last executing test programs: 8m17.170283721s ago: executing program 1 (id=3598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "6271be4d"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001340)={0x20, 0x1, 0x3, "1ae570"}, 0x0}) 8m13.652873301s ago: executing program 1 (id=3612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0xffff0000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) 8m13.300341789s ago: executing program 1 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310003000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 8m13.07258336s ago: executing program 1 (id=3617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setuid(0xee01) listen(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c080}, 0x20040844) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r3, @ANYRESOCT=r0], 0x138}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r1, 0x10, &(0x7f0000000300)) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8m9.999581238s ago: executing program 1 (id=3626): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x100d, 0x1a2d82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491e44e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x10002, 0x3, 0x15, 0xc, "e1c5be584875f9a3a8c3d21d4aed0888fd5bbc6482be0f77cd7c69344687c22d97bae414bddadaa37277c798331a9beae5f95599c89e8c9e4abd843f22651d53", "1de095496130c0f2d7e3adec074fcc6ef189d2e859a4a31a9afd000000005061", [0xffffffffffffb3bc, 0x3]}) 8m9.429989848s ago: executing program 1 (id=3629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)={0x3c, 0x13, 0x1, 0x70bd2a, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @fd}, @nested={0x18, 0x125, 0x0, 0x1, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000002700)=""/18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102dd8a7a20670812980f240102030109023f0001f40820100904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 8m8.657619789s ago: executing program 32 (id=3629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)={0x3c, 0x13, 0x1, 0x70bd2a, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @fd}, @nested={0x18, 0x125, 0x0, 0x1, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000002700)=""/18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102dd8a7a20670812980f240102030109023f0001f40820100904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 38.193441678s ago: executing program 4 (id=5626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xaa, 'M', "54955d", 0x6558}}}}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x1) r5 = fcntl$getown(r2, 0x9) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x9, 0x3f0, 0x887c, 0x2f78aae1, 0xb3, r5}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) socket$unix(0x1, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, 0x0) read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0], 0x40}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r12, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r11, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 35.628069223s ago: executing program 4 (id=5637): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea220000"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x4404, 0x1ff, {0x77359400}, {0x2, 0xb, 0x0, 0x3, 0x9, 0x1, "2db907a7"}, 0x3, 0x3, {&(0x7f00000001c0)=[{0x805a, 0x5, {0x7}, 0x101}, {0x1b1b9064, 0x3, {0x9}, 0x94}]}, 0x1, 0x0, r8}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 32.314811357s ago: executing program 4 (id=5646): socket(0x80000000000000a, 0x2, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) unshare(0x8040480) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$LOOP_CONFIGURE(r0, 0xc0c0128e, &(0x7f0000000140)={0xffffffffffffffff, 0x1ff, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000000500", "2809e8dbe10859894822800800000000000097bdb22d0000b420a1a83c5240f45f819e01177d94f98dd4992861acdfffffff160000000400002000", "0000000000000000113ddb2802e7234f00000000ddff00", [0x100000000, 0x82]}}) 32.210784917s ago: executing program 4 (id=5647): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) r2 = getegid() r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}, {&(0x7f0000000400)="155416772e77d501a7f3d3c3e409f62cbec2f209135736cacc6d229b40496fff02805cf7", 0x24}], 0x2) fchown(r0, r1, r2) r4 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000002f000000044100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000001"], 0x50) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x6, 0x0, 0x0, 0x1, 0x1ff, 0xfff}, &(0x7f0000000080)=0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x44e, 0x10001, 0xacbe, 0xf, 0xa, 0x6]}, &(0x7f00000005c0)=0x78) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="30000000eba54cc91049c8ba73dde9a10a8ff23552a1a422d9617114c2745a59c54ea076a0bbf0c59c493cec9b2c8226cb65b6a8b6d9c7117b6fa55685ad6bd11634fbaf550887dbffd06c3644d03e635f195086e959782b329bd3e2a6e8168b4245a59b", @ANYRES16=r12, @ANYBLOB="09090000002000000000010000000000000007410000001400180000006069623a64766d727030000000"], 0x30}}, 0x800) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x30, r12, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x894}, 0x8000) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000600)={0x6, @vbi={0x4, 0x4, 0xfff, 0x36314d59, [0xb08, 0x4], [0x7], 0x108}}) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x8f, 0x0, 0xfffffffffffffff7, [{{0x1, 0x1, 0x400, 0x86, 0x8, 0x2, {0x3, 0x3, 0x7f, 0xa, 0x8, 0x80000007, 0xfffff1be, 0x2, 0x4, 0xe000, 0x6679aa80, r9, r10, 0x8, 0x8}}, {0x0, 0x6, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) getdents64(r11, 0x0, 0x0) r13 = accept(r5, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x80) r14 = syz_clone(0x20000000, &(0x7f0000000180)="a2a3e48c18c80ec29d30af296102279e774bd647b8677c199544a8109b01b11b35033944c67cedc050a6d36f0a71f365f1c80d4159616e5c9889b5151c9a1d638beaaa5517c3419f26389718c679972fb614969a14aac0fe03dc685e2fd2cbea3eecd631bf7c1250f0ce47c389cc629eb06c5cce115107baaa3b124169483f4d9fd3c8dd3a3d897a7c9dcd4b0ff0549858a75cfd1d6fc9bd1cf0e996bb3854ce7d97647471b13651fa9f365b7b1ec47037c7fa94db9a6a87c34fee3d9652ed9e27", 0xc1, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="947a1fe6e6c9cb44c698e4c142577565d33fa7f4c91d43919127755354fd3ac0c6ce4a44160c2761b58f53ea7ce055b5f111e8053d194ff0ac01f66f35308880df9655f67fb2062e932a1be6da3986501ff48c9d7f5597b4dfc6af5f97f501c127c98723e4479bb81b66df23820d252815bcfb1e18e36eb8a8d96502be2f753dc8f075867dd67192850bd7006af375d30c72cf64d2ce670f5e4ac9876add1e9196fbcf0cc68471acc1b66c16d136") r15 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) writev(r15, &(0x7f0000009500)=[{&(0x7f00000093c0)="2a339cb0c054", 0x6}, {0x0}], 0x2) ioctl$sock_SIOCSPGRP(r13, 0x8902, &(0x7f00000003c0)=r14) 32.001571623s ago: executing program 4 (id=5651): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) sendto$inet(r0, &(0x7f0000001300)="28ab7325b41c2160f707d71e3a751eb06f7b16d5fedeab796e76ad4ac2c3f3ee28ad30c10c81f2b82ad16962a519589cd45205f2dc39aacbdb6c469a373e2a5d1ea697dd23ed7b7dca", 0x49, 0x0, &(0x7f0000001380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001740)={&(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xe0e0e0e0}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001280)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000001240)='net/udplite6\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r10 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) ioctl$CEC_ADAP_G_LOG_ADDRS(r8, 0x805c6103, &(0x7f00000011c0)) 31.407574449s ago: executing program 4 (id=5652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) dup3(r3, r2, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x48011) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x480) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@netrom, @remote, @netrom, @default, @null, @remote, @netrom, @default]}, 0x80, 0x0}, 0xef35}, {{0x0, 0x0, &(0x7f0000001d80)}, 0x79}], 0x2, 0x2000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080004000a010102180016"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x9e8ea000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 30.913959672s ago: executing program 33 (id=5652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) dup3(r3, r2, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x48011) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x480) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@netrom, @remote, @netrom, @default, @null, @remote, @netrom, @default]}, 0x80, 0x0}, 0xef35}, {{0x0, 0x0, &(0x7f0000001d80)}, 0x79}], 0x2, 0x2000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) mremap(&(0x7f0000f7f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080004000a010102180016"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x9e8ea000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 11.680452424s ago: executing program 2 (id=5724): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x6, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x8, 0x3, 0x4, 0xce, 0x5, 0x57a, 0xd747]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs(r5, &(0x7f00000001c0)='net/llc/core\x00') r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) set_mempolicy(0x1, 0x0, 0xc) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r7, 0x2, 0x13, r6, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000014c0)={0x10b0, 0x2, 0x1, {0x1, @pix_mp={0x1, 0x6, 0xdeb081b3, 0x9, 0x2, [{0x200, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x5}, {0xffffffff, 0x5}, {0x3, 0xfb}], 0xf7, 0x8, 0x4, 0x1, 0x1}}, 0x1}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0x10, 0x3, 0x9) r10 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r9, @ANYRES64=r10], 0x0) r11 = dup(r8) write$UHID_INPUT(r11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10.746452421s ago: executing program 6 (id=5730): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r2 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x1) 10.349000282s ago: executing program 6 (id=5734): socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 10.12931362s ago: executing program 6 (id=5736): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{&(0x7f0000000900)={0xa, 0x4e23, 0xffffffff, @loopback, 0x401}, 0x1c, 0x0}}, {{&(0x7f0000001040)={0xa, 0x4e22, 0x3, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa7d}}], 0x30}}], 0x2, 0x800) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ac05200300000000000109022400010000e80b0904008001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x40) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x33, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x2, 0x2, 0x0, 0x0, 0x3, 0x10001}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c0c0) 8.233274409s ago: executing program 6 (id=5745): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea220000"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x4404, 0x1ff, {0x77359400}, {0x2, 0xb, 0x0, 0x3, 0x9, 0x1, "2db907a7"}, 0x3, 0x3, {&(0x7f00000001c0)=[{0x805a, 0x5, {0x7}, 0x101}, {0x1b1b9064, 0x3, {0x9}, 0x94}]}, 0x1, 0x0, r8}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 8.232564683s ago: executing program 2 (id=5746): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x73}, {0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x5}, {0x2, 0x80000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x0, @in=@remote, 0x3, 0x0, 0x0, 0x4}}, 0xe8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000001007d01ff020000000000000000000000000001"], 0xfdef) 7.346933564s ago: executing program 6 (id=5750): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r2 = fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x123802, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000009c0)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xed8~\x92\xae\x82\xbe\xe7\xfd_\xc1\x83\xb7\xd4\xee\x9a\xa5\xc1\x8e\xc5\xcb|\x95-\xc8\x8f\xa1\xd6\xe2\r!\x81`\xa4P\xd2\xb2.9e\xa04\x1as#\x19\x83\xe42\xec\x91\xdb\x8e\x8b\x85\xc1\xado\xde\xf1s\xf9\xd3-z\x96\xd8\xbf\xbb\x19\xd6c\xe2\xc4\xf0d\xdb\xe9\x1c\x8d|\" \x12\xac\x7f4AJ\x1d\vS\xd9_\xd4\xeeQ\xd4u\x10\xd7j\xe3\xab\xbc\xffY\x8dA=l`V\x10\xbf\xd1\xbfbz\"\xd0\xeaX\x99\x9c\x14\x83\xe1\xc3.!R\x93\xf4S\x95\xc7\x90we\x82\xf81\x9f\x04\xe0\xa9\xa9\xe0\xf0\xa8R\xfbQ<\x11\xc3P\xbe\x1eR\xc1\xbfES\x99\xda\xfc\x8ff\xf9\xa0\x18\xd0\x00w\\\x05\x00\xa4 \xaa\xbc\x9b\xd4\x86\xef\t\xb7\xd2\xec\xe8\xde\xe5u\x123V\x8a\x10\xa1^\x0e\x80N\xceD\xd5[-.', 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f0000000180)={0x0, 0xf, 0x92, {0x92, 0x2, "d503722e7686c743a799e1cde0ce5fb5e7559e891d7f539f38fdac7e949b104edd77961c198a98c10de4cbacc71e12d0f56d44b5a773ade4ea1c775e45538754b2038ec04397b30cbad4b66b53071b327d499b08a1045ab5c0721c3da760fce269b32f58e8b09e79a965b1a34a5c31eb6f7586ab89249d2462617a6ee0c505881945972a344ed6308838207cf1b33bb0"}}, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000fe0303d304"], &(0x7f00000002c0), &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xe, 0x1, {0x22, 0x108}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x20, 0x15, 0xd1, "4e9c60644aa23f664393d6da85835282dbe4604486c620d85bb780f93901b15b57b3fb6ec778649150d271b6d4a216b968a08514076eeb78192acf909f251d49bce325168f88066d092a42a2fbc0ce1b9be1598645f6b2ee6be6cf23439d20965aeb1d2c52d484d18f2e7c134575348a793eae06e11b506b32ee36e8fe9c71eec9eeb25d610f73373f5ab79f416d39defcf2daf54e72efba4c882e2850f225f89fe6d1eccbfe523ac0afd3a69154ea392a56c77b895ea9262f887b4273fe7e7bbd223e6d11e4229cf890c430674021c70d"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xe6}, &(0x7f0000000900)=ANY=[@ANYBLOB="200125000000f451344201200a24b0fcffab6bf9b660360ed0f28c"], &(0x7f0000000940)={0x20, 0x3, 0x1, 0xcf}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x7ffe) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000080)=0xfffffffe) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x5, @private2, 0x3ff}}, 0x0, 0x0, 0x34, 0x0, "cebd090000000ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe18fe2df4ec8df9eb6a00003e2c3fcc250c30136f9ef2ef8b00"}, 0xd8) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r8}, 0x20) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f00000000c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x1a8, 0x110, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@empty, @local, 0xff, 0x0, 'veth0_to_batadv\x00', 'hsr0\x00', {0xff}, {0xff}, 0x5e, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x161}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 7.216481493s ago: executing program 2 (id=5751): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000500000009000100040000300000000080000000030a01030000000000000000050000000900010073797a300073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff0c00014000000001000000000800054000000000140000001100010000000000000000000000000a00000000000000"], 0xc8}}, 0x0) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x24008000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f0000000680)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x4, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00004d8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000007c0)="b9d20900000f320f01c4470fe31d27f80000360fc71c1755d6360f235a3e420f01df420f01d166400f6d790e0fc77f0f", 0x30}], 0x1, 0x22, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000906033e31442b0000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700060000000c000180080001400a0101010c00028008000140200000000c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6.300523489s ago: executing program 0 (id=5753): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) process_vm_readv(r5, &(0x7f0000000040)=[{&(0x7f0000000140)=""/55, 0x7ffff00a}, {&(0x7f0000006180)=""/152, 0x98}], 0x11, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/96, 0x7ffff04d}], 0x286, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = mq_open(0x0, 0x80, 0x14, &(0x7f0000000200)={0x6, 0x8, 0x2, 0xfffffffffffffffc}) pwritev2(r6, &(0x7f0000000500)=[{&(0x7f0000000240)="ca6aa2545aecdefcd889807a102d8f0527e3ebb8f288d59c58827c7c114b249f43dca44dc6fa81cfde84a00404357fc7c9d61b7961d1aa6f75cca63ef4b6723710bcc21350919386cbce3487bf74db6ae86d1112b68721ae618640c9c8af68cf4f3c37a66ce7dbac940928aedce14ccf5257e785c682443d60048deea026e53e450e8d670e84c2bbabff0dda811f74c75ed93a09fab3850111f8a95dc53f98f4687d17fff9140b0329cce53905f955984037c2ba426bb6c3ba0713d4a2fe5d92f89a905e1249a249859a0cfeb7c2c690f0e8454bff1daa6c85f2becdf428777471640be45d33a395", 0xe8}, {0x0}, {&(0x7f0000000440)="698590010a9feadc29f50b8cec6e5c4b8fc9e7a506852c74b93bfe5a6c", 0x1d}], 0x3, 0x2, 0x9, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r7 = gettid() gettid() tkill(r7, 0x1) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) 4.746206146s ago: executing program 3 (id=5759): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000a40)={0xcc49c02a495a20fa, 0x17, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240206000547ba07240106040210090582090004"], 0x0) 4.18145096s ago: executing program 6 (id=5760): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea220000"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x4404, 0x1ff, {0x77359400}, {0x2, 0xb, 0x0, 0x3, 0x9, 0x1, "2db907a7"}, 0x3, 0x3, {&(0x7f00000001c0)=[{0x805a, 0x5, {0x7}, 0x101}, {0x1b1b9064, 0x3, {0x9}, 0x94}]}, 0x1, 0x0, r8}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 3.978533997s ago: executing program 5 (id=5761): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x10, 0x0, {0x3, 0x9}, {0x350, 0x420002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x96, 0x3e, 0x7ffffcff, 0x3, 0x5}) 3.689233356s ago: executing program 5 (id=5762): r0 = socket(0x2a, 0x1, 0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r0, &(0x7f0000000100)="240000001a005f0214f9f407000904ff81000e9d0d53c5e6665cd971bfa1328e1f51ac67", 0x24) 3.193392838s ago: executing program 5 (id=5763): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x100d, 0x1a2d82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491e44e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x10002, 0x3, 0x15, 0xc, "e1c5be584875f9a3a8c3d21d4aed0888fd5bbc6482be0f77cd7c69344687c22d97bae414bddadaa37277c798331a9beae5f95599c89e8c9e4abd843f22651d53", "1de095496130c0f2d7e3adec074fcc6ef189d2e859a4a31a9afd00007eff3f1f", [0xffffffffffffb3bc, 0x3]}) 2.940630305s ago: executing program 5 (id=5764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002c0012800e00010069703667726574617000480318000280140007000000000000000000000000e9"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.740260649s ago: executing program 3 (id=5765): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x42867549e7881d7a) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendto(r0, &(0x7f0000000140)="0a9e1f7414c3e758a81de4cfbd97d00dced8268bdfc6c5e7fe67ac1af863b0f32abf40290af11ed4c1190ee0dacf8038a025be5bce936118f895cd6b5c4a02065ec8915b25793ed1860dc1b471f8d6b9ad8672f1eecb77f20b", 