last executing test programs: 4m46.942996273s ago: executing program 3 (id=9735): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$dsp(r2, &(0x7f0000000280)="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", 0xfd) 4m46.906181079s ago: executing program 3 (id=9736): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffff3}, 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2a00, 0x0) 4m46.862110285s ago: executing program 3 (id=9737): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001780), 0x101080, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000002000)) ioctl$VIDIOC_S_FBUF(r1, 0x402c560b, &(0x7f0000000280)={0x80, 0x21, &(0x7f0000000180)="f97a8fb0cd130db10bf9ce38ee7c7eacdef8f9d7b1367628b3b7dc1edd46ecf1a18a2c2b12ee4487237c3e062186048b92af8d3cb1ae17d0c6d5d3091e3f78d93abc65b6b98f9ad07eb1b7c7a8fdb8259c8aab4a0dbf2bf99635736e5d74ed7abedf5902992efc0002bc57326e175e6b6d4007f169e826105ffaeb3f8f8715c6f7864e768c54efc8e0566612bb789ce0a03bbceb0045bb3214aff2007a71b584cfdd9c47ff9b74ff68f79cae6ef4dccb50a9bf5e45583c2dea40d8d0ecebaee7e458", {0x80, 0x54, 0x34324948, 0x9, 0xf127, 0x7, 0xd, 0xffff8001}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/tracing', 0x0, 0x80) mknodat$loop(r2, &(0x7f0000000140)='./file0\x00', 0x10, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x85, @tick=0x9, 0x3, {0xc5, 0xd}, 0x8, 0x0, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)={0x44, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000400)="af11dd33a3d5e136946690fbeb480e32b19e21fbfe3b19ef3290a034d2b4e3086fe7d644b0696a5e6fcd29926d5ac5e8a57e7182972bc73298010066987e515b9fd1fda9bcf7356b3a91035f30a83e07e372ce87e16014d3804ab2e08da70b11a62db980477501d453da5798bd23098742c8941ab729200ef572882633eff6a32b4eab4e8f90ac08e1a1b6da0f416f4b30100aef392775bbe35e57f2b0a046e921e551ba5b51e1f40e90b013b55645b7d1bb484e7857de71216d0456a9efa26541091e909284603a6731", 0xca}, {&(0x7f0000000500)="ee313179eee5406ed5cb36e7ad3a53fe0df616aa06630c98f52e9d7ae39475d5d61440b6ea3f244931b87f1f4f69f8d93ec61c42f26bd42a40d31fd2d9b08b52644bd41918e66d2fb9460f95a3b31795d3a891afb63f4ab9fb05a674d27bda89467f629535d94c39443037c24315b6a735f0d4b6df7bc1ffcffba69e77247a411d0ec1431029c87a9e998119eb5c3fd6ea24d831d9edf8c9327d854847e5f8ad5271bef807ee877ecfe7e7cb791006f460081b443aada07c56a1e700453e3cc962aac7db3c5b1fe8803a18e5bdbbc32c285e67cae223a1adb5302dbcdbd77ae6bd60dd207c5a0f3e8df18b2b5ce4c858d4678411a461", 0xf6}], 0x2, 0x200, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}], {0x95, 0x0, 0x0, 0x1f}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4m46.818979865s ago: executing program 3 (id=9738): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = syz_io_uring_setup(0x233, &(0x7f00000005c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) connect$unix(r3, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e) landlock_create_ruleset(&(0x7f00000013c0)={0x8}, 0x8, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) readlinkat(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000440)=""/171, 0xab) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="b70b2cbd70"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f00000012c0)={&(0x7f0000001100), 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x124, r7, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xff80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x580}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x2d2}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40004}, 0xa0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r9, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 4m46.771208689s ago: executing program 3 (id=9739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d3, 0x190, 0x1, 0x2, 0xd59f80, 0x4, 0x80000001, 0x9, 0x8, 0x4, 0x71e, 0x13, 0x1be, 0x7f, 0x3f, 0x37, {0x0, 0x1}, 0x3, 0xed}}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) fcntl$setstatus(r8, 0x4, 0x42400) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r4, {0xa, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x7, 0xfffffffd, 0x7f, {0x40, 0x2, 0xc, 0x1, 0x1}, {0x6, 0x2, 0x6, 0x4, 0xad5, 0x101}, 0x6, 0x48000000, 0x9}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) 4m46.669895535s ago: executing program 3 (id=9740): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000040)=[{0xb, 0x2c, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="48da299d9d024aae6100faff817a528f", @ANYBLOB="ffd0f9deca9670a2d8eb78dbed6c8b9339272f1098a484e09f9461597b216ee510d40b9e22088d0422aa1fc8b638c7cf2da50cd988a97b0bb4762ebb2354ad31f5201ba918780bd660d0decce40dbeaee7215995eca497e54f814a3e676a70aa8b816a3115cc05eb66c53736753a128874ed6a0be446aab62144c88700b4de99a2425e0b3daf8095f31402c74ddf810f0bd123d87a49012ad94c63884f4923a28eb21c83c63b3ca03b91f09ef3a320d7d3fbceb9e3b0546aea771714bdc358a606e3b540072eb0c84b387ae61ad70e143003bd8b991aedf8c451a16e4fb4bd2ecd93a8922843a1d591137337d3dfefe52f1212a2f00e8243d9a6", @ANYRES8=r0], 0x3}}, 0x20000800) r3 = syz_io_uring_setup(0x2110, &(0x7f0000000700)={0x0, 0x3ca9, 0x10, 0x20000000, 0x10002da}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xa, 0x6000, @fd_index=0x9, 0x8, 0x0, 0x0, 0x11, 0x0, {0x1}}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000140), 0x0, 0x4) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3cfc, 0x0, 0x5, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x14}}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) 4m31.5193572s ago: executing program 32 (id=9740): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000000040)=[{0xb, 0x2c, 0x0, 0xfd, @tick=0x1, {0x20}, {0xe}, @raw8={"749a2dd6f809cd5d37deda88"}}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="48da299d9d024aae6100faff817a528f", @ANYBLOB="ffd0f9deca9670a2d8eb78dbed6c8b9339272f1098a484e09f9461597b216ee510d40b9e22088d0422aa1fc8b638c7cf2da50cd988a97b0bb4762ebb2354ad31f5201ba918780bd660d0decce40dbeaee7215995eca497e54f814a3e676a70aa8b816a3115cc05eb66c53736753a128874ed6a0be446aab62144c88700b4de99a2425e0b3daf8095f31402c74ddf810f0bd123d87a49012ad94c63884f4923a28eb21c83c63b3ca03b91f09ef3a320d7d3fbceb9e3b0546aea771714bdc358a606e3b540072eb0c84b387ae61ad70e143003bd8b991aedf8c451a16e4fb4bd2ecd93a8922843a1d591137337d3dfefe52f1212a2f00e8243d9a6", @ANYRES8=r0], 0x3}}, 0x20000800) r3 = syz_io_uring_setup(0x2110, &(0x7f0000000700)={0x0, 0x3ca9, 0x10, 0x20000000, 0x10002da}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xa, 0x6000, @fd_index=0x9, 0x8, 0x0, 0x0, 0x11, 0x0, {0x1}}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000140), 0x0, 0x4) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3cfc, 0x0, 0x5, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x14}}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) 48.872937318s ago: executing program 5 (id=11133): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x20040054) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, 0x0, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x200000000000000, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x9, 0x2, "6378e4330e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0xf, 0x2}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x3}, {0x4, 0x2}, {0x9, 0x3}, {0x2, 0x7}, {0xc, 0x2}, {0x8, 0x6}, {0x4, 0x2}, {0x9, 0x1}, {0x9, 0x2}], "37ec978b1de312f7"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 47.970323087s ago: executing program 5 (id=11139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.873218536s ago: executing program 5 (id=11140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x2000c804) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x2, &(0x7f0000000100)) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x100) 47.808993502s ago: executing program 5 (id=11141): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x43, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\b'}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 47.775244456s ago: executing program 5 (id=11142): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') (async, rerun: 64) r2 = openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={r5, 0x28, "99f2c39a315a5f6ea91528b39092b4ddec06947dc9feec6f6581e7a40af309ed3c2159fb853aadea"}, &(0x7f0000001400)=0x30) (async, rerun: 32) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x35, 0xffffffffffffffff) (rerun: 32) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800) (async, rerun: 32) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) (rerun: 32) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000200)={0x5002, 0x80000008, &(0x7f0000000100)=[0x3, 0xf1c1, 0x9], &(0x7f0000000140)=[0x8], &(0x7f0000000180)=[0x2, 0x4, 0x5, 0x5, 0x7, 0x7f, 0x84f3], &(0x7f00000001c0)}) (async, rerun: 64) keyctl$describe(0x6, r6, &(0x7f00000020c0)=""/4093, 0xffd) (rerun: 64) r8 = add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)="cc0f8c25ec3a67fd8c42943c8c", 0xd, r6) keyctl$dh_compute(0x17, &(0x7f0000000280)={r6, r6, r8}, &(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000000300)={&(0x7f00000002c0)={'sha1-asm\x00'}, &(0x7f00000030c0)="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", 0x1000}) 47.693783699s ago: executing program 5 (id=11143): socket(0xa, 0x3, 0x87) recvmmsg(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000001540)=""/132, 0x84}], 0x2}, 0x2}, {{&(0x7f0000000240)=@caif=@util, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000740)=""/96, 0x60}], 0xa}, 0x6}, {{&(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/34, 0x22}, {&(0x7f0000000940)=""/57, 0x39}], 0x2, &(0x7f00000009c0)=""/7, 0x7}, 0x5f81bb1f}, {{&(0x7f0000000a40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000bc0)=""/100, 0x64}], 0x1, &(0x7f0000005480)=""/4096, 0x1000}}, {{&(0x7f00000013c0)=@qipcrtr, 0x80, &(0x7f0000001380)=[{&(0x7f0000000cc0)=""/254, 0xfe}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/186, 0xba}, {&(0x7f0000000ec0)=""/248, 0xf8}, {&(0x7f0000000fc0)=""/209, 0xd1}, {&(0x7f00000010c0)=""/150, 0x96}, {&(0x7f0000001180)=""/205, 0xcd}, {&(0x7f0000001280)=""/193, 0xc1}], 0x8, &(0x7f0000003c00)=""/154, 0x9a}, 0x2}, {{&(0x7f0000001480)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000003600)=""/238, 0xee}, {&(0x7f0000003700)=""/181, 0xb5}], 0x3}, 0x1}, {{&(0x7f00000037c0)=@nfc, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003840)=""/192, 0xc0}, {&(0x7f0000003940)=""/126, 0x7e}], 0x2, &(0x7f0000003a00)=""/234, 0xea}, 0x101}], 0x7, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a00)={0x88, 0x0, &(0x7f0000000b00)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1300000000000000, &(0x7f0000000900)='H'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r7, 0x5}}, 0x10) socket$alg(0x26, 0x5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x808c03, &(0x7f0000002880)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x3a96, &(0x7f0000000c40)={0x0, 0x57ce, 0x800, 0x2, 0xc0000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x6, 0x4007, @fd=r8, 0xd, 0x0, 0x0, 0x3, 0x0, {0x2}}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 32.474338055s ago: executing program 33 (id=11143): socket(0xa, 0x3, 0x87) recvmmsg(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000001540)=""/132, 0x84}], 0x2}, 0x2}, {{&(0x7f0000000240)=@caif=@util, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000740)=""/96, 0x60}], 0xa}, 0x6}, {{&(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/34, 0x22}, {&(0x7f0000000940)=""/57, 0x39}], 0x2, &(0x7f00000009c0)=""/7, 0x7}, 0x5f81bb1f}, {{&(0x7f0000000a40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000bc0)=""/100, 0x64}], 0x1, &(0x7f0000005480)=""/4096, 0x1000}}, {{&(0x7f00000013c0)=@qipcrtr, 0x80, &(0x7f0000001380)=[{&(0x7f0000000cc0)=""/254, 0xfe}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/186, 0xba}, {&(0x7f0000000ec0)=""/248, 0xf8}, {&(0x7f0000000fc0)=""/209, 0xd1}, {&(0x7f00000010c0)=""/150, 0x96}, {&(0x7f0000001180)=""/205, 0xcd}, {&(0x7f0000001280)=""/193, 0xc1}], 0x8, &(0x7f0000003c00)=""/154, 0x9a}, 0x2}, {{&(0x7f0000001480)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000003600)=""/238, 0xee}, {&(0x7f0000003700)=""/181, 0xb5}], 0x3}, 0x1}, {{&(0x7f00000037c0)=@nfc, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003840)=""/192, 0xc0}, {&(0x7f0000003940)=""/126, 0x7e}], 0x2, &(0x7f0000003a00)=""/234, 0xea}, 0x101}], 0x7, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a00)={0x88, 0x0, &(0x7f0000000b00)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1300000000000000, &(0x7f0000000900)='H'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r7, 0x5}}, 0x10) socket$alg(0x26, 0x5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x808c03, &(0x7f0000002880)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x3a96, &(0x7f0000000c40)={0x0, 0x57ce, 0x800, 0x2, 0xc0000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x6, 0x4007, @fd=r8, 0xd, 0x0, 0x0, 0x3, 0x0, {0x2}}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 11.999103982s ago: executing program 1 (id=11309): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)="f35e665140b281e083a2d6d9d97e", 0xe}], 0x1, &(0x7f00000008c0)=[{0xc, 0x10a, 0x7}], 0xc}}, {{&(0x7f0000000a40)=@in={0x2, 0x4e26, @broadcast}, 0x80, 0x0}}], 0x2, 0x400c020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 10.962674615s ago: executing program 1 (id=11312): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xec, 0xa, 0x148, 0xec, 0x60, 0x17c, 0x2a8, 0x2a8, 0x17c, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0xec, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0xf5, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90, 0x0, {0x20000000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x26c) 10.815438052s ago: executing program 1 (id=11315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="20e3ffff6800b100000000000000000000de881cdc000000080001df8e25fa81e8105e0001000000201635b12176bd9ef25f255826efe105dd5ffce71fc1f6a4b4e4f4161d7bc56b6db7ab7319e707e6f7e7bc7042fc668aa46c2613cbf7f56702c30823e851e18b4853f459022078b75ab4f45332fb4c429e6b5c9095900cb12668432d8409310fc0c49ae71ec6833172cdcadb7f38da499323dea174f831f12f8f0c0107426338ce966b94837c87744e267f3bcf37501aa9e98708efe4b682e3fcaa03bf1812bac5b6038de864b309f27d71a163fe3b74e3630500000000"], 0x20}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r5, r6, 0x8f5, 0x100000000000000) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.867222277s ago: executing program 1 (id=11320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x110, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DESC={0xcc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x138}}, 0x0) 9.686954579s ago: executing program 1 (id=11321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001618110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.606474569s ago: executing program 4 (id=11322): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000406010100000000000000000300000205000100000100000000000073797a31000000000900020073797a32000000000900020073797a300000000005000100070000000900020073797a3000000000"], 0x54}}, 0x480c4) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000ba2f050000000000000000000700000114000480"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) (async) unshare(0x28040600) (async) r8 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0500000000000000383e3b7f4547f09171de45058176483c00010024000100757365720500000000000000000000000000000000000000000005000300060000952b8477c86663ea5c20f77990da4ea2130b6ded2e8d884379d6d4f0cf4ac6d947095602f141f56d43b20127f5ae61782fcb396b41479c265752a7b8057c10eb2cc60f3d3de3000000008d60d54a0c5b39a2e0cc81cde4583026beaa4c01cc78e6c5a6fadfe66341f706d455f6d81e1e6d3261030aeead4894a984895f0b036f5fbc56917efb2d40353767392966414bd963b73a6c433371a7c9", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r7, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r7, @ANYBLOB="700102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000d0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010000804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400faffffff38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400280e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x644}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(r8, 0x89f6, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) (async) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) (async) r12 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) mknod(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0xfff) syz_io_uring_submit(r13, r14, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r12, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}) (async) io_uring_enter(r9, 0xdb4, 0x0, 0x0, 0x0, 0x0) 9.54728366s ago: executing program 1 (id=11323): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)="f35e665140b281e083a2d6d9d97e", 0xe}], 0x1, &(0x7f00000008c0)=[{0xc, 0x10a, 0x7}], 0xc}}, {{&(0x7f0000000a40)=@in={0x2, 0x4e26, @broadcast}, 0x80, 0x0}}], 0x2, 0x400c020) 8.861109361s ago: executing program 4 (id=11325): getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@nullb, r0, &(0x7f0000000100)={0x0, 0x2, 0x1}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001780)={'ip_vti0\x00', &(0x7f0000001700)={'gretap0\x00', 0x0, 0x700, 0x790, 0x4, 0x3, {{0x11, 0x4, 0x1, 0x32, 0x44, 0x67, 0x0, 0xfe, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x8e, 0x0, 0x6, [0x2, 0xd]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x54, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @loopback, @private=0xa010101]}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001ac0)={@private, @local, 0x0}, &(0x7f0000001b00)=0xc) sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="f22706025c5620660f228f5e64528b1720d481a2bee9f90666596c5b3fae3534bbef2b40e31e52d7e3ab360728ed643f5e5fa1131d08433897032dea5313519c5b3249d910f87e26b61740f52d125f352997c57a614df5daca6ee3f6ad8353ee6a0519e5c31f17ae3a5d48623af606f6f51405749b915a9a456fe207e8b3a918e5ec2178ed91ba7a94f9242b76cac38b0957dddd19afe8569af8bd9fdb59df185c2f1fbc9389412fe39119dddfa4c25bf5f9cb9034788eba60ef31e81349e1e0e073ef51dbdaec8ab0ccae3fb8136204dc682ba2b9bfb4c6744a1b29268d0d5cc395e7dc2d693fd0b6c0cc67e4b770a787ab24e92c7b2b8d4d00", 0xfa}, {&(0x7f0000000280)="727a09ef5ecafeb497ca8e7feceafacf0d28b34c28b5a2b6bf832ae2a4c37901b456ceafeb60c9e6f297dd116ee92f65835a8462469468488be9bb215574fb8665af139afd3b4d0d7e85376ed86a49547908b3c350f4428b67b451120b4bb09fe772b4a24a1f2da9447f8bc221b4931b1b452ba5817b2348fc8612e216c91e692887fa328b2182e5db1c606d50757a676c891ee993e76604bbbc807f8621168341e4375d3d9c16e7f665", 0xaa}, {&(0x7f0000000340)="9958eca2dc", 0x5}, {&(0x7f0000000380)="1dc2ab607b971efe5323b01eda83b3a90d2f3c1fbc82d413ff989801e7305b55e3b5359043ed0994b282992c8bab1c936a393653449303ebf4be231518d016e2545d400cb82352f850b7f3082b8eb7b1e7a2d3c69ae0ab7b13c862604aaae99b", 0x60}, {&(0x7f0000000400)="fb00f015e4729df68753100157718d2cbffc3936b5e86ebbb5fe41c374e862891f0edb72565299d29189a21520670d100733a812c71e09227fa44203bc9d15bb796388a981bf645c0574fadaca525099abcec474a269af022bff938824ecde16a24be6e42f7cf442514f001ad0c15f429ad369be191ef20ccd68e65ad39e3e8b2813b4639b", 