last executing test programs: 14.333056813s ago: executing program 4 (id=2508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace(0x4208, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2007300, 0x0, 0x0, 0x0, 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) rt_sigqueueinfo(0x0, 0x20003a, &(0x7f0000000080)={0x3a, 0x4813, 0x9}) sigaltstack(&(0x7f0000001040)={&(0x7f00000030c0)=""/4110, 0x80000001, 0x100e}, 0x0) sigaltstack(&(0x7f0000000700)={0x0, 0x40000001}, 0x0) syz_open_procfs(r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 12.651537279s ago: executing program 4 (id=2512): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x840000000002, 0x3, 0xfa) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169b82, 0x189) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 11.964585172s ago: executing program 0 (id=2514): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="04"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r8}}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002600)={0x2c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) 10.06505641s ago: executing program 0 (id=2518): syz_open_procfs(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x5, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) 9.497165274s ago: executing program 2 (id=2519): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000632) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104b3", 0x4, 0x20008894, &(0x7f0000000100)={0x11, 0x7, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) 9.480077066s ago: executing program 4 (id=2520): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x17) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0xfffffffc}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}, [@migrate={0x134, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@loopback, @in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x184}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_io_uring_setup(0xbdd, &(0x7f00000002c0)={0x0, 0xdf15, 0x80, 0xfffffffc, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}], 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) io_uring_enter(r4, 0x847ba, 0x2, 0xe, 0x0, 0x0) 9.198872377s ago: executing program 1 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000069000b0000000000b6e45db1a7f238bed900"/33], 0x18}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f00000002c0)={0x3, {0x7, 0x5, 0x8001, 0x10000}, {0x4, 0x9, 0x7, 0x200}, {0x0, 0xeb}}) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a01e200000000000000000200000530000480797532fb81bf52c3d1ac2c0001800a0001006d6163680000001c00028008eac1a5203adfca439d4b00010074746c00060003a87acc0000080002400000000000020073797a32000000001400058008000140f104cbbc080002400000f70c1400000011000100"], 0x98}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x5}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="862d3bf6e9100400000000000000", @ANYRES16, @ANYBLOB="0500681935000000000000000000", @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a00570214f9f407000904001f000000fe0000ff0000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r5) 8.028182054s ago: executing program 2 (id=2522): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x9, 0x4) poll(0x0, 0x0, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x42e6, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r5}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 7.675898385s ago: executing program 3 (id=2523): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) 6.959324779s ago: executing program 1 (id=2524): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x2000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80044100, &(0x7f0000001a80)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 6.749903241s ago: executing program 3 (id=2525): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80044100, &(0x7f0000001a80)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 6.673350882s ago: executing program 0 (id=2526): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x2000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80044100, &(0x7f0000001a80)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 6.354772298s ago: executing program 2 (id=2527): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.823895074s ago: executing program 3 (id=2528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28044082) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = io_uring_setup(0x7ba6, &(0x7f0000000140)={0x0, 0x12fd, 0x1, 0x1, 0x36a}) io_uring_enter(r3, 0x6972, 0xefd7, 0x2, &(0x7f0000000080)={[0x669e]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000400)={0x13, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000000000008000", 0x38416761}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xf275, @loopback, 0x1a, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002b40)="f7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x30, 0x84, 0x1, "7ed12d487aae57df2fb2533a6124c6bc3f733cc49cfa5d1f86"}], 0x30}}], 0x2, 0x20040001) 5.797235402s ago: executing program 0 (id=2529): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100000000151cf7ffff06000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_LEAVE_MESH(r6, 0x0, 0x44) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 5.750423453s ago: executing program 4 (id=2530): syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0]}}}}}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000097, 0x0, 0x2}]}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{0x0, 0x2c}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.518922174s ago: executing program 1 (id=2531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r3 = dup(r2) fallocate(r3, 0x0, 0x0, 0x72000) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) syz_emit_ethernet(0x46, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x7, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getpid() bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') lseek(r5, 0x8001, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x4, r7, 0x1}) fcntl$lock(r6, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 4.461418948s ago: executing program 2 (id=2532): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000001c0)=""/113, &(0x7f0000000240)=0x71) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) getsockopt(r4, 0xcd, 0x6, &(0x7f0000000000)=""/241, &(0x7f0000000100)=0xf1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r2, 0xc6000) 2.969034152s ago: executing program 0 (id=2533): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r3) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x240, 0x380, &(0x7f00000005c0)=[0x16, 0xfffffffffffffffd, 0x8, 0x6, 0x3e3c, 0xffff, 0x8d, 0x8001, 0x3f8000, 0x1, 0x80000001, 0x61f, 0x36, 0x1000, 0xffffffffffffffcf, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x80000001, 0x9, 0x4, 0x1000, 0x3, 0x0, 0x0, 0x8, 0x29, 0x335, 0x9, 0x6, 0x3, 0x4c0, 0x0, 0xc, 0x4a17b51d, 0x0, 0xd9d, 0x1, 0x5, 0xfffffffffffffffb, 0x7, 0xe244, 0x373, 0x0, 0x5, 0x4, 0x4, 0x0, 0x0, 0x401, 0x7, 0x3ff, 0x5, 0x5, 0xc, 0x2, 0x8, 0xbe1f938, 0x0, 0x0, 0x5, 0x3, 0x8, 0x4, 0x5, 0x2, 0x3, 0x8, 0x7, 0x4, 0x24, 0x9, 0x7, 0x5, 0x9, 0xf, 0x4, 0x1edb, 0xc4a, 0xed7a, 0x8, 0x3a, 0x200, 0x3, 0x8, 0x1, 0x8, 0x400, 0xa, 0x0, 0x4bb, 0x4, 0x8, 0x7fffffff, 0x3719, 0x401, 0x8, 0x0, 0x7, 0x2, 0x4f38, 0x9, 0x0, 0x0, 0x3, 0x887, 0x2, 0xe2a, 0x2, 0x9, 0x7fffffffffffffff, 0xfffffffffffffff2, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffff2, 0x2, 0x7, 0x101, 0x80, 0xfffffffffffffffa, 0x8, 0x6, 0x2]}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.837573051s ago: executing program 1 (id=2534): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x8, 0x1, 0x141}, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) rename(0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r3, 0x24020000) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 2.609091303s ago: executing program 4 (id=2535): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) 1.994555062s ago: executing program 3 (id=2536): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, r1}) syz_fuse_handle_req(r0, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fcc6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2816a172511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34f57bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) statx(0xffffffffffffffff, 0x0, 0x3ee0c0535a237ff4, 0x1, &(0x7f0000000b80)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) sendmsg$inet(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) lstat(&(0x7f0000000c80)='./file0\x00', 0x0) 1.876099442s ago: executing program 3 (id=2537): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 1.824103164s ago: executing program 2 (id=2538): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80044100, &(0x7f0000001a80)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 1.255006704s ago: executing program 1 (id=2539): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x2000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80044100, &(0x7f0000001a80)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 1.170271656s ago: executing program 4 (id=2540): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="9401", @ANYRES64], 0x24) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 725.055706ms ago: executing program 2 (id=2541): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x2000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80044100, &(0x7f0000001a80)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 272.448514ms ago: executing program 1 (id=2542): pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) unshare(0x62040200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x0, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x6]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000300)={"597aebb3200720801b0e6ba1c3c9395fa6939c9dfe61db731224a32e0e42a97ae54fa5934b3561c8b03878ea755360e1f5398d1ba0cabf6cf8281c713f1e24f6703e7b2139576f37f3343e77d5a7cc22391cd2cdcb81ce51eebfc55762fb866b1c78576c01006aa946b4bc5c06fd6e52e796c7e52630b4abf83a601b07f7178f50c4c9c50a210675d61beb4e28c375f45f347b81fc61fc31b0d3b2bca1ddda53e9f1999cc99ba57f5f6f0674748cc787ecf4cc36db31b276f802c8fab94774fc2370e62ff40f62ba4d27133b1529efbfaea33f7e3c24b64c38b64c2002349c8a1e2dee73e24eb570aeeeba66d4d5f2ffe4b52bc0e341fd3772ac3e465da234d70e806555d345ac3b45dc1c229c8e127e1fe544b70bbad8f3b79e5c0562b10958531e17656b1ab6ef9c7352b709c2a19b3bdd33613c9ef2eeacafb51d090a45032a89ad46bd2859bce48ae4f90f977d83d39db160f6c075af0c77130e5429f8b5e31569d78aa49f670474a4430357acfe713640fdeed88971b78b69b1652bd6e1d6ef4c3d9eb2e32871efaa26bae28839c51799f881fbebd0dda92b58bff3429d89641d35c0d4818137038f7463ba658e8cfa8c504e9c0833d41ae483f2d64aa6ec60199e2eb121c90a8a4956b4121504a1913c2052b33500fc610ca396fd549de3462c2e6a7164c931fd7900707f8ab4498bbad75109d28f421fb7a1d276e15a497a385c23189b33d4e02efb94670e07a03a4908b990a925542154c86694d84c65bac5a0e9e2f2e36b95aac26d64447ffd828f831380bc6eece3db2c18693d29b59760ed2ebabd7b9bf874126a7f08205c81a0df5ff169b236cf3d05002f1798913f3f75292f1f1c42a9151170309d0bda87447719341e85b7aa07f07965205c37ea21b5504eb97eab44a70a7b2597ce0af2608c5cc2a85366ec11e47e2a197c6e038f6f9f4d1d25edb077f6d98d44305c4ebc803047409dfa8e6f93d9ce63ab434957924dbdefefc99bff0bb4a68142e04c7c20954541728ed4505377ba88ec208ce064e3c8a7943577e20804932e0571a902cf0c45c54dbacb9968ed15fee9234fff2f631990bf840f5693d285ecd94688c63a251dd2e2a7d0049ee2c45c1e695b87711cf5a6d31414d0f708e5d0fc03b2f37becf1e3267ff6b4d740c2b5d905ecf572d2c9f06b5da649af020b6931dfe057442e2cf12f28d93fd1b49f5716a0c2d773250c2caf8f52f2da9412ae377ed6f74a2f0123d6bb9fae78c37a88f029f1ecaf91d023bbf90a6110b21a015b3a6a4b5e54433c662e6162b114c128c158b8391eb5b57f8cdd4be5207bfbaded1a2063852f15fd2a9d00becc20d2432846c6254625d0af44119fd273ea85ccd4e18e47456bd72ea67a334d65368a8858322d8a1bd2786eb36138fa0b3600f44d03ba84615fcf998500"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 264.139771ms ago: executing program 0 (id=2543): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffd) readv(r1, &(0x7f0000001940)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000040)={0x8, {0x6, 0x10001, 0x1, 0x2}, {0x7, 0xcf, 0x9, 0x101}, {0xcc, 0x80000000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000), 0x8) 0s ago: executing program 3 (id=2544): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d00c}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = open(0x0, 0x4800, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 260 [ 682.773945][T15679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.801965][ T1171] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 682.816811][ T1171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.833104][ T1171] usb 3-1: Product: syz [ 682.874274][ T1171] usb 3-1: Manufacturer: syz [ 682.900148][ T1171] usb 3-1: SerialNumber: syz [ 682.908737][ T1171] usb 3-1: config 0 descriptor?? [ 683.134423][ T1171] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 685.510075][ T1171] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 685.538581][ T1171] usb 3-1: USB disconnect, device number 33 [ 685.716502][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.723038][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.870208][T15960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.881379][T15960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.217024][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 693.320142][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 693.689964][ T29] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 693.850103][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 693.856839][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.869272][ T29] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 693.887724][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 693.910889][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 693.931981][ T29] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 693.941410][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.955004][ T29] usb 5-1: Product: syz [ 693.963722][ T29] usb 5-1: Manufacturer: syz [ 693.974438][ T29] usb 5-1: SerialNumber: syz [ 694.367748][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 694.380972][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 696.860100][ T29] usb 