0x59, 0x20000000, &(0x7f0000000800)=@nfc_llcp={0x27, r2, 0x1, 0x4, 0x5, 0xee, "a87cb4a119d1c4c5884c53b8baa8e2f99cc7d480da0573f15fdcd0d18f420764d9e249009d058af5dd43f7172a606c7edab50796bc22cb2815877d2ce9c13a", 0x2e}, 0x80) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x27, 0x0, &(0x7f00000002c0)) fstat(r4, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x10000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, '\x00', "6b9c919fade1641b6bf478d18fd0b5ef", "82708d52"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, 0x0) r7 = fsmount(0xffffffffffffffff, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r7, 0xb3207000) r8 = inotify_init() r9 = inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x400017e) inotify_rm_watch(r8, r9) inotify_rm_watch(r7, r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000001900080029bd7000fedbdf250a100001fc00fe030008000008000600030000000800100003000000140005000000000000000000000000000000000108001900", @ANYRES32=r6, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0xd, @remote}, {0x1, @remote}, 0x10, {0x2, 0x4e20, @empty}, 'pimreg0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="004003000638000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="73c0790725e3f21c1bcedb431cc9e63cace04e93c593331f8e1128d33c70cb31f6645bc16c4e1c20796d6d4997d35484b4005318de5077448f4cf17e1bd88e658f346f0b72fbd78f242e657e60660664879bdb9dec774d048ef81f6cd9ebacf62065e4887c9c91ad0f4672b7d2c189ced2afebd4b9b9da88ecd59363ee2efb1b30166c65dd650907be8afb01ac47467e10208497195538e9ee47163e889ea4bbcfbc1e33137bb124be"], 0x3c}}, 0x0) 2.695073805s ago: executing program 5 (id=5766): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xf, {0x7, 0x2b, 0x1ff, 0x800000, 0x0, 0x26, 0xe9f, 0xefffffff, 0x0, 0x0, 0x10, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000008140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x1}}, 0x18) (async, rerun: 64) syz_clone(0x20041280, 0x0, 0x31, 0x0, 0x0, 0x0) (rerun: 64) 2.647627786s ago: executing program 0 (id=5767): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x40802, 0x74) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000040)="e4", 0x1, 0xa}]) sendmmsg$inet_sctp(r0, &(0x7f0000002400)=[{&(0x7f0000001dc0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002300)=[{&(0x7f0000001e00)="dd", 0x1}], 0x1, &(0x7f0000002380)=[@init={0x18, 0x84, 0x0, {0x1, 0x6, 0x5, 0x41f2}}], 0x18, 0x4008800}], 0x1, 0xc5) 2.356399783s ago: executing program 0 (id=5768): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x1ff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=ANY=[@ANYBLOB="300000001e008d2a00000100000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000200"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2.324173441s ago: executing program 5 (id=5769): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d000100000000090400"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000400)={0x0, 0x0, 0xac, "6388c0b1c39421d59e9caff43ca85d7b1c22df9a617204f0e02fd6eba28847944636692c4d5462eacc797f706f4b4c34a18bff12363a21b58af6f8583556106f45cdee6a73f4466996ffa40b740cbfc8f45824f47fd9efb0c152a37b781306286c25143732343f72f8dfdb5f7f0b0d001801ed834852fe742199e7eb42b3412fa1f1882bfea4858d754e03a1076f2e132103727260f9c1b1de9ff6aec0c885106a4b21297e612d190a9edd07"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x0, 0x9, 0x102, {0x102, 0x32, "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"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x20, 0xe, 0x8, "dcd2feb823608b5e"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000740)={0x20, 0x81, 0x3, "e21153"}, &(0x7f0000000780)={0x20, 0x82, 0x3, "f5c94a"}, &(0x7f00000007c0)={0x20, 0x83, 0x1, "c8"}, &(0x7f0000000800)={0x20, 0x84, 0x1, "c4"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "ea3769"}}) 2.294662252s ago: executing program 3 (id=5770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000013000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000015080003400000000a08000140000001090900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.228742238s ago: executing program 0 (id=5771): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) sendto$inet(r0, &(0x7f0000001300)="28ab7325b41c2160f707d71e3a751eb06f7b16d5fedeab796e76ad4ac2c3f3ee28ad30c10c81f2b82ad16962a519589cd45205f2dc39aacbdb6c469a373e2a5d1ea697dd23ed7b7dca", 0x49, 0x0, &(0x7f0000001380)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001740)={&(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xe0e0e0e0}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001280)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000001240)='net/udplite6\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r8, 0x805c6103, &(0x7f00000011c0)) 2.165215793s ago: executing program 3 (id=5772): close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept$unix(r1, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x52, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x880) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r6 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$rxrpc(r6, 0x0, 0x0) listen(r6, 0x4) close_range(r5, r6, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, 0x0) read$rfkill(r8, &(0x7f0000000440), 0x8) preadv(r8, 0x0, 0x0, 0x4, 0xfffff25a) sendmmsg$alg(r8, 0x0, 0x0, 0x4000001) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) 1.607931558s ago: executing program 2 (id=5773): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x1000b9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (rerun: 32) inotify_init() (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) (async) r2 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x80, 0x80800) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0xc, 0x0, 0x2dc9, 0x7, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000880)={r3, 0x8001}, &(0x7f00000008c0)=0x8) writev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000002900)="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", 0x182}], 0x1) (async) io_uring_enter(r1, 0x1a7c, 0x6933, 0x19, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (rerun: 32) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @loopback, @loopback}, &(0x7f00000004c0)=0xc) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf2501000000000000000b00fcff000c00f273797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x14c, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xfc00}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0x10}, {0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0xb, @sdr={0x36314d4e, 0x4}}) 1.344931335s ago: executing program 2 (id=5774): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x100d, 0x1a2d82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491e44e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x10002, 0x3, 0x15, 0xc, "e1c5be584875f9a3a8c3d21d4aed0888fd5bbc6482be0f77cd7c69344687c22d97bae414bddadaa37277c798331a9beae5f95599c89e8c9e4abd843f22651d53", "1de095496130c0f2d7e3adec074fcc6ef189d2e859a4a31a9afd00007fff3f1f", [0xffffffffffffb3bc, 0x3]}) 967.19086ms ago: executing program 2 (id=5775): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x102, 0x9, 0x100, "002daf47637cda9dc9f1f3a2c645122da80930470b873fa400", 0x31435750}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0xb, 0x8001, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0xce24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4c93}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) (async) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) (async) listen(r7, 0x4) (async) r8 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)={0x1000000d}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x9, 0x7, 0xb, 0x2, 0x3, 0xcd}, 0x9c) (async) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240000d4, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 231.887199ms ago: executing program 3 (id=5776): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002c0012800e00010069703667726574617000001218000280140007000000000000000000000000e9"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 133.746482ms ago: executing program 0 (id=5777): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0xfffffffed7fffffd, 0xffffffffffffffff, 0x0, 0x4, @ib={0x1b, 0xa, 0xf, {"7d56b3d05a73a4a800"}, 0x20000000000f, 0xfffffffffffffff6, 0x3}}}, 0xa0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d408000000000000611067000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 13.13485ms ago: executing program 3 (id=5778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000001c2c0e5ee1e9cf6820c6e80b5f00000a004e1f00000008ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e230000a807f68800000000000000000000000001010400"/261], 0x110) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000002d) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r0) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="777fc7ab003fb4f2da178ab8f8b8256d43faa9c4f19a993770fc6659637b0ad1a4de4d475177211f5e05803f28cf1766937e571c3c156739f3cf996a11882f3c15bff80c1e9421e9d7b9a5cf4f24fcc0af5c48b9df8ff9cafe3607e4eb343b970d59c86f335c76551bc36737529bfc06a674d1447a80deaee50c9c440fe7fa6151619c02529cddec069357c2dfc1ade2e24b83ff0a075cce3cc9d1cde52a3f19b5aff2baff7ba2eefc54a4f0cda5fa71aa54fa418b4783e6b977bc78129fd5a0e621ca7a07c0ba67f2e848b0b32cda7555af8035c95db7a2ab9274bf8965", 0xde, r5) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f000000000000000007000000300002"], 0x44}, 0x1, 0x0, 0x0, 0x4040c40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x80001, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000001c2c0e5ee1e9cf6820c6e80b5f00000a004e1f00000008ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e230000a807f68800000000000000000000000001010400"/261], 0x110) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) fcntl$notify(r2, 0x402, 0x8000002d) (async) getpgid(0x0) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r0) (async) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="777fc7ab003fb4f2da178ab8f8b8256d43faa9c4f19a993770fc6659637b0ad1a4de4d475177211f5e05803f28cf1766937e571c3c156739f3cf996a11882f3c15bff80c1e9421e9d7b9a5cf4f24fcc0af5c48b9df8ff9cafe3607e4eb343b970d59c86f335c76551bc36737529bfc06a674d1447a80deaee50c9c440fe7fa6151619c02529cddec069357c2dfc1ade2e24b83ff0a075cce3cc9d1cde52a3f19b5aff2baff7ba2eefc54a4f0cda5fa71aa54fa418b4783e6b977bc78129fd5a0e621ca7a07c0ba67f2e848b0b32cda7555af8035c95db7a2ab9274bf8965", 0xde, r5) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f000000000000000007000000300002"], 0x44}, 0x1, 0x0, 0x0, 0x4040c40}, 0x0) (async) 0s ago: executing program 0 (id=5779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x20400) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x40, 0x1000, 0x8, r0, 0x4}) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)={0x1c, 0x25, 0x109, 0x70bd22, 0xfffffffc, {0x60}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='H\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x20040000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes256, 0x1, @desc3}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e21, 0x4, 'lblcr\x00', 0x27, 0x204, 0x8}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e21, 0xffff, @loopback, 0x75}, r3}}, 0x38) kernel console output (not intermixed with test programs): 535:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f1ee339cdd9 code=0x7ffc0000 [ 1312.874343][T12791] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1312.892441][T12791] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1312.904803][ T29] audit: type=1326 audit(1777274641.535:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee339cdd9 code=0x7ffc0000 [ 1312.931202][T12791] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1312.941324][T12791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.954559][ T29] audit: type=1326 audit(1777274641.535:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee339cdd9 code=0x7ffc0000 [ 1312.988511][T23148] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1313.001695][T12791] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1313.030272][ T29] audit: type=1326 audit(1777274641.535:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.4.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1ee339cdd9 code=0x7ffc0000 [ 1313.230293][ T29] audit: type=1326 audit(1777274641.955:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23146 comm="syz.3.5360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f293439cdd9 code=0x0 [ 1313.353118][T12791] usb 4-1: USB disconnect, device number 127 [ 1313.396809][T15975] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1313.557397][T15975] usb 5-1: Using ep0 maxpacket: 16 [ 1313.573806][T15975] usb 5-1: config 0 has no interfaces? [ 1313.592779][T15975] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1313.637283][T15975] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1313.658906][T15975] usb 5-1: Manufacturer: syz [ 1313.671954][T15975] usb 5-1: config 0 descriptor?? [ 1313.751459][T23172] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:21 [ 1313.878273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.886615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.894853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.504304][T23160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.594177][T23160] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1315.383510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.597041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.704477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.712725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.720942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.042223][T23195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1316.161072][T23197] xt_hashlimit: size too large, truncated to 1048576 [ 1316.215425][T23201] xt_hashlimit: size too large, truncated to 1048576 [ 1316.230510][T23201] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 1316.516361][ T5709] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1316.539536][T23208] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5376'. [ 1316.666112][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 1316.678805][ T5709] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1316.696650][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.736683][ T5709] usb 3-1: config 0 descriptor?? [ 1316.781324][ T5709] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1316.846838][T20627] usb 5-1: USB disconnect, device number 70 [ 1316.935892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.944618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.056927][T10119] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1317.226291][T10119] usb 4-1: Using ep0 maxpacket: 8 [ 1317.241697][T10119] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1317.266042][T10119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.286166][T10119] usb 4-1: Product: syz [ 1317.290570][T10119] usb 4-1: Manufacturer: syz [ 1317.295230][T10119] usb 4-1: SerialNumber: syz [ 1317.317311][T10119] usb 4-1: config 0 descriptor?? [ 1317.355320][T23225] vlan0: entered allmulticast mode [ 1317.362663][T23225] bond0: entered allmulticast mode [ 1317.373109][T23225] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1317.535823][T10119] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1317.773591][ T5709] gspca_sunplus: reg_w_riv err -71 [ 1317.784642][ T5709] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1317.797328][ T5709] usb 3-1: USB disconnect, device number 59 [ 1317.798870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.906547][T20627] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1317.982007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.068521][T20627] usb 6-1: not running at top speed; connect to a high speed hub [ 1318.079612][T20627] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1318.094077][T20627] usb 6-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 1318.103660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.111826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.123110][T20627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.132165][T20627] usb 6-1: Product: syz [ 1318.136800][T20627] usb 6-1: Manufacturer: syz [ 1318.141529][T20627] usb 6-1: SerialNumber: syz [ 1318.353754][T23237] xt_hashlimit: size too large, truncated to 1048576 [ 1318.392921][T10119] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1318.594326][ T5709] usb 4-1: USB disconnect, device number 2 [ 1318.731043][T23247] fuse: Bad value for 'user_id' [ 1318.736399][T23247] fuse: Bad value for 'user_id' [ 1318.822767][T23248] fuse: Bad value for 'fd' [ 1318.876147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.121793][T23256] netlink: 'syz.2.5392': attribute type 3 has an invalid length. [ 1319.275723][T23264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5395'. [ 1319.398595][T23270] netlink: 'syz.3.5397': attribute type 1 has an invalid length. [ 1319.460652][T23271] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1319.542736][T23270] bond9: entered promiscuous mode [ 1319.559864][T23270] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1319.627799][T23273] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1319.648304][T23273] bond9: (slave vcan5): The slave device specified does not support setting the MAC address [ 1319.672369][T23273] bond9: (slave vcan5): Setting fail_over_mac to active for active-backup mode [ 1319.673299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.716505][T23273] bond9: (slave vcan5): making interface the new active one [ 1319.727403][T23282] blktrace: Concurrent blktraces are not allowed on sg0 [ 1319.734669][T23273] vcan5: entered promiscuous mode [ 1319.766284][T23273] bond9: (slave vcan5): Enslaving as an active interface with an up link [ 1319.862058][T23282] bridge0: left allmulticast mode [ 1319.916602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.947152][ T5749] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1320.106418][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 1320.118882][ T5749] usb 5-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 1320.132479][ T5749] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1320.142338][ T5749] usb 5-1: too many endpoints for config 1 interface 0 altsetting 56: 47, using maximum allowed: 30 [ 1320.155891][ T5749] usb 5-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 1320.171909][ T5749] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1320.186555][ T5749] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1320.196168][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.204488][ T5749] usb 5-1: Product: syz [ 1320.209641][ T5749] usb 5-1: Manufacturer: syz [ 1320.214659][ T5749] usb 5-1: SerialNumber: syz [ 1320.224072][T23287] xt_hashlimit: size too large, truncated to 1048576 [ 1320.773096][T20627] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1320.825219][T20627] usb 6-1: unit 94 not found! [ 1321.016421][T20627] usb 6-1: USB disconnect, device number 87 [ 1321.143126][ T6263] udevd[6263]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.936529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.410146][T23308] netlink: 'syz.0.5408': attribute type 1 has an invalid length. [ 1322.642159][T23308] bond9: entered promiscuous mode [ 1322.674159][T23308] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1322.737464][ T5749] usb 5-1: USB disconnect, device number 71 [ 1322.801501][T23309] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1322.825140][T23309] bond9: (slave vcan7): The slave device specified does not support setting the MAC address [ 1322.842088][T23309] bond9: (slave vcan7): Setting fail_over_mac to active for active-backup mode [ 1322.865323][T23309] bond9: (slave vcan7): making interface the new active one [ 1322.886795][T23309] vcan7: entered promiscuous mode [ 1322.898097][T23309] bond9: (slave vcan7): Enslaving as an active interface with an up link [ 1322.914397][T23312] tipc: Enabling of bearer rejected, already enabled [ 1323.056620][T20627] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1323.256543][T20627] usb 6-1: Using ep0 maxpacket: 8 [ 1323.279331][T20627] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1323.280357][T20627] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1323.283768][T20627] usb 6-1: string descriptor 0 read error: -22 [ 1323.283862][T20627] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1323.283892][T20627] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1323.295657][T20627] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1323.318358][T20627] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1323.319077][T20627] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1323.319132][T20627] usb 6-1: media controller created [ 1323.375297][T20627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1323.810630][T20627] zl10353_read_register: readreg error (reg=127, ret==0) [ 1323.911429][T23348] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1323.952171][ T29] audit: type=1326 audit(1777274652.665:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1323.979541][T20627] usb 6-1: USB disconnect, device number 88 [ 1324.051998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.060299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.068569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.076794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.155627][ T29] audit: type=1326 audit(1777274652.665:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.253687][ T29] audit: type=1326 audit(1777274652.745:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.307138][ T29] audit: type=1326 audit(1777274652.745:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.359009][ T29] audit: type=1326 audit(1777274652.755:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.381911][T12791] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1324.433909][ T29] audit: type=1326 audit(1777274652.755:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.514548][ T29] audit: type=1326 audit(1777274652.755:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.578011][T12791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.612441][T12791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.639732][ T29] audit: type=1326 audit(1777274652.765:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.692727][T12791] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1324.722548][T12791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.766657][ T29] audit: type=1326 audit(1777274652.765:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1324.791532][T12791] usb 5-1: config 0 descriptor?? [ 1324.795410][ T29] audit: type=1326 audit(1777274652.765:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.5.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1325.262265][T12791] hid_parser_main: 102 callbacks suppressed [ 1325.262290][T12791] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 1325.330454][T12791] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 1325.373765][T12791] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 1325.398859][T12791] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 1325.459093][T12791] playstation 0003:054C:0DF2.0038: unknown main item tag 0x0 [ 1325.491651][T12791] playstation 0003:054C:0DF2.0038: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1325.661149][T23365] tipc: Enabled bearer , priority 0 [ 1325.695028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.708545][T23366] syzkaller0: entered promiscuous mode [ 1325.738000][T23366] syzkaller0: entered allmulticast mode [ 1325.809679][T23350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.827219][T23350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.874503][T23366] syzkaller0: mtu greater than device maximum [ 1325.908008][T23364] tipc: Resetting bearer [ 1326.024077][T23364] tipc: Disabling bearer [ 1326.379996][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1326.733340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.741595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.841401][T12791] playstation 0003:054C:0DF2.0038: Failed to retrieve feature with reportID 32: -71 [ 1326.868659][T12791] playstation 0003:054C:0DF2.0038: Failed to retrieve DualSense firmware info: -71 [ 1326.903253][T12791] playstation 0003:054C:0DF2.0038: Failed to get firmware info from DualSense [ 1326.923101][T12791] playstation 0003:054C:0DF2.0038: Failed to create dualsense. [ 1326.953068][T12791] playstation 0003:054C:0DF2.0038: probe with driver playstation failed with error -71 [ 1327.073303][T12791] usb 5-1: USB disconnect, device number 72 [ 1327.586454][T20627] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1327.686295][ T5709] usb 5-1: reset high-speed USB device number 72 using dummy_hcd [ 1327.752969][T20627] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.767688][T20627] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1327.788838][T20627] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1327.806091][T20627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1327.814957][T20627] usb 6-1: SerialNumber: syz [ 1328.108120][T20627] usb 6-1: 0:2 : does not exist [ 1328.249048][T20627] usb 6-1: USB disconnect, device number 89 [ 1328.306854][T12791] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1328.327206][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.512237][T12791] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 1328.542784][T12791] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1328.561156][T12791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.569532][T12791] usb 5-1: Product: syz [ 1328.573794][T12791] usb 5-1: Manufacturer: syz [ 1328.580299][T12791] usb 5-1: SerialNumber: syz [ 1328.610005][T12791] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1328.641621][ T5709] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1328.843305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.851632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.859890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.868120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.996457][T15975] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1329.733212][T12791] usb 5-1: USB disconnect, device number 73 [ 1329.759834][ T5709] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1329.767093][T15975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.777841][ T5709] ath9k_htc: Failed to initialize the device [ 1329.793873][T15975] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1329.818346][T15975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.845704][T12791] usb 5-1: ath9k_htc: USB layer deinitialized [ 1329.865393][T15975] usb 4-1: Product: syz [ 1329.881915][T15975] usb 4-1: Manufacturer: syz [ 1329.902728][T15975] usb 4-1: SerialNumber: syz [ 1329.936936][T15975] usb 4-1: config 0 descriptor?? [ 1329.985454][T15975] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1330.061790][T15975] dvb-usb: bulk message failed: -22 (3/0) [ 1330.113966][T15975] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1330.234013][T15975] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1330.253820][T23424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.262593][T15975] usb 4-1: media controller created [ 1330.292236][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1330.292254][ T29] audit: type=1400 audit(1777274659.015:1484): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=23449 comm="syz.5.5451" [ 1330.326744][T15975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1330.394461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.499627][T23455] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1330.542116][T15975] dvb-usb: bulk message failed: -22 (6/0) [ 1330.563245][T15975] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1330.580808][T15975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input217 [ 1330.609898][T15975] dvb-usb: schedule remote query interval to 150 msecs. [ 1330.653021][T15975] dvb-usb: bulk message failed: -22 (3/0) [ 1330.713148][T15975] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1330.806057][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1330.831495][T23424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.852288][ T9] dvb-usb: error while querying for an remote control event. [ 1331.066806][T12791] dvb-usb: bulk message failed: -22 (1/0) [ 1331.105781][T12791] dvb-usb: error while querying for an remote control event. [ 1331.306074][T12791] dvb-usb: bulk message failed: -22 (1/0) [ 1331.317078][T12791] dvb-usb: error while querying for an remote control event. [ 1331.498901][T12791] dvb-usb: bulk message failed: -22 (1/0) [ 1331.527825][T12791] dvb-usb: error while querying for an remote control event. [ 1331.718853][T12791] dvb-usb: bulk message failed: -22 (1/0) [ 1331.731699][T12791] dvb-usb: error while querying for an remote control event. [ 1331.861359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.869573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.936419][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1331.950982][ T9] dvb-usb: error while querying for an remote control event. [ 1332.156483][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1332.162836][ T9] dvb-usb: error while querying for an remote control event. [ 1332.356257][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1332.369137][ T9] dvb-usb: error while querying for an remote control event. [ 1332.566469][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1332.586097][ T9] dvb-usb: error while querying for an remote control event. [ 1332.621238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.710485][ T9] usb 4-1: USB disconnect, device number 3 [ 1332.803047][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1332.971486][T23475] xt_hashlimit: size too large, truncated to 1048576 [ 1333.236796][T12791] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1333.318219][T23485] FAULT_INJECTION: forcing a failure. [ 1333.318219][T23485] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.332276][T23485] CPU: 0 UID: 0 PID: 23485 Comm: syz.3.5462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.332299][T23485] Tainted: [L]=SOFTLOCKUP [ 1333.332304][T23485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1333.332313][T23485] Call Trace: [ 1333.332319][T23485] [ 1333.332325][T23485] dump_stack_lvl+0xe8/0x150 [ 1333.332364][T23485] should_fail_ex+0x412/0x560 [ 1333.332398][T23485] should_failslab+0xa8/0x100 [ 1333.332434][T23485] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1333.332453][T23485] ? __alloc_skb+0x186/0x7d0 [ 1333.332473][T23485] ? __alloc_skb+0x1d0/0x7d0 [ 1333.332487][T23485] ? __local_bh_enable_ip+0xd0/0x130 [ 1333.332522][T23485] __alloc_skb+0x1d0/0x7d0 [ 1333.332543][T23485] netlink_sendmsg+0x5d4/0xb40 [ 1333.332569][T23485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.332597][T23485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1333.332618][T23485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1333.332642][T23485] ____sys_sendmsg+0x972/0x9f0 [ 1333.332662][T23485] ? __might_fault+0xaf/0x130 [ 1333.332687][T23485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.332713][T23485] ? import_iovec+0x73/0xa0 [ 1333.332737][T23485] ___sys_sendmsg+0x2a5/0x360 [ 1333.332755][T23485] ? __lock_acquire+0x6b5/0x2cf0 [ 1333.332774][T23485] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.332818][T23485] ? __fget_files+0x2a/0x420 [ 1333.332838][T23485] ? __fget_files+0x3a0/0x420 [ 1333.332862][T23485] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1333.332884][T23485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1333.332910][T23485] ? __pfx_ksys_write+0x10/0x10 [ 1333.332938][T23485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.332955][T23485] do_syscall_64+0x15f/0xf80 [ 1333.332972][T23485] ? trace_irq_disable+0x3b/0x140 [ 1333.332995][T23485] ? clear_bhb_loop+0x40/0x90 [ 1333.333034][T23485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.333056][T23485] RIP: 0033:0x7f293439cdd9 [ 1333.333078][T23485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.333097][T23485] RSP: 002b:00007f29351ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.333114][T23485] RAX: ffffffffffffffda RBX: 00007f2934615fa0 RCX: 00007f293439cdd9 [ 1333.333126][T23485] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 1333.333137][T23485] RBP: 00007f29351ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.333147][T23485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.333156][T23485] R13: 00007f2934616038 R14: 00007f2934615fa0 R15: 00007f293473fa48 [ 1333.333192][T23485] [ 1333.443914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.496183][T12791] usb 3-1: Using ep0 maxpacket: 16 [ 1333.603736][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1333.630588][T12791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.642742][T12791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.653133][T12791] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1333.663685][ T5709] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1333.672250][T12791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.688155][T12791] usb 3-1: config 0 descriptor?? [ 1333.768118][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1333.777397][T23489] loop9: detected capacity change from 0 to 524287871 [ 1333.782898][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1333.801704][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1333.829667][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.844673][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1333.856464][ T9] usb 5-1: Product: syz [ 1333.858146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.865149][ T9] usb 5-1: Manufacturer: syz [ 1333.868930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.868955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.894305][ T9] usb 5-1: SerialNumber: syz [ 1333.903270][ T5709] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1333.915778][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.931098][ T5709] usb 6-1: Product: syz [ 1333.935533][ T5709] usb 6-1: Manufacturer: syz [ 1333.955543][ T9] usb 5-1: config 0 descriptor?? [ 1333.961079][ T5709] usb 6-1: SerialNumber: syz [ 1333.984814][ T9] usb 5-1: selecting invalid altsetting 0 [ 1334.150762][T12791] usbhid 3-1:0.0: can't add hid device: -71 [ 1334.162146][T12791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1334.212056][T12791] usb 3-1: USB disconnect, device number 60 [ 1334.213463][T23483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.252436][T23494] netlink: 'syz.3.5466': attribute type 1 has an invalid length. [ 1334.263736][T23483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.282538][ T5709] usb 6-1: No union descriptors [ 1334.290559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.337599][ T5709] usb 6-1: USB disconnect, device number 90 [ 1334.402109][T23494] bond10: entered promiscuous mode [ 1334.417637][T23494] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1334.447971][ T5722] usb 5-1: USB disconnect, device number 75 [ 1334.476206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.488654][T23496] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1334.515444][T23496] bond10: (slave vcan6): The slave device specified does not support setting the MAC address [ 1334.560949][T23496] bond10: (slave vcan6): Setting fail_over_mac to active for active-backup mode [ 1334.597521][T23496] bond10: (slave vcan6): making interface the new active one [ 1334.614331][T23496] vcan6: entered promiscuous mode [ 1334.629344][T23496] bond10: (slave vcan6): Enslaving as an active interface with an up link [ 1334.836083][ T5709] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1334.881731][T23503] tipc: Enabled bearer , priority 0 [ 1334.903725][T23503] syzkaller0: entered promiscuous mode [ 1334.920714][T23503] syzkaller0: entered allmulticast mode [ 1334.997723][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 1335.005824][T23503] tipc: Resetting bearer [ 1335.016407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.026858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.036764][ T5709] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 1335.061891][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.072548][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.091420][ T5709] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.109818][ T5709] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1335.126094][ T5709] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1335.138979][ T5709] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1335.147355][T23501] tipc: Resetting bearer [ 1335.160453][ T5709] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1335.171683][ T5709] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1335.198928][ T5709] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1335.209215][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.226892][ T5709] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 1335.288840][T23501] tipc: Disabling bearer [ 1335.440064][ T5722] usb 6-1: USB disconnect, device number 91 [ 1335.459929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.483218][T23509] sctp: [Deprecated]: syz.3.5469 (pid 23509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1335.483218][T23509] Use