last executing test programs: 14.022081107s ago: executing program 3 (id=5443): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_BULK(r5, 0xc0105502, &(0x7f0000000080)={{{0xe}}, 0x0, 0x94, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 12.259127377s ago: executing program 1 (id=5446): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close(0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1047}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x440b0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x104661, 0x400, 0x2, 0x288}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r6, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) ioctl$TUNSETLINK(r7, 0x400454cd, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x40, 0x9, 0x2}, 0x18, 0x0) 11.742386988s ago: executing program 3 (id=5448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000"], 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r9, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0xa0, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x3}, {0xffff, 0xfff5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x14, 0x8670, 0x5, 0x1, 0x5c4}}, {0x4}}, {{0x1c, 0x1, {0x22, 0x0, 0x2, 0xf21, 0x0, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0x3, 0x8, 0x0]}}, {{0x1c, 0x1, {0x2, 0x9, 0x7fff, 0x101, 0x0, 0x4, 0x7}}, {0x4}}]}]}, 0xa0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 10.916142575s ago: executing program 1 (id=5450): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000000)='r', 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x4030, 0x200, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.837382431s ago: executing program 4 (id=5451): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10}, 0x0) r5 = openat$nvram(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000480)={{&(0x7f00003fd000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) write$6lowpan_control(r6, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0x7fc00000) syz_open_procfs(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005"], 0x74}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r11, &(0x7f0000002880)=ANY=[], 0xfd7b) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x0) r12 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, 0x0) 8.904516485s ago: executing program 4 (id=5453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000004c0)="800000800000210ee7c9cd7a0000d717dcef", 0x12, 0x200488c1, &(0x7f00000001c0)={0x11, 0x88a8, 0x0, 0x1, 0x3}, 0x14) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 8.902315813s ago: executing program 0 (id=5463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="a982", 0x2}], 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='#(0.', 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) writev(r5, &(0x7f0000000a40), 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000040)=0x5f, 0x4) r7 = dup3(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000001380)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000400)) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000140)=0xd) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x40) 8.90103437s ago: executing program 3 (id=5454): r0 = syz_open_dev$amidi(&(0x7f0000001a00), 0x2, 0x101c00) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f00000000c0)={0x0, 0x9, 0x7fff, 0x0, 0xa73}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_tid_address(0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x8) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\\\x00', 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 8.857562759s ago: executing program 1 (id=5455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) dup2(r0, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x3fd, 0x0, 0x92, 0x55, 0x3, 0x7, 0x8}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x4008550d) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x8ac00) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x7) socket$nl_route(0x10, 0x3, 0x0) 8.687660383s ago: executing program 2 (id=5456): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4296}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x40) write$dsp(r2, &(0x7f0000000180)="000d3d4b70619d999b8e940fbb106766d384e6642530a36bc3f04790e104b7a90d03f1cc4b057c9b93d9d09e9145857900186d546a9149b12bd028c1e9b10f23e8716e0490a9af3ddcb2f6f2a19e010838f396564b31a47dca2c9452d9945ef2186de7dbaf5612033ac4c753", 0x6c) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r5, 0x8001, 0x7}, 0x8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x300) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r10 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9, 0xeeeeeeee}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8992, &(0x7f0000000080)={'batadv0\x00', @ifru_flags=0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000300)={0x4, r11, r9}) 8.170159513s ago: executing program 3 (id=5457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="a982", 0x2}], 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='#(0.', 0x0) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) writev(r5, &(0x7f0000000a40), 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x11, &(0x7f0000000040)=0x5f, 0x4) r8 = dup3(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, &(0x7f0000001380)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000400)) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000140)=0xd) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x40) 7.217212364s ago: executing program 2 (id=5458): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a3b830000000000000000050000020900010073797a3048a37634140000001100010000000000000000000000000a"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r4, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x50, 0xa, 0x4, 0x800, 0x3, 0x10, 0x7, 0x9, 0x0, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537d, 0x0, 0xfffffffa, 0x12000000, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0xffffffff, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x401, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x30000, 0xd, 0x6, 0xffd, 0x40, 0xfffeffff, 0x7fff, 0x6b81102, 0x7f, 0xfffdfffe, 0x800000, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x9a0, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x810000, 0xb422, 0x1, 0x1, 0x8, 0x1, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0xd, 0x8, 0x62, 0x800, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad07, 0x8001, 0x8, 0x9, 0x121, 0x44, 0xb10, 0x8, 0x7, 0xfff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x7, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x2, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0xc, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffffd, 0x1, 0xf, 0x2, 0xfffffff8, 0x80000001, 0x4, 0x9, 0x8, 0x8, 0x9, 0x3, 0x1, 0x7, 0x8, 0x5, 0x4, 0xc, 0x0, 0xffffff68, 0x80000000, 0x5, 0x4, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x1, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x5, 0x4, 0x0, 0x1000, 0x5, 0x1bfffffc, 0x1, 0x8006, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x7, 0x6, 0xfffff7f0, 0x2, 0x3, 0x8090, 0x5, 0x6d8, 0xfffffffb, 0x9, 0x400, 0x800, 0x8, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x0, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x8}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0xde, 0x3ff}, {0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094) 7.204375553s ago: executing program 0 (id=5459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "95604099641d6894", "0eb917e26e52cdd9bd3c6422ab056f1e", '\x00\x00\x00\a', "0500"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 6.546639541s ago: executing program 4 (id=5460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab4090619b34000000000000000000000924030000000000000924050000d8211cfd09240305"], 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) ioctl$KVM_PPC_ALLOCATE_HTAB(r6, 0xc004aea7, &(0x7f0000000000)=0x7) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.848442344s ago: executing program 1 (id=5461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x65, r4}, './file1/file0\x00'}) openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000380)="cd", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') 5.839082577s ago: executing program 3 (id=5462): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000002c0)={0x18, &(0x7f0000000000)={0x20, 0x2, 0x5, {0x5, 0x6, "820037"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10102, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 5.617630927s ago: executing program 2 (id=5464): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff0300"/51], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001fc0)="dc080082a584fa7c61", 0x9}], 0x1}}], 0x1, 0x4c040) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r6, 0x6) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(r7, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2000, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_reply={0x12, 0x0, 0x0, 0x9}}}}}, 0x0) 5.616372796s ago: executing program 0 (id=5474): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000000)='r', 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x4030, 0x200, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.298150487s ago: executing program 2 (id=5465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xc6b2, 0x0, 