0x85}, {&(0x7f00000004c0)="b809e450326cf85e83e17397c07b4e28e2770dcf23b8fd63ddd13070d1fc47dc3f91472b9f46e0e2c30eb6f566608d19b715d097b91ea9c197ba02f1b71ae74b4219cd1c7ccdd047ef0ad7e72dc0294c5cb79502fa7183e91faade8bc18bcf18022d75ff369ee7e6813b9cb46bd6305cb563218882421c1a6281fad0dc64261244412a1dd9ed69247285b0bcc4", 0x8d}], 0x6, &(0x7f00000005c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x800}}], 0x10}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="bf68f4a2a6091db3ef7ef5cf0bf56877de8ae7dfcc70090f828bf1753af99783e91de0a4e7e45461150df393897e0c8680e38366a47123133c40cd072488acdd3a70e50875ea08db17b0fcc3e0bd07713344f5adf8de885f22cbe87b91d04f3f81549ac7002e9203924a72b1b8fe90ecd069c8876b909dbd5543a834a3d05366fdf9153ae1362b0be4c92d7adc786562adbdbedd0bafdfedd41a6f", 0x9b}], 0x2, &(0x7f00000017c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xc1}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @multicast2, @multicast2}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001800)="b8154fdd8bc826c3a5261c2c526b881e11d02eb9c241582df79e60b39f36e5d07459d9c7ad6181b95fbbe74c431fb6a982d0bb0a881d823788836c644efeffe37709233ff4969d79a6595503b22bd19f3de3e999a72d6b900c8816e8f031f4003a9848dab549307fc2dc64a021913aeeeef69d30", 0x74}, {&(0x7f0000001880)="5d020452e22ab104432c66200946d26ec65ffb2b73a99e9eb205588be2c14edaaa897338125092efd9b1393bd0658e3ee65289f72959fc848abaf1140825de773b6c3830455c55869e8db63d755e366d4c26dcb5eccb06e3a10eb2d905e1495e274d86f2ba6fb594ddb0dd99990c87c0af69943a09ed29ecfe", 0x79}, {&(0x7f0000001900)="fc11b03c0b29b7f6df634d20e4b9cbb5bbff06d39374391bd4e8548cebdcacb7f6e6a97c15419bf52822bae367a9f8affa29cb50dbb9e8139aac36baceed55fec1ac01c297c6524e71cb4fa5378d0537607cac31bf78568b91ecfadc3a545d129929fc71b42aa31c36c0ba9d05e33291e2782f8d8e5cf504a7b93f717655d55f4909484dc2ca358d1d9eb17d0b57b67d08c09754cea0ab38f5b37d17023d42a1024071dd", 0xa4}, {&(0x7f00000019c0)="7507ec0e014c70c3369692a03bafc4f8e0905dbaa940d1a473543786f592da4a2a9f7997e855010fb47b8fe79d607fd09e94ce0a2c34dd1a4e9fe1b04237d14da38d691227740e7b00bdba1b47045415d2e8e5644b22ea6380e44851ae09d88f885980ad96412ff5d9581d6fb630c6fdccb4d1eb859614ef4dea3ecdacc6ec9c3b456f2d597de5152994af27e0", 0x8d}], 0x4, &(0x7f0000001b40)=[@ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x9b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_addr={0x44, 0x3c, 0xab, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x5}, {@empty, 0x4}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6}}], 0xb0}}], 0x3, 0x4841) r4 = openat$drirender128(0xffffff9c, &(0x7f0000001c80), 0x400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000001cc0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000001d00)={r5}) socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) close_range(r4, r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001d40)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224\x00'}, 0x58) r8 = socket$isdn(0x22, 0x3, 0x1) r9 = openat$dlm_plock(0xffffff9c, &(0x7f0000001dc0), 0x40202, 0x0) ioctl$BLKGETNRZONES(r9, 0x80041285, &(0x7f0000001e00)=0x21fa) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x3c, 0x464, 0x200, 0x70bd27, 0x25dfdbfe, "85b082a7850c151e73ab166c405755da986dfd3acdef490e6c21c7ffcd234c1fe28ce70513733db257", ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, &(0x7f0000001f40)={0x8e183fddcc3be0e7, 0x201000}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02864c3, &(0x7f0000001fc0)={&(0x7f0000001f80)=[r5, r5, r5, r5, r5, r5, r5, r5], 0x8001, 0x8, 0x4}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000002000)=0x40) read$FUSE(r8, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, r10, &(0x7f0000004080)={0x7, 0x7, 0x0, 0x1}) socketpair(0xf, 0x3, 0x9, &(0x7f00000040c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000004100)={'bond0\x00', 0x400}) ioprio_get$uid(0x3, r0) getsockopt$inet_mreq(r12, 0x0, 0x23, &(0x7f0000004140)={@dev, @broadcast}, &(0x7f0000004180)=0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000041c0), r13) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000004280)={0x0, 0xffffffff}, &(0x7f00000042c0)=0x8) 8.740806461s ago: executing program 4 (id=11326): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000000000e0eb0560000100000000090400000103000200092100000001220700090581030000000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xee, &(0x7f0000000780)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x2, 0xa0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x304, 0x3, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0x4, "df65", 'VV'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x3, 0xfe, "871c953bf5"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x9, "e274bc6d"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x2, 0xfd, 0x40, "5b5cb8c1ea2e"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x64, "7323ae"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x5, 0x3, {0x7, 0x25, 0x1, 0x80, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7f, 0x6, "1c2c849042b75dd874"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0x3, "", "d471"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x1, 0xe, 0xf8, "8a", "ac2c"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x3, 0x81, "9e"}]}, {{0x9, 0x5, 0x82, 0x9, 0xe5167e501ca362d9, 0x61, 0x3, 0x40, {0x7, 0x25, 0x1, 0x0, 0xda, 0x4}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0xc4, 0x34, 0x6, 0x8, 0x8}, 0x28, &(0x7f0000000480)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x10, 0x5, 0x6, 0xf, 0x7f, [0x1bfc0, 0x3f0f, 0xc0, 0xc0, 0x0]}, @ptm_cap={0x3}]}, 0x4, [{0x2a, &(0x7f0000000500)=@string={0x2a, 0x3, "eab5ab18a40b2a91b698a6c4a601343dccb4be97c6afd3e1836a1ba48be44656fb0684ec4ea4fc76"}}, {0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="2b03ef444e765fe3ba91d9f5e62a953f19bdb4d73a179a932f7a0c792f6b2f1ec5cc9d44f66e80a7981880"]}, {0x1f, &(0x7f0000000580)=@string={0x1f, 0x3, "9c2bcde649d3b3ddf93a001698209a359173efd846189c9b5fba7f7273"}}, {0x8c, &(0x7f0000000680)=@string={0x8c, 0x3, "4125d9e07bf96f441edb093e1095e3fbd5e00f65c1e3624d398aac1034e7a0857c633ee24b28dedf625d40a83fd2ae1b7d58dfa3c34c2207edbc13d93be1464bbab5876dad5b32903405be12eec356c996556a982ffb76ab96cd03366802fe3f251cdcba489cff119184ec47dedf67a02bc7b53f58c5c30488aff19c7c66417c7e04aa6e8bf611fde537"}}]}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2}) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x7283}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="b2173e6e8074e799b5c82957f2bc9426c2e8b49c9d2f939d15363f0e61f930fd038193d6048124580ff8dc12a3b44ca71ba8dec8a55c6d2f0cea97a18fde96c2f2e94ffb7773c04c77fd6a462f6ccd694bd0a0e0573269051b33a72303fdbaf9387be56bc95c6df04de7777a6eb2e9efda4211f8bf8792169cca949a35620edd7eea95c8670a53afbb1c1f270d44823d1cf678ac3a3211f427d915676e4065f0e3eb69f7447f25d61c147b679a9debba183e5a1fd220b7605e42034f631071a770867ecb25e61640824903a041c013be5d9dc0", @ANYRES16=r7], 0x34}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) close_range(r6, 0xffffffffffffffff, 0x0) r11 = openat$uhid(0xffffff9c, &(0x7f0000000200), 0x802, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000240)=[r1, r5, r5, r11, r2, r3, r0]}, 0x7) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0xf) ioctl$KVM_XEN_HVM_CONFIG(r13, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.063111416s ago: executing program 2 (id=11328): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b160000000000000000020000082400048020000180080001006f73660014000280"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x0, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x10) (async) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7736, 0x80, 0x0, 0x26d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x7, 0x200, 0xfffffe01, 0x9, 0xa0, 0xfff, 0x7}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000440)={r7, @in={{0x2, 0x4e24, @multicast1}}, 0x4, 0x3}, &(0x7f0000000100)=0x88) (async) bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) r8 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x24, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.584194894s ago: executing program 2 (id=11330): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x43, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 6.57588764s ago: executing program 2 (id=11335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.534751774s ago: executing program 6 (id=11336): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r0, 0x0, 0xc, 0x8045, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @local}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3b2) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x4000) 6.431745137s ago: executing program 6 (id=11337): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20040054) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x6}, {0xf, 0x2}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x3}, {0x4, 0x2}, {0x9, 0x3}, {0x2, 0x7}, {0xc, 0x2}, {0x8, 0x6}, {0x4, 0x2}, {0x9, 0x1}, {0x9, 0x2}], "37ec978b1de312f7"}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 6.104812152s ago: executing program 2 (id=11338): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES16], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0xf0, 0xfb0, 0x1, 0x2, 0xfffffffffffffff7, 0x3, 0x3, 0xdf0b941, 0x0, 0x7, 0x3, 0x9, 0x5e3, 0xe, 0x12, 0x5, {0x4, 0x8}, 0x1, 0x2}}) 5.569177347s ago: executing program 4 (id=11339): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000200), 0x0, 0xfffffffffffffff8) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) keyctl$link(0x8, r2, r2) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, 0x0, 0x4000010) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000100)=0x47, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r3], 0x190}}, 0x400c4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0xfff}}) 5.275422959s ago: executing program 6 (id=11342): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$nbd(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000200ff058372b5008290cfc4337965941538be02000000000000000000007400a391793ba7f40000000004fdf700"/64], 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000004c80)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x4, 0x5, 0x9b}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000]}) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt(r3, 0x80000001, 0x80101, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x49) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, &(0x7f0000000140)={0x8f, &(0x7f00000001c0)="7016f8c77c41562f42647fa2eb2a543aa32950f740594cab35b30f713997713f76d3fd9bdc66e13c529fe7a468cfdcc749f6188780973e475b46a144264578458191061dbd9651a101dda0126ff82be17a2a417e400d2e71c43561d35c58a7b41e8fd288983abb7b877ccc8cffc3f3cea3531c58d199e4409d5234e82c9979b8d17c88bf36717d308fc6ebb4e20862"}) 3.311317006s ago: executing program 6 (id=11344): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10) fsmount(r0, 0x1, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040)=r3, 0x12) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x3200000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000000c0)={{0x73, @private=0xa010100, 0x4e23, 0xfffffffe, 'lblcr\x00', 0x2d, 0x6, 0x52}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7fffffff, 0x5, 0x77b}}, 0x44) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) getpriority(0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.155841554s ago: executing program 0 (id=11345): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xec, 0xa, 0x148, 0xec, 0x60, 0x17c, 0x2a8, 0x2a8, 0x17c, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0xec, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0xf5, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90, 0x0, {0x48010000}}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x26c) 3.12776277s ago: executing program 0 (id=11346): sendmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)="f35e665140b281e083a2d6d9d97e", 0xe}], 0x1, &(0x7f00000008c0)=[{0xc, 0x10a, 0x7}], 0xc}}, {{&(0x7f0000000a40)=@in={0x2, 0x4e26, @broadcast}, 0x80, 0x0}}], 0x2, 0x400c020) 2.625642001s ago: executing program 0 (id=11347): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.518709211s ago: executing program 2 (id=11349): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffff1f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d000000000002fdbf43"], 0x50) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r3, 0x2, {0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x5, 0x11, 0x8, "be4c2039f3cddb8750903b1607bb8a2b4ecd1913deab72eb33f864a3b391ff9bc5b5e92de67b73fac00442e8d01bf32951a9a1b48386331ebdebf362de6895fd", "847cbd4461dc9e33c794a5397595c47bdda29fe7ff81aaf2570ceaa90b30e060fed413408a8830d947873339d5aaaa1391cc2252f6dac1a7ab55594eb6edd6dd", "8d2b64baa2a93319dc7b814122cdd0bfc68da9bde78898aa749f3098b8e64193", [0x80000001, 0x3]}}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x8000000000000000]}}) tgkill(r2, r2, 0x21) syz_open_procfs(r2, &(0x7f00000000c0)='net/sctp\x00') 2.335356117s ago: executing program 0 (id=11350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.162081595s ago: executing program 0 (id=11351): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f00008d9000/0x4000)=nil, 0x4000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x1a004) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x800) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x1e, 0x80801, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000200)=0x7fd, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0xfffffffffffffe96, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x27dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10e) 2.161766991s ago: executing program 4 (id=11352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@migrate={0xf8, 0x26, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}}, [@policy={0xa8, 0x7, {{@in=@multicast2, @in=@empty}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8, 0x1}, {0x4, 0xa, 0xfffffffd}, 0x0, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) (async) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8, 0x1}, {0x4, 0xa, 0xfffffffd}, 0x0, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffffff9, 0xe0, 0x0, 0x8, 0x7, 0xb, 0xfffffe01}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x1f, 0x4, [@m_vlan={0xfffffffffffffeee, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x1f, 0x4, [@m_vlan={0xfffffffffffffeee, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.03197516s ago: executing program 6 (id=11353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x110, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DESC={0xcc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x138}}, 0x0) 1.856926485s ago: executing program 6 (id=11354): r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) creat(&(0x7f00000000c0)='./file0\x00', 0x1) r2 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xac}, 0x0, 0x8400, 0x1}) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$P9_RSTATu(r7, 0x0, 0x62) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0x4020565b, &(0x7f0000000040)={0x0, 0xd9c}) sendto(r6, &(0x7f0000000000)="3e2561c935078693831952b8232ca3a59169a65ec1ebe69dd5b63c5d06a818df3a68417ad0ccb2ed73a810e5834c659cc52dfe47837741beba06cc84281d9e8a6734d28427855829b94a9e3ab5b2bfe8840da737be433e1bb0be67a38e32c715a91be27ed4e721745540080a8fea9b23c3533a4f4ce0cac82b28f5bd3116a9ed936427b0a4702fde2c73a08c8bba32ca8ec9af7d4440dc1fc38b29b54dff687d504fde5f19467f0f30838fbd3a1d2e8e0642aa57efc4da71ac", 0xb9, 0x4801, &(0x7f00000000c0)=@llc={0x1a, 0x300, 0x6, 0xfd, 0x11, 0x2a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) 135.947088ms ago: executing program 2 (id=11355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$nbd(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000200ff058372b5008290cfc4337965941538be02000000000000000000007400a391793ba7f40000000004fdf700"/64], 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000004c80)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x4, 0x5, 0x9b}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000]}) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt(r3, 0x80000001, 0x80101, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x49) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, &(0x7f0000000140)={0x8f, &(0x7f00000001c0)="7016f8c77c41562f42647fa2eb2a543aa32950f740594cab35b30f713997713f76d3fd9bdc66e13c529fe7a468cfdcc749f6188780973e475b46a144264578458191061dbd9651a101dda0126ff82be17a2a417e400d2e71c43561d35c58a7b41e8fd288983abb7b877ccc8cffc3f3cea3531c58d199e4409d5234e82c9979b8d17c88bf36717d308fc6ebb4e20862"}) 5.153097ms ago: executing program 4 (id=11356): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x23c, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@unspec=@connlabel={{0x24}, {0x1000, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x7, 0x1, 0x2, 0x2, 0x3], 0x0, 0x2}, {0x1, [0x1, 0x7, 0x2, 0x2, 0x4, 0x2], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x298) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000002, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x3, 0xc, 0x2, 0x0, 0x5}}, 0x1202}) syz_emit_ethernet(0xe3, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0xfffd, "32ca21e2c3bc8ff4c7be5934f7a73c4901d71a0f37853ee9d3faddc308ac42039199f2ae405689f70321011c4df4bd698ce2e55aff030000afd47aac905617630fd51a78e0746a1bd00febee0383a41d32f08c0d46638b2b5619bab34a99dbcbe991cbf61e6bc086a5c7032a3e0077e45f9bd51c4868dd79b9f184785599e1b9abf47a2c513c085e1862d93bf7bf43e35b2a00000000000008f5bbf2fa8d69b35b03000000535cf520097a2b45191c435ad691a29a61f3ac4f"}}}}}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000fc0)=@multiplanar_fd={0x0, 0x9, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1769732f"}, 0x0, 0x4, {&(0x7f0000000380)}, 0x8}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) 0s ago: executing program 0 (id=11357): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000240)=""/145, &(0x7f00000000c0)=0x91) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x1ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', r6, r4, 0x3, 0x2, 0x1}, 0x50) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) io_uring_setup(0x597f, &(0x7f0000000180)={0x0, 0xd492, 0x1, 0x0, 0x2f}) syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20800, 0x0) utimensat(r9, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): 0.469868][ T3263] usb 2-1: config 0 descriptor?? [ 1890.476903][ T6671] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1890.478314][ T5708] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.506889][ T3263] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input119 [ 1890.522767][ T5708] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1890.547469][ C1] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1890.556678][ T5708] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1890.592541][ T5708] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1890.626943][ T5708] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1890.641125][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.649301][ T5708] usb 6-1: Product: syz [ 1890.653639][ T5708] usb 6-1: Manufacturer: syz [ 1890.658402][ T5708] usb 6-1: SerialNumber: syz [ 1890.702299][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1890.762952][ C1] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1890.765997][ T5708] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input120 [ 1890.877581][ T6671] input: syz0 as /devices/virtual/input/input121 [ 1890.917454][ T5708] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1890.926147][ T5708] (id 0x00) [ 1891.030054][ T5708] rc_core: IR keymap rc-imon-pad not found [ 1891.042538][ T5708] Registered IR keymap rc-empty [ 1891.048435][ T5708] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1891.063544][ T5708] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1891.159727][ T5708] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1891.210120][ T5708] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input122 [ 1891.244380][ T5708] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:30> initialized [ 1891.341687][ T6666] imon:display_open: display port is already open [ 1891.390048][ T24] usb 6-1: USB disconnect, device number 30 [ 1891.512295][T27964] usb 2-1: USB disconnect, device number 10 [ 1892.056095][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.063567][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.471334][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1892.499186][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1893.036403][ T4338] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.057465][ T414] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1893.082668][ T4338] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.113254][ T4338] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.127958][ T4338] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.229971][ T414] usb 6-1: Using ep0 maxpacket: 16 [ 1893.250866][ T414] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1893.285533][ T414] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1893.306896][ T414] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1893.320147][ T414] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1893.338793][ T414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.346828][ T414] usb 6-1: Product: syz [ 1893.369211][ T414] usb 6-1: Manufacturer: syz [ 1893.373853][ T414] usb 6-1: SerialNumber: syz [ 1893.393279][ T414] usb 6-1: config 0 descriptor?? [ 1893.445125][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1893.445143][ T30] audit: type=1326 audit(1766546332.552:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.508647][ T30] audit: type=1326 audit(1766546332.552:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=170 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.548680][ T30] audit: type=1326 audit(1766546332.552:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.617610][ T30] audit: type=1326 audit(1766546332.552:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.700371][ T30] audit: type=1326 audit(1766546332.552:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.760544][ T30] audit: type=1326 audit(1766546332.552:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.813522][ T30] audit: type=1326 audit(1766546332.592:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.820402][ T5919] usb 6-1: USB disconnect, device number 31 [ 1893.908058][ T30] audit: type=1326 audit(1766546332.592:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.931165][ T30] audit: type=1326 audit(1766546332.612:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1893.953531][ T30] audit: type=1326 audit(1766546332.612:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.10682" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1895.080039][ T6772] input: syz0 as /devices/virtual/input/input123 [ 1895.135637][ T6776] netlink: 'syz.1.10689': attribute type 1 has an invalid length. [ 1895.143670][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10689'. [ 1895.194659][ T6776] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1895.747051][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10692'. [ 1895.898808][ T6791] ptrace attach of "./syz-executor exec"[31514] was attempted by "./syz-executor exec"[6791] [ 1896.126684][ T6769] netlink: 'syz.5.10687': attribute type 20 has an invalid length. [ 1897.896491][ T6836] fuse: Bad value for 'rootmode' [ 1898.098265][ T6845] trusted_key: encrypted_key: insufficient parameters specified [ 1898.458446][T14577] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 1898.602847][ T6849] xt_bpf: check failed: parse error [ 1898.719051][ T6851] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10713'. [ 1898.738014][ T6852] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10713'. [ 1898.851974][T14577] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 1898.861359][T14577] usb 2-1: config 0 has no interface number 0 [ 1898.867728][T14577] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 1898.879286][ T6851] input: syz1 as /devices/virtual/input/input124 [ 1898.914067][T14577] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1898.939160][T14577] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 1898.957579][T14577] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 1898.984808][T14577] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 1898.998527][T14577] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1899.007920][T14577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.060810][T14577] usb 2-1: config 0 descriptor?? [ 1899.066596][ T6846] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1899.095275][T14577] hub 2-1:0.3: bad descriptor, ignoring hub [ 1899.121373][T14577] hub 2-1:0.3: probe with driver hub failed with error -5 [ 1899.152082][T14577] sierra 2-1:0.3: Sierra USB modem converter detected [ 1899.297806][T14577] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1899.326881][T14577] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1899.410831][T14577] usb 2-1: USB disconnect, device number 11 [ 1899.475435][T14577] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1899.543044][T14577] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1899.562918][T14577] sierra 2-1:0.3: device disconnected [ 1899.935066][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10722'. [ 1900.109675][ T6880] fuse: Unknown parameter 'f0x000000000000000a' [ 1900.153449][ T6883] cifs: Unknown parameter 'fd' [ 1900.533406][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10731'. [ 1900.548595][ T6897] vivid-000: disconnect [ 1900.604696][ T6897] Cannot find del_set index 0 as target [ 1901.564725][ T6903] vivid-000: reconnect [ 1901.940063][ T5962] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1902.100202][ T5962] usb 6-1: device descriptor read/64, error -71 [ 1902.338343][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10738'. [ 1902.378676][ T5962] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1902.537870][ T5962] usb 6-1: device descriptor read/64, error -71 [ 1902.647872][ T5962] usb usb6-port1: attempt power cycle [ 1902.932252][ T5889] IPVS: starting estimator thread 0... [ 1903.007674][ T5962] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1903.072981][ T6949] IPVS: using max 53 ests per chain, 127200 per kthread [ 1903.099418][ T5962] usb 6-1: device descriptor read/8, error -71 [ 1903.350096][ T5962] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1903.383371][ T5962] usb 6-1: device descriptor read/8, error -71 [ 1903.507678][ T5962] usb usb6-port1: unable to enumerate USB device [ 1903.837487][ T5917] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1903.988986][ T5917] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 1903.997090][ T5917] usb 2-1: config 0 has no interface number 0 [ 1904.003467][ T5917] usb 2-1: config 0 interface 23 has no altsetting 0 [ 1904.012139][ T5917] usb 2-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=70.90 [ 1904.021484][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.029597][ T5917] usb 2-1: Product: syz [ 1904.033793][ T5917] usb 2-1: Manufacturer: syz [ 1904.038718][ T5917] usb 2-1: SerialNumber: syz [ 1904.045975][ T5917] usb 2-1: config 0 descriptor?? [ 1904.053430][ T5917] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 1904.155487][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.164794][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.175840][ T6962] input: syz0 as /devices/virtual/input/input126 [ 1904.472482][ T6963] netlink: 'syz.1.10745': attribute type 16 has an invalid length. [ 1904.480748][ T6963] netlink: 'syz.1.10745': attribute type 17 has an invalid length. [ 1904.495163][ T6963] sit0: left promiscuous mode [ 1904.531718][ T6963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1904.568729][ T5917] gspca_sn9c20x: Write register 1000 failed -110 [ 1904.575364][ T5917] gspca_sn9c20x: Device initialization failed [ 1904.583491][ T5917] gspca_sn9c20x 2-1:0.23: probe with driver gspca_sn9c20x failed with error -110 [ 1904.599681][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.611081][ T6968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1904.622484][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.431526][ T6978] kAFS: unable to lookup cell 'mSjˡ8' [ 1905.461432][ T6977] syz.5.10750 (6977): drop_caches: 2 [ 1905.785819][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10753'. [ 1905.815117][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10755'. [ 1905.891287][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10755'. [ 1906.287644][ T5962] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1906.628712][ T5919] usb 2-1: USB disconnect, device number 12 [ 1906.638773][ T5962] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1906.647277][ T5962] usb 6-1: config 0 has no interface number 0 [ 1906.674069][ T5962] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1906.696415][ T5962] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1906.747656][ T5962] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1906.944463][ T5962] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1906.960144][ T7019] xt_bpf: check failed: parse error [ 1906.965442][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.104124][ T5962] usb 6-1: config 0 descriptor?? [ 1907.115765][ T7003] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1907.238313][ T5962] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input127 [ 1907.519331][ T7020] input: syz0 as /devices/virtual/input/input128 [ 1907.556406][ T7024] netlink: 'syz.4.10762': attribute type 6 has an invalid length. [ 1907.669246][ T7013] netlink: 'syz.2.10759': attribute type 20 has an invalid length. [ 1908.032899][ T5962] usb 6-1: USB disconnect, device number 36 [ 1908.038999][ C0] usbtouchscreen 6-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1908.578088][ T7043] loop5: detected capacity change from 0 to 7 [ 1908.643161][ T7043] Dev loop5: unable to read RDB block 7 [ 1908.670367][ T7043] loop5: unable to read partition table [ 1908.691284][ T7043] loop5: partition table beyond EOD, truncated [ 1908.712275][ T7043] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1908.774578][ T5202] Dev loop5: unable to read RDB block 7 [ 1908.855449][ T5202] loop5: unable to read partition table [ 1908.882460][ T5202] loop5: partition table beyond EOD, truncated [ 1909.944864][ T7058] xt_bpf: check failed: parse error [ 1910.015361][ T8817] gretap0: left allmulticast mode [ 1910.024682][ T8817] gretap0: left promiscuous mode [ 1910.030038][ T8817] bridge0: port 3(gretap0) entered disabled state [ 1910.116076][ T8817] bridge_slave_1: left allmulticast mode [ 1910.128055][ T8817] bridge_slave_1: left promiscuous mode [ 1910.136528][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.192252][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.218264][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.218514][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.227172][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.252854][ T8817] bridge_slave_0: left allmulticast mode [ 1910.282102][ T8817] bridge_slave_0: left promiscuous mode [ 1910.292402][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.402054][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10776'. [ 1910.639501][ T7079] sctp: [Deprecated]: syz.2.10775 (pid 7079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1910.639501][ T7079] Use struct sctp_sack_info instead [ 1910.807281][ T7084] loop5: detected capacity change from 0 to 7 [ 1910.819568][ T7543] Dev loop5: unable to read RDB block 7 [ 1910.825266][ T7543] loop5: unable to read partition table [ 1910.831743][ T7543] loop5: partition table beyond EOD, truncated [ 1910.839106][ T7084] Dev loop5: unable to read RDB block 7 [ 1910.846249][ T7084] loop5: unable to read partition table [ 1910.853938][ T7084] loop5: partition table beyond EOD, truncated [ 1910.866067][ T7084] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1910.933213][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1910.933232][ T30] audit: type=1326 audit(1766546350.042:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.10780" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 1911.157800][ T8817] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.171127][ T8817] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1911.231875][ T8817] .` (unregistering): Released all slaves [ 1912.972810][ T8817] bond0 (unregistering): Released all slaves [ 1913.026344][ T7096] syzkaller1: entered promiscuous mode [ 1913.032082][ T7096] syzkaller1: entered allmulticast mode [ 1913.248038][ T8817] tipc: Disabling bearer [ 1913.253751][ T8817] tipc: Left network mode [ 1913.353618][ T7105] netlink: 160 bytes leftover after parsing attributes in process `syz.2.10782'. [ 1913.364426][ T7105] netlink: 160 bytes leftover after parsing attributes in process `syz.2.10782'. [ 1913.683956][ T7111] xt_bpf: check failed: parse error [ 1914.218166][ T8817] hsr_slave_0: left promiscuous mode [ 1914.233129][ T8817] hsr_slave_1: left promiscuous mode [ 1914.249641][ T8817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.285249][ T8817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.551915][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.558532][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.189788][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10788'. [ 1915.929515][ T8817] team0 (unregistering): Port device team_slave_1 removed [ 1916.018308][ T8817] team0 (unregistering): Port device team_slave_0 removed [ 1916.832019][ T7151] kAFS: unable to lookup cell '(/cL' [ 1917.478250][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1917.691430][ T7173] input: syz0 as /devices/virtual/input/input129 [ 1917.726381][ T8817] IPVS: stop unused estimator thread 0... [ 1918.237466][ T30] audit: type=1800 audit(1766546357.322:7963): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10804" name="bus" dev="ramfs" ino=189980 res=0 errno=0 [ 1918.808125][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10806'. [ 1918.851209][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10806'. [ 1919.387904][ T7201] input: syz0 as /devices/virtual/input/input130 [ 1919.571182][ T7206] ip6tnl0: Caught tx_queue_len zero misconfig [ 1919.679297][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.700368][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.907598][ T5917] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1920.075534][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1920.100384][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.109115][ T5917] usb 2-1: Product: syz [ 1920.124127][ T5917] usb 2-1: Manufacturer: syz [ 1920.130406][ T5917] usb 2-1: SerialNumber: syz [ 1920.144819][ T5917] usb 2-1: config 0 descriptor?? [ 1920.150655][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10812'. [ 1920.354340][ T5917] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1920.368488][ T5917] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1920.383580][ T5917] usb 2-1: USB disconnect, device number 13 [ 1920.556518][ T7224] input: syz0 as /devices/virtual/input/input131 [ 1920.598361][ T7224] lo: Caught tx_queue_len zero misconfig [ 1920.939455][ T7230] netlink: 'syz.4.10817': attribute type 13 has an invalid length. [ 1920.948581][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10817'. [ 1921.136285][ T5962] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1921.292648][ T5962] usb 6-1: config 0 has no interfaces? [ 1921.306068][ T5962] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1921.315694][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.324657][ T5962] usb 6-1: Product: syz [ 1921.329069][ T5962] usb 6-1: Manufacturer: syz [ 1921.333860][ T5962] usb 6-1: SerialNumber: syz [ 1921.345134][ T5962] usb 6-1: config 0 descriptor?? [ 1921.454676][ T7244] netlink: 'syz.4.10820': attribute type 4 has an invalid length. [ 1921.487487][ T6722] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1921.661786][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.721097][ T6722] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1921.729800][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.739446][ T6722] usb 2-1: config 0 has no interface number 0 [ 1921.749285][ T6722] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1921.764217][ T6722] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1921.790996][ T6722] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1921.835897][ T6722] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1921.919949][ T6722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.959287][ T7251] x_tables: duplicate underflow at hook 1 [ 1921.997663][ T6722] usb 2-1: config 0 descriptor?? [ 1922.017002][ T7238] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1922.033599][ T6722] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input132 [ 1922.246646][ T7238] input: syz0 as /devices/virtual/input/input133 [ 1922.833646][ T6722] usb 2-1: USB disconnect, device number 14 [ 1922.983411][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10825'. [ 1923.399268][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.408853][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.936486][ T7276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10830'. [ 1924.179360][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.196110][ T2834] usb 6-1: USB disconnect, device number 37 [ 1924.255239][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.720586][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10836'. [ 1924.742907][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10838'. [ 1924.982351][ T7310] random: crng reseeded on system resumption [ 1925.017957][ T5962] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1925.169162][ T5962] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1925.178790][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.190390][ T5962] usb 2-1: config 0 descriptor?? [ 1925.198514][ T5962] cp210x 2-1:0.0: cp210x converter detected [ 1926.017575][ T7334] input: syz0 as /devices/virtual/input/input134 [ 1927.450435][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.466339][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.122927][ T5962] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1928.155114][ T5962] cp210x 2-1:0.0: querying part number failed [ 1928.187319][ T5962] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1928.215578][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10851'. [ 1928.215755][ T5962] usb 2-1: USB disconnect, device number 15 [ 1928.254639][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10852'. [ 1928.296781][ T5962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1928.314156][ T5962] cp210x 2-1:0.0: device disconnected [ 1928.877491][ T2834] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1929.057492][ T2834] usb 2-1: Using ep0 maxpacket: 16 [ 1929.068542][ T2834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.079239][ T2834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1929.093115][ T7374] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1929.099648][ T7374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1929.190011][ T2834] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1929.205560][ T7374] vhci_hcd vhci_hcd.0: Device attached [ 1929.229753][ T7379] netdevsim netdevsim4: Direct firmware load for nel/address_bits failed with error -2 [ 1929.240619][ T2834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1929.280323][ T2834] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1929.299800][ T2834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.319377][ T2834] usb 2-1: Product: syz [ 1929.359083][ T7379] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/address_bits [ 1929.368132][ T2834] usb 2-1: Manufacturer: syz [ 1929.372825][ T2834] usb 2-1: SerialNumber: syz [ 1929.439451][ T2834] usb 2-1: config 0 descriptor?? [ 1929.448448][ T2834] mcba_usb 2-1:0.0: Can't find endpoints [ 1929.487550][ T5919] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1929.687768][ T7363] ALSA: mixer_oss: invalid OSS volume '' [ 1929.718623][ T5962] usb 2-1: USB disconnect, device number 16 [ 1929.763393][ T7375] vhci_hcd: connection reset by peer [ 1929.769021][ T9126] vhci_hcd vhci_hcd.4: stop threads [ 1929.782924][ T9126] vhci_hcd vhci_hcd.4: release socket [ 1929.810068][ T9126] vhci_hcd vhci_hcd.4: disconnect device [ 1930.543898][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10864'. [ 1930.804801][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.813939][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.834572][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.845896][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.887779][ T2834] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1931.047442][ T2834] usb 6-1: Using ep0 maxpacket: 8 [ 1931.057544][ T2834] usb 6-1: config 33 has too many interfaces: 128, using maximum allowed: 32 [ 1931.074583][ T2834] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.157652][ T2834] usb 6-1: config 33 has 0 interfaces, different from the descriptor's value: 128 [ 1931.170394][ T2834] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1931.180097][ T2834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.188190][ T2834] usb 6-1: Product: syz [ 1931.198312][ T2834] usb 6-1: Manufacturer: syz [ 1931.206656][ T2834] usb 6-1: SerialNumber: syz [ 1931.489465][ T7416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1931.797212][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10872'. [ 1931.954921][ T7432] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10871'. [ 1932.002350][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10871'. [ 1932.178006][ T2834] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1932.327526][ T2834] usb 2-1: Using ep0 maxpacket: 16 [ 1932.334406][ T2834] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1932.377322][ T2834] usb 2-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1932.386665][ T2834] usb 2-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1932.395800][ T2834] usb 2-1: Product: syz [ 1932.400831][ T2834] usb 2-1: Manufacturer: syz [ 1932.405561][ T2834] usb 2-1: SerialNumber: syz [ 1932.421424][ T2834] usb 2-1: config 0 descriptor?? [ 1932.860520][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.878070][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.459689][ T5962] usb 6-1: USB disconnect, device number 38 [ 1933.494020][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10876'. [ 1933.558954][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10877'. [ 1933.767926][ T7453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1933.896960][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.908223][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.609126][ T5919] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1934.937065][ T2834] usb 2-1: USB disconnect, device number 17 [ 1935.261793][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10889'. [ 1936.043536][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10891'. [ 1936.192427][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.218088][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.542555][ T7494] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10892'. [ 1936.551838][ T5962] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1936.709022][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.741407][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.768794][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1936.817467][ T5962] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1936.832908][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.863563][ T5962] usb 2-1: config 0 descriptor?? [ 1937.181814][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10898'. [ 1937.194255][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10898'. [ 1937.407080][ T5962] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1937.835264][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10901'. [ 1938.137509][ T5919] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1938.287486][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1938.527437][ T5919] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1938.668284][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1938.772678][T23875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1938.781540][ T5919] usb usb6-port1: attempt power cycle [ 1938.792388][T23875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1938.801484][T23875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1938.810611][T23875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1938.818637][T23875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1938.849947][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1938.862391][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1938.869447][ T5917] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 1938.877972][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1938.885925][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1938.894356][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1939.004233][ T5917] usb 2-1: device descriptor read/64, error -32 [ 1939.062710][ T574] raw-gadget.0 gadget.4: failed to queue disconnect event [ 1939.167502][ T5919] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1939.198177][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1939.233047][ T7530] chnl_net:caif_netlink_parms(): no params data found [ 1939.257459][ T5917] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 1939.300651][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.308178][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.315561][ T7530] bridge_slave_0: entered allmulticast mode [ 1939.323961][ T7530] bridge_slave_0: entered promiscuous mode [ 1939.332542][ T7530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.340570][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.347962][ T7530] bridge_slave_1: entered allmulticast mode [ 1939.355042][ T7530] bridge_slave_1: entered promiscuous mode [ 1939.383755][ T7530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1939.392941][ T5917] usb 2-1: device descriptor read/64, error -32 [ 1939.400767][ T7530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1939.432112][ T7530] team0: Port device team_slave_0 added [ 1939.438698][ T5919] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1939.442089][ T7530] team0: Port device team_slave_1 added [ 1939.458451][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1939.476517][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1939.483516][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1939.509904][ T7530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1939.522328][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1939.529479][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1939.555647][ T7530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1939.577726][ T5919] usb usb6-port1: unable to enumerate USB device [ 1939.605062][ T7530] hsr_slave_0: entered promiscuous mode [ 1939.611741][ T7530] hsr_slave_1: entered promiscuous mode [ 1939.618121][ T7530] debugfs: 'hsr0' already exists in 'hsr' [ 1939.623845][ T7530] Cannot create hsr debugfs directory [ 1939.637469][ T5917] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 1939.658815][ T5917] usb 2-1: device descriptor read/8, error -32 [ 1940.110114][ T7530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1940.120396][ T7530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1940.129864][ T7530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1940.141541][ T7530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1940.202856][ T7530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1940.223661][ T7530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1940.237983][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.245183][ T9126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1940.272889][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.280089][ T9126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1940.352590][ T7530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1940.387455][ T5917] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 1940.400775][ T7530] veth0_vlan: entered promiscuous mode [ 1940.413198][ T7530] veth1_vlan: entered promiscuous mode [ 1940.430347][ T5917] usb 2-1: device reset changed ep0 maxpacket size! [ 1940.458175][ T2834] usb 2-1: USB disconnect, device number 18 [ 1940.502051][ T7530] veth0_macvtap: entered promiscuous mode [ 1940.514054][ T7530] veth1_macvtap: entered promiscuous mode [ 1940.548540][ T7530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1940.580798][ T7530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1940.647686][ T2834] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1940.669979][ T4338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.685815][ T4338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.699518][ T4338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.716268][ T4338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.817669][ T2834] usb 2-1: Using ep0 maxpacket: 8 [ 1940.831585][ T2834] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1940.843877][ T2834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.862054][ T9120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.872231][ T2834] usb 2-1: Product: syz [ 1940.876421][ T2834] usb 2-1: Manufacturer: syz [ 1940.879652][ T9120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.887849][ T2834] usb 2-1: SerialNumber: syz [ 1940.900862][ T2834] usb 2-1: config 0 descriptor?? [ 1940.922927][ T2834] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1940.938602][ T5834] Bluetooth: hci5: command tx timeout [ 1940.948437][ T9126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.957043][ T9126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1941.118353][ T7567] netlink: 'syz.5.10916': attribute type 46 has an invalid length. [ 1941.126427][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10916'. [ 1941.347531][ T5917] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1941.377443][ T5889] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1941.500214][ T5917] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1941.508566][ T5917] usb 5-1: config 0 has no interface number 0 [ 1941.514675][ T5917] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1941.526425][ T5917] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1941.539053][ T5917] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1941.550808][ T5917] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1941.552081][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.559962][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.571894][ T5889] usb 6-1: config 0 has no interfaces? [ 1941.588724][ T5889] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1941.590082][ T5917] usb 5-1: config 0 descriptor?? [ 1941.604005][ T7568] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1941.604811][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.634629][ T5889] usb 6-1: config 0 descriptor?? [ 1941.635485][ T5917] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input135 [ 1941.842480][ T7568] input: syz0 as /devices/virtual/input/input136 [ 1941.873448][ T5889] usb 5-1: USB disconnect, device number 52 [ 1942.141052][ T2834] gspca_sonixj: reg_w1 err -71 [ 1942.228601][ T2834] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1942.249555][ T2834] usb 2-1: USB disconnect, device number 19 [ 1942.768490][ T2834] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1942.927473][ T2834] usb 5-1: Using ep0 maxpacket: 16 [ 1942.934124][ T2834] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1942.945426][ T2834] usb 5-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1942.954615][ T2834] usb 5-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1942.963389][ T2834] usb 5-1: Product: syz [ 1942.967652][ T2834] usb 5-1: Manufacturer: syz [ 1942.972245][ T2834] usb 5-1: SerialNumber: syz [ 1942.979445][ T2834] usb 5-1: config 0 descriptor?? [ 1943.027464][ T5834] Bluetooth: hci5: command tx timeout [ 1943.067467][ T5917] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1943.217414][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 1943.224323][ T5917] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1943.232885][ T5917] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1943.241046][ T5917] usb 2-1: config 0 has no interface number 0 [ 1943.247266][ T5917] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1943.259769][ T5917] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1943.271197][ T5917] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1943.283953][ T5917] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1943.293366][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1943.301592][ T5917] usb 2-1: Product: syz [ 1943.309055][ T5917] usb 2-1: config 0 descriptor?? [ 1943.315572][ T7590] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1943.857416][T27964] usb 5-1: USB disconnect, device number 53 [ 1943.972139][ T7590] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode [ 1943.981913][ T7590] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode [ 1944.081696][ T5917] usb 2-1: USB disconnect, device number 20 [ 1944.135794][ T6722] usb 6-1: USB disconnect, device number 43 [ 1944.440662][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10929'. [ 1944.487506][ T5917] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1944.755311][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 1944.842587][ T5917] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 1944.858267][ T5917] usb 5-1: config 0 has no interface number 1 [ 1944.865248][ T5917] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 64, using maximum allowed: 30 [ 1944.883642][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1944.904000][ T5917] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1944.915784][ T5917] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1944.925119][ T5917] usb 5-1: Product: syz [ 1944.929947][ T5917] usb 5-1: Manufacturer: syz [ 1944.934671][ T5917] usb 5-1: SerialNumber: syz [ 1944.947045][ T5917] usb 5-1: config 0 descriptor?? [ 1945.108187][ T5834] Bluetooth: hci5: command tx timeout [ 1945.181644][ T7597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1945.193657][ T5917] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 1945.220988][ T5917] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 1945.251026][ T5917] usb 5-1: USB disconnect, device number 54 [ 1945.377465][ T2834] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1945.567558][ T2834] usb 2-1: Using ep0 maxpacket: 16 [ 1945.575247][ T2834] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1945.587128][ T2834] usb 2-1: config 254 has no interface number 0 [ 1945.594120][ T2834] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1945.605121][ T2834] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 1945.655510][ T2834] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1945.668948][ T2834] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1945.682679][ T2834] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1945.692643][ T2834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1945.701967][ T2834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.710124][ T2834] usb 2-1: Product: syz [ 1945.714480][ T2834] usb 2-1: Manufacturer: syz [ 1945.719550][ T2834] usb 2-1: SerialNumber: syz [ 1945.731519][ T7617] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1945.917460][ T6722] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1945.942877][ T2834] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 1945.951932][ T2834] usbtest 2-1:254.235: probe with driver usbtest failed with error -71 [ 1945.973181][ T2834] usb 2-1: USB disconnect, device number 21 [ 1946.068916][ T6722] usb 6-1: Using ep0 maxpacket: 16 [ 1946.077320][ T6722] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1946.086914][ T6722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 1946.095069][ T6722] usb 6-1: SerialNumber: syz [ 1946.102140][ T6722] usb 6-1: config 0 descriptor?? [ 1946.117316][ T6722] usb_8dev 6-1:0.0 can0: sending command message failed [ 1946.124360][ T6722] usb_8dev 6-1:0.0 can0: can't get firmware version [ 1946.131085][ T5962] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1946.179293][ T6722] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 1946.287477][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 1946.294553][ T5962] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1946.306135][ T5962] usb 