struct sctp_sack_info instead [ 1335.709860][T23513] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 23513 comm: syz.2.5470) [ 1335.729440][ T29] audit: type=1800 audit(1777274664.455:1485): pid=23513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5470" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=101762 res=0 errno=0 [ 1336.446064][T12791] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1336.649119][T12791] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1336.695228][T12791] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1336.738543][T12791] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1336.792773][T12791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1336.854692][T12791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1336.886338][T12791] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1336.917949][T12791] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1336.955127][T12791] usb 6-1: Product: syz [ 1336.966515][T12791] usb 6-1: Manufacturer: syz [ 1337.005817][T12791] cdc_wdm 6-1:1.0: skipping garbage [ 1337.025275][T12791] cdc_wdm 6-1:1.0: skipping garbage [ 1337.070307][T12791] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1337.094798][T12791] cdc_wdm 6-1:1.0: Unknown control protocol [ 1337.303512][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.310502][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.317990][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.324624][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.331494][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.338123][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.345337][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.351961][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.358954][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.365554][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.371929][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.378539][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.384822][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.391418][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.397710][ T5749] usb 6-1: USB disconnect, device number 92 [ 1337.403946][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1337.403963][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1337.403975][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1337.621317][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5472'. [ 1337.686076][ T5722] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1337.800595][T23532] netlink: 'syz.3.5474': attribute type 3 has an invalid length. [ 1337.886008][ T5722] usb 5-1: Using ep0 maxpacket: 32 [ 1337.904418][ T5722] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1337.936944][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.988810][ T5722] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1338.518957][T23546] binder: transaction release 290 bad handle 1, ret = -22 [ 1338.596593][ T5749] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1338.761619][ T5749] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1338.785433][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.813253][ T5749] usb 4-1: Product: syz [ 1338.826111][ T5749] usb 4-1: Manufacturer: syz [ 1338.840049][ T5749] usb 4-1: SerialNumber: syz [ 1338.873461][ T5749] usb 4-1: config 0 descriptor?? [ 1338.891787][ T5749] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1338.966061][ T5709] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1338.988250][T23531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.026477][T23531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.160065][ T5709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.189180][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1339.238758][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1339.261098][ T5722] gspca_nw80x: reg_r err -71 [ 1339.286303][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1339.296851][ T5722] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1339.332189][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1339.374918][ T5722] usb 5-1: USB disconnect, device number 76 [ 1339.406381][ T5709] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1339.432400][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1339.463324][ T5709] usb 6-1: Product: syz [ 1339.475140][ T5709] usb 6-1: Manufacturer: syz [ 1339.493285][ T5709] usb 6-1: SerialNumber: syz [ 1339.540792][ T5709] usb 6-1: config 0 descriptor?? [ 1339.698581][ T5749] gspca_stk1135: reg_w 0xf err -71 [ 1339.717239][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1339.738672][ T5749] gspca_stk1135: Sensor write failed [ 1339.772138][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1339.800981][ T5709] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1339.805738][ T5749] gspca_stk1135: Sensor write failed [ 1339.834860][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1339.835851][ T5709] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1339.864048][ C1] net_ratelimit: 2 callbacks suppressed [ 1339.864061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.904657][ T5749] gspca_stk1135: Sensor read failed [ 1339.939522][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1339.964136][ T5749] gspca_stk1135: Sensor read failed [ 1339.980866][ T5749] gspca_stk1135: Detected sensor type unknown (0x0) [ 1340.018024][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1340.039751][ T5749] gspca_stk1135: Sensor read failed [ 1340.060760][ T5709] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1340.073800][T23563] loop6: detected capacity change from 0 to 2640 [ 1340.095762][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1340.119247][T23563] buffer_io_error: 11 callbacks suppressed [ 1340.119265][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.120379][ T5709] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1340.154873][ T5749] gspca_stk1135: Sensor read failed [ 1340.163407][ T5709] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1340.194329][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.202801][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1340.232329][ T5749] gspca_stk1135: Sensor write failed [ 1340.242339][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.267614][ T5749] gspca_stk1135: serial bus timeout: status=0x00 [ 1340.274171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.292283][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.324832][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.342093][ T5749] gspca_stk1135: Sensor write failed [ 1340.364359][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.373782][ T5749] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1340.406605][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.434790][ T5749] usb 4-1: USB disconnect, device number 4 [ 1340.454900][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.486694][T23563] ldm_validate_partition_table(): Disk read failed. [ 1340.512566][ T5709] usb 6-1: USB disconnect, device number 93 [ 1340.541578][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.594534][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1340.634916][T23563] Dev loop6: unable to read RDB block 0 [ 1340.672479][T23563] loop6: unable to read partition table [ 1340.687170][T23563] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1341.059682][T23576] netlink: 'syz.0.5487': attribute type 1 has an invalid length. [ 1341.068444][T23575] netlink: 'syz.0.5487': attribute type 1 has an invalid length. [ 1341.091598][T23575] program syz.0.5487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1341.101196][T23576] program syz.0.5487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1341.140723][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5488'. [ 1341.178742][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5488'. [ 1341.283301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.400604][T23586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5489'. [ 1341.429603][T23586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5489'. [ 1341.469340][T23587] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1341.549736][T23586] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 1341.636521][T23586] netlink: 'syz.5.5489': attribute type 1 has an invalid length. [ 1341.660012][T23586] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1342.886362][ T5749] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1343.046071][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 1343.061870][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.088635][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.112277][ T5749] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1343.121706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.165634][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.214679][ T5749] usb 3-1: config 0 descriptor?? [ 1343.266311][ T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1343.338842][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5499'. [ 1343.429542][ T9] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.456900][ T9] usb 6-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 1343.472029][ T9] usb 6-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 1343.494453][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 1343.525102][ T9] usb 6-1: SerialNumber: syz [ 1343.691914][ T5749] usbhid 3-1:0.0: can't add hid device: -71 [ 1343.715795][ T5749] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1343.746748][ T5749] usb 3-1: USB disconnect, device number 61 [ 1343.768721][ T9] usb 6-1: USB disconnect, device number 94 [ 1344.260382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.268684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.276942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.342874][T23629] ªªªªªª: renamed from vlan0 [ 1344.381875][T23629] CIFS: VFS: UNC: path must begin with // or \\ [ 1344.389689][T23629] CIFS: VFS: Malformed UNC in devname [ 1344.416311][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1344.500222][T23632] tipc: Enabled bearer , priority 0 [ 1344.520178][T23632] syzkaller0: entered promiscuous mode [ 1344.532010][T23632] syzkaller0: entered allmulticast mode [ 1344.574041][T23632] syzkaller0: mtu less than device minimum [ 1344.582849][T23630] tipc: Resetting bearer [ 1344.589047][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1344.601858][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1344.613708][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.655608][ T9] usb 5-1: Product: syz [ 1344.661064][ T9] usb 5-1: Manufacturer: syz [ 1344.666155][ T9] usb 5-1: SerialNumber: syz [ 1344.672144][T23630] tipc: Disabling bearer [ 1344.681456][ T9] usb 5-1: config 0 descriptor?? [ 1344.776373][ T5749] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1344.938620][ T5749] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1344.972274][ T5749] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 1344.983455][ T5749] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1344.994437][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.004664][T23650] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5512'. [ 1345.018368][ T5749] usb 3-1: config 0 descriptor?? [ 1345.024743][T23633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1345.036270][ T5709] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1345.114115][ T9] airspy 5-1:0.0: Board ID: 00 [ 1345.121138][ T9] airspy 5-1:0.0: Firmware version: [ 1345.216376][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 1345.231637][ T5709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.242102][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.255338][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.265346][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1345.283682][ T5709] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1345.286822][ T5749] ath6kl: Failed to submit usb control message: -71 [ 1345.314149][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.328483][ T9] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 1345.343321][ T5709] usb 6-1: config 0 descriptor?? [ 1345.348644][ T5749] ath6kl: unable to send the bmi data to the device: -71 [ 1345.361537][ T5749] ath6kl: Unable to send get target info: -71 [ 1345.368636][ T5722] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1345.383871][ T9] airspy 5-1:0.0: Registered as swradio24 [ 1345.395468][ T5749] ath6kl: Failed to init ath6kl core: -71 [ 1345.427615][ T9] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1345.448862][ T5749] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1345.490780][ T9] usb 5-1: USB disconnect, device number 77 [ 1345.527880][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 1345.539135][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.555595][ T5722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.579455][ T5722] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1345.590586][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.612652][ T5749] usb 3-1: USB disconnect, device number 62 [ 1345.632065][ T5709] usbhid 6-1:0.0: can't add hid device: -71 [ 1345.652208][ T5722] usb 4-1: config 0 descriptor?? [ 1345.674024][ T5709] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1345.735157][ T5709] usb 6-1: USB disconnect, device number 95 [ 1346.078372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.086723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.096172][ T5709] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1346.107165][ T5722] usbhid 4-1:0.0: can't add hid device: -71 [ 1346.129902][ T5722] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1346.185715][ T5722] usb 4-1: USB disconnect, device number 5 [ 1346.297972][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 1346.318924][ T5709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.344479][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.375804][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.387704][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1346.408746][ T5709] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1346.420934][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.449303][ T5709] usb 6-1: config 0 descriptor?? [ 1346.493209][T23672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5518'. [ 1346.662198][T23659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.689669][T23659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.798360][ T5709] usbhid 6-1:0.0: can't add hid device: -71 [ 1346.829676][ T5709] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1346.873618][ T5709] usb 6-1: USB disconnect, device number 96 [ 1347.114886][T23684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5523'. [ 1347.331903][T23688] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5524'. [ 1347.784897][T23705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5529'. [ 1347.796241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.966298][T23707] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5531'. [ 1347.997004][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1348.156747][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1348.171561][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.201096][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.212595][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1348.224867][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.250708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.259054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.288010][ T9] usb 3-1: config 0 descriptor?? [ 1348.446174][ T5709] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1348.628268][ T5709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.659138][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1348.703042][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1348.731710][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1348.745292][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1348.761429][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1348.785545][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1348.806984][ T9] usb 3-1: USB disconnect, device number 63 [ 1348.839763][ T5709] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1348.855452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.873503][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1348.905971][ T5709] usb 6-1: Product: syz [ 1348.917450][ T5709] usb 6-1: Manufacturer: syz [ 1348.928048][ T5709] usb 6-1: SerialNumber: syz [ 1348.943768][ T5709] usb 6-1: config 0 descriptor?? [ 1349.168214][ T5709] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1349.189797][ T5709] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1349.370518][ T5709] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1349.382914][ T5709] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1349.393556][ T5709] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1349.609106][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5537'. [ 1349.633071][ T5709] usb 6-1: USB disconnect, device number 97 [ 1349.976407][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1350.136236][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1350.143737][ T24] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1350.157243][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.191313][ T24] usb 5-1: config 0 descriptor?? [ 1350.212375][ T24] as10x_usb: device has been detected [ 1350.241171][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1350.294768][ T24] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1350.345500][ T24] as10x_usb: error during firmware upload part1 [ 1350.370317][ T24] Registered device nBox DVB-T Dongle [ 1350.425680][ T5722] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1350.585611][ T29] audit: type=1326 audit(1777274679.305:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.614747][ T29] audit: type=1326 audit(1777274679.305:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.643307][ T29] audit: type=1326 audit(1777274679.335:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.668201][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1350.680480][ T5722] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1350.691315][ T29] audit: type=1326 audit(1777274679.335:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.714730][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1350.723657][ T5722] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1350.739116][ T5722] usb 4-1: config 1 has no interface number 0 [ 1350.745443][ T5722] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1350.757609][ T29] audit: type=1326 audit(1777274679.335:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.780963][ T5722] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 145, using maximum allowed: 30 [ 1350.793204][ T5722] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 145 [ 1350.821875][ T29] audit: type=1326 audit(1777274679.335:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.845686][ T29] audit: type=1326 audit(1777274679.335:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.871283][ T5722] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1350.881487][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.892150][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1350.902730][ T5722] usb 4-1: Product: syz [ 1350.908387][ T5722] usb 4-1: Manufacturer: syz [ 1350.913528][ T5722] usb 4-1: SerialNumber: syz [ 1350.918823][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.930273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.930308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.930328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.956681][ T29] audit: type=1326 audit(1777274679.335:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1350.984131][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.995474][ T29] audit: type=1326 audit(1777274679.335:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1351.022482][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1351.032558][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.042357][ T29] audit: type=1326 audit(1777274679.335:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.5547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00659cdd9 code=0x7ffc0000 [ 1351.088400][ T24] usb 3-1: config 0 descriptor?? [ 1351.326553][ T5709] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1351.476137][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 1351.484221][ T5709] usb 6-1: config 4 has an invalid interface number: 199 but max is 2 [ 1351.492917][ T5709] usb 6-1: config 4 has an invalid interface number: 8 but max is 2 [ 1351.501164][ T5709] usb 6-1: config 4 has an invalid interface number: 56 but max is 2 [ 1351.509681][ T5709] usb 6-1: config 4 has no interface number 0 [ 1351.515992][ T5709] usb 6-1: config 4 has no interface number 1 [ 1351.522230][ T5709] usb 6-1: config 4 has no interface number 2 [ 1351.533357][ T5709] usb 6-1: config 4 interface 199 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1351.544492][ T5709] usb 6-1: config 4 interface 199 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1351.556041][ T5709] usb 6-1: config 4 interface 199 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1351.560987][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1351.567008][ T5709] usb 6-1: config 4 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1351.567032][ T5709] usb 6-1: config 4 interface 8 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1351.567052][ T5709] usb 6-1: config 4 interface 199 has no altsetting 0 [ 1351.567072][ T5709] usb 6-1: config 4 interface 8 has no altsetting 0 [ 1351.567089][ T5709] usb 6-1: config 4 interface 56 has no altsetting 0 [ 1351.581416][ T5709] usb 6-1: New USB device found, idVendor=0456, idProduct=f001, bcdDevice= e.d5 [ 1351.609044][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1351.624366][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.643596][ T24] usb 3-1: USB disconnect, device number 64 [ 1351.651968][ T5709] usb 6-1: Product: syz [ 1351.660671][ T5709] usb 6-1: Manufacturer: syz [ 1351.665430][ T5709] usb 6-1: SerialNumber: syz [ 1351.897195][T23750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.913936][T23750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.971307][ T5709] usb 6-1: USB disconnect, device number 98 [ 1352.056752][T23753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5549'. [ 1352.125111][T23757] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5550'. [ 1352.322710][T23761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.331972][T23761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.745454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.753837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.776945][T23770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5554'. [ 1353.175126][ T5722] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 1353.184883][ T5722] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1353.217995][ T5722] usb 4-1: USB disconnect, device number 6 [ 1353.616306][T23779] blktrace: Concurrent blktraces are not allowed on sg0 [ 1353.766253][ T5709] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1353.920488][ T5709] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1353.949485][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1353.977836][ T5709] usb 4-1: New USB device found, idVendor=0e41, idProduct=4147, bcdDevice= 0.40 [ 1354.007846][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.033184][ T5709] usb 4-1: Product: syz [ 1354.050402][ T5709] usb 4-1: Manufacturer: syz [ 1354.069480][ T5709] usb 4-1: SerialNumber: syz [ 1354.123279][T23785] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5560'. [ 1354.138881][T23785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.322817][ T5709] usb 4-1: 0:1 : does not exist [ 1354.337530][ T5709] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 1354.428663][ T5709] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1354.450110][ T5709] snd_usb_toneport 4-1:1.0: Line 6 TonePort GX found [ 1354.468528][ T5709] usb 4-1: selecting invalid altsetting 2 [ 1354.484171][ T5709] snd_usb_toneport 4-1:1.0: set_interface failed [ 1354.499428][ T5709] snd_usb_toneport 4-1:1.0: Line 6 TonePort GX now disconnected [ 1354.516033][ T5722] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1354.524517][ T5709] snd_usb_toneport 4-1:1.0: probe with driver snd_usb_toneport failed with error -22 [ 1354.556250][ T5709] usb 4-1: USB disconnect, device number 7 [ 1354.599007][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1354.626435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.716807][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 1354.728231][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.752486][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.772079][ T5722] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1354.787120][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.803280][ T5722] usb 6-1: config 0 descriptor?? [ 1355.191044][T20262] tipc: Resetting bearer [ 1355.278895][T20262] tipc: Disabling bearer [ 1355.291285][ T5722] usbhid 6-1:0.0: can't add hid device: -71 [ 1355.323623][ T5722] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1355.375720][ T5722] usb 6-1: USB disconnect, device number 99 [ 1355.480458][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1355.493095][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1355.509550][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1355.527902][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1355.537670][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1355.574196][T23793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.619944][T10327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1355.628701][T10327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1355.638749][T10327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1355.661503][T23793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.675711][T10327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1355.693782][T10327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1356.189528][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.351631][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.373500][T23796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.381395][T23796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.389122][T23796] bridge_slave_0: entered allmulticast mode [ 1356.397182][T23796] bridge_slave_0: entered promiscuous mode [ 1356.405619][T23796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.415412][T23796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.422808][T23796] bridge_slave_1: entered allmulticast mode [ 1356.430726][T23796] bridge_slave_1: entered promiscuous mode [ 1356.507920][ T12] bond0: (slave netdevsim1): Releasing backup interface [ 1356.529263][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.560667][T23796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.574427][T23796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.709657][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.745010][T23816] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1356.761886][T23814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.778723][T23796] team0: Port device team_slave_0 added [ 1356.805069][T23796] team0: Port device team_slave_1 added [ 1356.938209][T23814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.965885][T23814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.991188][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5571'. [ 1357.011709][T23796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.018835][T23796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.070300][T23796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.197464][T23796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.204665][T23796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.256402][T23796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.427979][T23796] hsr_slave_0: entered promiscuous mode [ 1357.447524][T23796] hsr_slave_1: entered promiscuous mode [ 1357.467143][T23796] debugfs: 'hsr0' already exists in 'hsr' [ 1357.482277][T23796] Cannot create hsr debugfs directory [ 1357.487981][ T5709] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1357.664083][ T5709] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1357.757340][T10327] Bluetooth: hci4: command tx timeout [ 1357.900705][ T5709] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.957679][ T5709] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1358.025792][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.083226][ T5709] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1358.118444][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1358.149313][ T5709] usb 6-1: Product: syz [ 1358.166172][T10119] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1358.188155][ T5709] usb 6-1: Manufacturer: syz [ 1358.228455][ T5709] cdc_wdm 6-1:1.0: skipping garbage [ 1358.259225][ T5709] cdc_wdm 6-1:1.0: skipping garbage [ 1358.283572][ T5709] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1358.359284][T10119] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1358.420618][T10119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.472957][T10119] usb 3-1: config 0 descriptor?? [ 1358.509849][T10119] cp210x 3-1:0.0: cp210x converter detected [ 1358.673330][ T5709] usb 6-1: USB disconnect, device number 100 [ 1358.871362][ T12] dvmrp0: left allmulticast mode [ 1358.905836][T10119] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1359.163364][T10119] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1359.837079][T10327] Bluetooth: hci4: command tx timeout [ 1360.569619][T23855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.604063][T23855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.770669][T10119] usb 3-1: USB disconnect, device number 65 [ 1360.820053][ T12] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 1360.834014][T10119] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1360.875320][T10119] cp210x 3-1:0.0: device disconnected [ 1360.959308][ T12] bond0 (unregistering): Released all slaves [ 1361.000075][ T12] bond1 (unregistering): Released all slaves [ 1361.039936][ T12] bond2 (unregistering): Released all slaves [ 1361.047799][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1361.099045][ T12] bond3 (unregistering): (slave vcan0): Releasing backup interface [ 1361.112749][ T12] vcan0: left promiscuous mode [ 1361.127681][ T12] bond3 (unregistering): Released all slaves [ 1361.165878][ T12] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 1361.181862][ T12] vcan1: left promiscuous mode [ 1361.189816][ T12] bond4 (unregistering): Released all slaves [ 1361.231236][ T12] bond5 (unregistering): (slave vcan2): Releasing backup interface [ 1361.254088][ T12] vcan2: left promiscuous mode [ 1361.272370][ T12] bond5 (unregistering): Released all slaves [ 1361.283915][T23869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5580'. [ 1361.326154][ T9] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1361.375783][ T12] bond6 (unregistering): (slave vcan3): Releasing backup interface [ 1361.388908][ T12] vcan3: left promiscuous mode [ 1361.403974][ T12] bond6 (unregistering): Released all slaves [ 1361.464634][ T12] bond7 (unregistering): (slave vcan4): Releasing backup interface [ 1361.478133][ T12] vcan4: left promiscuous mode [ 1361.488408][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.508394][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1361.520702][ T12] bond7 (unregistering): Released all slaves [ 1361.531530][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.552516][ T9] usb 6-1: Product: syz [ 1361.561769][ T12] bond8 (unregistering): Released all slaves [ 1361.568066][ T9] usb 6-1: Manufacturer: syz [ 1361.574014][ T9] usb 6-1: SerialNumber: syz [ 1361.630741][ T12] bond9 (unregistering): (slave vcan5): Releasing backup interface [ 1361.643998][ T12] vcan5: left promiscuous mode [ 1361.653249][ T12] bond9 (unregistering): Released all slaves [ 1361.699567][ T12] bond10 (unregistering): (slave vcan6): Releasing backup interface [ 1361.735315][ T12] vcan6: left promiscuous mode [ 1361.758193][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.773362][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.785639][ T12] bond10 (unregistering): Released all slaves [ 1361.802216][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1361.815221][T23864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.824810][T23864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.854179][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1361.893744][ T9] usb 6-1: USB disconnect, device number 101 [ 1361.916275][T10327] Bluetooth: hci4: command tx timeout [ 1361.979114][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1362.447949][ T12] tipc: Left network mode [ 1362.476698][ T9] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1362.711141][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1362.773686][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 1362.803728][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.855694][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1362.951848][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1362.997938][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1363.050892][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1363.113836][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1363.192537][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1363.231855][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.313721][ T9] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 1363.487571][T23892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.533129][T23892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.571212][ T9] usb 6-1: USB disconnect, device number 102 [ 1363.996830][T10327] Bluetooth: hci4: command tx timeout [ 1364.293412][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1365.274069][ T12] hsr_slave_0: left promiscuous mode [ 1365.286818][ T12] hsr_slave_1: left promiscuous mode [ 1365.321792][ T12] veth1_macvtap: left promiscuous mode [ 1365.337164][ T12] veth0_macvtap: left promiscuous mode [ 1365.357934][ T12] veth1_vlan: left promiscuous mode [ 1365.388980][ T12] veth0_vlan: left promiscuous mode [ 1365.796924][T23943] blktrace: Concurrent blktraces are not allowed on sg0 [ 1365.936803][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1366.123191][ T24] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.169226][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1366.209385][ T24] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.261460][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1366.305046][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.371871][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.405564][ T24] usb 3-1: invalid MIDI out EP 0 [ 1366.760755][ T12] pim6reg (unregistering): left allmulticast mode [ 1366.949010][ T24] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1367.008207][ T24] usb 3-1: USB disconnect, device number 66 [ 1367.726395][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1367.928485][ T24] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 1367.953100][ T24] usb 3-1: config 0 has no interface number 0 [ 1367.983348][ T24] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1368.017836][ T24] usb 3-1: config 0 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1368.066300][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1368.099464][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.136560][ T24] usb 3-1: config 0 descriptor?? [ 1368.373962][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.463602][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.563230][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.680979][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.780594][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.874557][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.897793][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.915526][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.925070][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.932887][ T24] kovaplus 0003:1E7D:2D50.0039: unknown main item tag 0x0 [ 1368.942264][ T24] kovaplus 0003:1E7D:2D50.0039: item fetching failed at offset 197/235 [ 1368.951596][ T24] kovaplus 0003:1E7D:2D50.0039: parse failed [ 1368.963641][ T24] kovaplus 0003:1E7D:2D50.0039: probe with driver kovaplus failed with error -22 [ 1369.281251][ T9] usb 3-1: USB disconnect, device number 67 [ 1369.312275][T23796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1369.489056][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1369.529639][T23796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1369.697767][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1369.765547][T23796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1369.850508][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1369.925754][T23796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1370.035194][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1370.263991][T23796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.294972][T23796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.309182][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.316372][T15464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.334947][T15464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.342145][T15464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.449867][T23796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.516947][T23796] veth0_vlan: entered promiscuous mode [ 1370.530822][T23796] veth1_vlan: entered promiscuous mode [ 1370.563534][T23796] veth0_macvtap: entered promiscuous mode [ 1370.576728][T23796] veth1_macvtap: entered promiscuous mode [ 1370.676779][T23796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.709314][T23796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.757743][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.880399][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.926922][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.958999][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.976234][T20627] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1371.042229][ T12] IPVS: stop unused estimator thread 0... [ 1371.207007][T20627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.251875][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.273241][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.327453][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.342980][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.362745][T20627] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1371.372577][T20627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.380994][T20627] usb 3-1: Product: syz [ 1371.385305][T20627] usb 3-1: Manufacturer: syz [ 1371.390497][T20627] usb 3-1: SerialNumber: syz [ 1371.398273][T20627] usb 3-1: config 0 descriptor?? [ 1371.413281][T20627] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1371.425044][T20627] dvb-usb: bulk message failed: -22 (3/0) [ 1371.476425][T20627] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1371.502438][T20627] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1371.558308][T20627] usb 3-1: media controller created [ 1371.573950][T20627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1371.661340][T20627] dvb-usb: bulk message failed: -22 (6/0) [ 1371.702053][T20627] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1371.739919][T24025] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5562'. [ 1371.780659][T20627] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input218 [ 1371.976842][T23997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.985698][T20627] dvb-usb: schedule remote query interval to 150 msecs. [ 1371.996700][T24030] program syz.3.5604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1372.026434][T20627] dvb-usb: bulk message failed: -22 (3/0) [ 1372.107463][T20627] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1372.187014][ T5749] dvb-usb: bulk message failed: -22 (1/0) [ 1372.213359][ T5749] dvb-usb: error while querying for an remote control event. [ 1372.418516][T20627] dvb-usb: bulk message failed: -22 (1/0) [ 1372.448171][T20627] dvb-usb: error while querying for an remote control event. [ 1372.629957][T24039] xt_hashlimit: size too large, truncated to 1048576 [ 1372.638140][T20627] dvb-usb: bulk message failed: -22 (1/0) [ 1372.647284][T20627] dvb-usb: error while querying for an remote control event. [ 1372.816741][ T5749] dvb-usb: bulk message failed: -22 (1/0) [ 1372.828206][ T5749] dvb-usb: error while querying for an remote control event. [ 1373.077972][T23997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.125600][T24048] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1373.146438][ T5749] dvb-usb: bulk message failed: -22 (1/0) [ 1373.157897][ T5749] dvb-usb: error while querying for an remote control event. [ 1373.346918][ T5749] dvb-usb: bulk message failed: -22 (1/0) [ 1373.352825][ T5749] dvb-usb: error while querying for an remote control event. [ 1373.516260][ T5749] dvb-usb: bulk message failed: -22 (1/0) [ 1373.523982][ T5749] dvb-usb: error while querying for an remote control event. [ 1373.687172][ T5749] dvb-usb: bulk message failed: -22 (1/0) [ 1373.693038][ T5749] dvb-usb: error while querying for an remote control event. [ 1373.749629][T24056] CUSE: unknown device info "Ö" [ 1373.762773][T24056] CUSE: unknown device info "Ö" [ 1373.798412][T24056] CUSE: unknown device info "" [ 1373.853731][T24056] CUSE: unknown device info "€" [ 1373.857680][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 1373.862066][T24059] fuse: Unknown parameter 'Þ40x0000000000000006' [ 1373.885063][T24061] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5615'. [ 1373.887715][ T5722] dvb-usb: error while querying for an remote control event. [ 1373.955430][T24056] CUSE: unknown device info "ðÿÿÿ" [ 1374.021388][T24056] CUSE: unknown device info "" [ 1374.041772][T24056] CUSE: unknown device info "" [ 1374.055493][T24056] CUSE: unknown device info "" [ 1374.075306][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 1374.082477][T24056] CUSE: zero length info key specified [ 1374.090201][ T5722] dvb-usb: error while querying for an remote control event. [ 1374.101964][ T5749] usb 3-1: USB disconnect, device number 68 [ 1374.166669][ T5749] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1374.434613][T24077] binder: 24071:24077 ioctl 4018620d 0 returned -22 [ 1374.557047][ T24] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1374.726360][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1374.758572][ T24] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1374.793526][ T24] usb 6-1: config 0 has no interface number 0 [ 1374.834454][ T24] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1374.879349][ T24] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1374.949934][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.051219][ T24] usb 6-1: Product: syz [ 1375.058994][ T24] usb 6-1: Manufacturer: syz [ 1375.064512][ T24] usb 6-1: SerialNumber: syz [ 1375.143153][ T24] usb 6-1: config 0 descriptor?? [ 1375.346017][T12791] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1375.488730][T24095] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1375.531865][T24099] tipc: Enabling of bearer rejected, failed to enable media [ 1375.549272][T12791] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1375.559111][T12791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.583766][T12791] usb 4-1: config 0 descriptor?? [ 1375.643421][T12791] cp210x 4-1:0.0: cp210x converter detected [ 1375.889718][T24074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.915832][T24074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.982001][T24103] blktrace: Concurrent blktraces are not allowed on sg0 [ 1376.068666][T12791] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1376.224795][T24104] bridge0: left allmulticast mode [ 1376.386475][T12791] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1376.634373][ T24] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 1376.684025][ T24] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1376.722011][ T24] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1376.763899][ T24] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1376.830682][ T24] usb 6-1: USB disconnect, device number 103 [ 1377.000104][T24077] syz.0.5620 (24077): drop_caches: 2 [ 1377.013571][T24106] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1377.543904][T24118] netlink: 'syz.2.5632': attribute type 1 has an invalid length. [ 1377.685505][T24118] bond3: entered promiscuous mode [ 1377.708606][T24118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1377.800125][T24121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1377.821069][T24121] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 1377.862914][T24121] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 1377.937390][T24121] bond3: (slave vcan2): making interface the new active one [ 1377.965820][T24121] vcan2: entered promiscuous mode [ 1377.994894][T24121] bond3: (slave vcan2): Enslaving as an active interface with an up link [ 1378.030553][T12791] usb 4-1: USB disconnect, device number 8 [ 1378.078123][T12791] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1378.112979][T24129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5635'. [ 1378.237327][T12791] cp210x 4-1:0.0: device disconnected [ 1378.285153][T24132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5634'. [ 1378.374093][T24134] tipc: Enabled bearer , priority 0 [ 1378.384235][T24134] syzkaller0: entered promiscuous mode [ 1378.392119][T24134] syzkaller0: entered allmulticast mode [ 1378.444074][T24134] tipc: Resetting bearer [ 1378.465336][T24133] tipc: Resetting bearer [ 1378.561476][T24133] tipc: Disabling bearer [ 1379.314275][T24119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5631'. [ 1379.692458][T24148] xt_TCPMSS: Only works on TCP SYN packets [ 1380.320283][T24148] sit2: entered allmulticast mode [ 1381.262833][T24131] Set syz1 is full, maxelem 65536 reached [ 1381.417881][T24159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1381.836217][T12791] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1382.082976][ T5709] usb 5-1: USB disconnect, device number 78 [ 1382.112150][T12791] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1382.172270][T12791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.226527][T12791] usb 6-1: config 0 descriptor?? [ 1382.265857][T12791] cp210x 6-1:0.0: cp210x converter detected [ 1382.359722][ T5709] Unregistered device nBox DVB-T Dongle [ 1382.364250][ T5709] as10x_usb: device has been disconnected [ 1382.648867][T12791] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1382.922730][T12791] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1383.259548][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1383.272433][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1383.281843][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1383.294823][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1383.304648][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1384.114808][T24187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.122339][T24187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.130563][T24187] bridge_slave_0: entered allmulticast mode [ 1384.136233][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1384.149773][T24187] bridge_slave_0: entered promiscuous mode [ 1384.176087][T24187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.193139][T24187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.210701][T24187] bridge_slave_1: entered allmulticast mode [ 1384.229082][T24187] bridge_slave_1: entered promiscuous mode [ 1384.282259][T24187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.296035][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1384.314085][T24223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5662'. [ 1384.327657][T24187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.363144][ T9] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1384.383078][ T9] usb 4-1: can't read configurations, error -22 [ 1384.410947][T24187] team0: Port device team_slave_0 added [ 1384.431463][T24187] team0: Port device team_slave_1 added [ 1384.476073][T24187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.492148][T24187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.519726][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1384.542636][ T5749] usb 6-1: USB disconnect, device number 104 [ 1384.554768][ T5749] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1384.565249][T24187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.581400][T24187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.591865][ T5749] cp210x 6-1:0.0: device disconnected [ 1384.612002][T24187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1384.671650][T24187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.756229][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1384.770929][ T9] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1384.784840][ T9] usb 4-1: can't read configurations, error -22 [ 1384.799696][ T9] usb usb4-port1: attempt power cycle [ 1384.869035][T24187] hsr_slave_0: entered promiscuous mode [ 1384.889064][T24187] hsr_slave_1: entered promiscuous mode [ 1384.902838][T24187] debugfs: 'hsr0' already exists in 'hsr' [ 1384.910777][T24187] Cannot create hsr debugfs directory [ 1385.086258][ T5749] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1385.156214][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1385.178827][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1385.188439][ T9] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1385.197739][ T9] usb 4-1: can't read configurations, error -22 [ 1385.366210][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1385.397136][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1385.418418][ T9] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1385.438428][T10327] Bluetooth: hci2: command tx timeout [ 1385.451393][ T9] usb 4-1: can't read configurations, error -22 [ 1385.467641][ T9] usb usb4-port1: unable to enumerate USB device [ 1386.089166][T24187] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1386.127814][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1386.139088][T24187] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1386.161441][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1386.173496][T24187] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1386.199115][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1386.208958][T24187] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1386.226110][T24187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1386.453251][T24187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.517203][T24187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.553011][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.560197][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.593903][T17552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.601095][T17552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.868287][T24187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.065856][T24187] veth0_vlan: entered promiscuous mode [ 1387.087342][T24238] loop9: detected capacity change from 0 to 524287871 [ 1387.135625][T24187] veth1_vlan: entered promiscuous mode [ 1387.344223][T24187] veth0_macvtap: entered promiscuous mode [ 1387.410494][T24187] veth1_macvtap: entered promiscuous mode [ 1387.504272][T24187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.516682][T10327] Bluetooth: hci2: command tx timeout [ 1387.584742][T24187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.660155][ T1021] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.691599][ T1021] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.724379][ T1021] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.748185][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.800711][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1387.800731][ T29] audit: type=1326 audit(1777274716.525:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1387.833750][ T29] audit: type=1326 audit(1777274716.555:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1387.897300][ T29] audit: type=1326 audit(1777274716.585:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1387.924263][ T29] audit: type=1326 audit(1777274716.585:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1387.951735][ T29] audit: type=1326 audit(1777274716.585:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe50395d60e code=0x7ffc0000 [ 1387.976933][ T29] audit: type=1326 audit(1777274716.585:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1388.010914][ T29] audit: type=1326 audit(1777274716.585:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1388.075039][ T29] audit: type=1326 audit(1777274716.585:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1388.103765][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1388.157106][ T29] audit: type=1326 audit(1777274716.585:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1388.194086][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.217530][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.230711][ T29] audit: type=1326 audit(1777274716.585:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24239 comm="syz.3.