5-1: 0:2 : does not exist [ 697.120722][ T29] usb 5-1: USB disconnect, device number 37 [ 698.612738][T16128] kAFS: unable to lookup cell '' [ 698.695417][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 698.696833][ T30] audit: type=1326 audit(1773360536.526:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 698.865651][ T30] audit: type=1326 audit(1773360536.526:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 698.901490][ T30] audit: type=1326 audit(1773360536.526:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 698.927422][ T30] audit: type=1326 audit(1773360536.536:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 699.064048][ T30] audit: type=1326 audit(1773360536.546:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 699.122631][ T30] audit: type=1326 audit(1773360536.546:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 699.166306][ T30] audit: type=1326 audit(1773360536.556:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 699.611210][ T30] audit: type=1326 audit(1773360536.556:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 699.740029][ T30] audit: type=1326 audit(1773360536.556:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 699.823392][ T30] audit: type=1326 audit(1773360536.566:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd61499c799 code=0x7ffc0000 [ 700.922415][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 704.592420][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.623086][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.053550][T16261] syzkaller0: entered promiscuous mode [ 705.059098][T16261] syzkaller0: entered allmulticast mode [ 705.753283][T16274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.762658][T16274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.769718][T16313] syzkaller0: entered promiscuous mode [ 706.804580][T16313] syzkaller0: entered allmulticast mode [ 707.661250][ T1171] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 707.820559][ T796] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 707.832202][ T1171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.844591][ T1171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.856800][ T1171] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 707.867813][ T1171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.878814][ T1171] usb 1-1: config 0 descriptor?? [ 708.072115][ T796] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 708.080489][ T796] usb 2-1: config 0 has no interface number 0 [ 708.092590][ T796] usb 2-1: config 0 interface 41 has no altsetting 0 [ 708.139983][ T796] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 708.162323][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.228032][ T796] usb 2-1: Product: syz [ 708.236613][ T796] usb 2-1: Manufacturer: syz [ 708.484699][ T796] usb 2-1: SerialNumber: syz [ 708.495780][ T796] usb 2-1: config 0 descriptor?? [ 708.656617][T16358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.670863][T16358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.186648][T16367] binder: 16335:16367 ioctl c0306201 200000000540 returned -14 [ 709.401598][T16336] binder: BINDER_SET_CONTEXT_MGR already set [ 709.486947][T16336] binder: 16335:16336 ioctl 4018620d 200000000300 returned -16 [ 709.804462][ T796] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 709.814489][ T796] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 709.853327][ T796] usb 2-1: USB disconnect, device number 44 [ 709.919044][T16381] syzkaller0: entered promiscuous mode [ 709.938544][T16381] syzkaller0: entered allmulticast mode [ 711.142032][ T1171] usbhid 1-1:0.0: can't add hid device: -71 [ 711.167457][ T1171] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 711.334376][ T1171] usb 1-1: USB disconnect, device number 29 [ 711.848432][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.877652][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.962833][T16429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.460402][T16429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.920897][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 715.089973][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 715.155435][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 715.188182][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 715.252424][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 715.298058][T16518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 715.353674][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 715.401324][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.572989][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 715.584645][ T982] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 715.590325][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.839384][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 715.863335][ T982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.135638][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 716.169975][ T10] usbtmc 2-1:16.0: can't read capabilities [ 716.280300][ T982] usb 5-1: config 0 has no interfaces? [ 716.409540][ T982] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 716.419999][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.730005][ T982] usb 5-1: Product: syz [ 716.777058][ T982] usb 5-1: Manufacturer: syz [ 716.798277][ T982] usb 5-1: SerialNumber: syz [ 716.861150][ T982] usb 5-1: config 0 descriptor?? [ 718.400251][ T1171] usb 5-1: USB disconnect, device number 38 [ 718.634667][ T1171] usb 2-1: USB disconnect, device number 45 [ 718.668559][T16585] batman_adv: batadv0: Adding interface: macsec1 [ 718.675506][T16585] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.701687][T16585] batman_adv: batadv0: Interface activated: macsec1 [ 718.946614][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 720.113724][T16620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.123077][T16620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.153023][T16620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 720.310011][ T1171] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 720.581805][ T1171] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 720.590386][ T1171] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 720.601748][ T1171] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 720.662391][ T1171] usb 1-1: config 220 has no interface number 2 [ 720.739992][ T1171] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 720.797122][ T1171] usb 1-1: config 220 interface 0 has no altsetting 0 [ 720.804315][ T1171] usb 1-1: config 220 interface 76 has no altsetting 0 [ 720.811476][ T1171] usb 1-1: config 220 interface 1 has no altsetting 0 [ 720.852819][ T1171] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 720.865099][ T1171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.874681][ T1171] usb 1-1: Product: syz [ 720.879946][ T1171] usb 1-1: Manufacturer: syz [ 720.884726][ T1171] usb 1-1: SerialNumber: syz [ 721.191047][ T1171] uvcvideo 1-1:220.1: Unknown video format 047d4302-0000-0000-0000-00a5e2000004 [ 721.205369][ T1171] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 721.214227][ T1171] uvcvideo 1-1:220.0: No valid video chain found. [ 721.405294][ T1171] usb 1-1: selecting invalid altsetting 0 [ 721.518989][ T1171] usb 1-1: selecting invalid altsetting 0 [ 721.539797][ T1171] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 721.562388][ T1171] usb 1-1: USB disconnect, device number 30 [ 722.788839][T16697] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 725.070881][T16739] openvswitch: netlink: IPv6 tunnel dst address is zero [ 725.359954][ T982] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 725.721243][ T29] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 725.751279][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 725.767371][ T982] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 725.833149][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 725.886496][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 725.918910][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 725.945737][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 725.962930][ T29] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 726.330676][ T982] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 726.340330][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.370057][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.388530][ T29] usb 5-1: config 0 has no interfaces? [ 726.398364][ T982] usb 3-1: Product: syz [ 726.420089][ T982] usb 3-1: Manufacturer: syz [ 726.429918][ T29] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 726.457750][ T982] usb 3-1: SerialNumber: syz [ 726.482582][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.499623][ T982] usb 3-1: config 0 descriptor?? [ 726.540439][ T29] usb 5-1: config 0 descriptor?? [ 727.053759][ T982] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 727.060039][ T982] input input36: Device does not respond to id packet M [ 727.087514][ T982] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 727.094528][ T982] input input36: Device does not respond to id packet P [ 727.114337][T16780] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 727.146090][ T982] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 727.182321][ T982] input input36: Device does not respond to id packet B [ 727.215041][ T982] input input36: Limiting number of effects to 32 (device reports 105) [ 727.416114][ T982] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 727.422753][ T982] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 727.430519][ T982] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 727.451158][ T982] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 727.465276][ T982] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 727.520851][ T982] usb 3-1: USB disconnect, device number 34 [ 727.522960][ T5179] iforce 3-1:0.0: usb_submit_urb failed -19 [ 727.551069][T16805] vlan3: entered promiscuous mode [ 727.556283][T16805] vlan3: entered allmulticast mode [ 727.561598][T16805] hsr_slave_1: entered allmulticast mode [ 727.578270][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 727.814461][T16776] [U] J"—E:ÀÆ" [ 728.595763][ T982] usb 5-1: USB disconnect, device number 39 [ 731.840920][T16940] IPVS: Error connecting to the multicast addr [ 732.327347][T16942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1794'. [ 732.697832][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 732.697849][ T30] audit: type=1800 audit(1773360570.606:469): pid=16949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1795" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=66792 res=0 errno=0 [ 733.497614][T16967] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1796'. [ 735.290015][ T1171] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 735.591656][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 735.601708][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 736.361578][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 736.449351][ T1171] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 736.590274][ T1171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.702694][ T1171] usb 2-1: config 0 descriptor?? [ 736.788846][T17038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 737.356357][ T30] audit: type=1326 audit(1773360575.276:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.2.1804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f0984f96517 code=0x0 [ 738.096434][ T1171] ath6kl: Failed to submit usb control message: -110 [ 738.139969][ T1171] ath6kl: unable to send the bmi data to the device: -110 [ 738.147306][ T1171] ath6kl: Unable to send get target info: -110 [ 738.205025][T17090] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 738.276362][ T1171] ath6kl: Failed to init ath6kl core: -110 [ 738.285133][ T1171] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 738.823893][T17100] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1807'. [ 738.964636][ T1171] usb 2-1: USB disconnect, device number 46 [ 739.491175][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 739.521534][T17120] openvswitch: netlink: Flow actions attr not present in new flow. [ 739.595173][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'. [ 739.613937][T17113] veth0_macvtap: left promiscuous mode [ 740.081250][T17118] bridge2: entered promiscuous mode [ 740.109637][T17119] netlink: 'syz.2.1809': attribute type 2 has an invalid length. [ 741.348867][ T30] audit: type=1326 audit(1773360579.266:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17181 comm="syz.2.1814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x0 [ 741.678453][ T30] audit: type=1800 audit(1773360579.476:472): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1813" name="rdma.current" dev="tmpfs" ino=2060 res=0 errno=0 [ 741.886776][T17201] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1815'. [ 742.210010][T16531] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 742.480056][T16531] usb 1-1: Using ep0 maxpacket: 8 [ 742.497279][T16531] usb 1-1: config 16 has an invalid descriptor of length 142, skipping remainder of the config [ 742.509075][T16531] usb 1-1: config 16 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 742.900788][T16531] usb 1-1: config 16 interface 0 has no altsetting 0 [ 742.940530][T16531] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 743.011098][T16531] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.051056][T17224] syzkaller0: entered promiscuous mode [ 743.059707][T17224] syzkaller0: entered allmulticast mode [ 745.241310][T16531] usb 1-1: string descriptor 0 read error: -71 [ 745.252872][T16531] usb 1-1: USB disconnect, device number 31 [ 745.399998][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 745.739895][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 745.901274][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 746.198843][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 746.218035][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 746.229274][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 746.291314][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 746.402230][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 