last executing test programs: 16.579890832s ago: executing program 4 (id=2718): add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4d40) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r1, 0x0, 0x4040) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 16.407618294s ago: executing program 2 (id=2719): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$packet(r2, 0x0, &(0x7f00000004c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xe8) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000003c0)={0x8005, r4, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) 14.974860242s ago: executing program 2 (id=2721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x24044810}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000001200)={{0x3, 0x2, 0x1, 0x3}, 0x400, 0x4, 0x6}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'geneve0\x00', 0x2a34}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, 0x0, &(0x7f0000000200)) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@sg0, r12, &(0x7f0000000340)) r13 = dup(r11) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000048d"]) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 14.47777519s ago: executing program 0 (id=2722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "b95a1bb6f54ea34e", "4d71daa186888fc6e374943629b936cef51ca13ebb3a9bc9793d6eb58c6f5fe1", "069ea282", "27cc9aa51273fcd7"}, 0x38) r3 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="49a17ef7b62aa56639516d524792968588d9e61d9a4dfb7d995f68efa04900b75179afc9d2bf214e0d9a093b528664b7956d2c16d8aaca0c16cb23e9f39a5648b2f5af1d6a7b3e14f66a222df95fa05a6cf26836090ff04d009e0e1ee3b703fb56ab9990fcbda95c3e31aa9bd3387c2de4a56b", 0x73, 0x4000000, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) close_range(r3, r4, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d23"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x880) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000040)={0x2, 0x4, 0xa, 0x0, 0x11}) 14.392557407s ago: executing program 4 (id=2723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r2, @ANYRESHEX=r3], 0x14) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)}], 0x1}}], 0x1, 0x20080058) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 12.191798006s ago: executing program 0 (id=2726): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x200000100000011, 0x5, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000000001000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) r6 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) rt_sigaction(0x40, &(0x7f0000000140)={&(0x7f0000000000)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce41d3ca6566f00fc02c101c65d2150e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) sendto(r2, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf, 0x34000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) unlink(&(0x7f0000000300)='./file0\x00') ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) 11.984370524s ago: executing program 2 (id=2727): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/838, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) write$proc_mixer(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="4d494320274d61737465722043617074750700000030303030303030306a0ffff2f916baa89fca"], 0x33) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) 10.993539529s ago: executing program 3 (id=2728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000002b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000028c0)={@multicast, @random="55827c893569", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @rand_addr=0x64010102, @local, @broadcast}}}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="42050006060000002dbd700004dbdf2504000300380000dc0f00000000000000f9ffffffffffffffff7f000000000000530707531c6937880a2088ba13f64c012f0f21fa74feddba70ad7331204fc959c4a0a86cc99c2e817ac3e3aa484ef8e5a8a375c947b53ea383140115bafd52ed0a416fea34cbcb7f1e08c4ec4fc951c0f99d8b0d1be0a04e59d1cdbd4ec51a82fe96b5395169c07b6055bb24d089d81c6978492b1c506a2cd75743ffbe4f37ba58b16361a997827c3f7c0074fd73abc1eb04689685eadb8da751e882f522244b9c646caf892cbc11d661d17e7ec4c83cb233e09f793103d68eea4080", @ANYRESHEX=r3, @ANYRES64=r2, @ANYRES16=r6, @ANYRES8, @ANYRES16=r4, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES16=r2], 0x30}}, 0x4008810) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000340)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x0, 0x0, 0x200, 0x2}) 10.760382951s ago: executing program 0 (id=2729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}}, 0x20}}, 0x20000844) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}}, 0x4004084) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) fsopen(0x0, 0x1) 10.651870919s ago: executing program 1 (id=2730): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000009c0)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000351e000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9b109a5688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfcc9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9aada06834ccc7e274f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d72300000100000000002ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b84080000000000000009d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000e01fe52b06681244007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1a0b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e978a4070ee1e87db55dc65e1400ac91caf955cc6708817ff62f15edefb9545f8087a0d6dad84354c8fe4af96be16b3be9d3759d6e2f217eb7e03c707a01200b195af18600dae704ebdffdd17f8d20cb060355c8d38097b08", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) write$proc_mixer(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="4d494320274d61737465722043617074750700000030303030303030306a0ffff2f916baa89fca303030303030303030303030"], 0x33) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) 10.443892858s ago: executing program 2 (id=2731): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x3) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) execve(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$unix(0x1, 0x1, 0x0) 10.259106886s ago: executing program 4 (id=2732): r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) bind$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x24020400) unshare(0x2a020400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000037"], 0x40}, 0x10) dup(r6) 9.749496042s ago: executing program 0 (id=2733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$read(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000180)={0xfeec, 0x297201d76f70f74c, &(0x7f0000ffa000/0x4000)=nil, &(0x7f000067c000/0x2000)=nil, 0x1, 0x0, 0x0, 0x4, 0xd6, 0x0, 0x4b, 0x15}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRESDEC, @ANYRESDEC=r2, @ANYRES64=r3, @ANYRESHEX, @ANYRES32=r2, @ANYRES16=r0], 0xd8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYRES64]) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="d26680aabcfe380ec203988588cd10fe2430b37e0275915cf99a3d43fc33ea92888687b1f02f329001b03fe83225ebf0ea5316577c30b8089ce194433391d6f11f895a", @ANYRES8=r3, @ANYRESOCT=r4, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b02, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0x5b15, 0x0) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) syz_usb_disconnect(r8) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) 8.179719706s ago: executing program 1 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0403d11, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r9, 0x0) cachestat(r9, &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="55b32bbd7000fedbdf25100000005637dbb9581e86c6baa2105f0f4415169d"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) mkdir(&(0x7f0000000080)='./file0\x00', 0x13c) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x10) 8.095160225s ago: executing program 4 (id=2735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x3, 0x80, 0x4, {0x5, @sdr={0x34324142, 0xffff}}, 0xfffff426}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000850) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000906010800000003000020000200feff0900020073797a31000000000800094000000439050001000700000010000880"], 0x48}, 0x1, 0x0, 0x0, 0x10008453}, 0x80) 7.277869126s ago: executing program 1 (id=2736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "b95a1bb6f54ea34e", "4d71daa186888fc6e374943629b936cef51ca13ebb3a9bc9793d6eb58c6f5fe1", "069ea282", "27cc9aa51273fcd7"}, 0x38) r3 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="49a17ef7b62aa56639516d524792968588d9e61d9a4dfb7d995f68efa04900b75179afc9d2bf214e0d9a093b528664b7956d2c16d8aaca0c16cb23e9f39a5648b2f5af1d6a7b3e14f66a222df95fa05a6cf26836090ff04d009e0e1ee3b703fb56ab9990fcbda95c3e31aa9bd3387c2de4a56b", 0x73, 0x4000000, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000}) close_range(r3, r4, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d23"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x880) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, 0x0) 7.128612513s ago: executing program 3 (id=2737): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x16}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)}], 0x1}}], 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(r5, 0x0, 0x40) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) 7.085016189s ago: executing program 2 (id=2738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040012"], 0x24}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x692, &(0x7f0000000280)={0x0, 0xb2ef, 0x80, 0x3, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40808) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 5.791577259s ago: executing program 0 (id=2739): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x200000100000011, 0x5, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000000000000001000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) r6 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) rt_sigaction(0x40, &(0x7f0000000140)={&(0x7f0000000000)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce41d3ca6566f00fc02c101c65d2150e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) sendto(r2, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf, 0x34000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) unlink(&(0x7f0000000300)='./file0\x00') ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) 5.491857768s ago: executing program 3 (id=2740): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f00000003c0)=""/84, 0x54, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="f3b65774c304c68a6c566f74c259a0d8bb05793eeaf127060008b57042eb1d6a9c4b9c7efa8fab4b7ca2df738921af2a079e62fb016a4022148f84a2ebd0f0f91fb41d631dc60820cc5a02fc2a05907fc5ab5119eb86f35acbee1178d902e9e121cb9ae37fb431c9b006000000738bd0fb49554f085e4f1f50fb28357c1ce761acf0571d36ac0d553e5d60468ba9e3fe49a6caed4f95fdd5aeb0730e1c584659f5da0254b8ba3fa7a53393b5b76922335302c870646de61c70f3f0", @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r8, 0x1, 0x0, 0x10000, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) splice(r9, 0x0, r4, 0x0, 0xffffffffffff8000, 0x9) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 4.727548157s ago: executing program 1 (id=2741): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) fsopen(&(0x7f0000000100)='binder\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01000400000000", @ANYRES32=r5, @ANYBLOB="1c005e8008000700d20000000800060001000080080005001d"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) 4.598394538s ago: executing program 3 (id=2742): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000009c0)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000351e000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9b109a5688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfcc9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9aada06834ccc7e274f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d72300000100000000002ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b84080000000000000009d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000e01fe52b06681244007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1a0b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e978a4070ee1e87db55dc65e1400ac91caf955cc6708817ff62f15edefb9545f8087a0d6dad84354c8fe4af96be16b3be9d3759d6e2f217eb7e03c707a01200b195af18600dae704ebdffdd17f8d20cb060355c8d38097b08061b380fdc8eb2d9e2bfb816e5301cbaf92d57c65d4dc144d28ac269346800bbf6cb3fde9da3bce600"/838, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) write$proc_mixer(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="4d494320274d61737465722043617074750700000030303030303030306a0ffff2f916baa89fca303030303030"], 0x33) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) 4.494881105s ago: executing program 0 (id=2743): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) open(0x0, 0x0, 0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10, &(0x7f0000000000)=ANY=[]) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x84c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x4000000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x820, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x12, 0x2, 0x2, 0x3, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x8, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x180000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5e, 0xfffffffc, 0x2008, 0x0, 0x0, 0x1, 0x207, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x10, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fff, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_RTAB={0x404, 0x2, [0x5b91, 0x6, 0x3ff, 0x3e861e5a, 0x0, 0x800, 0x9, 0x1, 0x7, 0x3, 0x7f, 0x4, 0x2, 0x56c, 0x4, 0x8, 0x4, 0xa, 0x4, 0x8, 0x8, 0x3, 0x5, 0x101, 0xd, 0x7, 0x9e, 0x5, 0x7, 0x5, 0x5, 0x8, 0x1000, 0x1, 0xff, 0x75e2, 0x5, 0x4, 0x6b, 0xc5, 0x3, 0x5, 0x3, 0x2, 0xd3e, 0x985b, 0x2, 0x7f, 0x9, 0x7, 0xa67, 0x1, 0x47a4, 0x8, 0x0, 0x7, 0x0, 0xff, 0x8c, 0x4, 0x5, 0x0, 0x3, 0x7, 0xff, 0x3, 0x7fff, 0x100, 0xfffffc00, 0x7e59, 0xffffffff, 0x7, 0x0, 0x6, 0x3, 0x0, 0xfffffffb, 0x7, 0x3, 0x1, 0x400, 0x4, 0xfffffff9, 0x3, 0xb4cc, 0x7, 0x0, 0xff, 0xfffffbff, 0x5, 0xeb, 0xd, 0x9, 0x7ff, 0x4, 0xf1, 0x2, 0x1, 0x2, 0x0, 0x3, 0x3, 0x5, 0x9, 0xd, 0x5, 0x9, 0x7ff, 0xfffffffd, 0x100, 0x4, 0x58f, 0x1, 0x7fff, 0x6, 0x7, 0x2, 0x5, 0xc05, 0xa8e, 0x1ff, 0x8, 0x80000001, 0x401, 0x8c, 0x0, 0x5, 0x400, 0x2, 0xffffffff, 0x5, 0x4, 0x4, 0x9, 0x8, 0xa, 0x77c23b81, 0x1000, 0x9, 0x1, 0x8, 0x80, 0x0, 0x80, 0x0, 0x2, 0x9, 0x8, 0x9, 0x800, 0x0, 0xb, 0x5, 0x57, 0x6, 0x0, 0x3, 0x7fff, 0x3, 0x4, 0x5, 0x1, 0x1ff, 0x7ff, 0x6, 0x8, 0x2, 0x100, 0x7, 0x0, 0x9, 0x1, 0x10001, 0x0, 0x4, 0x8, 0xfffffc3a, 0x1000, 0x7, 0x8, 0xa14, 0x6, 0x3, 0xff, 0x40, 0x5, 0x6, 0x5, 0xfffffffc, 0x2, 0x9d, 0xfffffff0, 0x6659, 0x7ab, 0x889, 0x8, 0x7, 0x7, 0x10001, 0xffffff01, 0x4, 0x5, 0x0, 0x80, 0xa, 0x6, 0x4, 0x8000, 0x3, 0x6, 0x0, 0x81, 0x1, 0x0, 0x6, 0x48, 0x0, 0x4, 0x6, 0xc, 0xd3, 0x2, 0xfffff35d, 0x1, 0x200, 0x7, 0x2, 0xd2a, 0x5, 0x7fff, 0xb8d, 0x0, 0x2, 0xffffff72, 0x2, 0x10001, 0x4, 0xfffffffe, 0x10, 0xf, 0x5, 0x4c50000, 0xff800000, 0xa9f8, 0x1, 0x2, 0x7, 0x24f, 0x80000000, 0x4, 0x7, 0xa, 0x2d, 0x6, 0x7, 0x2]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x21b751ce9928c573}, @TCA_TBF_PBURST={0x8, 0x7, 0xffa}]}}]}, 0x84c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000080)='./file1\x00', 0x2000757) ftruncate(r7, 0x6000000) copy_file_range(r7, 0x0, r7, &(0x7f00000004c0)=0x100, 0x9, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r9, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 4.100152407s ago: executing program 4 (id=2744): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000009c0)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000351e000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9b109a5688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfcc9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9aada06834ccc7e274f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d72300000100000000002ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b84080000000000000009d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000e01fe52b06681244007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1a0b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e08936daadd8b1e978a4070ee1e87db55dc65e1400ac91caf955cc6708817ff62f15edefb9545f8087a0d6dad84354c8fe4af96be16b3be9d3759d6e2f217eb7e03c707a01200b195af18600dae704ebdffdd17f8d20cb060355c8d38097b08", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) write$proc_mixer(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="4d494320274d61737465722043617074750700000030303030303030306a0ffff2f916baa89fca303030303030303030303030"], 