0x800, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x292d82, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = getpid() sched_setattr(r6, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0xca, 0x0, 0x1000}}}}}}, 0x0) 3.99066908s ago: executing program 0 (id=5466): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @remote}, 0x802, 0x1, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$sysctl(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x5, 0x0, [@empty]}}}], 0x28}, 0x840) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback, 0x9}]}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x5, 0xb}, 0x8) mmap(&(0x7f000046d000/0x3000)=nil, 0x3000, 0x5, 0x50, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x60}}, 0x0) 3.936403666s ago: executing program 1 (id=5467): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) r2 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2) r3 = socket(0x10, 0x2, 0x0) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$media(0x0, 0x66, 0x180502) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4a) r8 = syz_open_dev$usbfs(0x0, 0x8, 0x240) ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc01c7c02, 0x0) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) 2.913505285s ago: executing program 4 (id=5468): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440) fdatasync(r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x4000, &(0x7f00000006c0)="02"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={r8, 0x7ff, 0x2, r8}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="662d008d0b263960fcfa43ebb066a2a4d267699773dcff76b0525b73d842f161aa96bea0e521a2c5e98d22987fd37c983c7cbb396d9bae6e0c6565ec5b654737bd7b28f195130c1e40587eda2493c0c09f2b2abcb0f491ef97f6d5d21eca986137e055ed64e66d441352459d34805cb92c7e6ef0a2cac5c74564d4055b64bfd53679fc541130e739ac59bb85096fb10089d3c4ec055b0b375ed8763e7bc12f473b8b5a5d03249d4e6587a182", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRES16=r4, @ANYBLOB="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"/334], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r7, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x3bc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) 2.568262701s ago: executing program 2 (id=5469): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$pppl2tp(0x18, 0x1, 0x1) close(r4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x2, 0x5, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000005280)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x80000000}, @l2tp={0x2, 0x0, @multicast2}, @in={0x2, 0x4e1d, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2.426609978s ago: executing program 4 (id=5470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="a982", 0x2}], 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='#(0.', 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) writev(r5, &(0x7f0000000a40), 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000040)=0x5f, 0x4) r7 = dup3(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000001380)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000400)) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000140)=0xd) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x40) 2.386666403s ago: executing program 0 (id=5471): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xda55, 0x700) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) sendfile(r3, r3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) futex_waitv(&(0x7f0000002600), 0x0, 0x0, 0x0, 0x1) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sendfile(r7, r6, 0x0, 0x578410eb) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) 2.118564322s ago: executing program 3 (id=5472): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3c42, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)) 390.158459ms ago: executing program 4 (id=5473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) dup2(r0, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x3fd, 0x0, 0x92, 0x55, 0x3, 0x7, 0x8}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x4008550d) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x8ac00) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x7) socket$nl_route(0x10, 0x3, 0x0) 266.293263ms ago: executing program 2 (id=5475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "95604099641d6894", "0eb917e26e52cdd9bd3c6422ab056f1e", '\x00\x00\x00\a', "0500"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 119.39863ms ago: executing program 1 (id=5476): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x22, 0x2, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x22}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x138}, 0x1, 0x0, 0x0, 0x880}, 0x0) pipe(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c0002800800014000000000"], 0xe4}}, 0x20050840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 0 (id=5477): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000000)='r', 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x4030, 0x200, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): been an error during control message transfer. (rlen = 0, was 0) [ 1896.255869][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 1896.283021][ T39] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1896.349834][ T39] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1896.867402][T28221] netlink: 'syz.3.4595': attribute type 1 has an invalid length. [ 1896.935137][T28030] usb 1-1: USB disconnect, device number 111 [ 1896.976144][T28030] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1897.121616][ T30] audit: type=1326 audit(1770178090.498:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.4.4594" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 1897.846085][T28235] usb usb8: usbfs: process 28235 (syz.0.4597) did not claim interface 0 before use [ 1899.125724][T28253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4601'. [ 1901.214082][T28277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4604'. [ 1901.939980][T28273] tipc: New replicast peer: 0.0.0.0 [ 1902.023238][T28273] tipc: Enabled bearer , priority 10 [ 1903.002831][T28297] binder: 28289:28297 ioctl 40046205 0 returned -22 [ 1903.014248][T25508] tipc: Node number set to 4264183286 [ 1903.328814][T28309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4611'. [ 1904.209839][T28318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1904.344161][T28318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1904.367276][T28321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1905.695397][T28336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1906.699441][T28347] usb usb8: usbfs: process 28347 (syz.3.4619) did not claim interface 0 before use [ 1907.605468][T28358] trusted_key: encrypted_key: insufficient parameters specified [ 1908.343442][T28363] binder: 28343:28363 ioctl 40046205 0 returned -22 [ 1908.441733][T28366] binder: BINDER_SET_CONTEXT_MGR already set [ 1908.459271][T28366] binder: 28365:28366 ioctl 4018620d 80000040 returned -16 [ 1909.456889][ T30] audit: type=1326 audit(1770178102.678:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.3.4626" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 1909.558730][T28390] binder: 28367:28390 ioctl 40046205 0 returned -22 [ 1910.601834][ T30] audit: type=1326 audit(1770178103.938:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28394 comm="syz.2.4628" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 1911.815959][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1911.826398][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1913.219910][T28430] trusted_key: encrypted_key: insufficient parameters specified [ 1914.078486][T28441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1914.267334][T28443] binder: 28433:28443 ioctl 40046205 0 returned -22 [ 1914.304109][ T39] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1914.378757][T28447] fuse: Unknown parameter 'ԉFfd' [ 1914.594947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.601306][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.694258][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1914.741371][ T30] audit: type=1326 audit(1770178108.018:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.1.4640" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1914.809515][ T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1914.842348][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.868238][ T39] usb 1-1: config 0 descriptor?? [ 1914.896404][ T39] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1915.355646][T28457] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1915.668579][T28462] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1916.048134][T28471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4646'. [ 1916.171291][ T30] audit: type=1326 audit(1770178109.548:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.201449][ T30] audit: type=1326 audit(1770178109.548:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.254478][ T30] audit: type=1326 audit(1770178109.548:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.296590][ T30] audit: type=1326 audit(1770178109.548:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.329285][ T30] audit: type=1326 audit(1770178109.548:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.541855][T28478] binder: 28464:28478 ioctl 40046205 0 returned -22 [ 