: 0000000000000001 RSI: ffffffff8d70bf5d RDI: ffffffff8bbf05e0 [ 2040.238379][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2040.238393][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd470 [ 2040.238407][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2040.238418][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 2040.238433][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2040.238446][ C0] CR2: 000055ebe5781660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2040.238462][ C0] Call Trace: [ 2040.238469][ C0] [ 2040.238476][ C0] default_idle+0x13/0x20 [ 2040.238500][ C0] default_idle_call+0x73/0xb0 [ 2040.238525][ C0] do_idle+0x1e7/0x510 [ 2040.238547][ C0] ? __pfx_do_idle+0x10/0x10 [ 2040.238571][ C0] cpu_startup_entry+0x44/0x60 [ 2040.238590][ C0] rest_init+0x2de/0x300 [ 2040.238606][ C0] start_kernel+0x3ae/0x410 [ 2040.238631][ C0] x86_64_start_reservations+0x24/0x30 [ 2040.238650][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2040.238674][ C0] common_startup_64+0x13e/0x147 [ 2040.238705][ C0]