746.645099][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 746.670467][ T10] usb 2-1: Product: syz [ 746.741499][ T10] usb 2-1: Manufacturer: syz [ 746.746168][ T10] usb 2-1: SerialNumber: syz [ 746.759240][ T10] usb 2-1: config 0 descriptor?? [ 746.773748][T17250] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 747.294280][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.304140][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.322919][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 747.340555][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 747.588281][ T796] usb 2-1: USB disconnect, device number 47 [ 749.028340][T17361] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 749.034926][T17361] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 749.211124][T17361] vhci_hcd vhci_hcd.0: Device attached [ 749.540010][T17362] vhci_hcd: connection closed [ 749.543781][ T6193] vhci_hcd vhci_hcd.2: stop threads [ 749.562002][ T6193] vhci_hcd vhci_hcd.2: release socket [ 749.601686][ T6193] vhci_hcd vhci_hcd.2: disconnect device [ 749.662092][T16531] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 750.041159][T17375] netlink: 'syz.3.1834': attribute type 7 has an invalid length. [ 750.777918][T17389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.986496][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 750.999366][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 751.761673][T17407] IPVS: sh: FWM 3 0x00000003 - no destination available [ 751.780245][ T1171] IPVS: starting estimator thread 0... [ 751.972951][T17435] IPVS: using max 56 ests per chain, 134400 per kthread [ 752.908393][ T6193] IPVS: stop unused estimator thread 0... [ 753.731568][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'. [ 753.756652][T17508] openvswitch: netlink: Flow actions attr not present in new flow. [ 754.242003][T17508] bridge2: entered promiscuous mode [ 754.255635][T17508] netlink: 'syz.0.1846': attribute type 2 has an invalid length. [ 754.818296][T16531] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 755.131772][T17521] netlink: 'syz.3.1848': attribute type 29 has an invalid length. [ 755.548922][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 756.820805][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1853'. [ 757.260004][ T982] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 757.475805][T17568] hub 9-0:1.0: USB hub found [ 757.485669][T17568] hub 9-0:1.0: 1 port detected [ 757.580172][ T982] usb 5-1: Using ep0 maxpacket: 32 [ 757.921615][ T982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 128, changing to 11 [ 757.971687][ T982] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 757.981220][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.010012][ T982] usb 5-1: Product: syz [ 758.024850][ T982] usb 5-1: Manufacturer: syz [ 758.040035][ T982] usb 5-1: SerialNumber: syz [ 758.623623][ T982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.709541][ T982] usb 5-1: MIDIStreaming interface descriptor not found [ 759.676844][ T982] usb 5-1: USB disconnect, device number 40 [ 759.852096][ T6785] udevd[6785]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.242324][T17635] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 760.255556][T17635] batadv1: entered allmulticast mode [ 760.432462][T17638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.570503][T17635] team0: Port device batadv1 added [ 761.799074][ T796] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 762.279973][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 762.304744][ T796] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 762.355480][ T796] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 762.380468][ T796] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 762.393629][ T796] usb 3-1: Product: syz [ 762.399024][ T796] usb 3-1: Manufacturer: syz [ 762.407224][ T796] usb 3-1: SerialNumber: syz [ 762.416120][ T796] usb 3-1: config 0 descriptor?? [ 762.437019][T17658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 763.345612][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 764.222548][ T1171] usb 3-1: USB disconnect, device number 35 [ 765.201010][ T1171] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 765.444074][ T1171] usb 3-1: too many configurations: 47, using maximum allowed: 8 [ 765.477017][ T1171] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 765.499753][ T1171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.551157][ T1171] usb 3-1: Product: syz [ 765.589952][T17759] random: crng reseeded on system resumption [ 765.635812][ T1171] usb 3-1: Manufacturer: syz [ 765.640977][ T1171] usb 3-1: SerialNumber: syz [ 765.656235][ T1171] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 765.687778][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 766.961871][ T796] usb 3-1: USB disconnect, device number 36 [ 767.669489][ T9] usb 3-1: Service connection timeout for: 256 [ 767.677210][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 767.828611][ T9] ath9k_htc: Failed to initialize the device [ 767.871457][ T796] usb 3-1: ath9k_htc: USB layer deinitialized [ 768.757083][T17814] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 769.104414][T17817] syz_tun: entered promiscuous mode [ 770.207476][T17807] [U] J"—E:ÀÆ" [ 770.262890][T17841] netlink: 'syz.1.1884': attribute type 4 has an invalid length. [ 770.361468][T17841] netlink: 'syz.1.1884': attribute type 4 has an invalid length. [ 770.413565][T17841] trusted_key: encrypted_key: insufficient parameters specified [ 770.591998][T17846] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 770.877665][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 771.047469][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 771.058165][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.068485][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.080882][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 771.114506][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 771.123952][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.156129][ T9] usb 1-1: Product: syz [ 771.175575][T17870] openvswitch: netlink: Flow actions attr not present in new flow. [ 771.214351][ T9] usb 1-1: Manufacturer: syz [ 771.491275][ T9] usb 1-1: SerialNumber: syz [ 771.575821][ T9] usb 1-1: config 0 descriptor?? [ 773.641969][T16531] usb 1-1: USB disconnect, device number 32 [ 773.885174][T17909] netlink: 'syz.1.1893': attribute type 4 has an invalid length. [ 774.200015][T16531] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 774.362406][T16531] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 774.373586][T16531] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 774.520639][T16531] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 774.536136][T16531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.544517][T16531] usb 2-1: Product: syz [ 774.548801][T16531] usb 2-1: Manufacturer: syz [ 774.568209][T16531] usb 2-1: SerialNumber: syz [ 775.009758][T17909] blktrace: Concurrent blktraces are not allowed on sg0 [ 775.027588][T17909] netlink: 'syz.1.1893': attribute type 28 has an invalid length. [ 775.567208][ T10] usb 2-1: USB disconnect, device number 48 [ 779.867442][T18063] openvswitch: netlink: Flow key attr not present in new flow. [ 779.885430][T18063] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 781.411865][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 783.157410][T18126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.654483][T18166] hub 1-0:1.0: USB hub found [ 784.659523][T18166] hub 1-0:1.0: 1 port detected [ 786.271543][T18192] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1926'. [ 787.148382][T18207] netlink: 'syz.4.1929': attribute type 9 has an invalid length. [ 787.156440][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 787.281307][T18207] macvlan2: entered promiscuous mode [ 787.294828][T18207] hsr0: entered promiscuous mode [ 787.300590][T18207] macvlan2: entered allmulticast mode [ 789.554046][T18236] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 789.569519][T18236] team0: Port device batadv1 added [ 790.480432][T18248] syzkaller0: entered promiscuous mode [ 790.496501][T18248] syzkaller0: entered allmulticast mode [ 790.967883][ T30] audit: type=1804 audit(1773360628.886:473): pid=18266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1939" name="/newroot/378/file1" dev="fuse" ino=1 res=1 errno=0 [ 792.491142][ T30] audit: type=1800 audit(1773360630.376:474): pid=18286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1941" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=66792 res=0 errno=0 [ 793.944943][T18331] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 793.955296][T18331] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 794.318218][T18350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.071905][T18409] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 796.849992][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 797.040193][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 797.068395][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.079728][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 797.269152][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 797.288643][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.306175][ T9] usb 3-1: Product: syz [ 797.321794][ T9] usb 3-1: Manufacturer: syz [ 797.339225][ T9] usb 3-1: SerialNumber: syz [ 797.363849][ T9] usb 3-1: config 0 descriptor?? [ 799.030154][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 799.590088][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 799.640967][T16531] usb 3-1: USB disconnect, device number 37 [ 799.684451][ T9] usb 5-1: config 0 has no interfaces? [ 799.711507][ T9] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 799.721749][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.731501][ T9] usb 5-1: Product: syz [ 799.941068][ T9] usb 5-1: Manufacturer: syz [ 799.945752][ T9] usb 5-1: SerialNumber: syz [ 799.971570][ T9] usb 5-1: config 0 descriptor?? [ 800.540990][T18492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1961'. [ 800.806852][T18490] netlink: 'syz.3.1960': attribute type 29 has an invalid length. [ 801.425426][T18501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1962'. [ 801.630379][ T1171] usb 5-1: USB disconnect, device number 41 [ 803.425941][T18531] syz_tun: entered promiscuous mode [ 804.154285][T18535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1967'. [ 806.777505][T18576] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 806.788407][T18576] batadv1: entered promiscuous mode [ 806.802237][T18576] team0: Port device batadv1 added [ 807.299540][T18595] misc userio: Invalid payload size [ 807.310699][T18595] misc userio: No port type given on /dev/userio [ 807.948210][T18595] misc userio: The device must be registered before sending interrupts [ 808.600225][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.610019][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.744866][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1979'. [ 809.950162][ T796] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 810.152767][ T796] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 810.161586][ T796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.343998][ T796] usb 1-1: config 0 has no interfaces? [ 810.368694][ T796] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 810.428523][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.572697][ T796] usb 1-1: config 0 descriptor?? [ 812.689795][ T796] usb 1-1: USB disconnect, device number 33 [ 813.603351][T18597] syz.1.1977 (18597): drop_caches: 1 [ 813.930843][T18690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.752819][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 817.304978][T18757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1998'. [ 818.314447][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 819.359624][T18797] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 819.374081][T18797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.383504][T18797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.781193][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 820.820049][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 820.830909][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 820.880867][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 820.944108][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 820.981731][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 821.028687][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 821.039007][T17748] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.089346][T17748] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.126074][T17748] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.159048][T17748] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.482780][T18857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 821.548569][T18857] syz_tun: refused to change device tx_queue_len [ 821.615247][T18867] syz_tun: refused to change device tx_queue_len [ 822.714447][T18904] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 822.732007][T18904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.741733][T18904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.819940][T16531] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 822.998951][T18925] __nla_validate_parse: 3 callbacks suppressed [ 822.999047][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 823.015204][ T30] audit: type=1326 audit(1773360660.906:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0679c799 code=0x7ffc0000 [ 823.042676][T16531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 823.056160][T16531] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 823.070823][T16531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.099876][ T30] audit: type=1326 audit(1773360660.906:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0679c799 code=0x7ffc0000 [ 823.224647][T16531] usb 5-1: config 0 descriptor?? [ 823.379370][T16531] smsusb:smsusb_probe: board id=8, interface number 0 [ 823.386912][T16531] smsusb:smsusb_probe: Device initialized with return code -19 [ 823.425069][ T30] audit: type=1326 audit(1773360660.906:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d0679c799 code=0x7ffc0000 [ 823.586390][ T30] audit: type=1326 audit(1773360660.906:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0679c799 code=0x7ffc0000 [ 823.649050][ T30] audit: type=1326 audit(1773360660.906:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0679c799 code=0x7ffc0000 [ 823.797257][ T30] audit: type=1326 audit(1773360660.906:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0d0679c799 code=0x7ffc0000 [ 823.828116][ T30] audit: type=1326 audit(1773360660.906:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d0679c799 code=0x7ffc0000 [ 824.201498][T18942] tipc: Enabling of bearer rejected, failed to enable media [ 824.226818][T18942] tipc: Enabling of bearer rejected, failed to enable media [ 824.425901][ T30] audit: type=1326 audit(1773360660.906:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d0679e007 code=0x7ffc0000 [ 824.551224][ T30] audit: type=1326 audit(1773360660.906:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0d0675cfce code=0x7ffc0000 [ 824.628241][ T30] audit: type=1326 audit(1773360660.906:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18916 comm="syz.1.