1916.572431][ T30] audit: type=1326 audit(1770178109.548:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.721157][ T30] audit: type=1326 audit(1770178109.548:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.758885][ T30] audit: type=1326 audit(1770178109.548:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1916.791470][ T30] audit: type=1326 audit(1770178109.548:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.1.4643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1917.684289][ T39] usb 1-1: USB disconnect, device number 112 [ 1917.765951][T28489] trusted_key: encrypted_key: insufficient parameters specified [ 1917.798545][T28491] binder: BINDER_SET_CONTEXT_MGR already set [ 1917.810522][T28491] binder: 28490:28491 ioctl 4018620d 80000040 returned -16 [ 1917.884936][T28491] fuse: Unknown parameter 'f-' [ 1917.948859][T28494] tun0: tun_chr_ioctl cmd 1074025675 [ 1917.954905][T28494] tun0: persist enabled [ 1917.960791][T28494] tun0: tun_chr_ioctl cmd 1074025675 [ 1917.967087][T28494] tun0: persist disabled [ 1917.975337][T28494] macvlan0: left allmulticast mode [ 1917.980834][T28494] netlink: 'syz.2.4650': attribute type 1 has an invalid length. [ 1917.989997][T28494] netlink: 'syz.2.4650': attribute type 2 has an invalid length. [ 1918.500884][T28510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1918.539328][T19351] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1918.615418][T28511] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4652'. [ 1918.649051][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4652'. [ 1918.721586][T19351] usb 3-1: config 86 has an invalid interface number: 125 but max is 1 [ 1918.730822][T19351] usb 3-1: config 86 has an invalid interface descriptor of length 5, skipping [ 1918.740491][T19351] usb 3-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 1918.756012][T19351] usb 3-1: config 86 has no interface number 0 [ 1918.767394][T19351] usb 3-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 1918.798060][T19351] usb 3-1: config 86 interface 125 has no altsetting 0 [ 1918.832355][T19351] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 1918.914341][T19351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.922362][T19351] usb 3-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 1919.309293][T19351] usb 3-1: USB disconnect, device number 105 [ 1919.646115][T28524] ipip0: entered promiscuous mode [ 1919.651217][T28524] ipip0: entered allmulticast mode [ 1919.768367][T28521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1919.814145][T28521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1919.826681][T28521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1919.838232][T28521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1920.898149][T28526] binder: 28525:28526 ioctl 40046205 0 returned -22 [ 1921.357337][T28547] trusted_key: encrypted_key: insufficient parameters specified [ 1921.870101][T28562] fuse: Unknown parameter 'f-' [ 1921.879704][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1921.879723][ T30] audit: type=1326 audit(1770178115.228:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1921.933672][ T30] audit: type=1326 audit(1770178115.228:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1922.043400][ T30] audit: type=1326 audit(1770178115.228:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1922.178163][ T30] audit: type=1326 audit(1770178115.228:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1922.423428][ T30] audit: type=1326 audit(1770178115.228:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1922.525330][ T30] audit: type=1326 audit(1770178115.228:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1922.607344][ T30] audit: type=1326 audit(1770178115.228:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1922.657758][ T30] audit: type=1326 audit(1770178115.228:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1922.947179][ T30] audit: type=1326 audit(1770178115.228:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1923.105302][ T30] audit: type=1326 audit(1770178115.228:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28552 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 1923.256144][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4664'. [ 1923.267611][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4664'. [ 1923.277412][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4664'. [ 1925.879259][T28593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1927.923417][T28623] trusted_key: encrypted_key: insufficient parameters specified [ 1929.154264][T28644] binder: 28624:28644 ioctl 40046205 0 returned -22 [ 1930.046058][T28656] __nla_validate_parse: 2 callbacks suppressed [ 1930.046080][T28656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4679'. [ 1930.874122][T19351] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1931.144671][T19351] usb 1-1: Using ep0 maxpacket: 8 [ 1931.230375][T19351] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1931.265171][T19351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.384214][T19351] usb 1-1: config 0 has no interface number 0 [ 1931.390379][T19351] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1931.673254][T19351] usb 1-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 1931.701891][T19351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.819316][T19351] usb 1-1: config 0 descriptor?? [ 1931.858490][T19351] usb 1-1: bad CDC descriptors [ 1931.875178][T19351] cdc_acm 1-1:0.1: Zero length descriptor references [ 1931.881931][T19351] cdc_acm 1-1:0.1: probe with driver cdc_acm failed with error -22 [ 1931.914158][T28030] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1931.988176][T25508] usb 1-1: USB disconnect, device number 113 [ 1932.076109][T28030] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 1932.085666][T28030] usb 4-1: config 7 has no interface number 0 [ 1932.096709][T28674] netlink: 'syz.1.4683': attribute type 4 has an invalid length. [ 1932.210810][T28030] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1932.526380][T28030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.553086][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1932.553103][ T30] audit: type=1326 audit(1770178125.928:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.4.4684" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 1932.555132][T28030] usb 4-1: Product: syz [ 1932.672824][T28685] netlink: 'syz.0.4685': attribute type 4 has an invalid length. [ 1932.719556][T28685] netlink: 'syz.0.4685': attribute type 4 has an invalid length. [ 1932.778679][T28030] usb 4-1: Manufacturer: syz [ 1932.786697][T28030] usb 4-1: SerialNumber: syz [ 1933.028726][T19351] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1933.343162][T19351] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1933.374085][T19351] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1933.382208][T19351] usb 3-1: Manufacturer: syz [ 1933.421209][T19351] usb 3-1: config 0 descriptor?? [ 1933.739717][T19351] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1933.786775][T19351] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1933.822466][T28030] as10x_usb: device has been detected [ 1933.895756][T28030] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1933.978688][T28688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.988143][T28688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.998850][T28030] usb 4-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1934.035959][T28030] as10x_usb: error during firmware upload part1 [ 1934.045768][T28030] Registered device Elgato EyeTV DTT Deluxe [ 1934.336671][T28697] xt_bpf: check failed: parse error [ 1934.372011][T28699] trusted_key: encrypted_key: insufficient parameters specified [ 1934.861525][T19351] usb 4-1: USB disconnect, device number 93 [ 1934.910973][T19351] Unregistered device Elgato EyeTV DTT Deluxe [ 1934.924719][T19351] as10x_usb: device has been disconnected [ 1935.815634][T28708] binder: 28704:28708 ioctl 40046205 0 returned -22 [ 1935.946387][T28030] usb 3-1: USB disconnect, device number 106 [ 1936.564172][ T30] audit: type=1326 audit(1770178129.928:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28712 comm="syz.1.4690" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1937.000284][T28732] trusted_key: encrypted_key: insufficient parameters specified [ 1938.970898][T28755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4697'. [ 1940.146283][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1940.207142][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1940.218529][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1940.824378][T28030] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1941.013263][T28030] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 1941.042843][T28030] usb 2-1: config 0 has no interface number 0 [ 1941.119172][T28030] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1941.140342][T28030] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1941.164245][T28030] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1941.185905][T28030] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1941.208710][T28030] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1941.241520][T28030] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1941.252057][T28030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.282602][T28030] usb 