0x33) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) 2.340033155s ago: executing program 3 (id=2745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x24044810}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000001200)={{0x3, 0x2, 0x1, 0x3}, 0x400, 0x4, 0x6}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'geneve0\x00', 0x2a34}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, 0x0, &(0x7f0000000200)) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000100)=@sg0, r12, &(0x7f0000000340)) r13 = dup(r11) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000048d"]) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.218215451s ago: executing program 1 (id=2746): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) unshare(0x20060400) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'vlan0\x00', 0x1}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x4, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) fsopen(0x0, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x2, 0x7, {{0xb, 0x4, 0x2, 0x4, 0x2c, 0x67, 0x0, 0xe, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0x16, 0x2, [{0x5, 0x2}, {0xd8c1cf8bc45be6e6, 0x2}, {0x2, 0xc, "5b95df46e2ecf6243016"}]}]}}}}}) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x9, &(0x7f00000008c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fowner_lt}, {@fowner_gt}, {@smackfsdef}]}}, 0x1, 0x0, &(0x7f00000009c0)="ae133b1a7d") vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="a164", 0x2}], 0x1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="01000000040000000400"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 2.10423157s ago: executing program 2 (id=2747): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsopen(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x46a8, &(0x7f0000000080)={0x0, 0x5d50, 0x0, 0x0, 0x3c1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x6, 0x0, 0x3, 0x0, 0x5}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000240)) r6 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000002180)) 355.953044ms ago: executing program 4 (id=2748): socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = gettid() ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000002c0)={0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="88000002c68c0a", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf255d00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900f8ffffff7f0000004000a6800a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000800a50001"], 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, 0x0, 0x0) 37.290609ms ago: executing program 3 (id=2749): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000340)=[{0x4, 0x8fff}, {0x1, 0x443, 0x1800}], 0x2, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x120, 0x6}, 0x2, 0x384}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e20, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) fsopen(&(0x7f0000000040)='affs\x00', 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x5452, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) 0s ago: executing program 1 (id=2750): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8f6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x10e, 0x2, 0x8001}, {0x3, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x48e7, 0x0, 0xe3e3}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): :snk:640x480 (0x33424752, 8, 0, 0, 0) [ 758.690810][T14531] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (36 ns) > initial count (32 ns). Using initial count to start timer. [ 758.863573][ T5928] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 759.093597][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 759.105578][ T5928] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 759.131385][ T5928] usb 2-1: config 0 has no interface number 0 [ 759.140521][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 759.151586][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.160344][ T5928] usb 2-1: Product: syz [ 759.167118][ T5928] usb 2-1: Manufacturer: syz [ 759.174856][ T5928] usb 2-1: SerialNumber: syz [ 759.182928][ T5928] usb 2-1: config 0 descriptor?? [ 759.426809][ T5928] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 759.443641][ T5928] usb 2-1: No valid video chain found. [ 759.686981][ T10] usb 2-1: USB disconnect, device number 31 [ 759.731944][T14553] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2127'. [ 759.755591][T14553] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' [ 759.771561][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.0.2127 Not tainted syzkaller #0 PREEMPT(full) [ 759.771588][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.771599][T14553] Call Trace: [ 759.771606][T14553] [ 759.771615][T14553] dump_stack_lvl+0x189/0x250 [ 759.771645][T14553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.771664][T14553] ? __pfx__printk+0x10/0x10 [ 759.771689][T14553] ? kernfs_path_from_node+0x2f/0x290 [ 759.771705][T14553] ? kernfs_path_from_node+0x250/0x290 [ 759.771718][T14553] ? kernfs_path_from_node+0x2f/0x290 [ 759.771736][T14553] sysfs_warn_dup+0x8e/0xa0 [ 759.771750][T14553] sysfs_do_create_link_sd+0xc0/0x110 [ 759.771767][T14553] device_add_class_symlinks+0x1cf/0x240 [ 759.771786][T14553] device_add+0x475/0xb50 [ 759.771812][T14553] wiphy_register+0x1ba6/0x28d0 [ 759.771846][T14553] ? __pfx_wiphy_register+0x10/0x10 [ 759.771865][T14553] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 759.771887][T14553] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 759.771907][T14553] ieee80211_register_hw+0x3425/0x4080 [ 759.771937][T14553] ? ieee80211_register_hw+0x1461/0x4080 [ 759.771959][T14553] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 759.771978][T14553] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 759.772002][T14553] ? __hrtimer_setup+0x187/0x210 [ 759.772015][T14553] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 759.772037][T14553] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 759.772086][T14553] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 759.772104][T14553] ? trace_kmalloc+0x1f/0xd0 [ 759.772120][T14553] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 759.772138][T14553] ? kstrndup+0xbf/0x160 [ 759.772162][T14553] hwsim_new_radio_nl+0xea4/0x1b10 [ 759.772182][T14553] ? __pfx___nla_validate_parse+0x10/0x10 [ 759.772214][T14553] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 759.772241][T14553] ? __nla_parse+0x40/0x60 [ 759.772263][T14553] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 759.772286][T14553] genl_family_rcv_msg_doit+0x215/0x300 [ 759.772308][T14553] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 759.772335][T14553] ? bpf_lsm_capable+0x9/0x20 [ 759.772352][T14553] ? security_capable+0x7e/0x2e0 [ 759.772378][T14553] genl_rcv_msg+0x60e/0x790 [ 759.772400][T14553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.772415][T14553] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 759.772444][T14553] netlink_rcv_skb+0x205/0x470 [ 759.772462][T14553] ? __lock_acquire+0xab9/0xd20 [ 759.772481][T14553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.772497][T14553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.772532][T14553] ? down_read+0x1ad/0x2e0 [ 759.772548][T14553] genl_rcv+0x28/0x40 [ 759.772561][T14553] netlink_unicast+0x82c/0x9e0 [ 759.772591][T14553] ? __pfx_netlink_unicast+0x10/0x10 [ 759.772611][T14553] ? netlink_sendmsg+0x642/0xb30 [ 759.772622][T14553] ? skb_put+0x11b/0x210 [ 759.772639][T14553] netlink_sendmsg+0x805/0xb30 [ 759.772660][T14553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.772675][T14553] ? aa_sock_msg_perm+0xf1/0x1d0 [ 759.772691][T14553] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.772705][T14553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.772718][T14553] __sock_sendmsg+0x219/0x270 [ 759.772738][T14553] ____sys_sendmsg+0x505/0x830 [ 759.772758][T14553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.772781][T14553] ? import_iovec+0x74/0xa0 [ 759.772808][T14553] ___sys_sendmsg+0x21f/0x2a0 [ 759.772825][T14553] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.772871][T14553] ? __fget_files+0x2a/0x420 [ 759.772883][T14553] ? __fget_files+0x3a0/0x420 [ 759.772905][T14553] __x64_sys_sendmsg+0x19b/0x260 [ 759.772922][T14553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.772946][T14553] ? rcu_is_watching+0x15/0xb0 [ 759.772966][T14553] ? do_syscall_64+0xbe/0x3b0 [ 759.772982][T14553] do_syscall_64+0xfa/0x3b0 [ 759.772996][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.773009][T14553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 759.773023][T14553] ? clear_bhb_loop+0x60/0xb0 [ 759.773040][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.773054][T14553] RIP: 0033:0x7f69af58ebe9 [ 759.773067][T14553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.773079][T14553] RSP: 002b:00007f69b045d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.773094][T14553] RAX: ffffffffffffffda RBX: 00007f69af7c6270 RCX: 00007f69af58ebe9 [ 759.773105][T14553] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000a [ 759.773114][T14553] RBP: 00007f69af611e19 R08: 0000000000000000 R09: 0000000000000000 [ 759.773123][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.773131][T14553] R13: 00007f69af7c6308 R14: 00007f69af7c6270 R15: 00007f69af8efa28 [ 759.773156][T14553] [ 763.301366][T14593] syzkaller1: entered promiscuous mode [ 763.310420][T14593] syzkaller1: entered allmulticast mode [ 768.207226][ T5928] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 768.376217][ T5928] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 768.385604][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.413869][ T5928] usb 2-1: config 0 descriptor?? [ 768.430389][ T5928] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 768.447839][ T5928] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input122 [ 768.699408][ T10] usb 2-1: USB disconnect, device number 32 [ 772.424627][ T30] audit: type=1804 audit(1756670503.137:62): pid=14750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2171" name="/newroot/435/file1" dev="fuse" ino=1 res=1 errno=0 [ 772.583706][ T5928] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 772.768422][ T5928] usb 1-1: config 0 has no interfaces? [ 772.792850][ T5928] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 772.839800][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.895518][ T5928] usb 1-1: config 0 descriptor?? [ 775.413137][ T5928] usb 1-1: USB disconnect, device number 34 [ 775.969013][T14800] syzkaller1: entered promiscuous mode [ 775.976444][T14800] syzkaller1: entered allmulticast mode [ 776.138360][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 776.154938][T14804] team0: entered promiscuous mode [ 776.160144][T14804] team_slave_0: entered promiscuous mode [ 776.191710][T14804] team_slave_1: entered promiscuous mode [ 776.245012][T14804] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 776.275680][T14804] team0: left promiscuous mode [ 776.290426][T14804] team_slave_0: left promiscuous mode [ 776.298667][T14804] team_slave_1: left promiscuous mode [ 776.650309][T14815] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 777.683631][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 777.836837][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.874291][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 777.919566][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.973014][ T10] usb 2-1: config 0 descriptor?? [ 778.238767][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 778.314573][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 778.349364][ T10] usb 2-1: USB disconnect, device number 33 [ 778.824092][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 778.983791][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 778.991571][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.008887][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 779.039655][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.075328][ T10] usb 2-1: config 0 descriptor?? [ 779.468161][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 779.539198][ T10] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 779.952425][ T5935] usb 2-1: USB disconnect, device number 34 [ 780.386592][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 780.713800][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 780.744148][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 780.775391][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 780.808902][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 780.858923][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 780.919572][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 780.935923][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 780.945129][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 780.963338][ T24] usb 3-1: Product: syz [ 780.967618][ T24] usb 3-1: Manufacturer: syz [ 780.972190][ T24] usb 3-1: SerialNumber: syz [ 780.984042][ T24] usb 3-1: config 0 descriptor?? [ 780.995830][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 781.006167][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 781.496004][ T10] usb 3-1: USB disconnect, device number 41 [ 781.496545][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 781.508483][T14861] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 781.525571][ T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 781.760541][T14885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2206'. [ 781.783242][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2206'. [ 781.823710][ T5935] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 781.854462][T14888] netlink: 'syz.4.2206': attribute type 10 has an invalid length. [ 781.888979][T14887] syzkaller1: entered promiscuous mode [ 781.895365][T14887] syzkaller1: entered allmulticast mode [ 781.977828][T14888] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 781.991420][T14888] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 782.001895][T14888] team0: Failed to send options change via netlink (err -105) [ 782.011411][T14888] team0: Port device netdevsim0 added [ 782.030893][ T5935] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 782.076062][ T5935] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 782.104045][ T5935] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 782.113313][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.133401][T14877] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 782.147378][ T5935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 782.417864][T14877] fuse: Unknown parameter '0x0000000000000007' [ 782.739233][ T5935] usb 4-1: USB disconnect, device number 36 [ 784.037614][T14910] netlink: 'syz.0.2210': attribute type 1 has an invalid length. [ 784.132800][T14910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 784.169460][T14913] bond2: (slave bridge0): making interface the new active one [ 784.178601][T14913] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 784.338269][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 785.538878][T14937] binder_alloc: 14935: binder_alloc_buf, no vma [ 785.610651][ T30] audit: type=1804 audit(1756670516.357:63): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2221" name="/newroot/447/file1" dev="fuse" ino=1 res=1 errno=0 [ 785.947140][T14949] binder: BINDER_SET_CONTEXT_MGR already set [ 786.083833][T14949] binder: 14947:14949 ioctl 4018620d 200000000040 returned -16 [ 786.381051][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 786.935307][ T5935] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 787.381981][ T5935] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 787.432905][T14982] bond_slave_1: entered promiscuous mode [ 787.438837][T14982] batadv0: entered promiscuous mode [ 787.483877][ T5935] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 787.496180][T14982] vlan2: entered promiscuous mode [ 787.501250][T14982] bond0: entered promiscuous mode [ 787.564354][ T5935] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 787.574218][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.609859][T14970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 787.633861][ T5935] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.826875][T14970] fuse: Unknown parameter '0x0000000000000007' [ 788.352108][ T24] usb 1-1: USB disconnect, device number 35 [ 788.540775][T14996] binder: BINDER_SET_CONTEXT_MGR already set [ 788.548959][T14996] binder: 14995:14996 ioctl 4018620d 200000000040 returned -16 [ 788.560459][T14996] binder: 14995:14996 ioctl c0306201 200000000240 returned -11 [ 788.607489][T14998] loop7: detected capacity change from 0 to 16384 [ 788.810255][T14998] loop7: detected capacity change from 16384 to 16383 [ 791.146994][T15027] syzkaller1: entered promiscuous mode [ 791.152644][T15027] syzkaller1: entered allmulticast mode [ 791.820564][T15034] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 792.230972][T15045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2247'. [ 792.287539][T15045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2247'. [ 792.943586][ T5935] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 793.552999][ T5935] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 793.610459][ T5935] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 793.648869][ T5935] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 793.703654][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.837958][T15055] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 793.858820][ T5935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.819145][T15055] fuse: Unknown parameter '0x0000000000000007' [ 795.104573][ T5935] usb 3-1: USB disconnect, device number 42 [ 797.036392][T15086] syzkaller1: entered promiscuous mode [ 797.041946][T15086] syzkaller1: entered allmulticast mode [ 797.216851][T15093] kvm: pic: non byte write [ 797.229649][T15093] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 797.762189][T15100] netlink: 'syz.2.2262': attribute type 12 has an invalid length. [ 797.892621][T15103] geneve3: entered promiscuous mode [ 798.125365][T15112] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 798.131910][T15112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 798.165254][T15112] vhci_hcd vhci_hcd.0: Device attached [ 798.213813][T15116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 798.272080][T15112] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 798.272714][T15117] tipc: Started in network mode [ 798.278620][T15112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 798.306450][T15112] vhci_hcd vhci_hcd.0: Device attached [ 798.330941][T15117] tipc: Node identity 4e1ccd56b417, cluster identity 4711 [ 798.340028][T15117] tipc: Enabled bearer , priority 0 [ 798.349536][T15116] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 798.349757][T15121] syzkaller0: entered promiscuous mode [ 798.356136][T15116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 798.369656][T15116] vhci_hcd vhci_hcd.0: Device attached [ 798.369669][ T5928] vhci_hcd: vhci_device speed not set [ 798.382203][T15121] syzkaller0: entered allmulticast mode [ 798.395280][T15112] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(9) [ 798.401788][T15112] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 798.428947][T15117] tipc: Resetting bearer [ 798.433614][T15112] vhci_hcd vhci_hcd.0: Device attached [ 798.434957][ T5928] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 798.455998][T15116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 798.481594][T15115] tipc: Resetting bearer [ 798.502951][T15115] tipc: Disabling bearer [ 798.503147][T15112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 798.567783][T15123] vhci_hcd: connection closed [ 798.569334][ T13] vhci_hcd: stop threads [ 798.582232][T15113] vhci_hcd: connection reset by peer [ 798.582402][T15120] vhci_hcd: connection closed [ 798.587627][T15118] vhci_hcd: connection closed [ 798.599258][ T13] vhci_hcd: release socket [ 798.610706][ T13] vhci_hcd: disconnect device [ 798.620000][ T13] vhci_hcd: stop threads [ 798.651515][ T13] vhci_hcd: release socket [ 798.704753][ T13] vhci_hcd: disconnect device [ 798.714002][T15130] tipc: Enabled bearer , priority 0 [ 798.732743][ T13] vhci_hcd: stop threads [ 798.747466][ T13] vhci_hcd: release socket [ 798.754195][T15130] syzkaller0: entered promiscuous mode [ 798.757946][ T13] vhci_hcd: disconnect device [ 798.772645][T15130] syzkaller0: entered allmulticast mode [ 798.787649][ T13] vhci_hcd: stop threads [ 798.797882][ T13] vhci_hcd: release socket [ 798.828006][ T13] vhci_hcd: disconnect device [ 798.852061][T15130] tipc: Resetting bearer [ 798.872489][T15129] tipc: Resetting bearer [ 798.956387][T15129] tipc: Disabling bearer [ 799.432830][T15143] syzkaller1: entered promiscuous mode [ 799.438466][T15143] syzkaller1: entered allmulticast mode [ 799.503582][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 800.102014][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 800.167407][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 800.502708][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 800.620572][T15159] lo: entered allmulticast mode [ 800.639158][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.814549][T15158] lo: left allmulticast mode [ 800.853223][T15136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.868998][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 801.160879][T15170] fuse: Bad value for 'fd' [ 801.636404][ T5935] usb 3-1: USB disconnect, device number 43 [ 802.536006][T15184] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 802.669677][T15188] syzkaller1: entered promiscuous mode [ 802.692955][T15188] syzkaller1: entered allmulticast mode [ 803.553980][ T5928] vhci_hcd: vhci_device speed not set [ 805.259086][T15233] syzkaller1: entered promiscuous mode [ 805.267201][T15233] syzkaller1: entered allmulticast mode [ 805.383687][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 805.543725][ T5928] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 805.563662][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 805.586086][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 805.698510][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.715990][ T24] usb 4-1: Product: syz [ 805.728460][ T24] usb 4-1: Manufacturer: syz [ 805.749822][ T24] usb 4-1: SerialNumber: syz [ 805.773632][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 805.796784][T15237] tipc: Started in network mode [ 805.803987][ T5928] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 805.825881][T15237] tipc: Node identity 52c97ab999cd, cluster identity 4711 [ 805.839669][ T24] usb 4-1: config 0 descriptor?? [ 805.845434][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 805.862443][T15237] tipc: Enabled bearer , priority 0 [ 805.925178][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 805.944622][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 805.976495][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.986738][ T24] usb 4-1: Detected FT232H [ 805.992067][T15238] syzkaller0: entered promiscuous mode [ 806.001655][ T5928] usb 3-1: Product: syz [ 806.009684][T15238] syzkaller0: entered allmulticast mode [ 806.073234][ T5928] usb 3-1: Manufacturer: syz [ 806.103580][ T5928] usb 3-1: SerialNumber: syz [ 806.138123][T15237] tipc: Resetting bearer [ 806.201597][T15236] tipc: Resetting bearer [ 806.313446][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 806.382701][T15236] tipc: Disabling bearer [ 806.398408][ T5928] usb 3-1: 0:2 : does not exist [ 806.412948][ T24] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 806.540772][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 806.552120][ T5928] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 806.600378][T15247] tipc: Enabled bearer , priority 0 [ 806.608886][T15247] syzkaller0: entered promiscuous mode [ 806.620578][T15247] syzkaller0: entered allmulticast mode [ 806.657031][ T24] usb 4-1: USB disconnect, device number 37 [ 806.733064][T15247] tipc: Resetting bearer [ 806.762454][ T5928] usb 3-1: USB disconnect, device number 44 [ 806.769414][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 806.796677][ T24] ftdi_sio 4-1:0.0: device disconnected [ 806.860140][T15246] tipc: Resetting bearer [ 806.922840][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 806.967554][T15246] tipc: Disabling bearer [ 807.229107][T15259] tipc: Enabled bearer , priority 0 [ 807.238219][T15259] syzkaller0: entered promiscuous mode [ 807.245433][T15259] syzkaller0: entered allmulticast mode [ 807.281705][T15259] tipc: Resetting bearer [ 807.287906][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 807.299041][T15258] tipc: Resetting bearer [ 807.317694][T15258] tipc: Disabling bearer [ 807.453663][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 807.482275][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 807.526060][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 807.559356][T15264] tipc: Enabled bearer , priority 0 [ 807.577940][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.581521][T15264] syzkaller0: entered promiscuous mode [ 807.613765][T15264] syzkaller0: entered allmulticast mode [ 807.623694][ T24] usb 3-1: Product: syz [ 807.643312][ T24] usb 3-1: Manufacturer: syz [ 807.666159][ T24] usb 3-1: SerialNumber: syz [ 807.711080][T15264] tipc: Resetting bearer [ 807.717388][ T24] usb 3-1: config 0 descriptor?? [ 807.765066][T15263] tipc: Resetting bearer [ 807.933278][T15263] tipc: Disabling bearer [ 808.259841][ T24] gs_usb 3-1:0.0: Configuring for 196 interfaces [ 808.274223][ T24] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 808.302503][ T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 808.376075][T15269] tipc: Started in network mode [ 808.405596][T15269] tipc: Node identity b2f3e397345b, cluster identity 4711 [ 808.571753][T15269] tipc: Enabled bearer , priority 0 [ 808.611984][T15272] syzkaller0: entered promiscuous mode [ 808.617664][T15272] syzkaller0: entered allmulticast mode [ 808.661112][T15269] tipc: Resetting bearer [ 808.690784][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.694736][T15268] tipc: Resetting bearer [ 808.697180][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.726193][T15268] tipc: Disabling bearer [ 809.103572][T15284] syzkaller1: entered promiscuous mode [ 809.122644][T15284] syzkaller1: entered allmulticast mode [ 810.082511][ T24] usb 3-1: USB disconnect, device number 45 [ 810.816688][T15303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 810.896188][T15303] kvm: pic: non byte read [ 810.900804][T15303] kvm: pic: level sensitive irq not supported [ 810.900972][T15303] kvm: pic: non byte read [ 810.929661][T15303] kvm: pic: level sensitive irq not supported [ 810.929728][T15303] kvm: pic: non byte read [ 810.963672][T15303] kvm: pic: level sensitive irq not supported [ 810.978547][T15303] kvm: pic: non byte read [ 811.009968][T15303] kvm: pic: level sensitive irq not supported [ 811.012598][T15303] kvm: pic: non byte read [ 811.028967][T15303] kvm: pic: level sensitive irq not supported [ 811.029042][T15303] kvm: pic: non byte read [ 811.407337][T15313] tipc: Enabled bearer , priority 0 [ 811.417684][T15313] syzkaller0: entered promiscuous mode [ 811.423339][T15313] syzkaller0: entered allmulticast mode [ 811.443530][T15313] tipc: Resetting bearer [ 811.450579][T15312] tipc: Resetting bearer [ 811.486353][T15312] tipc: Disabling bearer [ 811.712495][T15319] tipc: Started in network mode [ 811.717679][T15319] tipc: Node identity 0a3c146dc885, cluster identity 4711 [ 811.729670][T15319] tipc: Enabled bearer , priority 0 [ 811.750394][T15320] syzkaller1: entered promiscuous mode [ 811.756729][T15320] syzkaller1: entered allmulticast mode [ 811.766491][T15319] syzkaller0: entered promiscuous mode [ 811.773270][T15319] syzkaller0: entered allmulticast mode [ 811.799411][T15319] tipc: Resetting bearer [ 811.811198][T15318] tipc: Resetting bearer [ 811.828942][T15318] tipc: Disabling bearer [ 811.962031][T15323] tipc: Enabled bearer , priority 0 [ 811.978065][T15323] syzkaller0: entered promiscuous mode [ 811.984113][T15323] syzkaller0: entered allmulticast mode [ 812.005022][T15323] tipc: Resetting bearer [ 812.011904][T15322] tipc: Resetting bearer [ 812.027421][T15322] tipc: Disabling bearer [ 812.172815][T15324] tipc: Enabled bearer , priority 0 [ 812.191547][T15324] syzkaller0: entered promiscuous mode [ 812.212075][T15324] syzkaller0: entered allmulticast mode [ 812.345733][T15331] tipc: Resetting bearer [ 812.377313][T15321] tipc: Resetting bearer [ 812.960980][T15321] tipc: Disabling bearer [ 813.286524][T15341] syzkaller1: entered promiscuous mode [ 813.295478][T15341] syzkaller1: entered allmulticast mode [ 814.176425][T15335] delete_channel: no stack [ 814.273643][ T5928] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 814.861447][T15355] tipc: Enabling of bearer rejected, failed to enable media [ 814.989917][ T5928] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 815.045906][ T5928] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 815.102661][T15357] tipc: Enabled bearer , priority 0 [ 815.113615][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 815.131561][T15357] syzkaller0: entered promiscuous mode [ 815.143212][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.155286][T15357] syzkaller0: entered allmulticast mode [ 815.192156][T15357] tipc: Resetting bearer [ 815.218457][T15356] tipc: Resetting bearer [ 815.235970][T15348] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 815.299069][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 815.478943][T15356] tipc: Disabling bearer [ 815.537650][T15348] fuse: Unknown parameter 'rootmod' [ 815.768169][ T5928] usb 2-1: USB disconnect, device number 35 [ 815.778951][T15362] tipc: Started in network mode [ 815.837594][T15362] tipc: Node identity 6acd6859741d, cluster identity 4711 [ 815.903300][T15362] tipc: Enabled bearer , priority 0 [ 815.944569][T15364] syzkaller0: entered promiscuous mode [ 815.976567][T15364] syzkaller0: entered allmulticast mode [ 816.019573][T15364] tipc: Resetting bearer [ 816.423671][T15372] syzkaller1: entered promiscuous mode [ 816.430118][T15372] syzkaller1: entered allmulticast mode [ 816.440779][T15360] tipc: Resetting bearer [ 816.506102][T15360] tipc: Disabling bearer [ 816.603030][T15377] tipc: Enabled bearer , priority 0 [ 816.637566][T15377] syzkaller0: entered promiscuous mode [ 816.643188][T15377] syzkaller0: entered allmulticast mode [ 816.699417][T15377] tipc: Resetting bearer [ 816.718041][T15376] tipc: Resetting bearer [ 816.749583][T15376] tipc: Disabling bearer [ 818.050676][T15398] tipc: Enabled bearer , priority 0 [ 818.060242][T15398] syzkaller0: entered promiscuous mode [ 818.113396][T15398] syzkaller0: entered allmulticast mode [ 818.168281][T15401] tipc: Enabled bearer , priority 0 [ 818.182391][T15398] tipc: Resetting bearer [ 818.207510][T15401] syzkaller0: entered promiscuous mode [ 818.225592][T15401] syzkaller0: entered allmulticast mode [ 818.269778][T15397] tipc: Resetting bearer [ 818.322410][T15397] tipc: Disabling bearer [ 818.379918][T15403] tipc: Resetting bearer [ 818.415046][T15399] tipc: Resetting bearer [ 818.489423][T15399] tipc: Disabling bearer [ 818.802455][T15417] syzkaller1: entered promiscuous mode [ 818.808857][T15417] syzkaller1: entered allmulticast mode [ 819.570690][T15422] tipc: Enabled bearer , priority 0 [ 819.581660][T15422] syzkaller0: entered promiscuous mode [ 819.587476][T15422] syzkaller0: entered allmulticast mode [ 819.751040][T15424] tipc: Resetting bearer [ 819.788618][T15421] tipc: Resetting bearer [ 819.809336][T15421] tipc: Disabling bearer [ 820.100625][T15431] tipc: Enabled bearer , priority 0 [ 820.186077][T15431] syzkaller0: entered promiscuous mode [ 820.215977][T15431] syzkaller0: entered allmulticast mode [ 820.268281][T15431] tipc: Resetting bearer [ 820.286641][T15430] tipc: Resetting bearer [ 820.368531][T15430] tipc: Disabling bearer [ 821.826155][T15456] tipc: Enabled bearer , priority 0 [ 821.841569][T15456] syzkaller0: entered promiscuous mode [ 821.855391][T15456] syzkaller0: entered allmulticast mode [ 822.239597][T15461] tipc: Resetting bearer [ 822.412751][T15455] tipc: Resetting bearer [ 822.434871][T15455] tipc: Disabling bearer [ 822.745143][T15472] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2354'. [ 822.757609][ T30] audit: type=1326 audit(1756670553.507:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 822.819227][ T30] audit: type=1326 audit(1756670553.527:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 822.841512][ C0] vkms_vblank_simulate: vblank timer overrun [ 822.964199][ T30] audit: type=1326 audit(1756670553.537:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2517d8d550 code=0x7ffc0000 [ 823.044370][ T30] audit: type=1326 audit(1756670553.537:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 823.144576][ T30] audit: type=1326 audit(1756670553.537:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 823.212985][ T30] audit: type=1326 audit(1756670553.537:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 823.404564][ T30] audit: type=1326 audit(1756670553.537:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 823.426809][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.524324][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 823.639882][ T30] audit: type=1326 audit(1756670553.537:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 823.662180][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.748021][ T30] audit: type=1326 audit(1756670553.537:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 823.814620][ T30] audit: type=1326 audit(1756670553.537:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.3.