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0d0675cfce code=0x7ffc0000 [ 825.551566][T18958] random: crng reseeded on system resumption [ 825.710710][T18959] bridge0: entered promiscuous mode [ 825.767723][T18959] macsec3: entered promiscuous mode [ 825.773455][T18959] macsec3: entered allmulticast mode [ 825.778894][T18959] bridge0: entered allmulticast mode [ 825.785950][T18959] bridge0: port 2(macsec3) entered blocking state [ 825.792847][T18959] bridge0: port 2(macsec3) entered disabled state [ 825.848509][T18959] bridge0: left allmulticast mode [ 825.854468][T18959] bridge0: left promiscuous mode [ 825.969511][T18970] openvswitch: netlink: Multiple metadata blocks provided [ 825.982154][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 826.419047][ T982] usb 5-1: USB disconnect, device number 42 [ 828.788610][T19024] capability: warning: `syz.4.2024' uses 32-bit capabilities (legacy support in use) [ 829.190029][ T982] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 829.401515][ T982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 829.430051][ T982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.479668][ T982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 829.513250][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.767401][ T982] usb 5-1: usb_control_msg returned -32 [ 829.801328][ T982] usbtmc 5-1:16.0: can't read capabilities [ 829.832569][T19081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.126704][T19026] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 830.141800][ T982] usb 5-1: USB disconnect, device number 43 [ 831.197885][T19107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.431540][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 831.442954][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 833.055199][T19139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2036'. [ 833.322755][ T1171] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 833.563611][ T1171] usb 1-1: Using ep0 maxpacket: 32 [ 833.577523][ T1171] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.590042][ T1171] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 833.731010][ T1171] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 833.740421][ T1171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.748439][ T1171] usb 1-1: Product: syz [ 833.752763][ T1171] usb 1-1: Manufacturer: syz [ 833.757440][ T1171] usb 1-1: SerialNumber: syz [ 833.770868][ T1171] usb 1-1: config 0 descriptor?? [ 835.828355][T19232] tipc: Enabled bearer , priority 0 [ 835.835973][T19232] syzkaller0: entered promiscuous mode [ 835.841586][T19232] syzkaller0: entered allmulticast mode [ 835.924027][T19232] tipc: Resetting bearer [ 835.941325][ T982] usb 1-1: USB disconnect, device number 34 [ 835.998433][T19230] tipc: Resetting bearer [ 836.268189][T19230] tipc: Disabling bearer [ 836.828654][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 836.828674][ T30] audit: type=1326 audit(1773360674.736:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 836.978975][ T30] audit: type=1326 audit(1773360674.736:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb13095cfce code=0x7ffc0000 [ 837.140716][ T30] audit: type=1326 audit(1773360674.736:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb13095cfce code=0x7ffc0000 [ 837.221954][ T30] audit: type=1326 audit(1773360674.736:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 837.717605][ T30] audit: type=1326 audit(1773360674.736:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 837.840006][ T30] audit: type=1326 audit(1773360674.736:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 838.190735][ T30] audit: type=1326 audit(1773360674.736:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 838.224895][ T30] audit: type=1326 audit(1773360674.736:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 838.386048][ T30] audit: type=1326 audit(1773360674.736:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 838.451818][ T30] audit: type=1326 audit(1773360674.736:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19251 comm="syz.0.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 840.646617][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 842.060491][ T982] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 842.311319][ T982] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 842.320581][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.348959][ T982] usb 5-1: Product: syz [ 842.359085][ T982] usb 5-1: Manufacturer: syz [ 842.364202][ T982] usb 5-1: SerialNumber: syz [ 842.384950][ T982] usb 5-1: config 0 descriptor?? [ 842.615980][ T1171] usb 5-1: USB disconnect, device number 44 [ 843.373651][T19420] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2065'. [ 845.222957][T19437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 845.580033][ T982] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 845.859946][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 845.915551][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.938474][ T982] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 845.994780][T19464] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 846.101928][T19462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2069'. [ 846.114383][ T982] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 846.127089][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.139916][ T982] usb 2-1: Product: syz [ 846.187609][ T982] usb 2-1: Manufacturer: syz [ 846.200121][ T982] usb 2-1: SerialNumber: syz [ 846.256747][ T982] usb 2-1: config 0 descriptor?? [ 846.540845][T19463] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2069'. [ 847.757135][T19512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2073'. [ 847.766301][T19512] IPv6: NLM_F_CREATE should be specified when creating new route [ 848.100475][ T1171] usb 2-1: USB disconnect, device number 49 [ 848.229934][ T982] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 848.909937][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 848.953987][ T982] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.964193][ T982] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 848.973832][ T982] usb 3-1: config 1 has no interface number 1 [ 848.981308][ T982] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 849.030482][ T982] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 849.039602][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.050730][ T982] usb 3-1: Product: syz [ 849.057104][ T982] usb 3-1: Manufacturer: syz [ 849.141418][ T982] usb 3-1: SerialNumber: syz [ 849.358327][T19541] sctp: [Deprecated]: syz.3.2077 (pid 19541) Use of int in max_burst socket option. [ 849.358327][T19541] Use struct sctp_assoc_value instead [ 849.390403][T19517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.419022][T19517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.441256][T19541] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 849.489077][T19517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.508869][T19541] macsec1: entered allmulticast mode [ 849.514259][T19541] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 849.526187][T19517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.566869][T19541] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 849.595015][T19541] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 849.640412][ T982] usb 3-1: USB disconnect, device number 38 [ 850.243760][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 850.243781][ T30] audit: type=1800 audit(1773360688.156:569): pid=19589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2081" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 852.104390][T19615] syzkaller0: entered promiscuous mode [ 852.118879][T19615] syzkaller0: entered allmulticast mode [ 852.230947][T19615] 0: reclassify loop, rule prio 0, protocol 800 [ 852.438544][T19626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 852.448332][T19626] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 852.485771][T19626] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 852.537866][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 853.190966][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 853.201360][ T9] usb 5-1: config 51 has an invalid interface number: 208 but max is 0 [ 853.229997][ T9] usb 5-1: config 51 has no interface number 0 [ 853.260052][ T9] usb 5-1: config 51 interface 208 has no altsetting 0 [ 853.344667][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 853.372140][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.396072][ T9] usb 5-1: Product: syz [ 853.412058][ T9] usb 5-1: Manufacturer: syz [ 853.430450][ T9] usb 5-1: SerialNumber: syz [ 853.680369][ T9] f81534a_ctrl 5-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 853.785533][ T9] usb 5-1: USB disconnect, device number 45 [ 854.370942][T19661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.429702][T19661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.494770][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 854.531403][T19661] batadv0: entered promiscuous mode [ 854.542547][T19661] macvtap1: entered promiscuous mode [ 854.557909][T19661] macvtap1: entered allmulticast mode [ 854.576710][T19661] batadv0: entered allmulticast mode [ 854.596450][T19661] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 854.840311][T19679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'. [ 855.734855][T19698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.754391][T19698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.055842][T19756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.680116][ T982] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 862.147700][ T982] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 862.159384][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.230478][ T982] usb 2-1: config 0 descriptor?? [ 862.252247][ T982] gspca_main: spca508-2.14.0 probing 8086:0110 [ 862.449131][ T982] gspca_spca508: reg_read err -32 [ 862.662104][ T982] gspca_spca508: reg_read err -71 [ 862.703115][ T982] gspca_spca508: reg_read err -71 [ 862.708586][ T982] gspca_spca508: reg_read err -71 [ 862.801598][ T982] gspca_spca508: reg write: error -71 [ 862.824277][ T982] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 862.906930][ T982] usb 2-1: USB disconnect, device number 50 [ 863.167569][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2112'. [ 863.321114][T19873] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.2113'. [ 863.332453][T19873] kernel profiling enabled (shift: 9) [ 863.352170][T19865] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 863.383741][T19865] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2112'. [ 865.189887][T19905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.239996][T19905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.789236][T19933] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 866.924727][T19939] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 867.031457][T19933] ipvlan1: left allmulticast mode [ 868.663578][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 868.920964][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2130'. [ 869.040111][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 869.216699][T19986] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2131'. [ 869.283188][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 869.296757][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 869.319465][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 869.333704][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 869.363061][T19982] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 869.552633][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.626484][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 869.698920][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.708367][T19990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2132'. [ 870.113527][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.120088][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.295993][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 870.309923][ T9] usbtmc 5-1:16.0: can't read capabilities [ 872.172260][ T796] usb 5-1: USB disconnect, device number 46 [ 873.406633][T20059] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 874.900484][T20112] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 878.133114][T20171] misc userio: Invalid payload size [ 878.139025][T20171] misc userio: No port type given on /dev/userio [ 878.169454][T20171] misc userio: The device must be registered before sending interrupts [ 879.319964][ T982] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 879.646516][ T982] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 879.657793][ T982] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 879.677423][ T982] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 879.688203][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.716038][T20181] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 879.751361][ T982] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.942939][T20181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.166039][T20181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.964851][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 880.998021][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 881.052709][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 881.061876][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 881.107299][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 881.153611][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 881.182941][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 881.230918][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 882.433296][T20246] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 882.744586][ T9] usb 3-1: USB disconnect, device number 39 [ 883.676608][T20329] syzkaller0: entered promiscuous mode [ 883.683907][T20329] syzkaller0: entered allmulticast mode [ 884.231148][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 884.240398][T20348] openvswitch: netlink: Flow actions attr not present in new flow. [ 887.292474][T20376] input: syz1 as /devices/virtual/input/input37 [ 889.091509][T20461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2178'. [ 889.100965][ T29] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 889.391169][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 889.428284][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.431353][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.459158][ T29] usb 2-1: config 0 has no interfaces? [ 889.471778][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.483031][ T29] usb 2-1: config 0 has no interfaces? [ 889.492345][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.492979][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.538773][ T29] usb 2-1: config 0 has no interfaces? [ 889.562737][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.590931][ T29] usb 2-1: config 0 has no interfaces? [ 889.604036][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 889.607146][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 889.654365][T20476] vivid-000: ================= START STATUS ================= [ 889.662334][T20476] vivid-000: Test Pattern: 75% Colorbar [ 889.669615][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.669621][T20476] vivid-000: Fill Percentage of Frame: [ 889.678269][T20476] 100 [ 889.687314][T20476] vivid-000: Horizontal Movement: No Movement [ 889.750794][T20483] trusted_key: encrypted_key: keylen parameter is missing [ 889.865772][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 889.922010][T20476] vivid-000: Vertical Movement: No Movement [ 889.959992][T20476] vivid-000: OSD Text Mode: All [ 889.972263][ T29] usb 2-1: config 0 descriptor?? [ 889.983016][T20476] vivid-000: Show Border: false [ 890.010061][T20476] vivid-000: Show Square: false [ 890.033168][T20476] vivid-000: Sensor Flipped Horizontally: false [ 890.055423][T20476] vivid-000: Sensor Flipped Vertically: false [ 890.078232][T20476] vivid-000: Insert SAV Code in Image: false [ 890.109567][T20476] vivid-000: Insert EAV Code in Image: false [ 890.129310][T20476] vivid-000: Insert Video Guard Band: false [ 890.153211][T20476] vivid-000: Reduced Framerate: false [ 890.173794][T20476] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 890.205288][T20476] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 890.236434][T20476] vivid-000: Enable Capture Cropping: true [ 890.253661][T20476] vivid-000: Enable Capture Composing: true [ 890.273130][T20476] vivid-000: Enable Capture Scaler: true [ 890.302295][T20476] vivid-000: Timestamp Source: End of Frame [ 890.321447][T20476] vivid-000: Colorspace: SMPTE 170M [ 890.337660][T20476] vivid-000: Transfer Function: Default [ 890.364198][T20476] vivid-000: Y'CbCr Encoding: Default [ 890.388259][T20476] vivid-000: HSV Encoding: Hue 0-179 [ 890.430705][T20476] vivid-000: Quantization: Default [ 890.444973][T20476] vivid-000: Apply Alpha To Red Only: true [ 890.458099][T20476] vivid-000: Standard Aspect Ratio: 4x3 [ 890.466322][T20476] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 890.546967][T20476] vivid-000: DV Timings: 640x480p59 inactive [ 890.558829][T20476] vivid-000: DV Timings Aspect Ratio: 16x9 [ 890.565156][T20476] vivid-000: Maximum EDID Blocks: 2 [ 890.570760][T20476] vivid-000: Limited RGB Range (16-235): false [ 890.577012][T20476] vivid-000: Rx RGB Quantization Range: Automatic [ 890.584215][T20476] vivid-000: Power Present: 0x00000001 [ 890.589912][T20476] tpg source WxH: 720x576 (Y'CbCr) [ 890.595201][T20476] tpg field: 8 [ 890.598701][T20476] tpg crop: (0,8)/16x16 [ 890.603821][T20476] tpg compose: (0,0)/16x16 [ 890.608357][T20476] tpg colorspace: 12 [ 890.612660][T20476] tpg transfer function: 1/2 [ 890.617355][T20476] tpg Y'CbCr encoding: 6/1 [ 890.621977][T20476] tpg quantization: 2/1 [ 890.636629][T20476] tpg RGB range: 0/2 [ 890.640887][T20476] vivid-000: ================== END STATUS ================== [ 891.674961][T20509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 891.723414][ T30] audit: type=1326 audit(1773360729.616:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 891.774549][ T30] audit: type=1326 audit(1773360729.616:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 891.953459][ T30] audit: type=1326 audit(1773360729.616:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0984f5cfce code=0x7ffc0000 [ 891.992405][ T30] audit: type=1326 audit(1773360729.616:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 892.029937][ T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 892.074411][ T1171] usb 2-1: USB disconnect, device number 51 [ 892.116532][ T30] audit: type=1326 audit(1773360729.616:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 892.219976][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 892.267795][ T30] audit: type=1326 audit(1773360729.616:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0984f5cfce code=0x7ffc0000 [ 892.519577][ T30] audit: type=1326 audit(1773360729.616:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 892.553231][ T29] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 892.610058][ T29] usb 3-1: config 0 has no interface number 0 [ 892.617271][ T29] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.699362][ T30] audit: type=1326 audit(1773360729.616:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 892.733448][ T29] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.757458][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 892.793108][ T30] audit: type=1326 audit(1773360729.616:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 892.815665][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.841485][ T29] usb 3-1: config 0 descriptor?? [ 892.897263][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 892.906420][T20538] openvswitch: netlink: Flow actions attr not present in new flow. [ 893.202357][ T30] audit: type=1326 audit(1773360729.616:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20505 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984f9c799 code=0x7ffc0000 [ 894.846818][T20555] bridge0: port 3(hsr0) entered blocking state [ 894.853225][T20555] bridge0: port 3(hsr0) entered disabled state [ 894.859882][T20555] hsr0: entered allmulticast mode [ 894.864990][T20555] hsr_slave_0: entered allmulticast mode [ 894.874575][T20555] hsr0: entered promiscuous mode [ 894.880550][T20555] bridge0: port 3(hsr0) entered blocking state [ 894.887141][T20555] bridge0: port 3(hsr0) entered forwarding state [ 895.037800][T20554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.296460][ T1171] usb 3-1: USB disconnect, device number 40 [ 896.509318][T20590] ptrace attach of "./syz-executor exec"[5836] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ cgroup.controllers [ 898.886207][T20624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2197'. [ 900.005558][T20649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 900.032999][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 900.033014][ T30] audit: type=1326 audit(1773360737.946:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 900.332126][ T30] audit: type=1326 audit(1773360737.946:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 900.493201][ T30] audit: type=1326 audit(1773360737.946:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 900.684397][ T30] audit: type=1326 audit(1773360737.946:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 901.126682][ T30] audit: type=1326 audit(1773360737.946:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 901.229404][ T30] audit: type=1326 audit(1773360737.946:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 901.311543][ T30] audit: type=1326 audit(1773360737.946:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 901.410063][T20662] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 901.514003][ T30] audit: type=1326 audit(1773360737.946:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 901.711902][ T30] audit: type=1326 audit(1773360737.946:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 901.847430][ T30] audit: type=1326 audit(1773360737.946:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20645 comm="syz.0.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 902.063133][T20679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2206'. [ 903.153695][T20688] kvm: kvm [20687]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff [ 903.752569][T20742] lo: left allmulticast mode [ 903.884201][T20742] tunl0: left allmulticast mode [ 904.032018][T20742] gre0: left allmulticast mode [ 904.046182][T20742] gretap0: left allmulticast mode [ 904.059413][T20742] erspan0: left allmulticast mode [ 904.066601][T20742] ip_vti0: left allmulticast mode [ 904.074145][T20742] ip6_vti0: left allmulticast mode [ 904.082302][T20742] sit0: left allmulticast mode [ 904.088967][T20742] ip6tnl0: left allmulticast mode [ 904.138068][T20742] ip6gre0: left allmulticast mode [ 904.241219][T20742] ip6gretap0: left allmulticast mode [ 904.247444][T20742] vcan0: left allmulticast mode [ 904.254198][T20742] team0: left allmulticast mode [ 904.260405][T20742] dummy0: left allmulticast mode [ 904.267893][T20742] nlmon0: left allmulticast mode [ 904.273699][T20742] caif0: left allmulticast mode [ 904.279746][T20742] veth0: left allmulticast mode [ 904.285023][T20742] veth1: left allmulticast mode [ 904.290209][T20742] wg0: left allmulticast mode [ 904.295576][T20742] wg1: left allmulticast mode [ 904.300594][T20742] wg2: left allmulticast mode [ 904.305707][T20742] veth0_to_bridge: left allmulticast mode [ 904.313051][T20742] bridge_slave_0: left allmulticast mode [ 904.319216][T20742] veth1_to_bridge: left allmulticast mode [ 904.325690][T20742] bridge_slave_1: left allmulticast mode [ 904.332260][T20742] veth0_to_bond: left allmulticast mode [ 904.338456][T20742] bond_slave_0: left allmulticast mode [ 904.344487][T20742] veth1_to_bond: left allmulticast mode [ 904.350946][T20742] bond_slave_1: left allmulticast mode [ 904.357058][T20742] veth0_to_team: left allmulticast mode [ 904.363218][T20742] team_slave_0: left allmulticast mode [ 904.369165][T20742] veth1_to_team: left allmulticast mode [ 904.380355][T20742] team_slave_1: left allmulticast mode [ 904.397728][T20742] veth0_to_batadv: left allmulticast mode [ 904.427082][T20742] batadv_slave_0: left allmulticast mode [ 904.437460][T20742] veth1_to_batadv: left allmulticast mode [ 904.545603][T20742] batadv_slave_1: left allmulticast mode [ 904.551564][T20742] xfrm0: left allmulticast mode [ 904.556609][T20742] veth0_to_hsr: left allmulticast mode [ 904.570221][T20742] veth1_to_hsr: left allmulticast mode [ 904.596682][T20742] hsr0: left allmulticast mode [ 904.734556][T20742] hsr_slave_0: left allmulticast mode [ 904.763037][T20742] hsr_slave_1: left allmulticast mode [ 904.806249][T20742] veth1_virt_wifi: left allmulticast mode [ 904.855082][T20742] veth0_virt_wifi: left allmulticast mode [ 904.896160][T20742] veth1_vlan: left allmulticast mode [ 904.902128][T20742] vlan0: left allmulticast mode [ 904.907600][T20742] vlan1: left allmulticast mode [ 904.916339][T20742] macvlan0: left allmulticast mode [ 904.921954][T20742] macvlan1: left allmulticast mode [ 904.927432][T20742] ipvlan0: left allmulticast mode [ 904.932832][T20742] ipvlan1: left allmulticast mode [ 904.937896][T20742] veth0_vlan: left allmulticast mode [ 904.953812][T20742] veth1_macvtap: left allmulticast mode [ 904.959688][T20742] veth0_macvtap: left allmulticast mode [ 905.060241][T20742] macvtap0: left allmulticast mode [ 905.065606][T20742] macsec0: left allmulticast mode [ 905.120170][T20742] geneve0: left allmulticast mode [ 905.125547][T20742] geneve1: left allmulticast mode [ 905.168570][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 905.168582][ T30] audit: type=1326 audit(1773360743.086:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 905.219013][T20742] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 905.236725][T20742] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 905.267263][T20742] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 905.274818][T20742] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 905.290207][T20742] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 905.299978][ T30] audit: type=1326 audit(1773360743.086:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 905.323299][T20742] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 905.340244][T20742] ip6tnl1: left allmulticast mode [ 905.390535][T20742] sit1: left allmulticast mode [ 905.396233][T20742] macvtap1: left allmulticast mode [ 905.472305][ T30] audit: type=1326 audit(1773360743.136:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 905.560014][ T30] audit: type=1326 audit(1773360743.136:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 905.799170][ T30] audit: type=1326 audit(1773360743.136:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 906.210320][ T30] audit: type=1326 audit(1773360743.136:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 906.333538][ T30] audit: type=1326 audit(1773360743.136:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 906.356508][ T30] audit: type=1326 audit(1773360743.136:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 906.391386][ T30] audit: type=1326 