2-1: Product: syz [ 1941.303117][T28030] usb 2-1: Manufacturer: syz [ 1941.308346][T28030] usb 2-1: SerialNumber: syz [ 1941.344259][T28030] usb 2-1: config 0 descriptor?? [ 1941.350605][T28771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1941.368484][T28030] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 1941.434748][T28030] scsi host1: usb-storage 2-1:0.189 [ 1941.499086][T28767] syz.3.4700 (28767): drop_caches: 2 [ 1941.826612][T28030] usb 2-1: USB disconnect, device number 109 [ 1941.998174][T28797] tipc: Enabling of bearer rejected, failed to enable media [ 1942.442741][ T30] audit: type=1326 audit(1770178135.818:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28784 comm="syz.0.4704" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 1942.634788][T28802] binder: 28780:28802 ioctl 40046205 0 returned -22 [ 1943.075499][T28808] trusted_key: encrypted_key: insufficient parameters specified [ 1944.071990][ T30] audit: type=1326 audit(1770178137.448:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.1.4707" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1945.106582][T19351] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1945.905410][T19351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1946.058900][T19351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1946.075173][T19351] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1946.114470][T19351] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1946.135095][T19351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.176065][T19351] usb 2-1: config 0 descriptor?? [ 1946.701112][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.714783][T28851] trusted_key: encrypted_key: insufficient parameters specified [ 1946.757553][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.821041][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.839003][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.854735][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.941195][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.949362][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.974122][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1946.982075][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1947.081718][T28856] netlink: 'syz.2.4719': attribute type 1 has an invalid length. [ 1947.092996][T19351] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1947.145634][T19351] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1947.187864][T28858] syz.4.4720 (28858): drop_caches: 2 [ 1947.475640][T28866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4722'. [ 1947.906373][ T30] audit: type=1326 audit(1770178141.278:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28862 comm="syz.2.4721" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 1948.422766][ T30] audit: type=1326 audit(1770178141.778:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28878 comm="syz.0.4724" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 1948.694058][T19351] usb 2-1: reset high-speed USB device number 110 using dummy_hcd [ 1949.424689][ T30] audit: type=1326 audit(1770178142.808:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28890 comm="syz.1.4726" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2539 code=0x0 [ 1949.714923][ T39] usb 2-1: USB disconnect, device number 110 [ 1950.924904][T28915] trusted_key: encrypted_key: insufficient parameters specified [ 1951.679710][T28921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 1951.689880][T28921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 1952.032403][T28934] trusted_key: encrypted_key: insufficient parameters specified [ 1952.051588][ T30] audit: type=1326 audit(1770178145.428:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28923 comm="syz.4.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1952.112179][ T30] audit: type=1326 audit(1770178145.428:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28923 comm="syz.4.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1952.236396][T28939] binder: 28922:28939 ioctl 40046205 0 returned -22 [ 1952.270952][ T30] audit: type=1326 audit(1770178145.428:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28923 comm="syz.4.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1952.360343][ T30] audit: type=1326 audit(1770178145.428:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28923 comm="syz.4.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1952.398342][ T30] audit: type=1326 audit(1770178145.428:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28923 comm="syz.4.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1952.447137][ T30] audit: type=1326 audit(1770178145.428:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28923 comm="syz.4.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1952.648089][ T30] audit: type=1326 audit(1770178145.428:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28923 comm="syz.4.4734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 1953.158347][T28950] openvswitch: netlink: Flow key attr not present in new flow. [ 1953.396181][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1953.396203][ T30] audit: type=1326 audit(1770178146.658:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28943 comm="syz.1.4737" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1953.504352][ T39] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1953.731215][ T39] usb 3-1: device descriptor read/64, error -71 [ 1953.975237][ T39] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1954.124049][ T39] usb 3-1: device descriptor read/64, error -71 [ 1954.394349][ T39] usb usb3-port1: attempt power cycle [ 1954.399798][ T30] audit: type=1326 audit(1770178147.738:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28962 comm="syz.4.4739" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 1954.834067][ T39] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1954.856085][ T39] usb 3-1: device descriptor read/8, error -71 [ 1955.154023][ T39] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1955.209358][T28978] hub 9-0:1.0: USB hub found [ 1955.215171][T28978] hub 9-0:1.0: 1 port detected [ 1955.224791][ T39] usb 3-1: device descriptor read/8, error -71 [ 1955.385209][ T39] usb usb3-port1: unable to enumerate USB device [ 1956.372034][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1956.398817][T28988] usb usb8: usbfs: process 28988 (syz.4.4744) did not claim interface 0 before use [ 1956.421004][T28990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4746'. [ 1957.910700][T29012] trusted_key: encrypted_key: insufficient parameters specified [ 1958.148681][T29018] binder: 28998:29018 ioctl 40046205 0 returned -22 [ 1958.945061][T29032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1960.012991][ T30] audit: type=1326 audit(1770178153.378:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.0.4755" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 1961.344084][ T30] audit: type=1326 audit(1770178154.688:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29056 comm="syz.3.4760" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 1962.480260][T29075] trusted_key: encrypted_key: insufficient parameters specified [ 1962.664220][T25508] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1962.815164][T25508] usb 2-1: device descriptor read/64, error -71 [ 1963.189010][T25508] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1963.290035][T29090] binder: 29078:29090 ioctl 40046205 0 returned -22 [ 1963.354946][T25508] usb 2-1: device descriptor read/64, error -71 [ 1963.472493][T25508] usb usb2-port1: attempt power cycle [ 1963.853133][T25508] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1963.890067][T29099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1963.931086][T25508] usb 2-1: device descriptor read/8, error -71 [ 1964.183977][T25508] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1964.251049][T25508] usb 2-1: device descriptor read/8, error -71 [ 1964.531318][T25508] usb usb2-port1: unable to enumerate USB device [ 1964.566547][ T30] audit: type=1326 audit(1770178157.948:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29101 comm="syz.0.4769" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 1966.794228][ T30] audit: type=1326 audit(1770178159.568:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29125 comm="syz.1.4774" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1969.216412][T29167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4783'. [ 1969.644453][T29174] binder: 29161:29174 ioctl 40046205 0 returned -22 [ 1969.722422][T29173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1971.837796][T29205] netlink: 'syz.1.4790': attribute type 4 has an invalid length. [ 1971.849308][T29205] netlink: 'syz.1.4790': attribute type 4 has an invalid length. [ 1972.428794][T29207] binder: 29193:29207 ioctl 40046205 0 returned -22 [ 1973.626413][T29226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4792'. [ 1973.687569][T29226] usb usb8: usbfs: process 29226 (syz.0.4792) did not claim interface 0 before use [ 1973.820135][T29229] binder: 29210:29229 ioctl 40046205 0 returned -22 [ 1975.947738][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.954481][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.457443][T29265] sctp: [Deprecated]: syz.1.4800 (pid 29265) Use of int in maxseg