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2517d8ebe9 code=0x7ffc0000 [ 823.964243][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 824.126689][ T5935] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 824.137909][ T10] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 824.230203][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.239063][ T10] usb 3-1: Product: syz [ 824.243231][ T10] usb 3-1: Manufacturer: syz [ 824.259116][ T10] usb 3-1: SerialNumber: syz [ 824.275497][T15493] syzkaller1: entered promiscuous mode [ 824.281121][T15493] syzkaller1: entered allmulticast mode [ 824.304814][ T10] usb 3-1: config 0 descriptor?? [ 824.345256][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 824.351898][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 824.386259][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.424475][ T5935] usb 1-1: config 0 descriptor?? [ 824.514186][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'. [ 824.548341][T15485] macvtap1: entered promiscuous mode [ 824.568361][T15485] `: entered promiscuous mode [ 824.578946][T15485] team_slave_0: entered promiscuous mode [ 824.596887][T15485] team_slave_1: entered promiscuous mode [ 824.612749][T15485] macvtap1: entered allmulticast mode [ 824.626102][T15485] `: entered allmulticast mode [ 824.733584][T15485] team_slave_0: entered allmulticast mode [ 824.739344][T15485] team_slave_1: entered allmulticast mode [ 824.799470][T15485] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 824.910743][T15495] `: left allmulticast mode [ 825.009238][T15495] team_slave_0: left allmulticast mode [ 825.078205][T15495] team_slave_1: left allmulticast mode [ 825.213870][T15495] `: left promiscuous mode [ 825.219143][T15495] team_slave_0: left promiscuous mode [ 825.225014][T15495] team_slave_1: left promiscuous mode [ 825.242488][ T10] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 825.434103][ T10] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 825.448026][ T5935] video4linux radio48: keene_cmd_set failed (-110) [ 825.499337][ T5935] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 825.569507][ T10] usb 3-1: USB disconnect, device number 46 [ 826.204017][T15512] team0: Port device vxlan0 added [ 826.221458][T14315] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.264731][T14315] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.385775][ T1155] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.406629][ T1155] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.903719][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 827.065557][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 827.079801][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.120013][ T10] usb 2-1: config 0 descriptor?? [ 827.416531][ T24] usb 1-1: USB disconnect, device number 36 [ 827.766853][T15537] tipc: Enabled bearer , priority 0 [ 827.785770][T15537] syzkaller0: entered promiscuous mode [ 827.791265][T15537] syzkaller0: entered allmulticast mode [ 827.900040][T15537] tipc: Resetting bearer [ 827.913596][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 827.932121][T15536] tipc: Resetting bearer [ 828.076432][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 828.083290][T15536] tipc: Disabling bearer [ 828.083437][ T24] usb 1-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 828.133679][ T24] usb 1-1: config 255 has an invalid descriptor of length 217, skipping remainder of the config [ 828.187975][ T24] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 231 [ 828.238980][ T24] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 828.277321][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.319806][ T24] usb 1-1: Product: syz [ 828.352923][ T24] usb 1-1: Manufacturer: syz [ 828.357919][ T24] usb 1-1: SerialNumber: syz [ 828.762107][ T24] usb 1-1: USB disconnect, device number 37 [ 828.809827][ T10] pegasus 2-1:0.0: setup Pegasus II specific registers [ 828.957156][ T10] pegasus 2-1:0.0: can't locate MII phy, using default [ 828.995553][ T10] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 9e:95:4d:bf:17:a8 [ 829.041302][ T10] usb 2-1: USB disconnect, device number 36 [ 830.713657][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 830.997155][ T24] usb 1-1: config 0 has no interfaces? [ 831.012670][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 831.029206][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.039631][ T24] usb 1-1: Product: syz [ 831.049190][ T24] usb 1-1: Manufacturer: syz [ 831.057148][ T24] usb 1-1: SerialNumber: syz [ 831.067055][ T24] usb 1-1: config 0 descriptor?? [ 831.362005][T15586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.382715][T15586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.625333][T15600] tipc: Enabled bearer , priority 0 [ 831.632837][T15600] syzkaller0: entered promiscuous mode [ 831.638594][T15600] syzkaller0: entered allmulticast mode [ 831.714264][T15604] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 831.728004][T15600] tipc: Resetting bearer [ 831.756270][T15599] tipc: Resetting bearer [ 831.802097][T15599] tipc: Disabling bearer [ 832.470937][T15620] netlink: 'syz.1.2383': attribute type 20 has an invalid length. [ 833.123635][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 833.286983][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 833.304230][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.341684][ T24] usb 4-1: Product: syz [ 833.360813][ T24] usb 4-1: Manufacturer: syz [ 833.383564][ T24] usb 4-1: SerialNumber: syz [ 833.676331][ T10] usb 1-1: USB disconnect, device number 38 [ 833.996161][T15627] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2386'. [ 834.839338][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 836.327246][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 836.375255][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 836.423703][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 836.483145][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 836.511854][ T24] usb 4-1: USB disconnect, device number 38 [ 837.071340][T15671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2396'. [ 837.088562][T15671] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2396'. [ 837.097807][T15671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2396'. [ 837.107175][T15671] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2396'. [ 840.086330][T15706] tipc: Enabled bearer , priority 0 [ 840.095884][T15706] syzkaller0: entered promiscuous mode [ 840.103295][T15706] syzkaller0: entered allmulticast mode [ 840.226489][T15706] tipc: Resetting bearer [ 840.253017][T15705] tipc: Resetting bearer [ 840.283216][T15705] tipc: Disabling bearer [ 842.073295][T15734] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 842.125824][T15739] syzkaller1: entered promiscuous mode [ 842.131495][T15739] syzkaller1: entered allmulticast mode [ 842.525722][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 842.567599][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 842.752132][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 842.770781][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 842.812217][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 842.833607][ T5928] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 842.845394][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.876726][T15743] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 842.902515][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.983639][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 842.992785][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 843.019912][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 843.051954][ T5928] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 843.061893][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.077150][ T5928] usb 3-1: Product: syz [ 843.088164][ T5928] usb 3-1: Manufacturer: syz [ 843.109287][ T5928] usb 3-1: SerialNumber: syz [ 843.131001][ T5928] usb 3-1: config 0 descriptor?? [ 843.142969][ T5928] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 843.170136][T15743] fuse: Unknown parameter 'rootmod' [ 843.243015][ T5928] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 843.484076][ T24] usb 5-1: USB disconnect, device number 30 [ 843.836196][T15755] tipc: Enabled bearer , priority 0 [ 843.845865][T15755] syzkaller0: entered promiscuous mode [ 843.851387][T15755] syzkaller0: entered allmulticast mode [ 843.860306][ T5928] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 843.868317][ T5928] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 843.946918][T15755] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2417'. [ 843.959712][T15755] tipc: Resetting bearer [ 843.971067][T15753] tipc: Resetting bearer [ 843.988664][T15753] tipc: Disabling bearer [ 844.519788][ T5928] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 844.559046][ T5928] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 844.635228][ T5928] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 844.684121][ T5928] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 844.750896][ T5928] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 845.565184][ T5928] usb 3-1: USB disconnect, device number 47 [ 846.030372][T15784] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 846.217967][T15786] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 846.293301][T15784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 846.301822][ T1169] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 846.454520][ T1155] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 846.824670][T15791] veth5: entered promiscuous mode [ 846.885655][T15791] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 848.493678][ T5928] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 849.209802][ T5928] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 849.253308][ T5928] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 849.279567][ T5928] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 849.309518][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.350303][T15814] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 849.385187][ T5928] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 849.593595][T15814] fuse: Unknown parameter 'rootmod' [ 850.098586][ T10] usb 5-1: USB disconnect, device number 31 [ 850.430035][ T5928] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 850.818863][ T5928] usb 3-1: config 0 has no interfaces? [ 852.183267][T15839] syzkaller1: entered promiscuous mode [ 852.190335][T15839] syzkaller1: entered allmulticast mode [ 852.270343][ T5928] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 852.284047][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.292040][ T5928] usb 3-1: Product: syz [ 852.310207][ T5928] usb 3-1: Manufacturer: syz [ 852.335561][ T5928] usb 3-1: SerialNumber: syz [ 852.414203][ T5928] usb 3-1: config 0 descriptor?? [ 852.731821][T15824] openvswitch: netlink: IP tunnel dst address not specified [ 852.923865][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 853.085097][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 853.097090][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.119629][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.176553][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 853.201834][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.300143][ T10] usb 5-1: Product: syz [ 853.396979][ T10] usb 5-1: Manufacturer: syz [ 853.496338][ T10] usb 5-1: SerialNumber: syz [ 853.814666][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 854.037523][ T5935] usb 3-1: USB disconnect, device number 48 [ 854.798142][ T5868] Bluetooth: hci1: adv larger than maximum supported [ 854.798183][ T5868] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 854.805326][ T5868] Bluetooth: hci1: Malformed LE Event: 0x0d [ 856.173763][ T979] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 856.266077][ T10] usb 5-1: skipping empty audio interface (v1) [ 856.341086][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 856.390858][ T10] usb 5-1: USB disconnect, device number 32 [ 856.396887][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 856.412295][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 856.441957][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.462115][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 856.479239][ T979] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 856.494683][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.507020][ T979] usb 4-1: Product: syz [ 856.511186][ T979] usb 4-1: Manufacturer: syz [ 856.516338][ T979] usb 4-1: SerialNumber: syz [ 856.529885][ T979] usb 4-1: config 0 descriptor?? [ 856.538035][ T979] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 856.575597][ T979] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 857.145935][ T979] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 857.152824][ T979] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 857.777054][ T979] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 857.786970][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 857.811826][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 857.826904][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 857.851552][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 858.936384][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 858.947271][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 858.963900][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 858.983592][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 858.991450][ T979] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 859.007555][ T979] usb 4-1: USB disconnect, device number 39 [ 859.366007][T15898] tipc: Enabled bearer , priority 0 [ 859.373892][T15898] syzkaller0: entered promiscuous mode [ 859.379373][T15898] syzkaller0: entered allmulticast mode [ 859.402748][T15898] tipc: Resetting bearer [ 859.411065][T15897] tipc: Resetting bearer [ 859.425648][T15897] tipc: Disabling bearer [ 860.226956][T15918] tipc: Enabled bearer , priority 0 [ 860.295163][T15918] syzkaller0: entered promiscuous mode [ 860.306393][T15918] syzkaller0: entered allmulticast mode [ 860.428584][T15918] tipc: Resetting bearer [ 860.470428][T15917] tipc: Resetting bearer [ 860.581070][T15917] tipc: Disabling bearer [ 862.695555][T15947] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 863.623805][ T979] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 863.795058][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 863.822176][ T979] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 863.840173][ T979] usb 5-1: config 0 has no interface number 0 [ 863.863844][ T979] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.913368][ T979] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.977074][ T979] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 864.036414][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.070793][ T979] usb 5-1: config 0 descriptor?? [ 864.633871][ T5928] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 864.914598][ T5928] usb 2-1: config 0 has no interfaces? [ 864.925613][ T5928] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 864.936241][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.962453][ T5928] usb 2-1: Product: syz [ 864.984811][ T5928] usb 2-1: Manufacturer: syz [ 864.984819][ T979] uclogic 0003:28BD:0071.0018: pen parameters not found [ 864.984851][ T979] uclogic 0003:28BD:0071.0018: interface is invalid, ignoring [ 865.010861][ T5928] usb 2-1: SerialNumber: syz [ 865.507233][ T5928] usb 2-1: config 0 descriptor?? [ 865.769001][ T979] usb 5-1: USB disconnect, device number 33 [ 867.029585][T16001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 867.392558][ T5928] usb 2-1: USB disconnect, device number 37 [ 868.093853][ T979] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 868.321466][ T979] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 868.373838][ T979] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 