audit(1773360743.136:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 906.463482][T20773] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 906.793077][ T29] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 906.900253][ T30] audit: type=1326 audit(1773360743.136:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20760 comm="syz.0.2213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb13095cfce code=0x7ffc0000 [ 906.979949][ T29] usb 5-1: device descriptor read/64, error -71 [ 907.219938][ T29] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 907.360918][T20796] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2216'. [ 907.411789][T20796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 907.908766][ T29] usb 5-1: device descriptor read/64, error -71 [ 908.176746][ T29] usb usb5-port1: attempt power cycle [ 908.265746][T20800] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2217'. [ 908.551428][ T29] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 908.849806][ T29] usb 5-1: device descriptor read/8, error -71 [ 909.139618][T20814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 909.369914][ T29] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 909.606037][ T29] usb 5-1: device not accepting address 50, error -71 [ 909.619246][ T29] usb usb5-port1: unable to enumerate USB device [ 910.824861][T20845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2221'. [ 911.589938][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 911.619996][T20855] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2223'. [ 911.765187][T20855] bridge_slave_0: left allmulticast mode [ 911.800053][T20855] bridge_slave_0: left promiscuous mode [ 911.814367][T20855] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.224223][T20868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 912.566932][T20880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2228'. [ 914.581767][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 915.835153][T20969] SET target dimension over the limit! [ 915.961325][ T1171] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 916.131951][ T1171] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 916.143549][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.168418][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.203737][ T1171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 916.248706][ T1171] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 916.265798][ T1171] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 916.288912][ T1171] usb 5-1: Manufacturer: syz [ 916.313083][ T1171] usb 5-1: config 0 descriptor?? [ 916.761480][ T1171] hid_parser_main: 1 callbacks suppressed [ 916.761546][ T1171] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 916.854400][ T1171] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 917.001383][ T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 917.212715][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 917.224119][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 917.236823][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 917.251388][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 917.311408][ T10] usb 2-1: Product: syz [ 917.325107][ T10] usb 2-1: Manufacturer: syz [ 917.355946][ T10] usb 2-1: SerialNumber: syz [ 917.385096][ T10] usb 2-1: config 0 descriptor?? [ 917.425866][ T10] usb 2-1: selecting invalid altsetting 0 [ 917.510016][ T1171] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 917.684172][ T1171] usb 3-1: No LPM exit latency info found, disabling LPM. [ 917.746259][ T1171] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.821335][ T1171] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 917.933815][ T1171] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 918.245170][ T10] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 918.635135][T21028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2244'. [ 919.456876][ T9] usb 5-1: USB disconnect, device number 51 [ 919.725265][ T10] usb 2-1: USB disconnect, device number 52 [ 919.909888][T21094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.926595][T21094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.268207][ T1171] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 920.287629][ T1171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.418846][ T1171] usb 3-1: can't set config #1, error -71 [ 920.508251][ T1171] usb 3-1: USB disconnect, device number 41 [ 920.866055][T21117] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2249'. [ 920.901413][T21110] bond4: option ad_user_port_key: invalid value (20980) [ 920.908544][T21110] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 920.984782][T21110] bond4 (unregistering): Released all slaves [ 922.201126][T21200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.290016][T21200] batman_adv: batadv0: Interface deactivated: macsec1 [ 922.307324][T21200] batman_adv: batadv0: Removing interface: macsec1 [ 923.214601][T21223] ªªªªªª: renamed from vlan0 (while UP) [ 923.282191][T21221] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 924.250408][T21216] [U] J"—E:ÀÆ" [ 924.524662][T21251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.872763][T21278] input: syz0 as /devices/virtual/input/input39 [ 925.491228][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2260'. [ 925.500464][T21288] hsr0: left allmulticast mode [ 925.505287][T21288] hsr_slave_0: left allmulticast mode [ 925.510992][T21288] hsr0: left promiscuous mode [ 925.516110][T21288] bridge0: port 3(hsr0) entered disabled state [ 925.701042][T21288] bridge_slave_1: left allmulticast mode [ 925.706747][T21288] bridge_slave_1: left promiscuous mode [ 925.773205][T21294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2261'. [ 925.954931][T21288] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.028121][T21288] bridge_slave_0: left allmulticast mode [ 926.173023][T21288] bridge_slave_0: left promiscuous mode [ 926.460325][T21288] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.160045][ T9] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 931.317269][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 931.333373][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.360910][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 931.574249][T21492] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2273'. [ 931.583568][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 931.593206][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.599553][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.637286][T21492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2273'. [ 931.933408][ T9] gspca_sn9c20x: Write register 1000 failed -110 [ 931.945455][ T9] gspca_sn9c20x: Device initialization failed [ 931.976233][ T9] gspca_sn9c20x 3-1:252.0: probe with driver gspca_sn9c20x failed with error -110 [ 933.138823][T21530] xt_hashlimit: size too large, truncated to 1048576 [ 933.146307][T21530] xt_hashlimit: max too large, truncated to 1048576 [ 933.815094][T16531] usb 3-1: USB disconnect, device number 42 [ 934.776825][T21541] could not allocate digest TFM handle md5 [ 935.853739][T21613] input: syz1 as /devices/virtual/input/input40 [ 935.953321][T21610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2288'. [ 936.016639][T21616] netlink: 'syz.4.2290': attribute type 21 has an invalid length. [ 936.024773][T21616] IPv6: NLM_F_CREATE should be specified when creating new route [ 936.254730][T21626] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2292'. [ 936.787439][T21645] tipc: Enabled bearer , priority 0 [ 936.797230][T21645] syzkaller0: entered promiscuous mode [ 936.803890][T21645] syzkaller0: entered allmulticast mode [ 936.937951][T21650] hsr0: left promiscuous mode [ 937.046955][T21654] tipc: Resetting bearer [ 937.114426][T17748] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.129235][T17748] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.157448][T21643] tipc: Resetting bearer [ 937.507371][T21643] tipc: Disabling bearer [ 937.574076][T17748] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.599690][T17748] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.289969][T16531] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 939.657144][T16531] usb 2-1: Using ep0 maxpacket: 32 [ 939.773736][T16531] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 939.824990][T16531] usb 2-1: config 0 has no interface number 0 [ 939.850014][T16531] usb 2-1: config 0 interface 23 has no altsetting 0 [ 939.863077][T16531] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 939.872397][T16531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.944012][T16531] usb 2-1: Product: syz [ 939.979916][T16531] usb 2-1: Manufacturer: syz [ 939.984584][T16531] usb 2-1: SerialNumber: syz [ 939.996935][T16531] usb 2-1: config 0 descriptor?? [ 940.386236][T21679] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2299'. [ 940.451518][ T29] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 940.650040][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 940.667369][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.706758][ T29] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 940.770805][ T29] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 940.780031][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.812365][ T29] usb 3-1: Product: syz [ 941.042520][ T29] usb 3-1: Manufacturer: syz [ 941.059461][ T29] usb 3-1: SerialNumber: syz [ 941.131334][ T29] usb 3-1: config 0 descriptor?? [ 942.149795][T16531] usb 2-1: USB disconnect, device number 53 [ 942.853571][T21778] Cannot find add_set index 0 as target [ 942.929472][T16531] usb 3-1: USB disconnect, device number 43 [ 944.476592][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2313'. [ 947.022385][T21880] ptrace attach of "./syz-executor exec"[5840] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ cgroup.controllers [ 947.242042][T21886] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2319'. [ 948.134512][T21939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 948.181151][T21936] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 949.804852][T21970] tipc: Enabled bearer , priority 0 [ 949.842262][T21970] tipc: Resetting bearer [ 949.868549][T21964] tipc: Disabling bearer [ 950.446236][T21988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 951.143265][T22012] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2333'. [ 951.180130][ T796] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 951.470054][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 951.484548][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.610329][ T796] usb 5-1: config 0 has no interfaces? [ 951.638852][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.649609][ T796] usb 5-1: config 0 has no interfaces? [ 951.690931][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.723940][ T796] usb 5-1: config 0 has no interfaces? [ 951.734930][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.760015][ T796] usb 5-1: config 0 has no interfaces? [ 951.775851][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 951.910234][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.956631][ T796] usb 5-1: config 0 descriptor?? [ 953.306537][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 953.708520][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'. [ 953.785609][T17749] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.795264][T17749] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.813665][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 953.831475][T17749] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.847276][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'. [ 953.859468][T17749] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.954628][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 954.056253][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 954.102069][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 954.202198][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 954.455402][ T9] usb 5-1: USB disconnect, device number 52 [ 954.780190][T22080] program syz.3.2341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 957.156798][T22142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.934496][T22250] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 963.046248][T22265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2364'. [ 964.229080][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 964.229099][ T30] audit: type=1326 audit(1773360802.106:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 964.318780][T22277] IPv6: NLM_F_CREATE should be specified when creating new route [ 964.377623][ T30] audit: type=1326 audit(1773360802.106:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 964.420121][T22277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 964.427479][T22277] IPv6: NLM_F_CREATE should be set when creating new route [ 964.450045][ T30] audit: type=1326 audit(1773360802.106:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 964.612720][ T30] audit: type=1326 audit(1773360802.106:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 964.851219][ T30] audit: type=1326 audit(1773360802.106:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 965.005458][ T30] audit: type=1326 audit(1773360802.116:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 965.040712][ T30] audit: type=1326 audit(1773360802.116:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 965.160999][ T30] audit: type=1326 audit(1773360802.116:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 965.284969][ T30] audit: type=1326 audit(1773360802.116:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 965.315010][ T30] audit: type=1326 audit(1773360802.116:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.0.