socket option. [ 1976.457443][T29265] Use struct sctp_assoc_value instead [ 1976.518985][T29265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1976.602117][T29258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4799'. [ 1976.677254][T29270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4802'. [ 1977.062848][T29258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4799'. [ 1977.074035][T29258] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4799'. [ 1977.525827][T29265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4800'. [ 1977.545842][T29276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1979.015126][T29301] binder: 29281:29301 ioctl 40046205 0 returned -22 [ 1979.626955][T29311] trusted_key: encrypted_key: insufficient parameters specified [ 1979.918938][T29285] binder: 29283:29285 ioctl 40046205 0 returned -22 [ 1980.674834][ T30] audit: type=1326 audit(1770178174.058:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29316 comm="syz.3.4812" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 1981.099723][T29338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4815'. [ 1981.224892][T29334] openvswitch: netlink: Flow key attr not present in new flow. [ 1981.657582][T25508] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1981.994107][T25508] usb 2-1: device descriptor read/64, error -71 [ 1982.347003][T25508] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1982.464819][T29341] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.4816'. [ 1982.583975][T25508] usb 2-1: device descriptor read/64, error -71 [ 1982.698741][T25508] usb usb2-port1: attempt power cycle [ 1983.263872][T25508] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1983.559754][T25508] usb 2-1: device descriptor read/8, error -71 [ 1983.576376][T29355] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1984.043948][T25508] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1984.283790][T25508] usb 2-1: device not accepting address 118, error -71 [ 1984.307505][T25508] usb usb2-port1: unable to enumerate USB device [ 1984.329045][ T30] audit: type=1326 audit(1770178177.688:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29360 comm="syz.0.4821" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 1984.445150][T29371] tipc: Enabled bearer , priority 0 [ 1985.046591][T29377] binder: 29367:29377 ioctl 40046205 0 returned -22 [ 1985.191570][ T30] audit: type=1326 audit(1770178178.488:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29372 comm="syz.2.4825" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 1985.694596][T29382] binder: 29378:29382 ioctl 40046205 0 returned -22 [ 1986.560616][T29401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1986.737250][ T30] audit: type=1326 audit(1770178180.108:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29396 comm="syz.2.4828" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 1987.667108][ T30] audit: type=1804 audit(1770178181.048:2317): pid=29409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4833" name="/newroot/954/file1" dev="fuse" ino=1 res=1 errno=0 [ 1988.215144][T29426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4834'. [ 1988.293014][ T30] audit: type=1326 audit(1770178181.668:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29416 comm="syz.1.4835" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1988.446626][T29427] cifs: Unknown parameter ' [ 1989.203541][T19351] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1989.611663][T19351] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1989.637660][T19351] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1989.670889][T19351] usb 4-1: Manufacturer: syz [ 1989.724159][T19351] usb 4-1: config 0 descriptor?? [ 1989.842986][T29442] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 1989.905339][ T30] audit: type=1326 audit(1770178183.288:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29438 comm="syz.1.4838" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1990.324708][T19351] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1990.351272][T19351] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1991.632223][T29459] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 1991.676950][T19351] usb 4-1: USB disconnect, device number 94 [ 1991.836140][ T30] audit: type=1326 audit(1770178185.218:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29456 comm="syz.1.4843" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 1992.061075][T29474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4846'. [ 1992.241623][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1992.255462][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1992.277625][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1992.288217][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1992.298965][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1993.169418][T29484] trusted_key: encrypted_key: insufficient parameters specified [ 1993.891695][ T30] audit: type=1326 audit(1770178187.228:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1993.907948][T29497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1993.971951][ T30] audit: type=1326 audit(1770178187.228:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1994.010175][ T30] audit: type=1326 audit(1770178187.238:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1994.190720][ T30] audit: type=1326 audit(1770178187.268:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1994.393599][T29508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4854'. [ 1994.843576][ T30] audit: type=1326 audit(1770178187.268:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1994.876966][ T30] audit: type=1326 audit(1770178187.268:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1994.900366][ T30] audit: type=1326 audit(1770178187.268:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1994.924414][ T30] audit: type=1326 audit(1770178187.268:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1994.953540][ T30] audit: type=1326 audit(1770178187.268:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1996.048964][T29527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'. [ 1996.868642][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 1996.868661][ T30] audit: type=1326 audit(1770178190.248:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f17558 code=0x7ffc0000 [ 1997.113566][ T39] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1997.266515][ T30] audit: type=1326 audit(1770178190.308:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f17558 code=0x7ffc0000 [ 1997.578051][ T30] audit: type=1326 audit(1770178190.308:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.3.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1997.649049][T29546] x_tables: duplicate underflow at hook 3 [ 1997.794171][T29545] hub 9-0:1.0: USB hub found [ 1997.799443][T29545] hub 9-0:1.0: 1 port detected [ 1997.851199][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1997.904227][ T39] usb 3-1: not running at top speed; connect to a high speed hub [ 1997.965323][ T39] usb 3-1: config 12 has an invalid interface number: 187 but max is 0 [ 1997.973862][ T39] usb 3-1: config 12 has no interface number 0 [ 1997.980131][ T39] usb 3-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1997.994781][ T39] usb 3-1: config 12 interface 187 has no altsetting 0 [ 1998.028228][ T39] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 1998.057312][T29551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4863'. [ 1998.120450][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.250772][ T39] usb 3-1: Product: syz [ 1998.633825][ T39] usb 3-1: Manufacturer: syz [ 1998.639963][ T39] usb 3-1: SerialNumber: syz [ 1998.733698][T29535] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1999.830617][T29561] trusted_key: encrypted_key: insufficient parameters specified [ 2000.340877][ T39] ti_usb_3410_5052 3-1:12.187: TI USB 3410 1 port adapter converter detected [ 2000.351384][ T39] ti_usb_3410_5052 3-1:12.187: missing endpoints [ 2000.435252][ T39] usb 3-1: USB disconnect, device number 111 [ 2000.547970][ T30] audit: type=1326 audit(1770178193.928:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29563 comm="syz.3.4866" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2001.251555][ T30] audit: type=1326 audit(1770178194.608:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29571 comm="syz.4.4868" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2001.903325][T29597] netlink: 'syz.2.4870': attribute type 10 has an invalid length. [ 2001.984601][T29599] QAT: failed to copy from user. [ 2002.012729][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4870'. [ 2002.291283][T29597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2002.298666][T29597] team0: Port device bond0 added [ 2002.343973][ T30] audit: type=1326 audit(1770178195.658:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29589 comm="syz.0.4871" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2002.443701][T19351] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2002.749938][T19351] usb 4-1: Using ep0 maxpacket: 32 [ 2002.905311][T19351] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2002.913769][T19351] usb 4-1: config 0 has no interface number 0 [ 