868.407618][ T979] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 868.466289][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.531229][T16019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 868.553004][ T979] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 868.646114][T16028] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2475'. [ 869.047543][T16019] fuse: Unknown parameter 'rootmod' [ 869.328728][ T5928] usb 1-1: USB disconnect, device number 39 [ 870.126164][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.133283][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.140378][ T5957] kworker/0:4 (5957) used greatest stack depth: 14312 bytes left [ 871.236587][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 871.855537][ T5928] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 871.923747][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 872.068225][ T5928] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 872.091081][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 872.100715][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.106836][T16064] pim6reg: entered allmulticast mode [ 872.134625][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.173698][ T5928] usb 1-1: Product: syz [ 872.197905][ T5928] usb 1-1: Manufacturer: syz [ 872.202534][ T24] usb 4-1: Product: syz [ 872.208895][ T5928] usb 1-1: SerialNumber: syz [ 872.213606][ T24] usb 4-1: Manufacturer: syz [ 872.218879][ T24] usb 4-1: SerialNumber: syz [ 872.230514][ T5928] usb 1-1: config 0 descriptor?? [ 872.245664][ T24] usb 4-1: config 0 descriptor?? [ 872.446965][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 872.474133][T16056] dummy0: entered promiscuous mode [ 872.481370][T16056] macvtap1: entered promiscuous mode [ 872.492382][T16056] macvtap1: entered allmulticast mode [ 872.498108][T16056] dummy0: entered allmulticast mode [ 872.530223][T16056] dummy0: left allmulticast mode [ 872.594284][T16056] dummy0: left promiscuous mode [ 872.606360][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2481'. [ 872.641421][ T5928] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 872.704247][ T24] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 872.722160][ T5928] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 872.759182][ T24] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 872.774178][ T5928] usb 1-1: USB disconnect, device number 40 [ 872.803131][ T24] usb 4-1: USB disconnect, device number 40 [ 874.157070][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2490'. [ 874.408874][T16100] ptrace attach of "./syz-executor exec"[5890] was attempted by "./syz-executor exec"[16100] [ 874.457019][T16101] ptrace attach of "./syz-executor exec"[5891] was attempted by "./syz-executor exec"[16101] [ 874.554655][T16096] bridge1: port 1(veth0_to_bond) entered blocking state [ 874.648539][T16096] bridge1: port 1(veth0_to_bond) entered disabled state [ 874.689468][T16096] veth0_to_bond: entered allmulticast mode [ 874.752631][T16096] veth0_to_bond: entered promiscuous mode [ 874.790445][T16097] vlan2: entered allmulticast mode [ 874.816194][T16097] veth1: entered allmulticast mode [ 874.852959][T16097] bridge1: port 2(vlan2) entered blocking state [ 874.944423][T16097] bridge1: port 2(vlan2) entered disabled state [ 874.951980][T16097] vlan2: entered promiscuous mode [ 874.962513][T16097] veth1: entered promiscuous mode [ 877.173810][ T5928] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 877.635542][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 877.642527][ T5928] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 877.652818][ T5928] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 877.713356][ T5928] usb 1-1: config 1 has no interface number 1 [ 877.755656][ T5928] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 877.795416][ T5928] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 877.820149][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.854445][ T5928] usb 1-1: SerialNumber: כּéŠï›®å¸€í‘렷Ꙛ倄ꚺច㥑᭢貊ے腆â‡ì©‚è°Äœä“‡á·‰ìŒîª¬ä¨áœ¿ì®¡äµ™â¯±ã¸ˆèಯᖵ뚤톜אָ讗暢잶漟寲柪勷코檪 [ 878.240411][ T5928] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 878.299794][ T5928] usb 1-1: USB disconnect, device number 41 [ 881.088445][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 881.105853][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'. [ 882.921684][T16200] trusted_key: syz.3.2508 sent an empty control message without MSG_MORE. [ 882.982813][T16200] sctp: [Deprecated]: syz.3.2508 (pid 16200) Use of int in maxseg socket option. [ 882.982813][T16200] Use struct sctp_assoc_value instead [ 884.303775][T16213] vlan3: entered promiscuous mode [ 884.318631][T16213] veth0: entered promiscuous mode [ 884.995063][T16224] tipc: Enabled bearer , priority 0 [ 885.010051][T16224] syzkaller0: entered promiscuous mode [ 885.063844][T16224] syzkaller0: entered allmulticast mode [ 885.098970][T16224] tipc: Resetting bearer [ 885.120582][T16223] tipc: Resetting bearer [ 885.316207][T16223] tipc: Disabling bearer [ 886.693665][ T979] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 887.003778][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.299519][ T979] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 887.443603][ T979] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 887.452670][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.473764][ T24] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 887.665975][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 887.674998][ T24] usb 2-1: config 0 has no interface number 0 [ 887.691122][ T24] usb 2-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 887.729121][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 887.750858][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.776841][ T24] usb 2-1: config 0 descriptor?? [ 887.781107][ T979] usb 4-1: Product: syz [ 887.786063][ T979] usb 4-1: Manufacturer: syz [ 887.789901][ T24] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 887.790718][ T979] usb 4-1: SerialNumber: syz [ 887.889772][ T979] usb 4-1: config 0 descriptor?? [ 888.694700][T16260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2522'. [ 888.975818][ T24] usb 2-1: USB disconnect, device number 38 [ 889.959673][ T979] usb 4-1: USB disconnect, device number 41 [ 890.491795][T16282] netlink: 'syz.3.2528': attribute type 12 has an invalid length. [ 890.659072][T16283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2526'. [ 891.243646][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 891.522216][ T24] usb 1-1: config 0 has no interfaces? [ 891.623783][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 891.675992][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.743761][ T24] usb 1-1: Product: syz [ 891.749926][ T24] usb 1-1: Manufacturer: syz [ 891.758154][ T24] usb 1-1: SerialNumber: syz [ 891.789132][ T24] usb 1-1: config 0 descriptor?? [ 892.533990][T16302] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 893.824269][ T5928] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 893.884572][ T982] usb 1-1: USB disconnect, device number 42 [ 894.033614][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 894.043460][ T5928] usb 3-1: config index 0 descriptor too short (expected 65297, got 77) [ 894.053130][ T5928] usb 3-1: config 0 has too many interfaces: 252, using maximum allowed: 32 [ 894.112577][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.285655][ T5928] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 252 [ 894.337623][ T5928] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 894.350186][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.364153][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 894.416674][ T5928] usb 3-1: Product: syz [ 894.434013][ T5928] usb 3-1: Manufacturer: syz [ 894.438806][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 894.573288][ T5928] usb 3-1: SerialNumber: syz [ 895.170556][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.456518][ T5928] usb 3-1: config 0 descriptor?? [ 895.463752][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.503554][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 895.512496][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.523558][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.580767][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 895.593859][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.604967][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.628615][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 895.640306][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.651397][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.659814][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 895.671916][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.687854][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.696542][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 895.717473][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.741118][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 895.806214][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 895.903354][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.935613][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 896.020415][T16340] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 896.047736][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 896.047749][ T30] audit: type=1400 audit(1756670626.797:88): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16313 comm="syz.2.2534" [ 896.084076][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 896.093076][T16315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2534'. [ 896.175688][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.185523][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.197999][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 896.224451][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 896.241159][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 896.263017][ T24] usb 5-1: Product: syz [ 896.275714][ T24] usb 5-1: Manufacturer: syz [ 896.280336][ T24] usb 5-1: SerialNumber: syz [ 896.288115][ T24] usb 5-1: config 0 descriptor?? [ 896.298198][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 896.346624][T16323] syz.0.2536 (16323): drop_caches: 2 [ 897.531947][ T979] usb 3-1: USB disconnect, device number 49 [ 898.701894][T16371] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 898.982842][ T24] usb 5-1: USB disconnect, device number 34 [ 899.041964][ T24] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 900.272391][T16405] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 900.804813][T16409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2551'. [ 900.984413][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 901.295301][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 901.416764][ T24] usb 2-1: config 0 has no interface number 0 [ 901.463587][ T979] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 901.493178][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 901.586501][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.628107][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 901.641804][ T24] usb 2-1: Product: syz [ 901.658451][ T24] usb 2-1: Manufacturer: syz [ 901.663071][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 901.678112][ T24] usb 2-1: SerialNumber: syz [ 901.684025][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 901.737464][ T24] usb 2-1: config 0 descriptor?? [ 902.041990][ T24] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 902.071050][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 902.153171][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 902.246564][ T24] usb 2-1: media controller created [ 902.304353][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.398293][ T979] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 902.438198][ T979] usb 4-1: config 0 has no interface number 0 [ 902.510940][ T979] usb 4-1: config 0 interface 184 has no altsetting 0 [ 902.823605][ T5928] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 902.921186][ T979] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 902.960987][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.997146][ T979] usb 4-1: Product: syz [ 903.033924][ T5928] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 903.048891][ T979] usb 4-1: Manufacturer: syz [ 903.067578][ T979] usb 4-1: SerialNumber: syz [ 903.095249][ T979] usb 4-1: config 0 descriptor?? [ 903.102820][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.111040][ T982] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 903.241961][ T5928] usb 1-1: Product: syz [ 903.273861][ T5928] usb 1-1: Manufacturer: syz [ 903.290518][ T5928] usb 1-1: SerialNumber: syz [ 903.313092][ T979] smsc75xx v1.0.0 [ 903.339120][ T5928] usb 1-1: config 0 descriptor?? [ 903.355281][ T979] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 903.382059][ T979] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 903.423576][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 903.457252][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.495399][ T24] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 903.528661][ T5928] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 903.578656][ T982] usb 3-1: config 0 has no interfaces? [ 903.616836][ T5928] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 903.632878][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 903.683818][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.759690][ T982] usb 3-1: config 0 descriptor?? [ 903.834166][ T982] usb 2-1: USB disconnect, device number 39 [ 904.593856][ T979] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 904.873833][ T979] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 904.885070][ T979] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 904.920076][ T979] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 904.971137][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.011634][T16441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 905.026706][ T979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 905.230041][T16441] fuse: Unknown parameter 'rootmod' [ 905.464392][ T982] usb 5-1: USB disconnect, device number 35 [ 905.629720][ T979] usb 4-1: USB disconnect, device number 42 [ 905.688784][ T10] usb 1-1: USB disconnect, device number 43 [ 905.768156][T16448] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2559'. [ 906.001475][ T982] usb 3-1: USB disconnect, device number 50 [ 906.101194][T16454] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 906.667189][T16463] syzkaller1: entered promiscuous mode [ 906.673004][T16463] syzkaller1: entered allmulticast mode [ 909.673674][ T982] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 910.704370][ T982] usb 4-1: config 0 has no interfaces? [ 910.735074][ T982] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 910.735094][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.735105][ T982] usb 4-1: Product: syz [ 910.735112][ T982] usb 4-1: Manufacturer: syz [ 910.735120][ T982] usb 4-1: SerialNumber: syz [ 910.757543][ T982] usb 4-1: config 0 descriptor?? [ 910.871711][ T982] usb 4-1: USB disconnect, device number 43 [ 911.235335][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 911.460675][T16479] tty tty22: ldisc open failed (-12), clearing slot 21 [ 912.003638][ T982] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 912.428832][ T982] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 912.453861][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.474573][T16524] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 912.499838][ T982] usb 2-1: Product: syz [ 912.512706][ T982] usb 2-1: Manufacturer: syz [ 912.522911][ T982] usb 2-1: SerialNumber: syz [ 912.560808][ T982] usb 2-1: config 0 descriptor?? [ 912.600178][ T982] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 913.157896][ T982] gspca_sunplus: reg_r err -110 [ 913.180552][ T982] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 913.353903][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 913.503856][ T24] usb 5-1: device descriptor read/64, error -71 [ 913.532189][T16502] syz.0.2569 (16502): drop_caches: 2 [ 913.743677][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 913.933748][ T24] usb 5-1: device descriptor read/64, error -71 [ 913.979312][T16535] ======================================================= [ 913.979312][T16535] WARNING: The mand mount option has been deprecated and [ 913.979312][T16535] and is ignored by this kernel. Remove the mand [ 913.979312][T16535] option from the mount to