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 965.601792][T22320] netlink: 'syz.2.2372': attribute type 4 has an invalid length. [ 966.480077][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 966.670020][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 966.706697][ T10] usb 3-1: config 0 has no interfaces? [ 966.725763][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.774699][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.834590][ T10] usb 3-1: Manufacturer: syz [ 967.020596][ T10] usb 3-1: config 0 descriptor?? [ 967.289558][T22385] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 967.350141][T22385] netdevsim netdevsim4: Direct firmware load for / [ 967.350141][T22385] failed with error -2 [ 967.370321][T22385] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 967.370321][T22385] [ 969.081844][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2377'. [ 969.476470][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 969.662039][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 969.919989][ T9] usb 3-1: USB disconnect, device number 44 [ 969.943699][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 969.955455][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 970.041452][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 970.127727][T22441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 970.377054][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 970.426816][T22458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2382'. [ 970.586777][T22441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 971.299994][ T796] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 971.489942][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 971.496772][ T796] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 971.506159][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.532333][ T796] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 971.603335][T22482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.613604][T22482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.882499][ T796] gspca_nw80x: reg_w err -71 [ 972.893731][ T796] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 972.926335][ T796] usb 2-1: USB disconnect, device number 54 [ 975.531150][T22577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.054642][T22600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.414736][T22600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.041068][T22637] netdevsim netdevsim0: Direct firmware load for . [ 980.041068][T22637] failed with error -2 [ 980.059878][T22637] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 980.059878][T22637] [ 986.019987][ T1171] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 986.180862][ T1171] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 986.199760][ T1171] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 986.209613][ T1171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.277289][ T1171] usb 2-1: Product: syz [ 986.297462][ T1171] usb 2-1: Manufacturer: syz [ 986.312144][ T1171] usb 2-1: SerialNumber: syz [ 986.373330][ T1171] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 986.509368][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 986.668729][T22762] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2420'. [ 986.682991][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 986.735966][T22762] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 987.009207][T22731] random: crng reseeded on system resumption [ 987.054268][T16531] usb 2-1: USB disconnect, device number 55 [ 987.630527][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 987.639293][ T10] ath9k_htc: Failed to initialize the device [ 987.654497][T16531] usb 2-1: ath9k_htc: USB layer deinitialized [ 989.576569][T22811] @ÿ: renamed from veth0_vlan [ 989.879499][T22815] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 991.030204][T22829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2430'. [ 991.459917][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 991.459936][ T30] audit: type=1326 audit(1773360829.366:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 991.711187][ T30] audit: type=1326 audit(1773360829.366:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 992.152889][ T30] audit: type=1326 audit(1773360829.366:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 992.180952][ T30] audit: type=1326 audit(1773360829.366:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 992.206911][ T30] audit: type=1326 audit(1773360829.366:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 992.240818][ T30] audit: type=1326 audit(1773360829.366:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 992.411495][T22848] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 992.456269][ T30] audit: type=1326 audit(1773360829.366:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 992.630489][ T30] audit: type=1326 audit(1773360829.366:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 992.929978][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.940087][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.972902][ T30] audit: type=1326 audit(1773360829.366:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 993.008422][ T30] audit: type=1326 audit(1773360829.366:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.4.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fdb1b39c799 code=0x7ffc0000 [ 993.385228][T22855] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2434'. [ 993.929147][T22854] bond4: option ad_user_port_key: invalid value (45473) [ 993.937759][T22854] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 993.979692][T22854] bond4 (unregistering): Released all slaves [ 994.497288][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.573724][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.599983][T22935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.613284][T22940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.677469][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.709586][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.752530][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.848486][T22940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 994.913442][T22946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.923349][T22946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.093712][T22963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.428199][T23030] @ÿ: renamed from bond_slave_0 (while UP) [ 999.081343][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 999.092490][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'. [ 999.110854][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 999.125657][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'. [ 999.142725][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 999.156931][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 999.560032][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 999.590043][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 1000.121304][T16531] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1000.251241][T23084] loop5: detected capacity change from 0 to 7 [ 1000.261308][T23084] Dev loop5: unable to read RDB block 7 [ 1000.267084][T23084] loop5: unable to read partition table [ 1000.290103][T23084] loop5: partition table beyond EOD, truncated [ 1000.306525][T23084] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1000.366062][T16531] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.400246][T16531] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.419121][T16531] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1000.529943][T16531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.611343][T16531] usb 5-1: Product: syz [ 1000.618099][T16531] usb 5-1: Manufacturer: syz [ 1000.629405][T16531] usb 5-1: SerialNumber: syz [ 1000.661973][T16531] cdc_ncm 5-1:1.0: skipping garbage [ 1000.668978][T16531] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1000.995159][T23075] ip6tnl0: Caught tx_queue_len zero misconfig [ 1001.156209][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 1001.185121][T16531] cdc_ncm 5-1:1.0: bind() failure [ 1001.266905][T16531] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1001.288480][T16531] cdc_ncm 5-1:1.1: bind() failure [ 1001.343950][T16531] usb 5-1: USB disconnect, device number 53 [ 1003.004487][T23144] batman_adv: batadv0: Adding interface: macsec2 [ 1003.010974][T23144] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.046888][T23144] batman_adv: batadv0: Interface activated: macsec2 [ 1003.197991][T23135] overlayfs: missing 'lowerdir' [ 1005.551585][T23173] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1006.022950][T23182] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1006.768684][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 1006.794424][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 1006.803932][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 1006.813653][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 1006.953971][T23238] netlink: 'syz.2.2467': attribute type 8 has an invalid length. [ 1007.392376][T23249] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2467'. [ 1008.396249][T23263] wg0: left allmulticast mode [ 1009.689152][T23282] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1009.929803][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1009.936018][ T30] audit: type=1326 audit(1773360847.846:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.130562][ T30] audit: type=1326 audit(1773360847.886:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.262646][ T30] audit: type=1326 audit(1773360847.886:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.349280][ T30] audit: type=1326 audit(1773360847.886:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.478771][ T30] audit: type=1326 audit(1773360847.886:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.521255][ T30] audit: type=1326 audit(1773360847.986:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.551178][ T30] audit: type=1326 audit(1773360847.986:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.577157][ T30] audit: type=1326 audit(1773360847.986:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.601363][ T30] audit: type=1326 audit(1773360847.986:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1010.624916][ T30] audit: type=1326 audit(1773360848.006:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23283 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb13099c799 code=0x7ffc0000 [ 1011.346655][T23324] pim6reg: entered allmulticast mode [ 1011.360250][T23324] pim6reg: left allmulticast mode [ 1013.772285][T16531] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1013.940086][T16531] usb 3-1: Using ep0 maxpacket: 8 [ 1013.957764][T16531] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1014.014886][T16531] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1014.109811][T16531] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1014.133629][T16531] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1014.153394][T16531] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1014.218618][T16531] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.298283][T16531] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1014.441849][T16531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.737534][T16531] usb 3-1: usb_control_msg returned -32 [ 1014.744703][T16531] usbtmc 3-1:16.0: can't read capabilities [ 1015.076238][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1015.086060][T23382] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1015.125062][T23382] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1017.215116][T16531] usb 3-1: USB disconnect, device number 45 [ 1017.949989][ T10] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1018.178425][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.213664][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1018.301631][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.315514][ T10] usb 3-1: config 0 descriptor?? [ 1018.397565][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1019.593381][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1020.539965][ T796] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1020.732555][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 1020.760693][ T29] usb 3-1: USB disconnect, device number 46 [ 1021.017005][ T796] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.029558][ T796] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1021.046982][ T796] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1021.098606][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.127813][ T796] usbtmc 2-1:16.0: bulk endpoints not found [ 1021.793196][T23476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.816261][T23476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.834808][T23503] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1021.923479][T23509] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1022.001495][T23503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.083005][T23503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.198485][ T796] usb 2-1: USB disconnect, device number 56 [ 1023.693238][T23544] batman_adv: batadv0: Adding interface: macsec1 [ 1023.699634][T23544] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.725436][T23544] batman_adv: batadv0: Interface activated: macsec1 [ 1025.240291][T23563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.253878][T23563] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2509'. [ 1026.159954][ T10] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1026.372903][ T10] usb 5-1: config 0 has no interfaces? [ 1026.378926][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1026.388613][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.404577][ T10] usb 5-1: config 0 descriptor?? [ 1026.506706][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 1026.615390][T23594] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1026.625698][T23594] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1028.111269][T23610] usb usb8: usbfs: process 23610 (syz.1.2516) did not claim interface 0 before use [ 1028.125327][T23610] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1028.134027][T23610] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1028.142574][T23610] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1028.708585][T23622] tipc: New replicast peer: 255.255.255.255 [ 1028.722766][T23622] tipc: Enabled bearer , priority 10 [ 1028.772466][T23621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 1028.812811][ T1171] usb 5-1: USB disconnect, device number 54 [ 1028.834070][T23621] tipc: Disabling bearer [ 1030.130018][T23646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 