2002.919893][T19351] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2002.932723][T19351] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.953853][T19351] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2002.963950][T19351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.982706][T29601] team0 (unregistering): Port device team_slave_0 removed [ 2003.003664][T29601] team0 (unregistering): Port device team_slave_1 removed [ 2003.027899][T29601] team0 (unregistering): Port device bond0 removed [ 2003.212361][T19351] usb 4-1: config 0 descriptor?? [ 2003.396930][T29616] ipvlan2: entered promiscuous mode [ 2003.406591][T29618] input: syz0 as /devices/virtual/input/input81 [ 2003.448755][T29616] bridge0: port 1(ipvlan2) entered blocking state [ 2003.480139][T29616] bridge0: port 1(ipvlan2) entered disabled state [ 2003.507830][T29616] ipvlan2: entered allmulticast mode [ 2003.519167][T29616] bridge0: entered allmulticast mode [ 2003.537866][T29616] ipvlan2: left allmulticast mode [ 2003.560228][T29616] bridge0: left allmulticast mode [ 2003.651265][T29623] netlink: 'syz.0.4874': attribute type 2 has an invalid length. [ 2003.854482][T19351] uclogic 0003:28BD:0094.002F: pen parameters not found [ 2003.861588][T19351] uclogic 0003:28BD:0094.002F: interface is invalid, ignoring [ 2004.420766][T29605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.434353][T29605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.487549][T25508] usb 4-1: USB disconnect, device number 95 [ 2004.605349][T29635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4879'. [ 2005.131333][T29643] input: syz1 as /devices/virtual/input/input82 [ 2005.546553][T29645] netlink: 'syz.2.4881': attribute type 1 has an invalid length. [ 2005.564312][ T30] audit: type=1326 audit(1770178198.948:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29642 comm="syz.3.4882" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2005.706734][T29655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4883'. [ 2005.988336][T29659] binder: BINDER_SET_CONTEXT_MGR already set [ 2005.997000][T29659] binder: 29658:29659 ioctl 4018620d 80000040 returned -16 [ 2006.015997][T29659] fuse: Unknown parameter 'f-' [ 2006.682636][T29672] binder: 29669:29672 ioctl 4018620d 0 returned -22 [ 2006.854381][ T30] audit: type=1326 audit(1770178200.208:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29660 comm="syz.0.4885" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2007.275142][T25508] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2007.526915][T29666] netlink: 'syz.2.4886': attribute type 4 has an invalid length. [ 2007.760288][T25508] usb 2-1: config 0 has no interfaces? [ 2007.775949][T25508] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2007.802825][T25508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.848293][T25508] usb 2-1: config 0 descriptor?? [ 2008.053758][T29672] binder: 29669:29672 ioctl d000941e 0 returned -22 [ 2008.622004][T29693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4890'. [ 2009.212283][T29705] netlink: 'syz.3.4892': attribute type 10 has an invalid length. [ 2009.229383][T29705] veth0_to_hsr: left promiscuous mode [ 2009.240610][T29705] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 2009.330735][T29706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4892'. [ 2009.372298][T29705] veth0_to_hsr: entered promiscuous mode [ 2009.378061][T29705] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2009.507567][T29705] team0: Device bond0 failed to register rx_handler [ 2009.538165][T19351] usb 2-1: USB disconnect, device number 119 [ 2009.593333][T29705] veth0_to_hsr: left promiscuous mode [ 2009.644354][T29705] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 2009.952276][T29706] team0 (unregistering): Port device team_slave_0 removed [ 2009.977662][T29706] team0 (unregistering): Port device team_slave_1 removed [ 2010.202815][ T30] audit: type=1326 audit(1770178203.568:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.1.4893" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2010.996259][T29726] binder: BINDER_SET_CONTEXT_MGR already set [ 2011.012733][T29726] binder: 29725:29726 ioctl 4018620d 80000040 returned -16 [ 2011.142808][T29726] fuse: Unknown parameter 'f-' [ 2011.354021][T19351] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2011.533830][T19351] usb 3-1: device descriptor read/64, error -71 [ 2011.587866][T29735] netlink: 'syz.1.4897': attribute type 1 has an invalid length. [ 2011.843622][T19351] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2011.983631][T19351] usb 3-1: device descriptor read/64, error -71 [ 2012.100718][T19351] usb usb3-port1: attempt power cycle [ 2012.139886][T29742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4899'. [ 2012.443683][T19351] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2012.467404][T19351] usb 3-1: device descriptor read/8, error -71 [ 2012.813693][T19351] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2012.924987][T19351] usb 3-1: device descriptor read/8, error -71 [ 2013.033904][T19351] usb usb3-port1: unable to enumerate USB device [ 2013.213142][T29755] binder: 29748:29755 ioctl 40046205 0 returned -22 [ 2013.490500][T29765] netlink: 'syz.4.4903': attribute type 10 has an invalid length. [ 2013.599414][T29765] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 2013.628317][T29765] bond0: (slave netdevsim0): Releasing backup interface [ 2013.660464][T29765] team0: Port device netdevsim0 added [ 2013.700551][T29766] netlink: 'syz.4.4903': attribute type 10 has an invalid length. [ 2013.802078][T29766] team0: Port device netdevsim0 removed [ 2013.995342][T29766] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2014.793832][T25508] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2015.059244][T25508] usb 4-1: device descriptor read/64, error -71 [ 2015.304755][T25508] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2015.454785][T25508] usb 4-1: device descriptor read/64, error -71 [ 2015.576030][T25508] usb usb4-port1: attempt power cycle [ 2015.704704][T29791] binder: BINDER_SET_CONTEXT_MGR already set [ 2015.723696][T29791] binder: 29790:29791 ioctl 4018620d 80000040 returned -16 [ 2015.768057][T29791] fuse: Unknown parameter 'f-' [ 2016.306684][T29804] trusted_key: encrypted_key: insufficient parameters specified [ 2017.715335][T29812] netlink: 'syz.0.4912': attribute type 1 has an invalid length. [ 2017.739221][T29816] ipvlan2: entered promiscuous mode [ 2017.753320][T29816] bridge0: port 1(ipvlan2) entered blocking state [ 2017.780516][T29816] bridge0: port 1(ipvlan2) entered disabled state [ 2017.788249][T29816] ipvlan2: entered allmulticast mode [ 2017.794568][T29816] bridge0: entered allmulticast mode [ 2017.802180][ T30] audit: type=1326 audit(1770178211.178:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.1.4914" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2017.826390][T29816] ipvlan2: left allmulticast mode [ 2017.831480][T29816] bridge0: left allmulticast mode [ 2018.094752][T29825] netlink: 'syz.2.4915': attribute type 2 has an invalid length. [ 2018.918829][T29840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4919'. [ 2019.329136][T29838] ipip1: entered promiscuous mode [ 2019.334463][T29838] ipip1: entered allmulticast mode [ 2019.354401][T29838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4916'. [ 2019.991907][T29849] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 2022.583373][ T30] audit: type=1326 audit(1770178215.948:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29874 comm="syz.4.4928" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2022.783590][ T39] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 2022.975673][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2022.989394][ T39] usb 2-1: not running at top speed; connect to a high speed hub [ 2023.028221][ T39] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 2023.061896][T29901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4930'. [ 2023.071256][ T39] usb 2-1: config 12 has no interface number 0 [ 2023.098635][ T39] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2023.289373][ T39] usb 2-1: config 12 interface 187 has no altsetting 0 [ 2023.350244][ T39] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 2023.363909][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.390354][ T39] usb 2-1: Product: syz [ 2023.396290][ T39] usb 2-1: Manufacturer: syz [ 2023.431937][ T39] usb 2-1: SerialNumber: syz [ 2023.460368][T29891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2025.061190][ T39] ti_usb_3410_5052 2-1:12.187: TI USB 3410 1 port adapter converter detected [ 2025.085159][ T39] ti_usb_3410_5052 2-1:12.187: missing endpoints [ 2025.379202][ T39] usb 2-1: USB disconnect, device number 120 [ 2026.588082][T29935] binder: BINDER_SET_CONTEXT_MGR already set [ 2026.598022][T29935] binder: 29934:29935 ioctl 4018620d 80000040 returned -16 [ 2026.761129][T29938] fuse: Unknown parameter 'f-' [ 2027.210661][T29947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4939'. [ 2027.607741][T29955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4941'. [ 2029.561738][ T30] audit: type=1326 audit(1770178222.938:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29973 comm="syz.2.4945" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2029.646633][T29979] trusted_key: encrypted_key: insufficient parameters specified [ 2030.586356][T29988] bond8: option miimon: invalid value (18446744073709551615) [ 2030.749879][T29988] bond8: option miimon: allowed values 0 - 2147483647 [ 2030.812073][T29988] bond8 (unregistering): Released all slaves [ 2031.073057][T29991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4947'. [ 2031.411104][T30007] fuse: Bad value for 'fd' [ 2032.857180][T30019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4952'. [ 2033.877111][T30032] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4955'. [ 2034.013521][T30021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.060795][T30040] xt_CT: No such helper "snmp" [ 2035.079910][T30049] netlink: 'syz.1.4958': attribute type 10 has an invalid length. [ 2035.089095][T30049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4958'. [ 2035.690520][T30054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4960'. [ 2036.494055][ T30] audit: type=1326 audit(1770178229.768:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30057 comm="syz.0.4961" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2037.414440][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.420790][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.457206][T30077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2037.529543][ T30] audit: type=1326 audit(1770178230.858:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30064 comm="syz.2.4962" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2038.192396][T30088] x_tables: duplicate underflow at hook 3 [ 2038.741991][ T30] audit: type=1326 audit(1770178232.118:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30070 comm="syz.3.4965" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2039.499189][T30100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4968'. [ 2040.499233][T30110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4971'. [ 2040.686117][T30119] binder: 30108:30119 ioctl 4018620d 0 returned -22 [ 2042.238629][T30133] binder: 30106:30133 ioctl 40046205 0 returned -22 [ 2042.748723][T30146] input: syz1 as /devices/virtual/input/input84 [ 2043.019134][ T30] audit: type=1326 audit(1770178236.398:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.1.4977" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2043.145996][T30148] vhci_hcd vhci_hcd.0: port 0 already used [ 2044.317838][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4980'. [ 2044.428724][T30165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4979'. [ 2044.906788][T30173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4982'. [ 2045.046397][T30173] libceph: resolve '0..' (ret=-3): failed [ 2045.649341][T30177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4984'. [ 2046.609693][ T30] audit: type=1326 audit(1770178239.858:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2046.781622][ T30] audit: type=1326 audit(1770178239.858:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2046.861676][ T30] audit: type=1326 audit(1770178239.858:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2046.947699][ T30] audit: type=1326 audit(1770178239.858:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2047.027406][ T30] audit: type=1326 audit(1770178239.858:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2047.128631][ T30] audit: type=1326 audit(1770178239.858:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2047.163270][ T30] audit: type=1326 audit(1770178239.868:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2047.366233][ T30] audit: type=1326 audit(1770178239.868:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2047.588358][ T30] audit: type=1326 audit(1770178239.868:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30181 comm="syz.2.4985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2048.682675][T30226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4992'. [ 2049.317657][T30234] tipc: Resetting bearer [ 2049.541317][T30234] tipc: Resetting bearer [ 2049.726686][T30240] binder: 30214:30240 ioctl 40046205 0 returned -22 [ 2050.508587][ T39] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2050.628379][T30250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4997'. [ 2050.642791][T26833] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.674488][T26833] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 2050.696036][T26833] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.701758][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 2050.709256][T26833] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 2050.745435][T26833] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.759478][ T39] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2050.890232][ T39] usb 2-1: config 0 has no interface number 0 [ 2050.916869][ T39] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.959680][ T39] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.963100][T26833] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 2051.130719][T26833] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.133485][ T39] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2051.180430][T26833] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 2051.195833][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.373653][ T39] usb 2-1: config 0 descriptor?? [ 2051.384172][T19351] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 2051.523982][T19351] usb 3-1: device descriptor read/64, error -71 [ 2051.758239][T30266] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4999'. [ 2051.839573][T19351] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 2052.093623][T19351] usb 3-1: device descriptor read/64, error -71 [ 2052.180124][ T39] uclogic 0003:28BD:0094.0030: pen parameters not found [ 2052.188977][ T39] uclogic 0003:28BD:0094.0030: interface is invalid, ignoring [ 2052.319103][T19351] usb usb3-port1: attempt power cycle [ 2052.786251][T30246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.795659][T30246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.919990][ T39] usb 2-1: USB disconnect, device number 121 [ 2053.083526][T19351] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 2053.119523][T19351] usb 3-1: device descriptor read/8, error -71 [ 2053.443559][T19351] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 2053.666055][T30284] hub 9-0:1.0: USB hub found [ 2053.672075][T30284] hub 9-0:1.0: 1 port detected [ 2053.680806][T19351] usb 3-1: device descriptor read/8, error -71 [ 2053.937913][T19351] usb usb3-port1: unable to enumerate USB device [ 2054.143805][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2054.143820][ T30] audit: type=1326 audit(1770178247.518:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30289 comm="syz.3.5003" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2054.533792][T30307] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2055.850624][ T30] audit: type=1326 audit(1770178249.228:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.0.5008" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2056.134927][T30328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2056.578008][T30328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2056.854189][T25508] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2057.144668][ T30] audit: type=1326 audit(1770178250.518:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2057.168277][T30345] fuse: Invalid rootmode [ 2057.243795][T25508] usb 3-1: Using ep0 maxpacket: 32 [ 2057.280672][T25508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2057.320303][T25508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2057.339546][ T30] audit: type=1326 audit(1770178250.518:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2057.459074][T30336] binder: 30329:30336 ioctl 40046205 0 returned -22 [ 2058.003606][ T30] audit: type=1326 audit(1770178250.518:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2058.027220][T25508] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2058.074092][T25508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2058.108198][ T30] audit: type=1326 audit(1770178250.518:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2058.132587][T25508] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2058.159442][T25508] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2058.429955][T25508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.439099][ T30] audit: type=1326 audit(1770178250.518:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2058.464101][T25508] usb 3-1: Product: syz [ 2058.468323][T25508] usb 3-1: Manufacturer: syz [ 2058.474350][T25508] usb 3-1: SerialNumber: syz [ 2058.482161][ T30] audit: type=1326 audit(1770178250.518:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2058.517980][T25508] usb 3-1: config 0 descriptor?? [ 2058.525563][T30335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2058.600739][ T30] audit: type=1326 audit(1770178250.518:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2058.641074][T25508] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input85 [ 2058.655885][ T30] audit: type=1326 audit(1770178250.518:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30339 comm="syz.3.5013" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2058.658887][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2058.826322][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2058.916512][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2059.027877][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2059.178705][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2059.238434][T30248] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2059.249050][T30353] netlink: 