silence this warning. [ 913.979312][T16535] ======================================================= [ 914.023024][ T30] audit: type=1326 audit(1756670644.767:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.043993][ T24] usb usb5-port1: attempt power cycle [ 914.054514][ T30] audit: type=1326 audit(1756670644.797:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.078909][ T30] audit: type=1326 audit(1756670644.797:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.104212][ T30] audit: type=1326 audit(1756670644.797:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.130804][ T30] audit: type=1326 audit(1756670644.797:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.158862][ T30] audit: type=1326 audit(1756670644.797:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.183995][ T30] audit: type=1326 audit(1756670644.797:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.211590][ T30] audit: type=1326 audit(1756670644.797:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.247260][ T30] audit: type=1326 audit(1756670644.797:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.281095][ T30] audit: type=1326 audit(1756670644.797:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16534 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69af58ebe9 code=0x7ffc0000 [ 914.303628][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 914.403565][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 914.434306][ T24] usb 5-1: device descriptor read/8, error -71 [ 914.443662][ T10] usb 1-1: device descriptor read/64, error -71 [ 914.576417][T16541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.683924][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 914.683963][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 914.724485][ T24] usb 5-1: device descriptor read/8, error -71 [ 914.834354][ T10] usb 1-1: device descriptor read/64, error -71 [ 914.843908][ T24] usb usb5-port1: unable to enumerate USB device [ 914.881659][ T979] usb 2-1: USB disconnect, device number 40 [ 914.944163][ T10] usb usb1-port1: attempt power cycle [ 915.388283][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 915.414415][ T10] usb 1-1: device descriptor read/8, error -71 [ 915.739169][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 915.778083][ T10] usb 1-1: device descriptor read/8, error -71 [ 915.873665][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 915.887385][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 915.904986][ T10] usb usb1-port1: unable to enumerate USB device [ 916.033602][ T24] usb 3-1: device descriptor read/64, error -32 [ 916.285136][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 916.294902][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 916.423593][ T24] usb 3-1: device descriptor read/64, error -32 [ 916.536771][ T24] usb usb3-port1: attempt power cycle [ 916.883610][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 917.050698][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 917.062526][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 917.076638][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 917.090005][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.139719][T16553] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 917.250536][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 917.586592][T16569] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 917.807876][T16552] fuse: Unknown parameter 'rootmod' [ 918.023844][ T24] usb 3-1: USB disconnect, device number 53 [ 918.673616][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 918.863661][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 918.871954][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 918.893851][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 918.914453][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.922462][ T10] usb 2-1: Product: syz [ 918.958227][ T10] usb 2-1: Manufacturer: syz [ 918.977757][ T10] usb 2-1: SerialNumber: syz [ 919.002452][ T10] usb 2-1: config 0 descriptor?? [ 919.022228][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 921.446413][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 921.776412][T16616] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 922.243634][ T979] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 922.413180][ T10] gspca_zc3xx: reg_w_i err -71 [ 922.443707][ T10] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 922.585296][ T979] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 922.631177][ T10] usb 2-1: USB disconnect, device number 41 [ 922.637238][ T979] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 922.738181][ T979] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 922.767894][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.850042][T16621] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 922.867245][ T979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 923.880104][T16642] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 925.063599][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 925.092591][T16655] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 926.188862][T16668] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.2601'. [ 926.316340][T16667] sctp: [Deprecated]: syz.2.2600 (pid 16667) Use of int in maxseg socket option. [ 926.316340][T16667] Use struct sctp_assoc_value instead [ 926.342630][ T979] usb 4-1: USB disconnect, device number 44 [ 927.010316][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 927.042586][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 927.138118][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 927.211055][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.753050][ T24] usb 1-1: can't set config #27, error -71 [ 927.859400][ T24] usb 1-1: USB disconnect, device number 48 [ 928.074651][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 928.253839][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 928.267280][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 928.280495][ T10] usb 2-1: config 0 has no interface number 0 [ 928.333202][ T10] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 928.443677][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 928.504340][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.513923][ T10] usb 2-1: Product: syz [ 928.519393][ T10] usb 2-1: Manufacturer: syz [ 928.526615][ T10] usb 2-1: SerialNumber: syz [ 928.552110][ T10] usb 2-1: config 0 descriptor?? [ 928.742284][ T10] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 928.773599][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 928.815243][ T10] usb 2-1: Detected SIO [ 928.889577][T16694] usb usb8: check_ctrlrecip: process 16694 (syz.0.2606) requesting ep 01 but needs 81 [ 928.905384][T16694] usb usb8: usbfs: process 16694 (syz.0.2606) did not claim interface 0 before use [ 928.927288][ T979] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 928.944606][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 929.121992][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 929.210044][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.250660][ T979] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 929.312734][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.363147][ T979] usb 4-1: config 0 descriptor?? [ 929.852386][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2608'. [ 931.569207][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.575725][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.596294][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 931.678360][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 931.720118][ T24] usb 1-1: can't read configurations, error -71 [ 931.870630][ T982] usb 2-1: USB disconnect, device number 42 [ 931.926485][ T982] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 931.943932][ T982] ftdi_sio 2-1:0.217: device disconnected [ 932.019457][T16723] syz.1.2612(16723): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 932.080000][ T979] usbhid 4-1:0.0: can't add hid device: -71 [ 932.140867][ T979] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 932.179944][ T979] usb 4-1: USB disconnect, device number 45 [ 932.306679][T16724] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 933.243259][T16742] netlink: 'syz.2.2614': attribute type 12 has an invalid length. [ 933.869400][T16748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2615'. [ 933.889279][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 934.186065][ T979] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 934.406532][ T979] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 934.443551][ T979] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 934.473917][ T979] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 934.493543][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.520335][T16751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 934.551628][ T979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 934.816068][T16751] fuse: Unknown parameter 'rootmod' [ 935.214979][ T24] usb 5-1: USB disconnect, device number 40 [ 936.793780][ T979] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 937.133368][ T979] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 937.197067][ T979] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 937.215555][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.266345][ T979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 937.385613][ T979] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 938.149634][T16778] PKCS7: Unknown OID: [5] (bad) [ 938.157197][T16778] PKCS7: Only support pkcs7_signedData type [ 938.915189][T16783] netlink: 'syz.0.2622': attribute type 6 has an invalid length. [ 939.213613][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 939.341205][ T982] usb 4-1: USB disconnect, device number 46 [ 939.516454][ T24] usb 5-1: config index 0 descriptor too short (expected 126, got 72) [ 939.686963][T16769] delete_channel: no stack [ 939.780962][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 939.790074][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.836807][ T24] usb 5-1: Product: syz [ 939.853108][ T24] usb 5-1: Manufacturer: syz [ 939.862708][ T24] usb 5-1: SerialNumber: syz [ 940.005325][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 940.039936][T16794] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 940.833702][ T979] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 940.993756][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 941.004314][ T979] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 941.015741][ T979] usb 4-1: config 0 has no interface number 0 [ 941.040810][ T979] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 941.119879][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.153578][ T979] usb 4-1: Product: syz [ 941.183687][ T982] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 941.205999][ T979] usb 4-1: Manufacturer: syz [ 941.210623][ T979] usb 4-1: SerialNumber: syz [ 941.289101][ T979] usb 4-1: config 0 descriptor?? [ 941.333672][ T979] usb-storage 4-1:0.102: USB Mass Storage device detected [ 941.363642][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 941.418902][ T979] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 941.466822][ T979] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 941.466822][ T979] Please send a copy of this message to and [ 941.941548][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 942.398093][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.586187][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 942.661746][ T10] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 942.729339][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.786808][ T10] usb 2-1: config 0 descriptor?? [ 942.891364][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 942.923975][ T982] usb 5-1: Service connection timeout for: 257 [ 942.930188][ T982] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 943.071327][ T982] ath9k_htc: Failed to initialize the device [ 943.142664][ T982] usb 5-1: ath9k_htc: USB layer deinitialized [ 944.686592][ T979] usb 2-1: USB disconnect, device number 43 [ 944.732281][ T5935] usb 4-1: USB disconnect, device number 47 [ 944.935619][ T10] usb 5-1: USB disconnect, device number 41 [ 945.060834][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2634'. [ 945.543772][ T982] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 945.703704][ T5935] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 945.863639][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 945.870979][ T5935] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 945.881579][ T5935] usb 4-1: config 0 has no interface number 0 [ 945.888011][ T5935] usb 4-1: config 0 interface 184 has no altsetting 0 [ 945.900265][ T5935] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 945.910071][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.920097][ T5935] usb 4-1: Product: syz [ 945.924615][ T5935] usb 4-1: Manufacturer: syz [ 945.929226][ T5935] usb 4-1: SerialNumber: syz [ 945.948063][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.957233][ T5935] usb 4-1: config 0 descriptor?? [ 945.965145][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 945.992796][ T5935] smsc75xx v1.0.0 [ 945.999991][ T5935] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 946.011139][ T5935] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 946.039733][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.448991][ T982] usb 3-1: config 0 descriptor?? [ 947.265252][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 947.598596][ T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 947.666599][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 947.705741][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.946073][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 948.071630][ T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 948.153146][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.272737][ T24] usb 4-1: USB disconnect, device number 48 [ 948.868106][T16880] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 949.191644][ T24] usb 1-1: USB disconnect, device number 51 [ 949.208371][T16870] delete_channel: no stack [ 949.307683][ T5928] delete_channel: no stack [ 949.761567][ T982] usbhid 3-1:0.0: can't add hid device: -71 [ 949.778082][ T982] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 949.816388][ T982] usb 3-1: USB disconnect, device number 54 [ 950.133987][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 950.294138][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 950.311433][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 950.330357][ T24] usb 2-1: config 0 has no interface number 0 [ 950.354082][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 950.382390][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 950.402981][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.429017][ T24] usb 2-1: config 0 descriptor?? [ 950.452683][ T24] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 950.740590][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'. [ 953.491101][ T24] usb 2-1: USB disconnect, device number 44 [ 954.963666][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 955.048243][T16952] PKCS7: Unknown OID: [5] (bad) [ 955.077043][T16952] PKCS7: Only support pkcs7_signedData type [ 955.123595][ T24] usb 4-1: device descriptor read/64, error -71 [ 955.240190][T16947] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 955.433608][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 955.573967][ T24] usb 4-1: device descriptor read/64, error -71 [ 955.684257][ T24] usb usb4-port1: attempt power cycle [ 956.043947][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 956.083951][ T24] usb 4-1: device descriptor read/8, error -71 [ 956.345189][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 956.439693][ T24] usb 4-1: device descriptor read/8, error -71 [ 956.554022][ T24] usb usb4-port1: unable to enumerate USB device [ 957.260854][T16988] netlink: 'syz.0.2659': attribute type 10 has an invalid length. [ 958.523609][ T5935] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 958.823762][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 958.975477][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 958.995215][ T10] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 959.033585][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 959.043679][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 959.086143][ T10] usb 1-1: config 4 has no interface number 0 [ 959.092290][ T10] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 959.186547][ T10] usb 1-1: config 4 interface 51 has no altsetting 0 [ 959.195778][ T5935] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 959.206858][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.215724][ T10] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 959.226394][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.414544][ T10] usb 1-1: Product: syz [ 959.418990][ T10] usb 1-1: Manufacturer: syz [ 959.423788][ T10] usb 1-1: SerialNumber: syz [ 959.432359][ T5935] pvrusb2: Hardware description: Terratec Grabster AV400 [ 959.439565][ T5935] pvrusb2: ********** [ 959.443659][ T5935] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 959.453819][ T5935] pvrusb2: Important functionality might not be entirely working. [ 959.461597][ T5935] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 959.472997][ T5935] pvrusb2: ********** [ 959.543750][ T10] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 959.746083][ T2346] pvrusb2: Invalid write control endpoint [ 959.851204][ T2346] pvrusb2: Invalid write control endpoint [ 959.860531][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 959.898296][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 959.937361][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 959.972305][ T2346] pvrusb2: Device being rendered inoperable [ 960.008257][T17000] pvrusb2: Attempted to execute control transfer when device not ok [ 960.065136][T17015] netlink: 'syz.2.2665': attribute type 4 has an invalid length. [ 960.678380][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 960.703583][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 960.737710][ T2346] pvrusb2: Attached sub-driver cx25840 [ 960.759170][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 960.788113][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 961.446069][T17024] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 961.793698][ T5935] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 961.967783][ T5935] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 962.051738][ T5935] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 962.102632][ T5935] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 962.127050][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.151263][T17029] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 962.191730][ T5935] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 962.352446][ T5935] usb 2-1: USB disconnect, device number 45 [ 962.404134][T17029] fuse: Unknown parameter 'rootmod' [ 962.621568][ T5935] usb 1-1: USB disconnect, device number 52 [ 962.775510][ T10] usb 3-1: USB disconnect, device number 55 [ 963.183693][ T979] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 963.407304][ T979] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 963.469052][ T979] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 963.516523][ T979] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 963.568790][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.635450][T17043] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 963.688507][ T979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 963.912574][T17043] fuse: Unknown parameter 'rootmod' [ 964.188952][ T982] usb 5-1: USB disconnect, device number 42 [ 964.233735][ T979] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 964.433772][ T10] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 964.453666][ T979] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 964.474570][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.493163][ T979] usb 4-1: Product: syz [ 964.503260][ T979] usb 4-1: Manufacturer: syz [ 964.513381][ T979] usb 4-1: SerialNumber: syz [ 964.526215][ T979] usb 4-1: config 0 descriptor?? [ 964.585733][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.597687][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 964.618483][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 964.630372][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 964.678732][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 964.696426][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 964.775326][ T10] usb 3-1: Product: syz [ 964.783168][ T10] usb 3-1: Manufacturer: syz [ 964.808554][ T979] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 964.924106][ T10] usb 3-1: SerialNumber: syz [ 964.960273][ T10] usb 3-1: config 0 descriptor?? [ 964.994413][ T10] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 965.024839][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 965.055817][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 966.080630][T17065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2673'. [ 967.283673][ T982] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 967.710555][ T24] usb 3-1: USB disconnect, device number 56 [ 967.806294][ T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.826955][ T982] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 967.846459][ T982] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 967.870276][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.883977][ T979] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 967.918910][ T982] usb 1-1: config 0 descriptor?? [ 968.003630][ T979] usb 4-1: USB disconnect, device number 53 [ 969.498290][ T982] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 969.511891][ T982] dvb-usb: bulk message failed: -22 (3/0) [ 969.530710][ T982] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 969.550483][ T982] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 969.565735][ T982] usb 1-1: media controller created [ 969.578645][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.607002][ T982] dvb-usb: bulk message failed: -22 (6/0) [ 969.624200][ T982] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 969.642022][ T982] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input125 [ 969.668650][ T982] dvb-usb: schedule remote query interval to 150 msecs. [ 969.683733][ T982] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 969.778317][T17045] delete_channel: no stack [ 969.846857][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 969.862892][ T982] dvb-usb: error while querying for an remote control event. [ 969.914666][T17071] dvb-usb: bulk message failed: -22 (2/0) [ 969.920864][T17071] netlink: 'syz.0.2676': attribute type 6 has an invalid length. [ 970.033730][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 970.042737][ T982] dvb-usb: error while querying for an remote control event. [ 970.249606][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 970.263556][ T982] dvb-usb: error while querying for an remote control event. [ 970.460227][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 970.481332][ T982] dvb-usb: error while querying for an remote control event. [ 970.749649][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 970.822881][ T982] dvb-usb: error while querying for an remote control event. [ 971.063800][ T979] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 971.091738][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 971.097594][ T982] dvb-usb: error while querying for an remote control event. [ 971.329284][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 971.335277][ T24] dvb-usb: error while querying for an remote control event. [ 971.395850][ T979] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 971.425990][ T979] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 971.458621][ T979] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 971.485462][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.506210][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 971.534278][ T24] dvb-usb: error while querying for an remote control event. [ 971.646615][T17102] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 971.668882][ T979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.743590][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 971.753669][ T24] dvb-usb: error while querying for an remote control event. [ 971.893762][T17102] fuse: Unknown parameter 'rootmod' [ 971.923608][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 971.929380][ T24] dvb-usb: error while querying for an remote control event. [ 972.125763][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 972.131574][ T24] dvb-usb: error while querying for an remote control event. [ 972.329657][ T24] usb 5-1: USB disconnect, device number 43 [ 972.356172][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 972.361967][ T982] dvb-usb: error while querying for an remote control event. [ 972.523678][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 972.529672][ T982] dvb-usb: error while querying for an remote control event. [ 972.713885][ T24] usb 1-1: USB disconnect, device number 53 [ 972.880405][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 973.912385][T17135] pim6reg: entered allmulticast mode [ 974.193259][T17140] fuse: Bad value for 'fd' [ 974.563254][ T979] IPVS: starting estimator thread 0... [ 974.675180][T17146] IPVS: using max 52 ests per chain, 124800 per kthread [ 976.425685][T17168] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2692'. [ 977.049456][T17180] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2695'. [ 977.238394][T17168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.293792][T17168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.372759][T17168] bond0 (unregistering): Released all slaves [ 977.547705][ T1155] pim6reg (unregistering): left allmulticast mode [ 979.222943][ T979] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 979.263736][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 979.418848][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 979.443602][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 979.460764][ T10] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 979.495794][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.543537][ T10] usb 3-1: config 0 has no interfaces? [ 979.555716][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 979.592161][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.634977][ T10] usb 3-1: config 0 descriptor?? [ 979.882506][T17200] libceph: resolve '4.' (ret=-3): failed [ 979.953284][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'. [ 979.967384][T17205] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 980.293590][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 980.474507][ T24] usb 2-1: config 0 has no interfaces? [ 980.494995][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 980.544398][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.617644][ T24] usb 2-1: Product: syz [ 980.640519][ T24] usb 2-1: Manufacturer: syz [ 980.677627][ T24] usb 2-1: SerialNumber: syz [ 980.794349][ T24] usb 2-1: config 0 descriptor?? [ 982.106692][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 982.160677][ T979] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 982.182906][ T979] usb 1-1: can't read configurations, error -71 [ 982.241453][ T982] usb 2-1: USB disconnect, device number 46 [ 982.259125][ T10] usb 3-1: USB disconnect, device number 57 [ 983.095251][T17241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.390820][T17264] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 986.224946][T17281] netlink: 'syz.1.2714': attribute type 10 has an invalid length. [ 986.312632][T17281] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 986.405376][T17284] wg1: entered promiscuous mode [ 986.410371][T17284] wg1: entered allmulticast mode [ 986.615206][ T979] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 986.783632][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 986.869062][ T979] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 986.918288][ T979] usb 2-1: config 0 has no interface number 0 [ 986.945390][T17293] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 986.971464][ T979] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 987.011167][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.041523][ T979] usb 2-1: Product: syz [ 987.063312][ T979] usb 2-1: Manufacturer: syz [ 987.166206][ T979] usb 2-1: SerialNumber: syz [ 987.191335][ T979] usb 2-1: config 0 descriptor?? [ 987.245773][ T979] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 987.254562][ T979] usb 2-1: Detected SIO [ 987.260328][ T979] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 987.798769][T17303] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 989.962335][ T24] usb 2-1: USB disconnect, device number 47 [ 989.970995][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 989.989707][ T24] ftdi_sio 2-1:0.217: device disconnected [ 990.192054][T17330] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2722'. [ 990.214491][ T982] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 990.278077][T17330] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' [ 990.291069][T17330] CPU: 0 UID: 0 PID: 17330 Comm: syz.0.2722 Not tainted syzkaller #0 PREEMPT(full) [ 990.291093][T17330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 990.291106][T17330] Call Trace: [ 990.291115][T17330] [ 990.291125][T17330] dump_stack_lvl+0x189/0x250 [ 990.291157][T17330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.291179][T17330] ? __pfx__printk+0x10/0x10 [ 990.291209][T17330] ? kernfs_path_from_node+0x2f/0x290 [ 990.291229][T17330] ? kernfs_path_from_node+0x250/0x290 [ 990.291248][T17330] ? kernfs_path_from_node+0x2f/0x290 [ 990.291272][T17330] sysfs_warn_dup+0x8e/0xa0 [ 990.291292][T17330] sysfs_do_create_link_sd+0xc0/0x110 [ 990.291313][T17330] device_add_class_symlinks+0x1cf/0x240 [ 990.291337][T17330] device_add+0x475/0xb50 [ 990.291360][T17330] wiphy_register+0x1ba6/0x28d0 [ 990.291403][T17330] ? __pfx_wiphy_register+0x10/0x10 [ 990.291432][T17330] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 990.291462][T17330] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 990.291488][T17330] ieee80211_register_hw+0x3425/0x4080 [ 990.291510][T17330] ? preempt_schedule+0xae/0xc0 [ 990.291548][T17330] ? ieee80211_register_hw+0x1461/0x4080 [ 990.291579][T17330] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 990.291604][T17330] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 990.291636][T17330] ? __hrtimer_setup+0x187/0x210 [ 990.291665][T17330] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 990.291699][T17330] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 990.291755][T17330] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 990.291778][T17330] ? trace_kmalloc+0x1f/0xd0 [ 990.291799][T17330] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 990.291823][T17330] ? kstrndup+0xbf/0x160 [ 990.291853][T17330] hwsim_new_radio_nl+0xea4/0x1b10 [ 990.291879][T17330] ? __pfx___nla_validate_parse+0x10/0x10 [ 990.291921][T17330] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 990.291957][T17330] ? __nla_parse+0x40/0x60 [ 990.291986][T17330] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 990.292016][T17330] genl_family_rcv_msg_doit+0x215/0x300 [ 990.292044][T17330] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 990.292080][T17330] ? bpf_lsm_capable+0x9/0x20 [ 990.292102][T17330] ? security_capable+0x7e/0x2e0 [ 990.292130][T17330] genl_rcv_msg+0x60e/0x790 [ 990.292157][T17330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.292176][T17330] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 990.292215][T17330] netlink_rcv_skb+0x205/0x470 [ 990.292237][T17330] ? __lock_acquire+0xab9/0xd20 [ 990.292262][T17330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.292286][T17330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 990.292332][T17330] ? down_read+0x1ad/0x2e0 [ 990.292353][T17330] genl_rcv+0x28/0x40 [ 990.292372][T17330] netlink_unicast+0x82c/0x9e0 [ 990.292405][T17330] ? __pfx_netlink_unicast+0x10/0x10 [ 990.292430][T17330] ? netlink_sendmsg+0x642/0xb30 [ 990.292445][T17330] ? skb_put+0x11b/0x210 [ 990.292466][T17330] netlink_sendmsg+0x805/0xb30 [ 990.292495][T17330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.292517][T17330] ? aa_sock_msg_perm+0xf1/0x1d0 [ 990.292537][T17330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 990.292556][T17330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.292575][T17330] __sock_sendmsg+0x219/0x270 [ 990.292602][T17330] ____sys_sendmsg+0x505/0x830 [ 990.292629][T17330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.292660][T17330] ? import_iovec+0x74/0xa0 [ 990.292693][T17330] ___sys_sendmsg+0x21f/0x2a0 [ 990.292717][T17330] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.292777][T17330] ? __fget_files+0x2a/0x420 [ 990.292793][T17330] ? __fget_files+0x3a0/0x420 [ 990.292821][T17330] __x64_sys_sendmsg+0x19b/0x260 [ 990.292845][T17330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 990.292878][T17330] ? rcu_is_watching+0x15/0xb0 [ 990.292902][T17330] ? do_syscall_64+0xbe/0x3b0 [ 990.292924][T17330] do_syscall_64+0xfa/0x3b0 [ 990.292943][T17330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.292960][T17330] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 990.292978][T17330] ? clear_bhb_loop+0x60/0xb0 [ 990.293001][T17330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.293019][T17330] RIP: 0033:0x7f69af58ebe9 [ 990.293037][T17330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.293053][T17330] RSP: 002b:00007f69b045d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.293073][T17330] RAX: ffffffffffffffda RBX: 00007f69af7c6270 RCX: 00007f69af58ebe9 [ 990.293086][T17330] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000b [ 990.293098][T17330] RBP: 00007f69af611e19 R08: 0000000000000000 R09: 0000000000000000 [ 990.293110][T17330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.293121][T17330] R13: 00007f69af7c6308 R14: 00007f69af7c6270 R15: 00007f69af8efa28 [ 990.293154][T17330] [ 991.295249][ T982] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 991.306270][ T982] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 991.316269][ T982] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 991.326441][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.341300][T17329] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 991.352488][ T982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 991.386650][T17334] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 993.011067][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.033628][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.707761][ T982] usb 5-1: USB disconnect, device number 44 [ 996.039446][T17355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 996.423178][T17355] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 996.448193][T17355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 996.456622][T17355] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 996.471059][T17355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 996.479701][T17355] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 996.493286][T17355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 996.501547][T17355] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 996.512676][T17355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 996.521548][T17355] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 996.833833][ T979] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 996.843820][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 996.985303][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 996.993041][ T979] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 997.002373][ T979] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.017507][T17407] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.2736'. [ 997.030190][ T979] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.069587][ T10] usb 5-1: config 0 has no interfaces? [ 997.088269][T17407] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' [ 997.101610][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 997.110007][ T979] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 997.124527][T17407] CPU: 0 UID: 0 PID: 17407 Comm: syz.1.2736 Not tainted syzkaller #0 PREEMPT(full) [ 997.124552][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 997.124564][T17407] Call Trace: [ 997.124572][T17407] [ 997.124580][T17407] dump_stack_lvl+0x189/0x250 [ 997.124612][T17407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 997.124636][T17407] ? __pfx__printk+0x10/0x10 [ 997.124666][T17407] ? kernfs_path_from_node+0x2f/0x290 [ 997.124686][T17407] ? kernfs_path_from_node+0x250/0x290 [ 997.124705][T17407] ? kernfs_path_from_node+0x2f/0x290 [ 997.124730][T17407] sysfs_warn_dup+0x8e/0xa0 [ 997.124749][T17407] sysfs_do_create_link_sd+0xc0/0x110 [ 997.124772][T17407] device_add_class_symlinks+0x1cf/0x240 [ 997.124797][T17407] device_add+0x475/0xb50 [ 997.124822][T17407] wiphy_register+0x1ba6/0x28d0 [ 997.124865][T17407] ? __pfx_wiphy_register+0x10/0x10 [ 997.124887][T17407] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 997.124915][T17407] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 997.124937][T17407] ieee80211_register_hw+0x3425/0x4080 [ 997.124966][T17407] ? ieee80211_register_hw+0x1461/0x4080 [ 997.124989][T17407] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 997.125030][T17407] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 997.125075][T17407] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 997.125093][T17407] ? trace_kmalloc+0x1f/0xd0 [ 997.125109][T17407] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 997.125127][T17407] ? kstrndup+0xbf/0x160 [ 997.125150][T17407] hwsim_new_radio_nl+0xea4/0x1b10 [ 997.125170][T17407] ? __pfx___nla_validate_parse+0x10/0x10 [ 997.125202][T17407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 997.125230][T17407] ? __nla_parse+0x40/0x60 [ 997.125253][T17407] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 997.125277][T17407] genl_family_rcv_msg_doit+0x215/0x300 [ 997.125300][T17407] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 997.125327][T17407] ? bpf_lsm_capable+0x9/0x20 [ 997.125345][T17407] ? security_capable+0x7e/0x2e0 [ 997.125369][T17407] genl_rcv_msg+0x60e/0x790 [ 997.125390][T17407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 997.125406][T17407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 997.125435][T17407] netlink_rcv_skb+0x205/0x470 [ 997.125453][T17407] ? __lock_acquire+0xab9/0xd20 [ 997.125472][T17407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 997.125489][T17407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 997.125524][T17407] ? down_read+0x1ad/0x2e0 [ 997.125541][T17407] genl_rcv+0x28/0x40 [ 997.125557][T17407] netlink_unicast+0x82c/0x9e0 [ 997.125584][T17407] ? __pfx_netlink_unicast+0x10/0x10 [ 997.125603][T17407] ? netlink_sendmsg+0x642/0xb30 [ 997.125615][T17407] ? skb_put+0x11b/0x210 [ 997.125632][T17407] netlink_sendmsg+0x805/0xb30 [ 997.125655][T17407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.125672][T17407] ? aa_sock_msg_perm+0xf1/0x1d0 [ 997.125688][T17407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 997.125703][T17407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.125717][T17407] __sock_sendmsg+0x219/0x270 [ 997.125738][T17407] ____sys_sendmsg+0x505/0x830 [ 997.125758][T17407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 997.125781][T17407] ? import_iovec+0x74/0xa0 [ 997.125800][T17407] ___sys_sendmsg+0x21f/0x2a0 [ 997.125818][T17407] ? __pfx____sys_sendmsg+0x10/0x10 [ 997.125863][T17407] ? __fget_files+0x2a/0x420 [ 997.125876][T17407] ? __fget_files+0x3a0/0x420 [ 997.125897][T17407] __x64_sys_sendmsg+0x19b/0x260 [ 997.125915][T17407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 997.125939][T17407] ? rcu_is_watching+0x15/0xb0 [ 997.125958][T17407] ? do_syscall_64+0xbe/0x3b0 [ 997.125975][T17407] do_syscall_64+0xfa/0x3b0 [ 997.125988][T17407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.126008][T17407] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 997.126022][T17407] ? clear_bhb_loop+0x60/0xb0 [ 997.126039][T17407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.126054][T17407] RIP: 0033:0x7f73d258ebe9 [ 997.126069][T17407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.126082][T17407] RSP: 002b:00007f73d3339038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 997.126098][T17407] RAX: ffffffffffffffda RBX: 00007f73d27c6270 RCX: 00007f73d258ebe9 [ 997.126109][T17407] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000b [ 997.126118][T17407] RBP: 00007f73d2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 997.126128][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.126137][T17407] R13: 00007f73d27c6308 R14: 00007f73d27c6270 R15: 00007f73d28efa28 [ 997.126163][T17407] [ 997.576051][ T979] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.589123][ T979] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 997.598245][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.609892][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 997.769844][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 997.778938][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.786937][ T10] usb 5-1: Product: syz [ 997.791071][ T10] usb 5-1: Manufacturer: syz [ 997.795666][ T10] usb 5-1: SerialNumber: syz [ 998.050823][ T10] usb 5-1: config 0 descriptor?? [ 998.167135][ T979] usb 1-1: can't set config #16, error -71 [ 998.178630][ T979] usb 1-1: USB disconnect, device number 56 [ 998.323323][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'. [ 998.560164][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 998.566971][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 998.575797][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 998.582083][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 998.993537][ T982] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 999.163626][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 999.173882][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 999.183700][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.208272][ T982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 999.237720][ T982] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 999.276008][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.293592][ T982] usb 3-1: Product: syz [ 999.297863][ T982] usb 3-1: Manufacturer: syz [ 999.302506][ T982] usb 3-1: SerialNumber: syz [ 999.319658][ T982] usb 3-1: config 0 descriptor?? [ 999.339559][ T982] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 999.505955][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2741'. [ 999.563448][T17435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.859552][ T10] usb 5-1: USB disconnect, device number 45 [ 999.973955][ T979] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1000.569317][ T979] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1000.580010][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.589897][ T979] usb 1-1: Product: syz [ 1000.595913][ T979] usb 1-1: Manufacturer: syz [ 1000.600512][ T979] usb 1-1: SerialNumber: syz [ 1000.605635][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.611687][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 1000.619256][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.625316][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 1000.646057][ T979] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1000.678442][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1001.853125][ T979] usb 3-1: USB disconnect, device number 58 [ 1001.963648][ T10] usb 1-1: Service connection timeout for: 256 [ 1001.969904][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1002.004478][ T10] ath9k_htc: Failed to initialize the device [ 1002.030590][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 1004.358750][T17477] [ 1004.361102][T17477] ============================================ [ 1004.367228][T17477] WARNING: possible recursive locking detected [ 1004.373357][T17477] syzkaller #0 Not tainted [ 1004.377742][T17477] -------------------------------------------- [ 1004.383862][T17477] syz.4.2748/17477 is trying to acquire lock: [ 1004.389897][T17477] ffff888023dc8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 1004.400829][T17477] [ 1004.400829][T17477] but task is already holding lock: [ 1004.408164][T17477] ffff888023dc8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 1004.417968][T17477] and the lock comparison function returns 0: [ 1004.424000][T17477] [ 1004.424000][T17477] other info that might help us debug this: [ 1004.432029][T17477] Possible unsafe locking scenario: [ 1004.432029][T17477] [ 1004.439468][T17477] CPU0 [ 1004.442724][T17477] ---- [ 1004.445978][T17477] lock(&dev_instance_lock_key#20); [ 1004.451241][T17477] lock(&dev_instance_lock_key#20); [ 1004.456593][T17477] [ 1004.456593][T17477] *** DEADLOCK *** [ 1004.456593][T17477] [ 1004.464712][T17477] May be due to missing lock nesting notation [ 1004.464712][T17477] [ 1004.473002][T17477] 2 locks held by syz.4.2748/17477: [ 1004.478169][T17477] #0: ffffffff8f538c48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 1004.487102][T17477] #1: ffff888023dc8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 1004.497358][T17477] [ 1004.497358][T17477] stack backtrace: [ 1004.503221][T17477] CPU: 0 UID: 0 PID: 17477 Comm: syz.4.2748 Not tainted syzkaller #0 PREEMPT(full) [ 1004.503234][T17477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1004.503242][T17477] Call Trace: [ 1004.503249][T17477] [ 1004.503254][T17477] dump_stack_lvl+0x189/0x250 [ 1004.503273][T17477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.503284][T17477] ? __pfx__printk+0x10/0x10 [ 1004.503298][T17477] ? print_lock_name+0xde/0x100 [ 1004.503311][T17477] print_deadlock_bug+0x28b/0x2a0 [ 1004.503322][T17477] validate_chain+0x1a3f/0x2140 [ 1004.503333][T17477] ? __lock_acquire+0xab9/0xd20 [ 1004.503350][T17477] __lock_acquire+0xab9/0xd20 [ 1004.503364][T17477] ? __netdev_update_features+0xcb1/0x1be0 [ 1004.503376][T17477] lock_acquire+0x120/0x360 [ 1004.503388][T17477] ? __netdev_update_features+0xcb1/0x1be0 [ 1004.503401][T17477] __mutex_lock+0x187/0x1350 [ 1004.503410][T17477] ? __netdev_update_features+0xcb1/0x1be0 [ 1004.503421][T17477] ? __lock_acquire+0xab9/0xd20 [ 1004.503435][T17477] ? __netdev_update_features+0xcb1/0x1be0 [ 1004.503447][T17477] ? __pfx___mutex_lock+0x10/0x10 [ 1004.503458][T17477] __netdev_update_features+0xcb1/0x1be0 [ 1004.503473][T17477] ? __pfx___netdev_update_features+0x10/0x10 [ 1004.503489][T17477] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1004.503510][T17477] ? rcu_is_watching+0x15/0xb0 [ 1004.503526][T17477] ? trace_irq_disable+0x37/0x110 [ 1004.503545][T17477] ? rcu_is_watching+0x15/0xb0 [ 1004.503559][T17477] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 1004.503577][T17477] ? irqentry_exit+0x74/0x90 [ 1004.503595][T17477] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1004.503618][T17477] netdev_change_features+0x72/0xd0 [ 1004.503636][T17477] ? __pfx_netdev_change_features+0x10/0x10 [ 1004.503647][T17477] ? __team_compute_features+0x23/0x4c0 [ 1004.503659][T17477] ? __team_compute_features+0x456/0x4c0 [ 1004.503670][T17477] ? __team_compute_features+0x23/0x4c0 [ 1004.503681][T17477] team_device_event+0x400/0x600 [ 1004.503693][T17477] notifier_call_chain+0x1b6/0x3e0 [ 1004.503706][T17477] netdev_features_change+0x85/0xc0 [ 1004.503719][T17477] ? __pfx_netdev_features_change+0x10/0x10 [ 1004.503732][T17477] ? security_capable+0x7e/0x2e0 [ 1004.503747][T17477] dev_ethtool+0x1536/0x19b0 [ 1004.503760][T17477] ? __pfx_dev_ethtool+0x10/0x10 [ 1004.503771][T17477] ? __rcu_read_unlock+0x84/0xe0 [ 1004.503783][T17477] ? dev_load+0x21/0x1f0 [ 1004.503796][T17477] dev_ioctl+0x392/0x1150 [ 1004.503809][T17477] sock_do_ioctl+0x22c/0x300 [ 1004.503822][T17477] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1004.503833][T17477] ? __lock_acquire+0xab9/0xd20 [ 1004.503848][T17477] sock_ioctl+0x576/0x790 [ 1004.503860][T17477] ? __pfx_sock_ioctl+0x10/0x10 [ 1004.503871][T17477] ? __fget_files+0x2a/0x420 [ 1004.503879][T17477] ? __fget_files+0x3a0/0x420 [ 1004.503887][T17477] ? __fget_files+0x2a/0x420 [ 1004.503895][T17477] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1004.503907][T17477] ? __pfx_sock_ioctl+0x10/0x10 [ 1004.503918][T17477] __se_sys_ioctl+0xf9/0x170 [ 1004.503929][T17477] do_syscall_64+0xfa/0x3b0 [ 1004.503938][T17477] ? lockdep_hardirqs_on+0x9c/0x150 [ 1004.503950][T17477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.503960][T17477] ? clear_bhb_loop+0x60/0xb0 [ 1004.503970][T17477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.503980][T17477] RIP: 0033:0x7f0c91f8ebe9 [ 1004.503991][T17477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.504001][T17477] RSP: 002b:00007f0c92d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.504012][T17477] RAX: ffffffffffffffda RBX: 00007f0c921c6270 RCX: 00007f0c91f8ebe9 [ 1004.504019][T17477] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 1004.504026][T17477] RBP: 00007f0c92011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1004.504033][T17477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.504039][T17477] R13: 00007f0c921c6308 R14: 00007f0c921c6270 R15: 00007f0c922efa28 [ 1004.504049][T17477] [ 1005.205800][ T982] usb 1-1: USB disconnect, device number 57