5-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1946.315476][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1946.324018][ T5962] usb 5-1: Product: syz [ 1946.328409][ T5962] usb 5-1: Manufacturer: syz [ 1946.333013][ T5962] usb 5-1: SerialNumber: syz [ 1946.340908][ T5962] usb 5-1: config 0 descriptor?? [ 1946.629003][ T7636] netlink: 180 bytes leftover after parsing attributes in process `syz.1.10940'. [ 1946.696347][ T7642] input: syz1 as /devices/virtual/input/input138 [ 1946.867684][ T6722] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1947.007948][ T6722] usb 2-1: device descriptor read/64, error -71 [ 1947.186044][ T5834] Bluetooth: hci5: command tx timeout [ 1947.244216][ T2834] usb 5-1: USB disconnect, device number 55 [ 1947.258736][ T6722] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1947.463236][ T6722] usb 2-1: device descriptor read/64, error -71 [ 1947.594819][ T6722] usb usb2-port1: attempt power cycle [ 1948.017420][ T6722] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1948.067650][ T6722] usb 2-1: device descriptor read/8, error -71 [ 1948.317862][ T6722] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1948.348706][ T6722] usb 2-1: device descriptor read/8, error -71 [ 1948.363195][ T9126] bond0 (unregistering): Released all slaves [ 1948.455406][ T7661] syz.4.10947 (7661): drop_caches: 2 [ 1948.478607][ T6722] usb usb2-port1: unable to enumerate USB device [ 1948.563628][ T9126] bond1 (unregistering): Released all slaves [ 1948.691824][ T9126] tipc: Left network mode [ 1948.712655][ T5962] usb 6-1: USB disconnect, device number 44 [ 1948.797871][ T6722] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1948.957414][ T6722] usb 5-1: Using ep0 maxpacket: 8 [ 1948.967768][ T6722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.979110][ T9126] hsr_slave_0: left promiscuous mode [ 1948.980670][ T6722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1948.994606][ T9126] hsr_slave_1: left promiscuous mode [ 1948.995269][ T6722] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1949.013674][ T6722] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1949.023409][ T6722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.036625][ T6722] usb 5-1: config 0 descriptor?? [ 1949.147498][ T5962] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1949.307556][ T5962] usb 6-1: device descriptor read/64, error -71 [ 1949.506591][ T6722] nzxt-kraken2 0003:1E71:170E.0063: item fetching failed at offset 2/5 [ 1949.520686][ T6722] nzxt-kraken2 0003:1E71:170E.0063: hid parse failed with -22 [ 1949.528758][ T6722] nzxt-kraken2 0003:1E71:170E.0063: probe with driver nzxt-kraken2 failed with error -22 [ 1949.587574][ T5962] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1949.678574][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10951'. [ 1949.719930][ T6722] usb 5-1: USB disconnect, device number 56 [ 1949.727489][ T5962] usb 6-1: device descriptor read/64, error -71 [ 1949.848036][ T5962] usb usb6-port1: attempt power cycle [ 1950.047462][ T414] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1950.197474][ T414] usb 2-1: Using ep0 maxpacket: 16 [ 1950.202850][ T5962] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1950.212630][ T414] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.238171][ T5962] usb 6-1: device descriptor read/8, error -71 [ 1950.245212][ T414] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1950.264745][ T414] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1950.297417][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.308489][ T414] usb 2-1: config 0 descriptor?? [ 1950.517762][ T5962] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1950.561381][ T5962] usb 6-1: device descriptor read/8, error -71 [ 1950.678373][ T5962] usb usb6-port1: unable to enumerate USB device [ 1950.833695][ T414] nzxt-smart2 0003:1E71:2009.0064: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1951.019904][ T5917] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1951.121499][ T7675] input: syz0 as /devices/virtual/input/input139 [ 1951.197444][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 1951.205686][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1951.211578][ T414] usb 2-1: USB disconnect, device number 26 [ 1951.227441][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1951.264094][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10962'. [ 1951.275980][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1951.291414][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.299553][ T5917] usb 5-1: Product: syz [ 1951.303728][ T5917] usb 5-1: Manufacturer: syz [ 1951.310694][ T5917] usb 5-1: SerialNumber: syz [ 1951.328033][ T5917] usb 5-1: config 0 descriptor?? [ 1951.340303][ T5917] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1951.352488][ T5917] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1951.937744][ T5917] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1951.944271][ T5917] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1951.951921][ T5917] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1951.959030][ T5917] em28xx 5-1:0.0: No AC97 audio processor [ 1952.237463][ T414] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1952.407506][ T414] usb 6-1: Using ep0 maxpacket: 16 [ 1952.419192][ T414] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1952.439983][ T414] usb 6-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1952.457817][ T414] usb 6-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1952.477453][ T414] usb 6-1: Product: syz [ 1952.482033][ T414] usb 6-1: Manufacturer: syz [ 1952.486650][ T414] usb 6-1: SerialNumber: syz [ 1952.496509][ T414] usb 6-1: config 0 descriptor?? [ 1953.237488][ T5919] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1953.377551][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1953.519493][ T5889] usb 6-1: USB disconnect, device number 49 [ 1953.637510][ T5919] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1953.767483][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1953.787565][ T5962] usb 5-1: USB disconnect, device number 57 [ 1953.794252][ T5962] em28xx 5-1:0.0: Disconnecting em28xx [ 1953.810316][ T5962] em28xx 5-1:0.0: Freeing device [ 1953.878024][ T5919] usb usb2-port1: attempt power cycle [ 1953.908392][ T5889] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1954.067436][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 1954.075154][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1954.094906][ T5889] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 1954.104170][ T5889] usb 6-1: config 13 has no interface number 0 [ 1954.110704][ T5889] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1954.124268][ T5889] usb 6-1: config 13 interface 50 has no altsetting 0 [ 1954.137112][ T5889] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1954.147149][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.156112][ T5889] usb 6-1: Product: syz [ 1954.160796][ T5889] usb 6-1: Manufacturer: syz [ 1954.165376][ T5889] usb 6-1: SerialNumber: syz [ 1954.172932][ T7740] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1954.227533][ T5919] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1954.248734][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1954.357539][ T5962] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1954.398458][ T5889] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1954.417922][ T5889] usb 6-1: MIDIStreaming interface descriptor not found [ 1954.439923][ T7746] netlink: 'syz.2.10975': attribute type 10 has an invalid length. [ 1954.458954][ T5889] usb 6-1: USB disconnect, device number 50 [ 1954.459155][ T7746] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1954.487711][ T5919] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1954.507725][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 1954.516910][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1954.534877][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1954.585173][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1954.599144][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1954.609493][ T7748] sctp: [Deprecated]: syz.2.10975 (pid 7748) Use of int in max_burst socket option. [ 1954.609493][ T7748] Use struct sctp_assoc_value instead [ 1954.630449][ T5962] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1954.640693][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.655603][ T5962] usb 5-1: Product: syz [ 1954.668103][ T5962] usb 5-1: Manufacturer: syz [ 1954.675610][ T5962] usb 5-1: SerialNumber: syz [ 1954.690564][ T5919] usb usb2-port1: unable to enumerate USB device [ 1954.700589][ T7748] syzkaller0: entered promiscuous mode [ 1954.706214][ T7748] syzkaller0: entered allmulticast mode [ 1954.714891][ T5962] usb 5-1: config 0 descriptor?? [ 1954.935313][ T5962] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 1955.081365][ T5962] usb 5-1: USB disconnect, device number 58 [ 1955.348965][ T7756] fuse: Bad value for 'fd' [ 1955.353721][ T7756] fuse: Bad value for 'fd' [ 1955.742541][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10984'. [ 1956.057421][ T5962] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1956.151724][ T7793] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 1956.167487][ T7793] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1956.193931][ T7793] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 1956.205390][ T7793] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1956.214380][ T7793] kvm: requested 36038 ns i8254 timer period limited to 200000 ns [ 1956.219521][ T5962] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1956.230715][ T7793] kvm: requested 104761 ns i8254 timer period limited to 200000 ns [ 1956.231695][ T5962] usb 5-1: config 0 has no interface number 0 [ 1956.280193][ T7793] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1956.289616][ T7793] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 1956.337432][ T7793] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 1956.338239][ T7802] netlink: 'syz.5.10991': attribute type 10 has an invalid length. [ 1956.364248][ T5962] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1956.402158][ T5962] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1956.414518][ T5962] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1956.417584][ T5919] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1956.426652][ T5962] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1956.443708][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.459484][ T5962] usb 5-1: config 0 descriptor?? [ 1956.471427][ T7778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1956.482205][ T7802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1956.494488][ T5962] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input140 [ 1956.544576][ T7802] bond0: (slave team0): Enslaving as an active interface with an up link [ 1956.599701][ C0] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1956.617524][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1956.743107][ T5962] usb 5-1: USB disconnect, device number 59 [ 1956.857493][ T5919] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1956.966967][ T7811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1957.145171][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1957.267886][ T5919] usb usb2-port1: attempt power cycle [ 1957.293849][ T7813] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10996'. [ 1957.439705][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10997'. [ 1957.627642][ T5919] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1957.688171][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1957.717856][T27964] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1957.879776][T27964] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1957.891602][T27964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.908910][T27964] usb 6-1: config 0 descriptor?? [ 1957.918648][T27964] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1958.017614][ T5919] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1958.051758][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1958.167788][ T5919] usb usb2-port1: unable to enumerate USB device [ 1958.557207][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11004'. [ 1959.087416][ T5919] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1959.217856][ T5919] usb 5-1: device descriptor read/64, error -71 [ 1959.257709][T27964] gspca_cpia1: usb_control_msg 03, error -110 [ 1959.264543][T27964] gspca_cpia1: usb_control_msg 01, error -32 [ 1959.271378][T27964] gspca_cpia1: usb_control_msg 01, error -32 [ 1959.278076][T27964] gspca_cpia1: usb_control_msg 01, error -32 [ 1959.280011][ T7847] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1959.284517][T27964] gspca_cpia1: usb_control_msg 01, error -32 [ 1959.292959][ T7847] openvswitch: netlink: Message has 16 unknown bytes. [ 1959.299532][T27964] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1959.457540][ T5919] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1959.588078][ T5919] usb 5-1: device descriptor read/64, error -71 [ 1959.699321][ T5919] usb usb5-port1: attempt power cycle [ 1960.038723][ T5919] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1960.060300][ T5919] usb 5-1: device descriptor read/8, error -71 [ 1960.297696][ T5919] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1960.328364][ T5919] usb 5-1: device descriptor read/8, error -71 [ 1960.438946][ T5919] usb usb5-port1: unable to enumerate USB device [ 1960.596643][ T6722] usb 6-1: USB disconnect, device number 51 [ 1960.716465][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11015'. [ 1961.232860][ T7882] kAFS: unable to lookup cell '(,c' [ 1962.197531][T27964] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1962.404582][T27964] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1962.446840][T27964] usb 5-1: config 0 has no interface number 0 [ 1962.454093][T27964] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1962.487782][T27964] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1962.500120][T27964] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1962.525100][T27964] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1962.552302][T27964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.617764][ T6722] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1963.249941][T27964] usb 5-1: config 0 descriptor?? [ 1963.266452][ T7896] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1963.332455][T27964] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input142 [ 1963.379164][ T6722] usb 2-1: config 0 has no interfaces? [ 1963.384708][ T6722] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1963.394708][ T6722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.424889][ T6722] usb 2-1: config 0 descriptor?? [ 1963.542801][ T6722] usb 5-1: USB disconnect, device number 64 [ 1963.734746][T27964] usb 2-1: USB disconnect, device number 35 [ 1963.917060][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11027'. [ 1964.011738][ T7916] hub 1-0:1.0: USB hub found [ 1964.043268][ T7916] hub 1-0:1.0: 1 port detected [ 1964.360643][ T5889] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1964.497657][T27964] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1964.568545][ T7935] ALSA: mixer_oss: invalid OSS volume '' [ 1964.621806][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11037'. [ 1964.631750][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11037'. [ 1964.657510][ T6722] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1964.667560][T27964] usb 5-1: Using ep0 maxpacket: 8 [ 1964.674549][T27964] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1964.689086][T27964] usb 5-1: config 0 has no interface number 0 [ 1964.703037][T11004] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1964.703151][T27964] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1964.722787][T27964] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1964.729966][T11004] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1964.732270][T27964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.749498][T27964] usb 5-1: Product: syz [ 1964.753720][T27964] usb 5-1: Manufacturer: syz [ 1964.758420][T27964] usb 5-1: SerialNumber: syz [ 1964.765925][T27964] usb 5-1: config 0 descriptor?? [ 1964.767541][T11004] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1964.805084][T11004] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1964.818674][ T6722] usb 2-1: Using ep0 maxpacket: 16 [ 1964.828802][ T6722] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1964.852895][ T6722] usb 2-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1964.864676][ T6722] usb 2-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1964.873325][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11039'. [ 1964.882404][ T6722] usb 2-1: Product: syz [ 1964.886631][ T6722] usb 2-1: Manufacturer: syz [ 1964.908221][ T6722] usb 2-1: SerialNumber: syz [ 1964.921130][ T6722] usb 2-1: config 0 descriptor?? [ 1965.007431][ T5889] usb 1-1: device descriptor read/64, error -71 [ 1965.277994][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11040'. [ 1965.308785][ T5889] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1965.914260][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 1965.931498][ T5889] usb 1-1: unable to get BOS descriptor set [ 1965.960566][ T5889] usb 1-1: config 6 has an invalid interface number: 255 but max is 2 [ 1965.990484][ T5889] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.020383][ T5889] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 1966.031880][ T5889] usb 1-1: config 6 has no interface number 0 [ 1966.039178][ T5889] usb 1-1: config 6 interface 255 has no altsetting 0 [ 1966.052533][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=40.be [ 1966.062966][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.073827][ T5889] usb 1-1: Product: syz [ 1966.094223][ T5889] usb 1-1: Manufacturer: syz [ 1966.111621][ T5889] usb 1-1: SerialNumber: syz [ 1966.434602][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11043'. [ 1966.559600][ T5889] usb 1-1: USB disconnect, device number 60 [ 1966.595995][ T414] usb 2-1: USB disconnect, device number 36 [ 1967.295292][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11050'. [ 1967.305965][ T7989] lo: entered promiscuous mode [ 1967.316536][ T7989] tunl0: entered promiscuous mode [ 1967.329671][ T7989] gre0: entered promiscuous mode [ 1967.338649][ T7989] gretap0: entered promiscuous mode [ 1967.410073][ T7989] erspan0: entered promiscuous mode [ 1967.468640][T27964] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input143 [ 1967.528014][ T7989] ip_vti0: entered promiscuous mode [ 1967.672440][T27964] usb 5-1: USB disconnect, device number 65 [ 1967.718559][ T7989] ip6_vti0: entered promiscuous mode [ 1967.726043][ T7989] sit0: entered promiscuous mode [ 1967.823314][ T7989] ip6tnl0: entered promiscuous mode [ 1967.859331][ T7989] ip6gre0: entered promiscuous mode [ 1967.868923][ T7989] syz_tun: entered promiscuous mode [ 1967.898560][ T7989] ip6gretap0: entered promiscuous mode [ 1967.913899][ T7989] bridge0: entered promiscuous mode [ 1967.936923][ T7989] vcan0: entered promiscuous mode [ 1967.988016][ T7989] bond0: entered promiscuous mode [ 1968.127730][ T7989] bond_slave_0: entered promiscuous mode [ 1968.133969][ T7989] bond_slave_1: entered promiscuous mode [ 1968.151978][ T7989] batadv0: entered promiscuous mode [ 1968.227750][ T7989] team0: entered promiscuous mode [ 1968.236538][ T7989] team_slave_0: entered promiscuous mode [ 1968.253060][ T7989] team_slave_1: entered promiscuous mode [ 1968.276535][ T7989] dummy0: entered promiscuous mode [ 1968.282043][ T7989] nlmon0: entered promiscuous mode [ 1968.287451][ T7989] caif0: entered promiscuous mode [ 1968.292821][ T7989] vxcan0: entered promiscuous mode [ 1968.299011][ T7989] vxcan1: entered promiscuous mode [ 1968.304324][ T7989] veth0: entered promiscuous mode [ 1968.309854][ T7989] veth1: entered promiscuous mode [ 1968.315081][ T7989] wg0: entered promiscuous mode [ 1968.342184][ T7989] wg1: entered promiscuous mode [ 1968.370311][ T7989] wg2: entered promiscuous mode [ 1968.378429][ T7989] veth0_to_bridge: entered promiscuous mode [ 1968.389016][ T7989] veth1_to_bridge: entered promiscuous mode [ 1968.396531][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11056'. [ 1968.406383][ T7989] veth0_to_bond: entered promiscuous mode [ 1968.516945][T27964] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1968.576679][ T7989] veth1_to_bond: entered promiscuous mode [ 1968.586241][ T7989] veth0_to_team: entered promiscuous mode [ 1968.592702][ T7989] veth1_to_team: entered promiscuous mode [ 1968.603274][ T7989] veth0_to_batadv: entered promiscuous mode [ 1968.611191][ T7989] batadv_slave_0: entered promiscuous mode [ 1968.619239][ T7989] veth1_to_batadv: entered promiscuous mode [ 1968.627937][ T7989] batadv_slave_1: entered promiscuous mode [ 1968.708673][ T7989] xfrm0: entered promiscuous mode [ 1968.713944][ T7989] veth0_to_hsr: entered promiscuous mode [ 1968.721506][ T7989] veth1_to_hsr: entered promiscuous mode [ 1968.747449][T27964] usb 5-1: Using ep0 maxpacket: 16 [ 1968.754437][T27964] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1968.768839][T27964] usb 5-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1968.829991][T27964] usb 5-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1968.844411][T27964] usb 5-1: Product: syz [ 1968.868598][T27964] usb 5-1: Manufacturer: syz [ 1968.882121][T27964] usb 5-1: SerialNumber: syz [ 1968.893247][T27964] usb 5-1: config 0 descriptor?? [ 1968.976281][ T30] audit: type=1326 audit(1766546408.082:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1968.998711][ T30] audit: type=1326 audit(1766546408.082:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.020981][ T30] audit: type=1326 audit(1766546408.082:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.043803][ T7989] hsr0: entered promiscuous mode [ 1969.049990][ T7989] veth1_virt_wifi: entered promiscuous mode [ 1969.055990][ T30] audit: type=1326 audit(1766546408.082:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.088367][ T30] audit: type=1326 audit(1766546408.092:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.110408][ T30] audit: type=1326 audit(1766546408.142:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.136822][ T30] audit: type=1326 audit(1766546408.152:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.247908][ T7989] veth0_virt_wifi: entered promiscuous mode [ 1969.271147][ T30] audit: type=1326 audit(1766546408.152:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.296600][ T7989] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1969.330791][ T7989] vlan0: entered promiscuous mode [ 1969.388044][ T7989] vlan1: entered promiscuous mode [ 1969.394027][ T7989] macvlan0: entered promiscuous mode [ 1969.407425][ T30] audit: type=1326 audit(1766546408.152:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.480568][ T7989] macvlan1: entered promiscuous mode [ 1969.486120][ T7989] ipvlan0: entered promiscuous mode [ 1969.491745][ T30] audit: type=1326 audit(1766546408.152:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.11058" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1969.552309][ T7989] ipvlan1: entered promiscuous mode [ 1969.607495][ T5917] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1969.621514][ T7989] macvtap0: entered promiscuous mode [ 1969.640707][ T7989] macsec0: entered promiscuous mode [ 1969.650792][ T7989] geneve0: entered promiscuous mode [ 1969.656305][ T7989] geneve1: entered promiscuous mode [ 1969.661958][ T7989] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1969.669534][ T7989] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1969.677082][ T7989] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1969.684689][ T7989] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1969.692546][ T7989] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 1969.740637][ T7989] mac80211_hwsim hwsim67 wlan1: entered promiscuous mode [ 1969.824425][ T7989] xfrm1: entered promiscuous mode [ 1969.847457][ T7989] sit1: entered promiscuous mode [ 1969.852817][ T7989] batadv0.5: entered promiscuous mode [ 1970.274036][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11065'. [ 1970.335710][ T6722] usb 5-1: USB disconnect, device number 66 [ 1970.757502][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11071'. [ 1971.113484][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11074'. [ 1971.637552][T25848] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1971.696066][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1971.715132][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1971.733099][ T5917] usb 2-1: can't read configurations, error -71 [ 1971.837709][T25848] usb 1-1: Using ep0 maxpacket: 16 [ 1971.882801][T25848] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1971.898371][T27964] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1971.908949][T25848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.931561][T25848] usb 1-1: Product: syz [ 1971.935760][T25848] usb 1-1: Manufacturer: syz [ 1971.942745][T25848] usb 1-1: SerialNumber: syz [ 1972.027241][T25848] usb 1-1: config 0 descriptor?? [ 1972.046517][T25848] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1972.069080][T27964] usb 5-1: Using ep0 maxpacket: 16 [ 1972.076373][T27964] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1972.098838][T27964] usb 5-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1972.126467][T27964] usb 5-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1972.153337][T27964] usb 5-1: Product: syz [ 1972.168148][T27964] usb 5-1: Manufacturer: syz [ 1972.183759][T27964] usb 5-1: SerialNumber: syz [ 1972.208339][T27964] usb 5-1: config 0 descriptor?? [ 1973.861305][ T414] usb 5-1: USB disconnect, device number 67 [ 1974.427476][ T5917] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1974.582134][ T5917] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1974.590752][ T5917] usb 2-1: config 0 has no interface number 0 [ 1974.596912][ T5917] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1974.609567][ T5917] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1974.622090][ T5917] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1974.638015][ T5917] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1974.647228][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.661917][ T5917] usb 2-1: config 0 descriptor?? [ 1974.677024][ T8097] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1974.698550][ T5917] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input144 [ 1974.737462][T14577] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1974.774741][ C1] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1974.888921][T14577] usb 5-1: Using ep0 maxpacket: 32 [ 1974.900849][T14577] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1974.910965][T14577] usb 5-1: config 0 has no interface number 0 [ 1974.918693][T14577] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1974.927774][ T5917] usb 2-1: USB disconnect, device number 39 [ 1974.935731][T14577] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1974.957071][T14577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.982863][T14577] usb 5-1: Product: syz [ 1974.991092][T14577] usb 5-1: Manufacturer: syz [ 1974.996565][T14577] usb 5-1: SerialNumber: syz [ 1975.008184][T14577] usb 5-1: config 0 descriptor?? [ 1975.020972][T14577] smsc75xx v1.0.0 [ 1975.079947][T25848] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 1975.093443][T25848] visor 1-1:0.0: probe with driver visor failed with error -71 [ 1975.108906][T25848] usb 1-1: USB disconnect, device number 61 [ 1975.453277][T14577] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1975.478257][T25848] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1975.494278][ T8124] misc userio: Begin command sent, but we're already running [ 1975.500184][T14577] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1975.529128][T14577] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1975.547697][T14577] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1975.559160][T14577] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1975.570575][T14577] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1975.582199][T14577] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1975.603419][T14577] usb 5-1: USB disconnect, device number 68 [ 1975.672470][T25848] usb 1-1: Using ep0 maxpacket: 16 [ 1975.740820][T25848] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1975.756546][T25848] usb 1-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1975.766052][T25848] usb 1-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1975.775061][T25848] usb 1-1: Product: syz [ 1975.779392][T25848] usb 1-1: Manufacturer: syz [ 1975.788222][T25848] usb 1-1: SerialNumber: syz [ 1975.821188][T25848] usb 1-1: config 0 descriptor?? [ 1975.982256][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.988998][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.060855][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11099'. [ 1976.806986][ T8150] delete_channel: no stack [ 1977.035715][T25848] usb 1-1: USB disconnect, device number 62 [ 1977.067885][ T6717] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1977.211207][ T6717] usb 2-1: device descriptor read/64, error -71 [ 1977.457472][ T6717] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1977.598096][ T6717] usb 2-1: device descriptor read/64, error -71 [ 1977.606820][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11108'. [ 1977.775508][ T6717] usb usb2-port1: attempt power cycle [ 1977.947600][T25848] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1978.115282][T25848] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1978.117652][ T6717] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1978.140158][T25848] usb 6-1: language id specifier not provided by device, defaulting to English [ 1978.152873][T25848] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 1978.159253][ T6717] usb 2-1: device descriptor read/8, error -71 [ 1978.197564][T25848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.207634][T25848] usb 6-1: Product: ࠚ [ 1978.213045][T25848] usb 6-1: Manufacturer: ї [ 1978.232429][T25848] usb 6-1: SerialNumber: 屺삌瞛ꈒ뜾뢮붥ꀾ冗쭄⤁寯槼뒁顏䊩ᅄ菇⢙ꨏႵ캢䩅ש嗢㭛₪농勑焁䠱뗏䒕懣͈殣⒃뽉ﻺꥏ㇯進梼ﶸ콊粰２衈씴➛걇炭Ꞓ뻱麸໠䅫枭嚣Ꮒ⃢咒ꊢ캏⯱鄠쟄픅❐㮪뼳䬾皦⩯ᅀ搠寖ꌰ掍ퟃࠧ囀郞ꊵ䎸Ꝟ䍼쵊孩楎쏰鳶앓蓓뻑閷纴精఺⤴錵曠㩀 [ 1978.437532][ T6717] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1978.459777][ T6717] usb 2-1: device descriptor read/8, error -71 [ 1978.478725][ T8178] random: crng reseeded on system resumption [ 1978.578885][ T6717] usb usb2-port1: unable to enumerate USB device [ 1978.587896][ T414] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1978.633601][ T8192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1978.664198][ T8192] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1978.708969][ T8198] fuse: Bad value for 'user_id' [ 1978.727482][ T8198] fuse: Bad value for 'user_id' [ 1978.779263][ T414] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 1978.797648][ T414] usb 1-1: config 8 has no interface number 0 [ 1978.809537][ T414] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1978.847543][ T414] usb 1-1: config 8 interface 206 has no altsetting 0 [ 1978.858876][ T414] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1978.868416][ T414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.876422][ T414] usb 1-1: Product: syz [ 1978.882896][ T414] usb 1-1: Manufacturer: syz [ 1978.887612][ T6717] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1978.895458][ T414] usb 1-1: SerialNumber: syz [ 1978.918303][ T8191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1979.047433][ T6717] usb 5-1: Using ep0 maxpacket: 16 [ 1979.054202][ T6717] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1979.070022][ T6717] usb 5-1: New USB device found, idVendor=046d, idProduct=28d3, bcdDevice= b.28 [ 1979.079206][ T6717] usb 5-1: New USB device strings: Mfr=1, Product=229, SerialNumber=3 [ 1979.087732][ T6717] usb 5-1: Product: syz [ 1979.091924][ T6717] usb 5-1: Manufacturer: syz [ 1979.096532][ T6717] usb 5-1: SerialNumber: syz [ 1979.104930][ T6717] usb 5-1: config 0 descriptor?? [ 1979.213322][ T414] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 1979.223441][ T414] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1979.230679][ T414] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1979.248235][ T414] usb 1-1: USB disconnect, device number 63 [ 1979.255504][ T414] garmin_gps 1-1:8.206: device disconnected [ 1980.032882][ T414] usb 5-1: USB disconnect, device number 69 [ 1980.831184][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11122'. [ 1981.862993][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11124'. [ 1982.526159][ T8255] kernel profiling enabled (shift: 63) [ 1982.536538][ T8255] profiling shift: 63 too large [ 1982.967617][ T5962] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1983.127505][ T5962] usb 1-1: device descriptor read/64, error -71 [ 1983.367526][ T5962] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1983.428932][T25848] usbhid 6-1:1.0: can't add hid device: -32 [ 1983.434979][T25848] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 1983.472050][ T6717] usb 6-1: USB disconnect, device number 52 [ 1983.519987][ T5962] usb 1-1: device descriptor read/64, error -71 [ 1983.627830][ T5962] usb usb1-port1: attempt power cycle [ 1983.992875][ T5962] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1984.025164][ T8281] fuse: Bad value for 'group_id' [ 1984.031406][ T8281] fuse: Bad value for 'group_id' [ 1984.038373][ T5962] usb 1-1: device descriptor read/8, error -71 [ 1984.086899][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11136'. [ 1984.098413][ T8284] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11136'. [ 1984.108334][ T8284] netlink: 'syz.1.11136': attribute type 3 has an invalid length. [ 1984.116180][ T8284] netlink: 'syz.1.11136': attribute type 2 has an invalid length. [ 1984.124385][ T8284] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11136'. [ 1984.136601][ T8284] binder: 8283:8284 ioctl c0306201 80000180 returned -14 [ 1984.277464][ T5962] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1984.300187][ T5962] usb 1-1: device descriptor read/8, error -71 [ 1984.421375][ T5962] usb usb1-port1: unable to enumerate USB device [ 1984.497558][ T6717] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1984.649420][ T8302] binder: 8301:8302 ioctl c0306201 80000a00 returned -14 [ 1984.673201][ T6717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1984.683686][ T6717] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1984.696713][ T6717] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 1984.706501][ T6717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.714687][ T6717] usb 2-1: Product: syz [ 1984.719371][ T6717] usb 2-1: Manufacturer: syz [ 1984.724061][ T6717] usb 2-1: SerialNumber: syz [ 1984.731943][ T6717] usb 2-1: config 0 descriptor?? [ 1984.743276][ T6717] aircable 2-1:0.0: aircable converter detected [ 1984.753889][ T6717] usb 2-1: aircable converter now attached to ttyUSB0 [ 1986.179229][T25848] usb 2-1: USB disconnect, device number 44 [ 1986.188261][T25848] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 1986.196811][T25848] aircable 2-1:0.0: device disconnected [ 1986.937487][ T414] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1987.122023][ T414] usb 1-1: Using ep0 maxpacket: 32 [ 1987.165837][ T414] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1987.184048][ T414] usb 1-1: config 0 has no interface number 0 [ 1987.201214][ T414] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1987.213442][ T414] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1987.223162][ T414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.248229][ T414] usb 1-1: Product: syz [ 1987.259055][ T414] usb 1-1: Manufacturer: syz [ 1987.285479][ T414] usb 1-1: SerialNumber: syz [ 1987.306237][ T414] usb 1-1: config 0 descriptor?? [ 1987.323048][ T414] smsc75xx v1.0.0 [ 1987.556470][ T8316] mac80211_hwsim hwsim59 wlan0: left promiscuous mode [ 1987.572805][ T8316] mac80211_hwsim hwsim59 wlan0: left allmulticast mode [ 1987.586422][ T8316] bridge0: left promiscuous mode [ 1987.596392][ T8316] bridge0: left allmulticast mode [ 1987.657305][ T4338] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.688598][ T4338] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.710909][ T4338] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.730355][ T414] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1987.777681][ T414] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1987.799738][ T414] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1987.878481][ T414] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 1988.660947][ T8356] binder: BINDER_SET_CONTEXT_MGR already set [ 1988.666983][ T8356] binder: 8350:8356 ioctl 4018620d 80000040 returned -16 [ 1988.697200][ T8356] syz.1.11153 (8356): drop_caches: 2 [ 1988.838109][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11155'. [ 1988.913697][ T8359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1989.890577][T15522] usb 1-1: USB disconnect, device number 68 [ 1990.159056][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1990.159080][ T30] audit: type=1326 audit(1766546429.272:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.11156" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 1990.383401][ T8378] fuse: Bad value for 'group_id' [ 1990.388488][ T8378] fuse: Bad value for 'group_id' [ 1990.438409][ T6717] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 1990.607505][ T6717] usb 1-1: Invalid ep0 maxpacket: 16 [ 1990.757690][ T6717] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 1990.927452][ T6717] usb 1-1: Invalid ep0 maxpacket: 16 [ 1990.933472][ T6717] usb usb1-port1: attempt power cycle [ 1991.287881][ T6717] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 1991.330124][ T6717] usb 1-1: Invalid ep0 maxpacket: 16 [ 1991.482397][ T6717] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1991.542285][ T6717] usb 1-1: Invalid ep0 maxpacket: 16 [ 1991.552545][ T6717] usb usb1-port1: unable to enumerate USB device [ 1991.721347][ T30] audit: type=1326 audit(1766546430.832:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.11166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1991.759178][ T30] audit: type=1326 audit(1766546430.852:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.11166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1991.853571][ T30] audit: type=1326 audit(1766546430.852:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.11166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1991.884128][ T30] audit: type=1326 audit(1766546430.852:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.11166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1991.907042][ T30] audit: type=1326 audit(1766546430.852:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.11166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1991.932979][ T30] audit: type=1326 audit(1766546430.862:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.2.11166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f77539 code=0x7ffc0000 [ 1992.122054][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11167'. [ 1993.294379][ T8423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11173'. [ 1994.499693][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11179'. [ 1995.027530][T27964] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1995.181907][ T8448] syz.4.11182 (8448): drop_caches: 2 [ 1995.328203][ T8456] fuse: Unknown parameter '' [ 1995.868634][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11190'. [ 1996.247554][ T395] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1996.419375][ T395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.458613][ T395] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1996.475843][ T395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.508006][ T395] usb 5-1: config 0 descriptor?? [ 1996.590853][ T8474] sctp: [Deprecated]: syz.2.11188 (pid 8474) Use of int in maxseg socket option. [ 1996.590853][ T8474] Use struct sctp_assoc_value instead [ 1996.641267][ T8474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11188'. [ 1996.663985][ T30] audit: type=1326 audit(1766546435.772:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1996.731264][ T30] audit: type=1326 audit(1766546435.782:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=237 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1996.794157][ T30] audit: type=1326 audit(1766546435.782:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1996.837001][ T30] audit: type=1326 audit(1766546435.782:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1996.885852][ T30] audit: type=1326 audit(1766546435.782:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1996.935100][ T395] lenovo 0003:17EF:6047.0065: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1996.960002][ T30] audit: type=1326 audit(1766546435.782:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1997.013516][ T30] audit: type=1326 audit(1766546435.782:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1997.048198][ T6717] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1997.075626][ T30] audit: type=1326 audit(1766546435.782:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1997.183302][ T30] audit: type=1326 audit(1766546435.782:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1997.217533][ T6717] usb 2-1: Using ep0 maxpacket: 16 [ 1997.228914][ T6717] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1997.245285][ T6717] usb 2-1: config 254 has no interface number 0 [ 1997.259226][ T6717] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1997.270053][ T30] audit: type=1326 audit(1766546435.782:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.11192" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1997.293397][ T6717] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 1997.305925][ T6717] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1997.318950][ T6717] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1997.385328][ T6717] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1997.412259][ T6717] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1997.431822][ T6717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.456268][ T6717] usb 2-1: Product: syz [ 1997.474207][ T6717] usb 2-1: Manufacturer: syz [ 1997.479266][ T6717] usb 2-1: SerialNumber: syz [ 1997.506831][ T8475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1997.728952][ T6717] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 1997.770366][ T395] lenovo 0003:17EF:6047.0065: Sensitivity setting failed: -71 [ 1997.790456][ T6717] usbtest 2-1:254.235: probe with driver usbtest failed with error -71 [ 1997.801645][ T395] usb 5-1: USB disconnect, device number 70 [ 1997.840923][ T6717] usb 2-1: USB disconnect, device number 45 [ 1998.039205][ T8485] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11197'. [ 1998.048342][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11197'. [ 1998.647551][T25678] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1998.781708][ T8499] netlink: 348 bytes leftover after parsing attributes in process `syz.1.11202'. [ 1998.792672][ T8499] tmpfs: Unknown parameter '00000000000000000000003' [ 1998.810177][T25678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.840483][T25678] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1998.888053][T25678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.909341][T25678] usb 5-1: config 0 descriptor?? [ 1999.383714][T25678] usbhid 5-1:0.0: can't add hid device: -71 [ 1999.404689][T25678] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1999.430438][T25678] usb 5-1: USB disconnect, device number 71 [ 1999.496872][ T8518] netlink: 67 bytes leftover after parsing attributes in process `syz.4.11209'. [ 1999.537494][T27964] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1999.656657][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11211'. [ 1999.685672][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11210'. [ 1999.768980][T27964] usb 1-1: Using ep0 maxpacket: 32 [ 1999.844730][T27964] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1999.855065][T27964] usb 1-1: config 0 has no interface number 0 [ 1999.887460][T27964] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1999.926442][T27964] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1999.962312][T27964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.972999][ T8528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11210'. [ 2000.038080][T27964] usb 1-1: Product: syz [ 2000.044413][T27964] usb 1-1: Manufacturer: syz [ 2000.054490][T27964] usb 1-1: SerialNumber: syz [ 2000.232259][T27964] usb 1-1: config 0 descriptor?? [ 2000.246072][ T8514] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2000.434445][ T8535] tipc: Started in network mode [ 2000.454508][ T8535] tipc: Node identity b2d020ba1f95, cluster identity 4711 [ 2000.465384][ T8514] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2000.504840][ T8535] tipc: Enabled bearer , priority 0 [ 2000.541444][T23875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2000.554216][T23875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2000.565510][T23875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2000.576604][ T2941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2000.585707][ T2941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2000.645121][ T8538] syzkaller0: entered promiscuous mode [ 2000.715467][ T8538] syzkaller0: entered allmulticast mode [ 2000.948562][ T8535] tipc: Resetting bearer [ 2000.972189][ T8534] tipc: Resetting bearer [ 2001.019752][ T8534] tipc: Disabling bearer [ 2001.940519][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2001.940537][ T30] audit: type=1326 audit(1766546441.052:8045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.11208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 2002.043911][ T8541] chnl_net:caif_netlink_parms(): no params data found [ 2002.053093][ T30] audit: type=1326 audit(1766546441.052:8046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.11208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 2002.142040][ T30] audit: type=1326 audit(1766546441.052:8047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.11208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 2002.380562][ T30] audit: type=1326 audit(1766546441.052:8048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.0.11208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 2002.382892][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11219'. [ 2002.423114][ T30] audit: type=1326 audit(1766546441.062:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.4.11217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2002.453802][ T30] audit: type=1326 audit(1766546441.062:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.4.11217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2002.637461][ T30] audit: type=1326 audit(1766546441.062:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.4.11217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2002.679385][T27964] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2002.720137][ T2941] Bluetooth: hci2: command tx timeout [ 2002.721086][T27964] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 2002.737423][ T30] audit: type=1326 audit(1766546441.062:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.4.11217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2002.761257][ T30] audit: type=1326 audit(1766546441.062:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.4.11217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2002.786823][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2002.805634][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2002.813027][ T8541] bridge_slave_0: entered allmulticast mode [ 2002.819402][ T30] audit: type=1326 audit(1766546441.062:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.4.11217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2002.839470][ T8541] bridge_slave_0: entered promiscuous mode [ 2002.851661][T27964] asix 1-1:0.188: probe with driver asix failed with error -71 [ 2002.870461][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 2002.912559][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.920446][T27964] usb 1-1: USB disconnect, device number 74 [ 2002.949019][ T8541] bridge_slave_1: entered allmulticast mode [ 2002.969317][ T8541] bridge_slave_1: entered promiscuous mode [ 2003.164152][ T8541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2003.195119][ T8541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2003.275854][ T8563] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2003.334276][ T8563] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2003.366264][ T8541] team0: Port device team_slave_0 added [ 2003.404723][ T8563] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2003.430073][ T8541] team0: Port device team_slave_1 added [ 2003.764581][ T8563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2003.777774][ T8563] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2004.281046][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2004.295001][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2004.324839][ T8541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2004.337863][ T8563] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2004.347905][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2004.410137][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2004.480182][ T8541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2004.831025][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11223'. [ 2004.874837][ T8541] hsr_slave_0: entered promiscuous mode [ 2004.888632][ T8541] hsr_slave_1: entered promiscuous mode [ 2004.969347][ T5889] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2005.140236][ T5889] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 2005.151926][ T5889] usb 5-1: config 0 has no interface number 0 [ 2005.167505][ T5889] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2005.185011][ T5889] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2005.203453][ T5889] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2005.219850][ T5889] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2005.229475][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.250276][ T5889] usb 5-1: config 0 descriptor?? [ 2005.305046][ T5889] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input147 [ 2005.343685][ T2941] Bluetooth: hci5: command 0x0c1a tx timeout [ 2005.375179][T11004] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.416619][T11004] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.428299][T15522] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 2005.484005][ T5889] usb 5-1: USB disconnect, device number 72 [ 2005.570036][T11004] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.587113][T11004] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.620724][T15522] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2005.640162][T15522] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2005.652244][T15522] usb 1-1: can't read configurations, error -71 [ 2005.685051][T11004] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.700967][T11004] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.732602][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11229'. [ 2005.750802][ T8541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2005.785689][T11004] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2005.817596][T11004] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.817855][ T2941] Bluetooth: hci2: command 0x040f tx timeout [ 2005.854628][ T8541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2005.886809][ T8541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2005.923287][ T8541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2006.013198][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11230'. [ 2006.071651][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2006.113720][ T8596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2006.332508][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11233'. [ 2006.546409][T11004] bridge_slave_1: left allmulticast mode [ 2006.546437][T11004] bridge_slave_1: left promiscuous mode [ 2006.546626][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.575163][T11004] bridge_slave_0: left allmulticast mode [ 2006.575187][T11004] bridge_slave_0: left promiscuous mode [ 2006.575370][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.579984][ T8618] Cannot find add_set index 0 as target [ 2006.651158][ T8623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11235'. [ 2007.151661][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11239'. [ 2007.248572][ T8643] sctp: [Deprecated]: syz.4.11237 (pid 8643) Use of int in maxseg socket option. [ 2007.248572][ T8643] Use struct sctp_assoc_value instead [ 2007.428821][ T2941] Bluetooth: hci5: command 0x0c1a tx timeout [ 2007.517941][ T8330] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2007.551681][T11004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2007.562218][T11004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2007.573352][T11004] bond0 (unregistering): (slave team0): Releasing backup interface [ 2007.583428][T11004] bond0 (unregistering): (slave bond1): Releasing backup interface [ 2007.593470][T11004] bond0 (unregistering): Released all slaves [ 2007.706889][ T8330] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 2007.725098][ T8330] usb 2-1: config 0 has no interface number 0 [ 2007.731866][ T8330] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2007.754122][ T8330] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2007.765755][ T8330] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2007.785829][ T8330] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2007.802635][ T8330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.811985][T11004] bond1 (unregistering): Released all slaves [ 2007.835221][ T8330] usb 2-1: config 0 descriptor?? [ 2007.851615][ T8330] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input150 [ 2007.897675][ T2941] Bluetooth: hci2: command 0x040f tx timeout [ 2007.974174][ T8541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2008.016038][T11004] tipc: Left network mode [ 2008.075848][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 2008.116964][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 2008.124198][ T9120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2008.133308][T11004] IPVS: stopping backup sync thread 6035 ... [ 2008.169530][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 2008.172556][ T8330] usb 2-1: USB disconnect, device number 46 [ 2008.176745][ T9120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2008.246797][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11243'. [ 2008.552313][ T8664] fuse: Bad value for 'fd' [ 2008.590784][T11004] hsr_slave_0: left promiscuous mode [ 2008.605613][T11004] hsr_slave_1: left promiscuous mode [ 2008.696647][T11004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2008.705403][T11004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2008.723232][T11004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2008.731120][T11004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2008.793450][T11004] veth1_macvtap: left promiscuous mode [ 2008.799778][T11004] veth0_macvtap: left promiscuous mode [ 2008.813257][T11004] veth1_vlan: left promiscuous mode [ 2008.834410][T11004] veth0_vlan: left promiscuous mode [ 2009.182864][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11249'. [ 2009.500463][ T2941] Bluetooth: hci5: command 0x0c1a tx timeout [ 2009.977465][ T2941] Bluetooth: hci2: command 0x040f tx timeout [ 2009.986010][T11004] team0 (unregistering): Port device team_slave_1 removed [ 2010.049191][T11004] team0 (unregistering): Port device team_slave_0 removed [ 2010.878767][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11255'. [ 2010.993484][ T8541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2011.081671][ T8541] veth0_vlan: entered promiscuous mode [ 2011.122654][ T8541] veth1_vlan: entered promiscuous mode [ 2011.398668][T25678] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2011.580360][T25678] usb 1-1: device descriptor read/64, error -71 [ 2011.641330][ T8541] veth0_macvtap: entered promiscuous mode [ 2011.674482][ T8541] veth1_macvtap: entered promiscuous mode [ 2011.772470][ T8541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2011.856258][T25678] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2011.869189][ T8541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2011.989161][T11575] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.033941][T11575] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.107815][T25678] usb 1-1: device descriptor read/64, error -71 [ 2012.113311][ T2941] Bluetooth: hci2: command 0x040f tx timeout [ 2012.222849][T11575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.317244][T25678] usb usb1-port1: attempt power cycle [ 2012.337448][T11575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.681803][T25678] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2012.797561][T11004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.928371][T25678] usb 1-1: device descriptor read/8, error -71 [ 2012.939709][T11004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.070960][ T8817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.081797][ T8817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.187518][T25678] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2013.248282][T25678] usb 1-1: device descriptor read/8, error -71 [ 2013.363353][T25678] usb usb1-port1: unable to enumerate USB device [ 2013.706199][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11264'. [ 2013.716031][ T8762] netlink: 'syz.4.11264': attribute type 5 has an invalid length. [ 2013.729523][ T8762] tap0: tun_chr_ioctl cmd 1074025677 [ 2013.735826][ T8762] tap0: linktype set to 270 [ 2014.217753][ T2941] Bluetooth: hci2: command 0x040f tx timeout [ 2015.128078][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11271'. [ 2016.100308][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11281'. [ 2016.287455][ T5917] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2016.513589][ T5917] usb 5-1: device descriptor read/64, error -71 [ 2016.667042][ T8857] netlink: 160 bytes leftover after parsing attributes in process `syz.6.11282'. [ 2016.676291][ T8857] netlink: 160 bytes leftover after parsing attributes in process `syz.6.11282'. [ 2016.777795][ T5917] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2016.927473][ T5917] usb 5-1: device descriptor read/64, error -71 [ 2017.054768][ T5917] usb usb5-port1: attempt power cycle [ 2017.377182][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11284'. [ 2017.447536][ T5917] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2017.553632][ T5917] usb 5-1: device descriptor read/8, error -71 [ 2017.917480][ T5917] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2017.938079][ T5917] usb 5-1: device descriptor read/8, error -71 [ 2018.047829][ T5917] usb usb5-port1: unable to enumerate USB device [ 2018.666950][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11295'. [ 2021.807451][ T5920] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2021.937457][ T5920] usb 1-1: device descriptor read/64, error -71 [ 2022.195595][ T5920] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2022.208219][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11317'. [ 2022.357535][ T5920] usb 1-1: device descriptor read/64, error -71 [ 2022.494021][ T5920] usb usb1-port1: attempt power cycle [ 2022.877451][ T5920] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2022.918055][ T5920] usb 1-1: device descriptor read/8, error -71 [ 2022.938520][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11322'. [ 2023.178764][ T5920] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2023.227998][ T5920] usb 1-1: device descriptor read/8, error -71 [ 2023.310895][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2023.323162][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2023.339240][ T5920] usb usb1-port1: unable to enumerate USB device [ 2023.341832][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2023.366298][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2023.378073][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2023.930388][ T395] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2024.110176][ T395] usb 5-1: too many configurations: 224, using maximum allowed: 8 [ 2024.114317][ T8999] chnl_net:caif_netlink_parms(): no params data found [ 2024.145630][ T395] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2024.165139][ T395] usb 5-1: can't read configurations, error -61 [ 2024.298069][ T395] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2024.389309][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 2024.389326][ T30] audit: type=1800 audit(1766546463.502:8116): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.11327" name="bus" dev="ramfs" ino=199545 res=0 errno=0 [ 2024.478206][ T395] usb 5-1: too many configurations: 224, using maximum allowed: 8 [ 2024.580462][ T395] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2024.683043][ T395] usb 5-1: can't read configurations, error -61 [ 2024.728678][ T395] usb usb5-port1: attempt power cycle [ 2024.815891][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11329'. [ 2024.844998][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.864438][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.887819][ T8999] bridge_slave_0: entered allmulticast mode [ 2024.912859][ T8999] bridge_slave_0: entered promiscuous mode [ 2025.227484][ T395] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2025.299250][ T395] usb 5-1: too many configurations: 224, using maximum allowed: 8 [ 2025.313838][ T395] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2025.375153][ T395] usb 5-1: can't read configurations, error -61 [ 2025.417512][ T2941] Bluetooth: hci0: command tx timeout [ 2025.424466][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11333'. [ 2025.534498][ T395] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2025.630486][ T395] usb 5-1: too many configurations: 224, using maximum allowed: 8 [ 2025.659061][ T395] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2025.666682][ T395] usb 5-1: can't read configurations, error -61 [ 2025.688993][ T395] usb usb5-port1: unable to enumerate USB device [ 2026.603993][ T36] bond0 (unregistering): Released all slaves [ 2026.623672][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.633192][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.640987][ T8999] bridge_slave_1: entered allmulticast mode [ 2026.651195][ T8999] bridge_slave_1: entered promiscuous mode [ 2026.753130][ T36] tipc: Left network mode [ 2026.770203][ T36] IPVS: stopping master sync thread 1445 ... [ 2026.903290][ T8999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2026.992181][ T8999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2026.993117][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11340'. [ 2027.292372][ T8999] team0: Port device team_slave_0 added [ 2027.346647][ T8999] team0: Port device team_slave_1 added [ 2027.507427][ T2941] Bluetooth: hci0: command tx timeout [ 2028.679569][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.696792][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2028.726465][ T8999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.832394][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.862903][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2028.997470][ T8999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.117376][ T36] hsr_slave_0: left promiscuous mode [ 2029.167468][ T36] hsr_slave_1: left promiscuous mode [ 2029.275078][ T36] pimreg (unregistering): left allmulticast mode [ 2029.588953][ T2941] Bluetooth: hci0: command tx timeout [ 2030.261695][ T9116] netlink: 'syz.2.11349': attribute type 9 has an invalid length. [ 2031.668147][ T2941] Bluetooth: hci0: command tx timeout [ 2032.153354][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11351'. [ 2032.163573][ T9137] netlink: 'syz.0.11351': attribute type 5 has an invalid length. [ 2032.173912][ T9143] tap0: tun_chr_ioctl cmd 1074025677 [ 2032.189806][ T9143] tap0: linktype set to 270 [ 2032.413504][ T8999] hsr_slave_0: entered promiscuous mode [ 2032.421600][ T8999] hsr_slave_1: entered promiscuous mode [ 2032.440952][ T8999] debugfs: 'hsr0' already exists in 'hsr' [ 2032.446690][ T8999] Cannot create hsr debugfs directory [ 2033.471135][ T9167] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2033.477701][ T9167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2033.576945][ T9167] vhci_hcd vhci_hcd.0: Device attached [ 2033.792178][ T9167] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 2033.802637][ T9167] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 2033.837444][ T8330] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 2034.147435][ T6722] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2034.457710][ T6722] usb 5-1: device descriptor read/64, error -71 [ 2034.697557][ T6722] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2034.951871][ T6722] usb 5-1: device descriptor read/64, error -71 [ 2035.078640][ T6722] usb usb5-port1: attempt power cycle [ 2035.439796][ T6722] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2035.472502][ T8999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2035.488046][ T6722] usb 5-1: device descriptor read/8, error -71 [ 2035.500758][ T8999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2035.530022][ T8999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2035.554730][ T8999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2035.737571][ T6722] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2035.763603][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2035.783231][ T6722] usb 5-1: device descriptor read/8, error -71 [ 2035.918322][ T6722] usb usb5-port1: unable to enumerate USB device [ 2035.925708][ T8999] 8021q: adding VLAN 0 to HW filter on device team0 [ 2035.948967][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.956164][ T9126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2036.373332][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 2036.380485][ T9120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2036.582679][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.690039][ T8999] veth0_vlan: entered promiscuous mode [ 2036.719053][ T8999] veth1_vlan: entered promiscuous mode [ 2036.806456][ T8999] veth0_macvtap: entered promiscuous mode [ 2036.822673][ T8999] veth1_macvtap: entered promiscuous mode [ 2036.837254][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11364'. [ 2036.859792][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2036.883592][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2036.951241][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.981475][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.007099][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.080131][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.259771][ T4156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.275390][ T4156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.382503][ T9120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.393219][ T9120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.421685][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.429440][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.116384][ T9271] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11366'. [ 2098.861461][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.867877][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2147.027463][ T2941] Bluetooth: hci0: command 0x0406 tx timeout [ 2160.299739][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.306079][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2196.149482][ T31] INFO: task kworker/1:15:8330 blocked for more than 143 seconds. [ 2196.157395][ T31] Tainted: G L syzkaller #0 [ 2196.163903][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2196.172641][ T31] task:kworker/1:15 state:D stack:23480 pid:8330 tgid:8330 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2196.184750][ T31] Workqueue: usb_hub_wq hub_event [ 2196.189844][ T31] Call Trace: [ 2196.193132][ T31] [ 2196.196073][ T31] __schedule+0x149b/0x4fd0 [ 2196.200683][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 2196.205900][ T31] ? __pfx___schedule+0x10/0x10 [ 2196.210817][ T31] ? schedule+0x91/0x360 [ 2196.215074][ T31] schedule+0x165/0x360 [ 2196.219813][ T31] usb_kill_urb+0x1be/0x2d0 [ 2196.224345][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2196.229415][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2196.235514][ T31] usb_start_wait_urb+0x1e3/0x4f0 [ 2196.240592][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2196.246180][ T31] usb_control_msg+0x232/0x3e0 [ 2196.251042][ T31] hub_port_init+0xb1d/0x28e0 [ 2196.255759][ T31] hub_event+0x2573/0x4ef0 [ 2196.260752][ T31] ? __pfx_hub_event+0x10/0x10 [ 2196.265539][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2196.271372][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2196.277104][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2196.282869][ T31] process_scheduled_works+0xad1/0x1770 [ 2196.288521][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2196.294513][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2196.299885][ T31] worker_thread+0x8a0/0xda0 [ 2196.304517][ T31] kthread+0x711/0x8a0 [ 2196.308698][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2196.313820][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.319295][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2196.324527][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.330070][ T31] ret_from_fork+0x510/0xa50 [ 2196.334682][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2196.339875][ T31] ? __switch_to+0xc9e/0x1480 [ 2196.344579][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.349249][ T31] ret_from_fork_asm+0x1a/0x30 [ 2196.354039][ T31] [ 2196.357095][ T31] [ 2196.357095][ T31] Showing all locks held in the system: [ 2196.364901][ T31] 1 lock held by khungtaskd/31: [ 2196.369787][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2196.379849][ T31] 2 locks held by getty/5593: [ 2196.384534][ T31] #0: ffff888034f8d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2196.394371][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2196.404566][ T31] 5 locks held by kworker/1:15/8330: [ 2196.409926][ T31] #0: ffff8880202fc148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2196.421315][ T31] #1: ffffc9000d23fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2196.433230][ T31] #2: ffff8880295fa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2196.442211][ T31] #3: ffff8880295fe518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2196.452180][ T31] #4: ffff88802939ce68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2196.461970][ T31] [ 2196.464298][ T31] ============================================= [ 2196.464298][ T31] [ 2196.473841][ T31] NMI backtrace for cpu 0 [ 2196.473862][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2196.473887][ T31] Tainted: [L]=SOFTLOCKUP [ 2196.473893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2196.473905][ T31] Call Trace: [ 2196.473912][ T31] [ 2196.473920][ T31] dump_stack_lvl+0xe8/0x150 [ 2196.473950][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2196.473976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2196.474009][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2196.474036][ T31] sys_info+0x135/0x170 [ 2196.474058][ T31] watchdog+0xf95/0xfe0 [ 2196.474091][ T31] ? watchdog+0x20a/0xfe0 [ 2196.474125][ T31] kthread+0x711/0x8a0 [ 2196.474154][ T31] ? __pfx_watchdog+0x10/0x10 [ 2196.474178][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.474205][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2196.474234][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.474259][ T31] ret_from_fork+0x510/0xa50 [ 2196.474280][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2196.474297][ T31] ? __switch_to+0xc9e/0x1480 [ 2196.474327][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.474352][ T31] ret_from_fork_asm+0x1a/0x30 [ 2196.474391][ T31] [ 2196.474399][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2196.599270][ C1] NMI backtrace for cpu 1 [ 2196.599290][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2196.599314][ C1] Tainted: [L]=SOFTLOCKUP [ 2196.599321][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2196.599333][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2196.599357][ C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2196.599374][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 2196.599391][ C1] RAX: 0000000002130873 RBX: ffffffff819713be RCX: 0000000080000001 [ 2196.599405][ C1] RDX: 0000000000000001 RSI: ffffffff8d791fea RDI: ffffffff8bc083e0 [ 2196.599418][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 2196.599432][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 2196.599446][ C1] R13: 1ffff110038dcb70 R14: 0000000000000001 R15: 0000000000000001 [ 2196.599458][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 2196.599474][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2196.599487][ C1] CR2: 000055ca269ae660 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2196.599503][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2196.599514][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2196.599526][ C1] Call Trace: [ 2196.599533][ C1] [ 2196.599541][ C1] default_idle+0x13/0x20 [ 2196.599560][ C1] default_idle_call+0x73/0xb0 [ 2196.599582][ C1] do_idle+0x1be/0x4d0 [ 2196.599603][ C1] ? __pfx_do_idle+0x10/0x10 [ 2196.599624][ C1] ? do_idle+0x4af/0x4d0 [ 2196.599644][ C1] cpu_startup_entry+0x44/0x60 [ 2196.599663][ C1] start_secondary+0x101/0x110 [ 2196.599689][ C1] common_startup_64+0x13e/0x147 [ 2196.599719][ C1] [ 2196.786467][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2196.793323][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2196.803989][ T31] Tainted: [L]=SOFTLOCKUP [ 2196.808298][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2196.818339][ T31] Call Trace: [ 2196.821615][ T31] [ 2196.824532][ T31] vpanic+0x1e0/0x670 [ 2196.828506][ T31] panic+0xb9/0xc0 [ 2196.832220][ T31] ? __pfx_panic+0x10/0x10 [ 2196.836637][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2196.842003][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2196.848158][ T31] watchdog+0xfdf/0xfe0 [ 2196.852308][ T31] ? watchdog+0x20a/0xfe0 [ 2196.856628][ T31] kthread+0x711/0x8a0 [ 2196.860685][ T31] ? __pfx_watchdog+0x10/0x10 [ 2196.865360][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.869948][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2196.875139][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.879717][ T31] ret_from_fork+0x510/0xa50 [ 2196.884291][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2196.889385][ T31] ? __switch_to+0xc9e/0x1480 [ 2196.894070][ T31] ? __pfx_kthread+0x10/0x10 [ 2196.898663][ T31] ret_from_fork_asm+0x1a/0x30 [ 2196.903444][ T31] [ 2196.906840][ T31] Kernel Offset: disabled [ 2196.911154][ T31] Rebooting in 86400 seconds..