1030.501332][T23649] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1030.507992][T23649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1030.527665][T23649] vhci_hcd vhci_hcd.0: Device attached [ 1030.557247][T23652] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 1030.563902][T23652] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1030.694050][T23649] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 1030.700709][T23649] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1030.842029][ T10] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1030.901848][T23652] vhci_hcd vhci_hcd.0: Device attached [ 1030.912846][T23649] vhci_hcd vhci_hcd.0: Device attached [ 1030.923690][T23660] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 1030.930339][T23660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1030.947278][T23663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2523'. [ 1031.005112][T23660] vhci_hcd vhci_hcd.0: Device attached [ 1031.031880][T23649] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 1031.038509][T23649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1031.054001][T23649] vhci_hcd vhci_hcd.0: Device attached [ 1031.072571][T23652] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 1031.079194][T23652] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1031.090071][T23652] vhci_hcd vhci_hcd.0: Device attached [ 1031.096964][T23649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1031.108714][T23649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1031.129824][T23649] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 1031.136467][T23649] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1031.222974][T23649] vhci_hcd vhci_hcd.0: Device attached [ 1031.252106][T23652] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1031.360938][T23670] vhci_hcd: connection closed [ 1031.361179][ T6768] vhci_hcd vhci_hcd.2: stop threads [ 1031.372334][T23668] vhci_hcd: connection closed [ 1031.373113][T23661] vhci_hcd: connection closed [ 1031.378275][T23666] vhci_hcd: connection closed [ 1031.384616][T23656] vhci_hcd: connection closed [ 1031.384803][T23653] vhci_hcd: connection closed [ 1031.395719][T23650] vhci_hcd: connection reset by peer [ 1031.409647][ T6768] vhci_hcd vhci_hcd.2: release socket [ 1031.426884][ T6768] vhci_hcd vhci_hcd.2: disconnect device [ 1031.435483][ T6768] vhci_hcd vhci_hcd.2: stop threads [ 1031.503772][ T6768] vhci_hcd vhci_hcd.2: release socket [ 1031.512225][ T6768] vhci_hcd vhci_hcd.2: disconnect device [ 1031.571544][ T6768] vhci_hcd vhci_hcd.2: stop threads [ 1031.626098][ T6768] vhci_hcd vhci_hcd.2: release socket [ 1031.643926][ T6768] vhci_hcd vhci_hcd.2: disconnect device [ 1031.672776][ T6768] vhci_hcd vhci_hcd.2: stop threads [ 1031.684151][ T6768] vhci_hcd vhci_hcd.2: release socket [ 1031.696338][ T6768] vhci_hcd vhci_hcd.2: disconnect device [ 1031.704195][ T6768] vhci_hcd vhci_hcd.2: stop threads [ 1031.711278][ T6768] vhci_hcd vhci_hcd.2: release socket [ 1031.730824][ T6768] vhci_hcd vhci_hcd.2: disconnect device [ 1031.744722][ T6768] vhci_hcd vhci_hcd.2: stop threads [ 1031.753710][ T6768] vhci_hcd vhci_hcd.2: release socket [ 1031.765122][ T6768] vhci_hcd vhci_hcd.2: disconnect device [ 1031.780401][ T6768] vhci_hcd vhci_hcd.2: stop threads [ 1031.790598][ T6768] vhci_hcd vhci_hcd.2: release socket [ 1031.800140][ T6768] vhci_hcd vhci_hcd.2: disconnect device [ 1032.841905][T23702] lo: left allmulticast mode [ 1032.851320][T23702] tunl0: left allmulticast mode [ 1032.858174][T23702] gre0: left allmulticast mode [ 1032.868955][T23702] gretap0: left allmulticast mode [ 1032.876089][T23702] erspan0: left allmulticast mode [ 1032.883668][T23702] ip_vti0: left allmulticast mode [ 1032.891070][T23702] ip6_vti0: left allmulticast mode [ 1032.898440][T23702] sit0: left allmulticast mode [ 1032.910424][T23702] ip6tnl0: left allmulticast mode [ 1032.917646][T23702] ip6gre0: left allmulticast mode [ 1032.924460][T23702] syz_tun: left allmulticast mode [ 1032.932157][T23702] ip6gretap0: left allmulticast mode [ 1032.939592][T23702] vcan0: left allmulticast mode [ 1032.945807][T23702] bond0: left allmulticast mode [ 1032.952669][T23702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.960614][T23702] team0: left allmulticast mode [ 1032.965549][T23702] batadv1: left allmulticast mode [ 1032.971809][T23702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.980315][T23702] dummy0: left allmulticast mode [ 1032.990559][T23702] nlmon0: left allmulticast mode [ 1033.040094][T23702] caif0: left allmulticast mode [ 1033.045045][T23702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1033.083683][T23704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.092947][T23704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.443906][T23688] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1033.841800][T23714] @ÿ: renamed from veth0_vlan [ 1033.859176][T23715] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1035.418175][T23728] dummy0: entered allmulticast mode [ 1036.049998][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1036.310549][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 1036.381309][T23745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2535'. [ 1036.810560][T23759] bridge0: port 2(hsr0) entered blocking state [ 1036.816850][T23759] bridge0: port 2(hsr0) entered disabled state [ 1036.826445][T23759] hsr0: entered allmulticast mode [ 1036.831689][T23759] hsr_slave_0: entered allmulticast mode [ 1036.844850][T23759] hsr0: entered promiscuous mode [ 1036.851351][T23759] bridge0: port 2(hsr0) entered blocking state [ 1036.857624][T23759] bridge0: port 2(hsr0) entered forwarding state [ 1037.480631][ T29] usb usb38-port1: attempt power cycle [ 1037.826511][T23773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1038.100919][ T29] usb usb38-port1: unable to enumerate USB device [ 1038.122238][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2543'. [ 1038.150673][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2543'. [ 1038.373591][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 1038.410384][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 1038.430017][ C1] [ 1038.432392][ C1] ============================================ [ 1038.438546][ C1] WARNING: possible recursive locking detected [ 1038.444768][ C1] syzkaller #0 Tainted: G L [ 1038.450736][ C1] -------------------------------------------- [ 1038.456872][ C1] swapper/1/0 is trying to acquire lock: [ 1038.462503][ C1] ffff888064b82f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1038.471738][ C1] [ 1038.471738][ C1] but task is already holding lock: [ 1038.479092][ C1] ffff88802b41af70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1038.489343][ C1] [ 1038.489343][ C1] other info that might help us debug this: [ 1038.497390][ C1] Possible unsafe locking scenario: [ 1038.497390][ C1] [ 1038.504828][ C1] CPU0 [ 1038.508092][ C1] ---- [ 1038.511466][ C1] lock(&hsr->seqnr_lock); [ 1038.515956][ C1] lock(&hsr->seqnr_lock); [ 1038.520442][ C1] [ 1038.520442][ C1] *** DEADLOCK *** [ 1038.520442][ C1] [ 1038.528567][ C1] May be due to missing lock nesting notation [ 1038.528567][ C1] [ 1038.536873][ C1] 8 locks held by swapper/1/0: [ 1038.541615][ C1] #0: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 1038.551603][ C1] #1: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1038.560721][ C1] #2: ffff88802b41af70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1038.571422][ C1] #3: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1038.580919][ C1] #4: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1038.590893][ C1] #5: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 1038.600193][ C1] #6: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1038.610136][ C1] #7: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1038.619790][ C1] [ 1038.619790][ C1] stack backtrace: [ 1038.625700][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.625720][ C1] Tainted: [L]=SOFTLOCKUP [ 1038.625724][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1038.625736][ C1] Call Trace: [ 1038.625801][ C1] [ 1038.625833][ C1] dump_stack_lvl+0xe8/0x150 [ 1038.625925][ C1] print_deadlock_bug+0x279/0x290 [ 1038.625948][ C1] __lock_acquire+0x253f/0x2cf0 [ 1038.625963][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1038.626002][ C1] lock_acquire+0xf0/0x2e0 [ 1038.626014][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1038.626030][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1038.626042][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1038.626111][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1038.626123][ C1] hsr_dev_xmit+0x237/0x360 [ 1038.626135][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 1038.626148][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1038.626164][ C1] __dev_queue_xmit+0x16d1/0x3890 [ 1038.626177][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1038.626189][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1038.626219][ C1] ? ebt_do_table+0x2665/0x2830 [ 1038.626303][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1038.626321][ C1] ? ebt_do_table+0x2665/0x2830 [ 1038.626335][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1038.626351][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 1038.626366][ C1] br_dev_queue_push_xmit+0x370/0x4a0 [ 1038.626400][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1038.626412][ C1] NF_HOOK+0x360/0x3f0 [ 1038.626423][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1038.626434][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1038.626444][ C1] ? pv_native_safe_halt+0xf/0x20 [ 1038.626454][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1038.626468][ C1] br_forward_finish+0xd3/0x130 [ 1038.626479][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1038.626490][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1038.626501][ C1] NF_HOOK+0x360/0x3f0 [ 1038.626512][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1038.626522][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1038.626533][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1038.626545][ C1] ? __skb_clone+0x483/0x7a0 [ 1038.626604][ C1] ? br_handle_vlan+0x61/0x530 [ 1038.626635][ C1] __br_forward+0x397/0x540 [ 1038.626646][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1038.626657][ C1] br_flood+0x6ee/0xb80 [ 1038.626671][ C1] ? br_dev_xmit+0x193/0x1980 [ 1038.626684][ C1] br_dev_xmit+0x12bd/0x1980 [ 1038.626698][ C1] ? br_dev_xmit+0x193/0x1980 [ 1038.626712][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 1038.626725][ C1] ? __skb_get_hash_net+0x13f/0x2e0 [ 1038.626761][ C1] ? __pfx___skb_get_hash_net+0x10/0x10 [ 1038.626771][ C1] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 1038.626784][ C1] ? skb_network_protocol+0x234/0x3f0 [ 1038.626795][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 1038.626807][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1038.626821][ C1] __dev_queue_xmit+0x16d1/0x3890 [ 1038.626833][ C1] ? handle_softirqs+0x22a/0x870 [ 1038.626845][ C1] ? pv_native_safe_halt+0xf/0x20 [ 1038.626854][ C1] ? default_idle+0x9/0x20 [ 1038.626866][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1038.626880][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1038.626893][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 1038.626904][ C1] ? __asan_memcpy+0x40/0x70 [ 1038.626930][ C1] ? __skb_clone+0x63/0x7a0 [ 1038.626941][ C1] ? __skb_clone+0x483/0x7a0 [ 1038.626951][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1038.626964][ C1] ? skb_clone+0x246/0x3a0 [ 1038.626975][ C1] hsr_forward_skb+0x157b/0x2860 [ 1038.626991][ C1] ? hsr_forward_skb+0xb3/0x2860 [ 1038.627006][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1038.627020][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1038.627030][ C1] ? __asan_memset+0x22/0x50 [ 1038.627039][ C1] ? __skb_pad+0x405/0x610 [ 1038.627051][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 1038.627067][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1038.627081][ C1] hsr_announce+0x1db/0x370 [ 1038.627094][ C1] ? hsr_announce+0x89/0x370 [ 1038.627106][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1038.627120][ C1] call_timer_fn+0x192/0x640 [ 1038.627134][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1038.627146][ C1] ? call_timer_fn+0xd4/0x640 [ 1038.627158][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1038.627171][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1038.627186][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1038.627198][ C1] __run_timer_base+0x652/0x8b0 [ 1038.627209][ C1] ? ktime_get+0x45/0x200 [ 1038.627220][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1038.627232][ C1] ? sched_clock_cpu+0x74/0x440 [ 1038.627247][ C1] run_timer_softirq+0xb7/0x170 [ 1038.627263][ C1] handle_softirqs+0x22a/0x870 [ 1038.627276][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1038.627290][ C1] __irq_exit_rcu+0x5f/0x150 [ 1038.627301][ C1] irq_exit_rcu+0x9/0x30 [ 1038.627313][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1038.627324][ C1] [ 1038.627331][ C1] [ 1038.627335][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1038.627362][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1038.627373][ C1] Code: be 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 32 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1038.627383][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1038.627417][ C1] RAX: 00000000015cdc2b RBX: ffffffff819a8c8a RCX: 0000000080000001 [ 1038.627425][ C1] RDX: 0000000000000001 RSI: ffffffff8def61cd RDI: ffffffff8c27bc00 [ 1038.627432][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1038.627440][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0 [ 1038.627447][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad8000 [ 1038.627455][ C1] ? do_idle+0x1ba/0x5d0 [ 1038.627471][ C1] default_idle+0x9/0x20 [ 1038.627482][ C1] default_idle_call+0x72/0xb0 [ 1038.627494][ C1] do_idle+0x1ba/0x5d0 [ 1038.627506][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1038.627518][ C1] ? __pfx_do_idle+0x10/0x10 [ 1038.627532][ C1] cpu_startup_entry+0x43/0x60 [ 1038.627545][ C1] start_secondary+0x101/0x110 [ 1038.627558][ C1] common_startup_64+0x13e/0x147 [ 1038.627578][ C1]