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe50399cdd9 code=0x7ffc0000 [ 1388.254906][ T24] usb 4-1: device descriptor read/64, error -71 [ 1388.292723][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.301348][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.496068][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1388.637252][ T24] usb 4-1: device descriptor read/64, error -71 [ 1388.748136][ T24] usb usb4-port1: attempt power cycle [ 1388.965028][T24258] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1389.008657][T24258] bridge_slave_0: left allmulticast mode [ 1389.022539][T24258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.096351][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1389.137234][ T24] usb 4-1: device descriptor read/8, error -71 [ 1389.332143][T24258] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1389.387031][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1389.422274][T24259] bond1: entered allmulticast mode [ 1389.450349][ T24] usb 4-1: device descriptor read/8, error -71 [ 1389.586814][ T24] usb usb4-port1: unable to enumerate USB device [ 1389.596845][T10327] Bluetooth: hci2: command tx timeout [ 1389.966097][T24242] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1390.129240][T24242] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1390.140135][T24242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.161533][T24242] usb 7-1: config 0 descriptor?? [ 1390.173890][T24242] cp210x 7-1:0.0: cp210x converter detected [ 1390.196156][T15614] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1390.384976][T15614] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.446576][T15614] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1390.469882][T15614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.486287][T15614] usb 6-1: Product: syz [ 1390.491033][T15614] usb 6-1: Manufacturer: syz [ 1390.495692][T15614] usb 6-1: SerialNumber: syz [ 1390.584377][T24242] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1390.604527][T24280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1390.744622][T24278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.766746][T24278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.796565][T15614] cdc_ether 6-1:1.0: skipping garbage [ 1390.817568][T15614] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1390.831472][T24242] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1390.869383][T15614] usb 6-1: USB disconnect, device number 106 [ 1391.326178][T15614] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1391.486221][T15614] usb 6-1: Using ep0 maxpacket: 8 [ 1391.495792][T15614] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 1391.504899][T15614] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.515879][T15614] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1391.529762][T15614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1391.541932][T15614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1391.553374][T15614] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1391.567646][T15614] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1391.578357][T15614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.678725][T10327] Bluetooth: hci2: command tx timeout [ 1391.794804][T15614] usb 6-1: usb_control_msg returned -71 [ 1391.808767][T15614] usbtmc 6-1:16.0: can't read capabilities [ 1391.835230][T15614] usb 6-1: USB disconnect, device number 107 [ 1392.305091][T24293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5677'. [ 1392.618432][ T24] usb 7-1: USB disconnect, device number 2 [ 1392.656313][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1392.676210][T20627] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1392.711799][ T24] cp210x 7-1:0.0: device disconnected [ 1392.766695][T24245] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1392.823913][T24303] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5682'. [ 1392.846326][T20627] usb 6-1: Using ep0 maxpacket: 8 [ 1392.858058][T20627] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.879443][T20627] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1392.906175][T20627] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1392.926402][T20627] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1392.944965][T20627] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1392.973971][T20627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.008317][T24245] usb 4-1: Using ep0 maxpacket: 16 [ 1393.015871][T24245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.027460][T24245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.041446][T20627] hub 6-1:1.0: bad descriptor, ignoring hub [ 1393.057961][T24245] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1393.063933][T20627] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1393.085572][T20627] cdc_wdm 6-1:1.0: skipping garbage [ 1393.086291][T24245] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1393.094436][T20627] cdc_wdm 6-1:1.0: skipping garbage [ 1393.118246][T24245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.121045][T20627] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1393.142309][T24245] usb 4-1: config 0 descriptor?? [ 1393.152074][T20627] cdc_wdm 6-1:1.0: Unknown control protocol [ 1393.612372][T24245] microsoft 0003:045E:07DA.003A: ignoring exceeding usage max [ 1393.623196][T24242] usb 6-1: reset high-speed USB device number 108 using dummy_hcd [ 1393.684073][T24245] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1393.725414][T24245] microsoft 0003:045E:07DA.003A: no inputs found [ 1393.742388][T24245] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway [ 1393.839460][ T5722] usb 4-1: USB disconnect, device number 17 [ 1393.905175][T24307] fido_id[24307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1394.307231][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5685'. [ 1394.510124][T24319] netlink: 'syz.0.5687': attribute type 1 has an invalid length. [ 1394.533148][T24242] usb 6-1: USB disconnect, device number 108 [ 1394.599686][T24319] bond10: entered promiscuous mode [ 1394.605525][T24319] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1394.624945][T24324] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1394.635232][T24324] bond10: (slave vcan8): The slave device specified does not support setting the MAC address [ 1394.660305][T24324] bond10: (slave vcan8): Setting fail_over_mac to active for active-backup mode [ 1394.680251][T24324] bond10: (slave vcan8): making interface the new active one [ 1394.687963][T24324] vcan8: entered promiscuous mode [ 1394.694739][T24324] bond10: (slave vcan8): Enslaving as an active interface with an up link [ 1394.746032][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1394.881059][T24328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1394.891788][T24328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5690'. [ 1394.920508][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1394.933838][ T62] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.943893][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.958010][ T62] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.972786][ T9] usb 4-1: Product: syz [ 1394.982574][ T9] usb 4-1: Manufacturer: syz [ 1394.989236][ T62] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.996121][ T9] usb 4-1: SerialNumber: syz [ 1395.013150][ T62] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1395.473628][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1395.485555][T24242] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1395.515294][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1395.693298][T24242] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1395.702564][T24242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.736400][T24242] usb 6-1: config 0 descriptor?? [ 1395.756557][T24242] cp210x 6-1:0.0: cp210x converter detected [ 1396.100488][T24303] Set syz1 is full, maxelem 65536 reached [ 1396.155723][T24242] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1396.239861][T24337] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5693'. [ 1396.377310][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1396.396351][T24242] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1396.404484][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1396.426212][T20627] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1396.439175][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1396.469246][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1396.508210][T24342] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1396.534425][T24341] ip_vti0: Master is either lo or non-ether device [ 1396.638895][T20627] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1396.666184][T20627] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1396.686622][T20627] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.709709][T20627] usb 7-1: config 0 descriptor?? [ 1396.734932][T24335] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1397.172748][T20627] hid_parser_main: 166 callbacks suppressed [ 1397.172770][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.210231][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.226131][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.241344][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.257921][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.275740][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.291454][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.307831][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.324085][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.332025][T20627] koneplus 0003:1E7D:2E22.003B: unknown main item tag 0x0 [ 1397.341460][T20627] koneplus 0003:1E7D:2E22.003B: unexpected long global item [ 1397.349906][T20627] koneplus 0003:1E7D:2E22.003B: parse failed [ 1397.360694][T20627] koneplus 0003:1E7D:2E22.003B: probe with driver koneplus failed with error -22 [ 1397.378407][T20627] usb 7-1: USB disconnect, device number 3 [ 1397.518746][ T5722] usb 4-1: USB disconnect, device number 18 [ 1397.574243][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1397.720272][T24350] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1397.848365][T24360] IPv6: addrconf: prefix option has invalid lifetime [ 1398.136056][T20627] usb 6-1: USB disconnect, device number 109 [ 1398.170720][T20627] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1398.221465][T20627] cp210x 6-1:0.0: device disconnected [ 1399.134157][T24387] netlink: 'syz.6.5706': attribute type 1 has an invalid length. [ 1399.745075][T24402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5710'. [ 1400.346088][ T5722] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1400.553814][ T5722] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1400.587688][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.618886][ T5722] usb 7-1: config 0 descriptor?? [ 1400.621824][ T5722] cp210x 7-1:0.0: cp210x converter detected [ 1401.060835][ T5722] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1401.312794][ T5722] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1401.355770][T24434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5720'. [ 1401.571027][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1401.571047][ T29] audit: type=1326 audit(1777274730.295:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.602074][ T29] audit: type=1326 audit(1777274730.295:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.639692][ T29] audit: type=1326 audit(1777274730.295:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.669365][ T29] audit: type=1326 audit(1777274730.295:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.705342][ T29] audit: type=1326 audit(1777274730.295:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.759495][ T29] audit: type=1326 audit(1777274730.295:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.784829][ T29] audit: type=1326 audit(1777274730.295:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.818662][ T29] audit: type=1326 audit(1777274730.295:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.873649][ T29] audit: type=1326 audit(1777274730.295:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1401.900602][ T29] audit: type=1326 audit(1777274730.295:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24437 comm="syz.0.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f9cdd9 code=0x7ffc0000 [ 1402.171304][T24443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1402.696039][ T5749] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1402.858387][ T5749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.884478][ T5749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1402.922435][ T5749] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1402.943282][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1402.960371][T24453] netlink: 'syz.0.5727': attribute type 1 has an invalid length. [ 1402.969373][ T5749] usb 3-1: SerialNumber: syz [ 1403.044214][ T5722] usb 7-1: USB disconnect, device number 4 [ 1403.070464][T24453] bond11: entered promiscuous mode [ 1403.077641][T24453] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1403.122580][ T5722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1403.178918][ T5722] cp210x 7-1:0.0: device disconnected [ 1403.192945][T24459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5729'. [ 1403.235529][T24456] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1403.243566][T24456] bond11: (slave vcan9): The slave device specified does not support setting the MAC address [ 1403.254429][T24456] bond11: (slave vcan9): Setting fail_over_mac to active for active-backup mode [ 1403.287525][T24456] bond11: (slave vcan9): making interface the new active one [ 1403.295237][T24456] vcan9: entered promiscuous mode [ 1403.303675][T24456] bond11: (slave vcan9): Enslaving as an active interface with an up link [ 1403.333657][T24461] batadv0: entered promiscuous mode [ 1403.360871][T24461] vlan2: entered promiscuous mode [ 1403.641952][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5734'. [ 1403.866209][T24242] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1404.018896][T24242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.037588][T24242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.055988][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1404.065099][T24242] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.096056][T24242] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.115956][T24242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.138949][T24242] usb 6-1: config 0 descriptor?? [ 1404.248424][ T9] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1404.276021][ T9] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.295963][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1404.306371][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 1404.326070][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.349452][ T9] usb 7-1: config 0 descriptor?? [ 1404.522223][T24486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1404.591170][T24242] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1404.696360][T24489] loop9: detected capacity change from 0 to 524287871 [ 1404.801890][ T9] hid_parser_main: 125 callbacks suppressed [ 1404.801916][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1404.863404][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1404.886917][T24493] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1404.904683][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1404.943968][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1404.960312][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1404.978862][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1404.987467][T24495] netlink: 'syz.0.5742': attribute type 1 has an invalid length. [ 1405.005128][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1405.017669][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1405.032535][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1405.052315][T24498] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1405.063199][ T9] apple 0003:05AC:0320.003D: unknown main item tag 0x0 [ 1405.105559][T24495] bond12: entered promiscuous mode [ 1405.123674][ T9] apple 0003:05AC:0320.003D: hidraw1: USB HID v7f.fd Device [HID 05ac:0320] on usb-dummy_hcd.6-1/input0 [ 1405.136490][T24495] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1405.155616][ T9] usb 7-1: USB disconnect, device number 5 [ 1405.211328][T24499] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1405.234093][T24499] bond12: (slave vcan10): The slave device specified does not support setting the MAC address [ 1405.267928][T24499] bond12: (slave vcan10): Setting fail_over_mac to active for active-backup mode [ 1405.344996][T24499] bond12: (slave vcan10): making interface the new active one [ 1405.378099][T24499] vcan10: entered promiscuous mode [ 1405.419975][T24499] bond12: (slave vcan10): Enslaving as an active interface with an up link [ 1405.470443][ T5749] usb 3-1: 0:2 : does not exist [ 1405.568563][ T5722] usb 6-1: USB disconnect, device number 110 [ 1405.633034][T24500] fido_id[24500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1405.715653][ T5749] usb 3-1: USB disconnect, device number 70 [ 1405.948274][T24509] xt_hashlimit: size too large, truncated to 1048576 [ 1405.991510][ T6263] udevd[6263]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.453938][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5748'. [ 1406.734052][T24530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5751'. [ 1406.879567][ T5722] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1407.116439][ T5722] usb 7-1: Using ep0 maxpacket: 8 [ 1407.123648][ T5722] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1407.146385][ T5722] usb 7-1: config 0 has no interface number 0 [ 1407.159963][T24534] bridge0: entered promiscuous mode [ 1407.170786][ T5722] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1407.216512][T24534] bridge0: entered allmulticast mode [ 1407.224465][ T5722] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1407.237154][ T5722] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1407.249364][ T5722] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1407.262824][ T5722] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1407.272546][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.337317][ T5722] usb 7-1: config 0 descriptor?? [ 1407.369409][ T5722] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1407.490915][T24538] loop9: detected capacity change from 0 to 524287871 [ 1407.750665][T24543] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 1407.891185][T24543] bond1: entered promiscuous mode [ 1407.919561][T24543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1408.002777][T24545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1408.059501][T24545] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1408.093645][T24545] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1408.152893][T24545] bond1: (slave vcan1): making interface the new active one [ 1408.170056][T24545] vcan1: entered promiscuous mode [ 1408.180898][T24545] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1408.611636][T24551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.763314][T24556] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5757'. [ 1408.809649][T24558] netlink: 'syz.3.5758': attribute type 1 has an invalid length. [ 1408.925077][T24558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1408.945684][T24559] bond2: (slave dummy0): making interface the new active one [ 1409.011901][T24559] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1409.486117][T24242] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1409.510972][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5753'. [ 1409.577762][T24565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5753'. [ 1409.586973][T24565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5753'. [ 1409.657545][T24242] usb 4-1: Using ep0 maxpacket: 8 [ 1409.672978][T24242] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1409.733649][T24541] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1409.798647][T24242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1409.807366][T15614] usb 7-1: USB disconnect, device number 6 [ 1409.818214][T24565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.818734][T24242] usb 4-1: Product: syz [ 1409.829574][T24242] usb 4-1: Manufacturer: syz [ 1409.834282][T24242] usb 4-1: SerialNumber: syz [ 1409.864764][T15614] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1409.880934][T24242] usb 4-1: config 0 descriptor?? [ 1409.916883][T24242] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1409.927325][T24565] bond13: (slave bond0): making interface the new active one [ 1409.941263][T24565] bond13: (slave bond0): Enslaving as an active interface with an up link [ 1410.111378][T24242] gspca_sn9c2028: read1 error -32 [ 1410.122641][T24242] gspca_sn9c2028: read1 error -32 [ 1410.400936][T24567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.419691][T24567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.430972][T20627] usb 4-1: USB disconnect, device number 20 [ 1410.864524][T24586] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1410.887341][T24585] loop9: detected capacity change from 0 to 524287871 [ 1411.234851][T24590] netlink: 'syz.3.5765': attribute type 1 has an invalid length. [ 1411.293358][T24590] bond3: entered promiscuous mode [ 1411.300921][T24590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1411.363499][T24590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1411.376342][T24590] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 1411.398629][T24590] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 1411.456871][T24590] bond3: (slave vcan2): making interface the new active one [ 1411.475356][T24590] vcan2: entered promiscuous mode [ 1411.499734][T24590] bond3: (slave vcan2): Enslaving as an active interface with an up link [ 1411.908219][T24612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5771'. [ 1411.946065][T24242] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 1412.123292][T24242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.154554][T24242] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1412.200805][T24242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1412.209793][T24530] Set syz1 is full, maxelem 65536 reached [ 1412.235843][T24242] usb 6-1: Product: syz [ 1412.263414][T24242] usb 6-1: Manufacturer: syz [ 1412.298839][T24242] usb 6-1: SerialNumber: syz [ 1412.334969][T24242] usb 6-1: config 0 descriptor?? [ 1412.786709][T24627] loop9: detected capacity change from 0 to 524287871 [ 1413.752724][T24637] ip6gretap1: entered allmulticast mode [ 1413.823532][T24639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1413.851275][T24639] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1413.934303][T24641] [ 1413.936690][T24641] ===================================================== [ 1413.943637][T24641] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1413.951125][T24641] syzkaller #0 Tainted: G L [ 1413.957098][T24641] ----------------------------------------------------- [ 1413.964031][T24641] syz.3.5778/24641 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1413.971754][T24641] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1413.980376][T24641] [ 1413.980376][T24641] and this task is already holding: [ 1413.987737][T24641] ffff888062619120 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1413.996386][T24641] which would create a new lock dependency: [ 1414.002302][T24641] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1414.009903][T24641] [ 1414.009903][T24641] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1414.019369][T24641] (&client->buffer_lock){..-.}-{3:3} [ 1414.019395][T24641] [ 1414.019395][T24641] ... which became SOFTIRQ-irq-safe at: [ 1414.032469][T24641] lock_acquire+0x106/0x350 [ 1414.037058][T24641] _raw_spin_lock+0x2e/0x40 [ 1414.041668][T24641] evdev_pass_values+0xb9/0xbd0 [ 1414.046607][T24641] evdev_events+0x1e6/0x340 [ 1414.051333][T24641] input_pass_values+0x288/0x890 [ 1414.056406][T24641] input_event_dispose+0x330/0x6b0 [ 1414.061634][T24641] input_event+0x84/0xc0 [ 1414.065975][T24641] xpad360_process_packet+0x641/0xdc0 [ 1414.071463][T24641] xpad_irq_in+0x14e/0x25c0 [ 1414.076070][T24641] __usb_hcd_giveback_urb+0x376/0x540 [ 1414.081549][T24641] dummy_timer+0xbc0/0x4650 [ 1414.086150][T24641] __hrtimer_run_queues+0x3c0/0xa20 [ 1414.091497][T24641] hrtimer_run_softirq+0x17a/0x240 [ 1414.096708][T24641] handle_softirqs+0x22a/0x840 [ 1414.101551][T24641] __irq_exit_rcu+0xca/0x220 [ 1414.106224][T24641] irq_exit_rcu+0x9/0x30 [ 1414.110587][T24641] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1414.116319][T24641] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1414.122401][T24641] lock_acquire+0x221/0x350 [ 1414.127012][T24641] __mutex_lock+0x1a3/0x1550 [ 1414.131710][T24641] freezer_fork+0x105/0x480 [ 1414.136305][T24641] cgroup_post_fork+0x390/0x910 [ 1414.141240][T24641] copy_process+0x410b/0x4450 [ 1414.146045][T24641] kernel_clone+0x284/0x8f0 [ 1414.150668][T24641] __se_sys_clone3+0x33c/0x360 [ 1414.155540][T24641] do_syscall_64+0x15f/0xf80 [ 1414.160227][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.166205][T24641] [ 1414.166205][T24641] to a SOFTIRQ-irq-unsafe lock: [ 1414.173215][T24641] (tasklist_lock){.+.+}-{3:3} [ 1414.173237][T24641] [ 1414.173237][T24641] ... which became SOFTIRQ-irq-unsafe at: [ 1414.185868][T24641] ... [ 1414.185893][T24641] lock_acquire+0x106/0x350 [ 1414.193090][T24641] _raw_read_lock+0x36/0x50 [ 1414.197678][T24641] __do_wait+0xde/0x740 [ 1414.201927][T24641] do_wait+0x1e7/0x510 [ 1414.206098][T24641] kernel_wait+0xd6/0x1c0 [ 1414.210546][T24641] call_usermodehelper_exec_work+0xbe/0x230 [ 1414.216525][T24641] process_scheduled_works+0xb5d/0x1860 [ 1414.222165][T24641] worker_thread+0xa53/0xfc0 [ 1414.226839][T24641] kthread+0x388/0x470 [ 1414.231084][T24641] ret_from_fork+0x514/0xb70 [ 1414.235759][T24641] ret_from_fork_asm+0x1a/0x30 [ 1414.240636][T24641] [ 1414.240636][T24641] other info that might help us debug this: [ 1414.240636][T24641] [ 1414.250881][T24641] Chain exists of: [ 1414.250881][T24641] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1414.250881][T24641] [ 1414.264546][T24641] Possible interrupt unsafe locking scenario: [ 1414.264546][T24641] [ 1414.272863][T24641] CPU0 CPU1 [ 1414.278234][T24641] ---- ---- [ 1414.283599][T24641] lock(tasklist_lock); [ 1414.287885][T24641] local_irq_disable(); [ 1414.294643][T24641] lock(&client->buffer_lock); [ 1414.302017][T24641] lock(&f_owner->lock); [ 1414.308886][T24641] [ 1414.312336][T24641] lock(&client->buffer_lock); [ 1414.317361][T24641] [ 1414.317361][T24641] *** DEADLOCK *** [ 1414.317361][T24641] [ 1414.325501][T24641] 5 locks held by syz.3.5778/24641: [ 1414.330707][T24641] #0: ffff88804da12410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1414.339850][T24641] #1: ffff888050b820a8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 1414.350558][T24641] #2: ffffffff9a4bc998 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 1414.360052][T24641] #3: ffff88802c1ae1c8 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1414.369748][T24641] #4: ffff888062619120 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1414.378805][T24641] [ 1414.378805][T24641] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1414.389215][T24641] -> (&client->buffer_lock){..-.}-{3:3} { [ 1414.395148][T24641] IN-SOFTIRQ-W at: [ 1414.399302][T24641] lock_acquire+0x106/0x350 [ 1414.405810][T24641] _raw_spin_lock+0x2e/0x40 [ 1414.412321][T24641] evdev_pass_values+0xb9/0xbd0 [ 1414.419176][T24641] evdev_events+0x1e6/0x340 [ 1414.425687][T24641] input_pass_values+0x288/0x890 [ 1414.432625][T24641] input_event_dispose+0x330/0x6b0 [ 1414.439732][T24641] input_event+0x84/0xc0 [ 1414.445975][T24641] xpad360_process_packet+0x641/0xdc0 [ 1414.453366][T24641] xpad_irq_in+0x14e/0x25c0 [ 1414.459864][T24641] __usb_hcd_giveback_urb+0x376/0x540 [ 1414.467233][T24641] dummy_timer+0xbc0/0x4650 [ 1414.473755][T24641] __hrtimer_run_queues+0x3c0/0xa20 [ 1414.480956][T24641] hrtimer_run_softirq+0x17a/0x240 [ 1414.488066][T24641] handle_softirqs+0x22a/0x840 [ 1414.494824][T24641] __irq_exit_rcu+0xca/0x220 [ 1414.501409][T24641] irq_exit_rcu+0x9/0x30 [ 1414.507659][T24641] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1414.515305][T24641] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1414.523280][T24641] lock_acquire+0x221/0x350 [ 1414.529819][T24641] __mutex_lock+0x1a3/0x1550 [ 1414.536421][T24641] freezer_fork+0x105/0x480 [ 1414.542959][T24641] cgroup_post_fork+0x390/0x910 [ 1414.549806][T24641] copy_process+0x410b/0x4450 [ 1414.556485][T24641] kernel_clone+0x284/0x8f0 [ 1414.563012][T24641] __se_sys_clone3+0x33c/0x360 [ 1414.569797][T24641] do_syscall_64+0x15f/0xf80 [ 1414.576395][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.584313][T24641] INITIAL USE at: [ 1414.588467][T24641] lock_acquire+0x106/0x350 [ 1414.594924][T24641] _raw_spin_lock+0x2e/0x40 [ 1414.601335][T24641] evdev_pass_values+0xb9/0xbd0 [ 1414.608109][T24641] evdev_events+0x1e6/0x340 [ 1414.614526][T24641] input_pass_values+0x288/0x890 [ 1414.621377][T24641] input_event_dispose+0x330/0x6b0 [ 1414.628417][T24641] input_event+0x84/0xc0 [ 1414.634578][T24641] uinput_write+0x3bb/0xfe0 [ 1414.640984][T24641] vfs_write+0x29a/0xb90 [ 1414.647137][T24641] ksys_write+0x150/0x270 [ 1414.653380][T24641] do_syscall_64+0x15f/0xf80 [ 1414.659879][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.667684][T24641] } [ 1414.670350][T24641] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1414.678728][T24641] -> (&new->fa_lock){....}-{3:3} { [ 1414.683965][T24641] INITIAL USE at: [ 1414.687948][T24641] lock_acquire+0x106/0x350 [ 1414.694360][T24641] _raw_write_lock_irq+0x3d/0x50 [ 1414.701047][T24641] fasync_remove_entry+0xf1/0x1c0 [ 1414.707836][T24641] lease_modify+0x4f7/0x6c0 [ 1414.714169][T24641] locks_remove_file+0x5f0/0xf70 [ 1414.720847][T24641] __fput+0x3ae/0xa60 [ 1414.726564][T24641] fput_close_sync+0x11f/0x240 [ 1414.733149][T24641] __x64_sys_close+0x7e/0x110 [ 1414.739563][T24641] do_syscall_64+0x15f/0xf80 [ 1414.745919][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.753568][T24641] INITIAL READ USE at: [ 1414.757986][T24641] lock_acquire+0x106/0x350 [ 1414.764688][T24641] _raw_read_lock_irqsave+0x48/0x60 [ 1414.772049][T24641] kill_fasync+0x199/0x4d0 [ 1414.778641][T24641] lease_break_callback+0x26/0x30 [ 1414.785854][T24641] __break_lease+0x81f/0x1ea0 [ 1414.792731][T24641] path_openat+0x1eaa/0x3860 [ 1414.799490][T24641] do_file_open+0x23e/0x4a0 [ 1414.806187][T24641] do_sys_openat2+0x113/0x200 [ 1414.813067][T24641] __x64_sys_openat+0x138/0x170 [ 1414.820082][T24641] do_syscall_64+0x15f/0xf80 [ 1414.826867][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.834945][T24641] } [ 1414.837520][T24641] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1414.846307][T24641] ... acquired at: [ 1414.850187][T24641] _raw_read_lock_irqsave+0x48/0x60 [ 1414.855552][T24641] kill_fasync+0x199/0x4d0 [ 1414.860144][T24641] evdev_pass_values+0x627/0xbd0 [ 1414.865252][T24641] evdev_events+0x1e6/0x340 [ 1414.869935][T24641] input_pass_values+0x288/0x890 [ 1414.875068][T24641] input_event_dispose+0x330/0x6b0 [ 1414.880354][T24641] input_inject_event+0x1dc/0x330 [ 1414.885551][T24641] evdev_write+0x325/0x4c0 [ 1414.890138][T24641] vfs_write+0x29a/0xb90 [ 1414.894550][T24641] ksys_write+0x150/0x270 [ 1414.899052][T24641] do_syscall_64+0x15f/0xf80 [ 1414.903817][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.909892][T24641] [ 1414.912241][T24641] -> (&f_owner->lock){....}-{3:3} { [ 1414.917467][T24641] INITIAL USE at: [ 1414.921379][T24641] lock_acquire+0x106/0x350 [ 1414.927449][T24641] _raw_write_lock_irq+0x3d/0x50 [ 1414.933946][T24641] __f_setown+0x67/0x370 [ 1414.939751][T24641] fcntl_dirnotify+0x3f9/0x6a0 [ 1414.946070][T24641] do_fcntl+0x77e/0x1a20 [ 1414.951960][T24641] __se_sys_fcntl+0xc8/0x150 [ 1414.958117][T24641] do_syscall_64+0x15f/0xf80 [ 1414.964280][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.971754][T24641] INITIAL READ USE at: [ 1414.976080][T24641] lock_acquire+0x106/0x350 [ 1414.982600][T24641] _raw_read_lock_irqsave+0x48/0x60 [ 1414.989805][T24641] send_sigio+0x38/0x370 [ 1414.996059][T24641] dnotify_handle_event+0x169/0x440 [ 1415.003242][T24641] fsnotify+0x1831/0x1ae0 [ 1415.009577][T24641] path_openat+0x15c2/0x3860 [ 1415.016168][T24641] do_file_open+0x23e/0x4a0 [ 1415.022689][T24641] do_sys_openat2+0x113/0x200 [ 1415.029364][T24641] __x64_sys_openat+0x138/0x170 [ 1415.036249][T24641] do_syscall_64+0x15f/0xf80 [ 1415.042860][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.050764][T24641] } [ 1415.053258][T24641] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1415.062106][T24641] ... acquired at: [ 1415.065920][T24641] _raw_read_lock_irqsave+0x48/0x60 [ 1415.071317][T24641] send_sigio+0x38/0x370 [ 1415.075741][T24641] kill_fasync+0x24d/0x4d0 [ 1415.080365][T24641] lease_break_callback+0x26/0x30 [ 1415.085588][T24641] __break_lease+0x81f/0x1ea0 [ 1415.090435][T24641] path_openat+0x1eaa/0x3860 [ 1415.095199][T24641] do_file_open+0x23e/0x4a0 [ 1415.099878][T24641] do_sys_openat2+0x113/0x200 [ 1415.104733][T24641] __x64_sys_openat+0x138/0x170 [ 1415.109761][T24641] do_syscall_64+0x15f/0xf80 [ 1415.114566][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.120659][T24641] [ 1415.122978][T24641] [ 1415.122978][T24641] the dependencies between the lock to be acquired [ 1415.122986][T24641] and SOFTIRQ-irq-unsafe lock: [ 1415.136502][T24641] -> (tasklist_lock){.+.+}-{3:3} { [ 1415.141669][T24641] HARDIRQ-ON-R at: [ 1415.145648][T24641] lock_acquire+0x106/0x350 [ 1415.151801][T24641] _raw_read_lock+0x36/0x50 [ 1415.157961][T24641] __do_wait+0xde/0x740 [ 1415.163777][T24641] do_wait+0x1e7/0x510 [ 1415.169501][T24641] kernel_wait+0xd6/0x1c0 [ 1415.175511][T24641] call_usermodehelper_exec_work+0xbe/0x230 [ 1415.183063][T24641] process_scheduled_works+0xb5d/0x1860 [ 1415.190281][T24641] worker_thread+0xa53/0xfc0 [ 1415.196526][T24641] kthread+0x388/0x470 [ 1415.202266][T24641] ret_from_fork+0x514/0xb70 [ 1415.208504][T24641] ret_from_fork_asm+0x1a/0x30 [ 1415.214936][T24641] SOFTIRQ-ON-R at: [ 1415.218914][T24641] lock_acquire+0x106/0x350 [ 1415.225065][T24641] _raw_read_lock+0x36/0x50 [ 1415.231213][T24641] __do_wait+0xde/0x740 [ 1415.237036][T24641] do_wait+0x1e7/0x510 [ 1415.242759][T24641] kernel_wait+0xd6/0x1c0 [ 1415.248739][T24641] call_usermodehelper_exec_work+0xbe/0x230 [ 1415.256285][T24641] process_scheduled_works+0xb5d/0x1860 [ 1415.263498][T24641] worker_thread+0xa53/0xfc0 [ 1415.269734][T24641] kthread+0x388/0x470 [ 1415.275477][T24641] ret_from_fork+0x514/0xb70 [ 1415.281712][T24641] ret_from_fork_asm+0x1a/0x30 [ 1415.288136][T24641] INITIAL USE at: [ 1415.292037][T24641] lock_acquire+0x106/0x350 [ 1415.298102][T24641] _raw_write_lock_irq+0x3d/0x50 [ 1415.304604][T24641] copy_process+0x2b5e/0x4450 [ 1415.310843][T24641] kernel_clone+0x284/0x8f0 [ 1415.316921][T24641] user_mode_thread+0x110/0x180 [ 1415.323355][T24641] rest_init+0x23/0x300 [ 1415.329082][T24641] start_kernel+0x38a/0x3e0 [ 1415.335237][T24641] x86_64_start_reservations+0x24/0x30 [ 1415.342275][T24641] x86_64_start_kernel+0x143/0x1c0 [ 1415.348976][T24641] common_startup_64+0x13e/0x147 [ 1415.355491][T24641] INITIAL READ USE at: [ 1415.359827][T24641] lock_acquire+0x106/0x350 [ 1415.366353][T24641] _raw_read_lock+0x36/0x50 [ 1415.372894][T24641] __do_wait+0xde/0x740 [ 1415.379060][T24641] do_wait+0x1e7/0x510 [ 1415.385149][T24641] kernel_wait+0xd6/0x1c0 [ 1415.391494][T24641] call_usermodehelper_exec_work+0xbe/0x230 [ 1415.399391][T24641] process_scheduled_works+0xb5d/0x1860 [ 1415.406952][T24641] worker_thread+0xa53/0xfc0 [ 1415.413538][T24641] kthread+0x388/0x470 [ 1415.419600][T24641] ret_from_fork+0x514/0xb70 [ 1415.426204][T24641] ret_from_fork_asm+0x1a/0x30 [ 1415.432972][T24641] } [ 1415.435475][T24641] ... key at: [] tasklist_lock+0x18/0x40 [ 1415.443308][T24641] ... acquired at: [ 1415.447118][T24641] _raw_read_lock+0x36/0x50 [ 1415.451790][T24641] send_sigio+0x101/0x370 [ 1415.456295][T24641] dnotify_handle_event+0x169/0x440 [ 1415.461662][T24641] fsnotify+0x1831/0x1ae0 [ 1415.466170][T24641] fsnotify_move+0x1d7/0x5b0 [ 1415.470950][T24641] vfs_rename+0xcdd/0xeb0 [ 1415.475457][T24641] filename_renameat2+0x539/0x9c0 [ 1415.480664][T24641] __se_sys_renameat2+0x5a/0x2c0 [ 1415.485782][T24641] do_syscall_64+0x15f/0xf80 [ 1415.490545][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.496612][T24641] [ 1415.498945][T24641] [ 1415.498945][T24641] stack backtrace: [ 1415.504830][T24641] CPU: 0 UID: 0 PID: 24641 Comm: syz.3.5778 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.504849][T24641] Tainted: [L]=SOFTLOCKUP [ 1415.504854][T24641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1415.504864][T24641] Call Trace: [ 1415.504871][T24641] [ 1415.504877][T24641] dump_stack_lvl+0xe8/0x150 [ 1415.504893][T24641] __lock_acquire+0x2a94/0x2cf0 [ 1415.504915][T24641] ? send_sigio+0x101/0x370 [ 1415.504932][T24641] lock_acquire+0x106/0x350 [ 1415.504945][T24641] ? send_sigio+0x101/0x370 [ 1415.504967][T24641] _raw_read_lock+0x36/0x50 [ 1415.504979][T24641] ? send_sigio+0x101/0x370 [ 1415.504996][T24641] send_sigio+0x101/0x370 [ 1415.505014][T24641] dnotify_handle_event+0x169/0x440 [ 1415.505031][T24641] fsnotify+0x1831/0x1ae0 [ 1415.505048][T24641] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.505065][T24641] ? fsnotify+0x74c/0x1ae0 [ 1415.505081][T24641] ? __pfx_fsnotify+0x10/0x10 [ 1415.505100][T24641] ? dput+0x37/0x1a0 [ 1415.505115][T24641] fsnotify_move+0x1d7/0x5b0 [ 1415.505132][T24641] vfs_rename+0xcdd/0xeb0 [ 1415.505149][T24641] ? __pfx_vfs_rename+0x10/0x10 [ 1415.505161][T24641] ? do_raw_spin_unlock+0xf5/0x210 [ 1415.505201][T24641] ? bpf_lsm_path_rename+0x9/0x20 [ 1415.505217][T24641] ? security_path_rename+0x17d/0x460 [ 1415.505238][T24641] filename_renameat2+0x539/0x9c0 [ 1415.505253][T24641] ? __might_fault+0xaf/0x130 [ 1415.505271][T24641] ? __might_fault+0xaf/0x130 [ 1415.505289][T24641] ? __pfx_filename_renameat2+0x10/0x10 [ 1415.505309][T24641] ? do_getname+0x151/0x250 [ 1415.505324][T24641] __se_sys_renameat2+0x5a/0x2c0 [ 1415.505339][T24641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.505357][T24641] do_syscall_64+0x15f/0xf80 [ 1415.505373][T24641] ? trace_irq_disable+0x3b/0x140 [ 1415.505393][T24641] ? clear_bhb_loop+0x40/0x90 [ 1415.505409][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.505423][T24641] RIP: 0033:0x7fe50399cdd9 [ 1415.505437][T24641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.505450][T24641] RSP: 002b:00007fe504831028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1415.505464][T24641] RAX: ffffffffffffffda RBX: 00007fe503c15fa0 RCX: 00007fe50399cdd9 [ 1415.505475][T24641] RDX: ffffffffffffff9c RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1415.505486][T24641] RBP: 00007fe503a32d69 R08: 0000000000000004 R09: 0000000000000000 [ 1415.505495][T24641] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 1415.505504][T24641] R13: 00007fe503c16038 R14: 00007fe503c15fa0 R15: 00007fe503d3fa48 [ 1415.505520][T24641] [ 1415.810996][ T9] usb 6-1: USB disconnect, device number 111 [ 1415.812114][T24643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5778'. [ 1415.861739][T24645] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1423.197281][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.204163][ T1313] ieee802154 phy1 wpan1: encryption failed: -22