'syz.4.5015': attribute type 1 has an invalid length. [ 2059.315305][ T5180] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2059.433118][ T39] usb 3-1: USB disconnect, device number 120 [ 2059.544076][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2059.544095][ T30] audit: type=1326 audit(1770178252.838:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30349 comm="syz.0.5014" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2060.065058][ T30] audit: type=1326 audit(1770178253.448:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30361 comm="syz.3.5017" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2062.065084][ T30] audit: type=1326 audit(1770178255.378:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.1.5024" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2062.559552][T30410] binder: 30393:30410 ioctl 40046205 0 returned -22 [ 2063.727266][T30427] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2063.916751][T30434] binder: 30414:30434 ioctl 40046205 0 returned -22 [ 2063.941415][T30429] netlink: 'syz.0.5030': attribute type 1 has an invalid length. [ 2065.380124][ T30] audit: type=1326 audit(1770178258.748:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30444 comm="syz.0.5033" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2065.476143][T30457] netlink: 'syz.2.5032': attribute type 10 has an invalid length. [ 2065.487072][T30457] netlink: 'syz.2.5032': attribute type 10 has an invalid length. [ 2065.681956][T30454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5034'. [ 2066.420867][ T30] audit: type=1326 audit(1770178259.798:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30459 comm="syz.3.5035" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2067.636713][ T30] audit: type=1326 audit(1770178261.018:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.2.5037" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2068.001292][T30486] binder: 30484:30486 ioctl 40046205 0 returned -22 [ 2068.886802][T30506] usb usb1: check_ctrlrecip: process 30506 (syz.3.5043) requesting ep 01 but needs 81 [ 2069.045487][T30506] input: syz1 as /devices/virtual/input/input86 [ 2069.300696][T30514] netlink: 'syz.4.5044': attribute type 1 has an invalid length. [ 2069.575551][ T30] audit: type=1326 audit(1770178262.958:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30510 comm="syz.3.5045" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2070.495154][T30532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5046'. [ 2070.885221][ T30] audit: type=1326 audit(1770178264.238:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30530 comm="syz.4.5048" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2072.046282][T30552] netlink: 'syz.1.5049': attribute type 10 has an invalid length. [ 2072.064639][T30552] netlink: 'syz.1.5049': attribute type 10 has an invalid length. [ 2072.104162][T30553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5051'. [ 2072.152074][T30551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5050'. [ 2073.032395][T30558] trusted_key: encrypted_key: insufficient parameters specified [ 2073.078796][T30558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5062'. [ 2074.367617][T30575] binder: 30559:30575 ioctl 40046205 0 returned -22 [ 2075.331896][ T30] audit: type=1326 audit(1770178268.658:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30579 comm="syz.4.5056" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2076.813920][T30615] overlayfs: missing 'lowerdir' [ 2077.160384][T30605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5058'. [ 2077.937319][T30630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5064'. [ 2078.171255][T30632] netlink: 'syz.3.5065': attribute type 10 has an invalid length. [ 2078.190778][T30632] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 2078.233474][T30633] netlink: 'syz.3.5065': attribute type 10 has an invalid length. [ 2078.250140][T30632] bond0: (slave netdevsim0): Releasing backup interface [ 2078.271521][T30633] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2078.578336][T30642] binder: BINDER_SET_CONTEXT_MGR already set [ 2078.950003][T30640] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5066'. [ 2079.233819][T30642] binder: 30641:30642 ioctl 4018620d 80000040 returned -16 [ 2079.276735][T30642] fuse: Unknown parameter 'f-' [ 2080.265731][T30664] binder: 30654:30664 ioctl 40046205 0 returned -22 [ 2080.934196][T25508] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 2081.443761][T25508] usb 2-1: device descriptor read/64, error -71 [ 2081.714117][T25508] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 2081.843994][T25508] usb 2-1: device descriptor read/64, error -71 [ 2082.084683][T25508] usb usb2-port1: attempt power cycle [ 2082.646252][T25508] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 2083.108017][T30693] binder: 30681:30693 ioctl 40046205 0 returned -22 [ 2083.419499][T25508] usb 2-1: device descriptor read/8, error -71 [ 2083.629402][T30701] tun0: tun_chr_ioctl cmd 1074025675 [ 2083.673511][T30701] tun0: persist enabled [ 2083.678555][T30701] tun0: tun_chr_ioctl cmd 1074025675 [ 2083.684367][T30701] tun0: persist disabled [ 2083.948847][T30709] binder: BINDER_SET_CONTEXT_MGR already set [ 2083.955588][T30709] binder: 30708:30709 ioctl 4018620d 80000040 returned -16 [ 2084.189557][T30714] fuse: Unknown parameter 'f-' [ 2084.320558][T30706] tipc: Resetting bearer [ 2084.383194][T18421] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2084.409347][T18421] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2084.427257][T18421] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2084.441005][T18421] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2084.537698][T18421] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2084.568226][T25508] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2084.630307][T18421] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2084.649878][T18421] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2084.657714][T25508] usb 2-1: config 86 has an invalid interface number: 125 but max is 1 [ 2084.673818][T18421] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2084.674624][T25508] usb 2-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 2084.732506][T25508] usb 2-1: config 86 has no interface number 0 [ 2084.791081][T25508] usb 2-1: config 86 interface 125 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2084.872414][T25508] usb 2-1: config 86 interface 125 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 2084.886311][T25508] usb 2-1: config 86 interface 125 has no altsetting 0 [ 2085.038828][T25508] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 2085.050276][T25508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.062066][T25508] usb 2-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 2085.572635][T25508] usb 2-1: USB disconnect, device number 125 [ 2085.846493][T30732] program syz.3.5084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2086.545421][T30758] netlink: 'syz.0.5082': attribute type 10 has an invalid length. [ 2086.933127][T30760] netlink: 'syz.0.5082': attribute type 10 has an invalid length. [ 2086.945254][T30752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5083'. [ 2087.453994][T30758] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2087.521632][T30758] bond0: (slave netdevsim0): Releasing backup interface [ 2087.589271][T30758] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2087.643112][T30758] team0: Port device netdevsim0 added [ 2088.629212][T30763] delete_channel: no stack [ 2088.783589][ T39] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 2089.000456][ T39] usb 3-1: device descriptor read/64, error -71 [ 2089.423922][ T39] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 2089.513258][T30791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5094'. [ 2089.570673][ T39] usb 3-1: device descriptor read/64, error -71 [ 2089.684028][ T39] usb usb3-port1: attempt power cycle [ 2090.053519][ T39] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 2090.113142][ T39] usb 3-1: device descriptor read/8, error -71 [ 2090.473536][ T39] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 2090.538096][ T39] usb 3-1: device descriptor read/8, error -71 [ 2090.697081][ T39] usb usb3-port1: unable to enumerate USB device [ 2090.814648][T30806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2090.834950][T30806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2091.579856][T30815] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5098'. [ 2092.531780][ T30] audit: type=1326 audit(1770178285.898:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30818 comm="syz.2.5101" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2093.380996][T30841] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5104'. [ 2093.486518][T30843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5103'. [ 2093.918980][T30851] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 2093.970661][T30854] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 2093.984018][T30851] bond0: (slave netdevsim0): Releasing backup interface [ 2094.056108][T30851] team0: Port device netdevsim0 added [ 2094.129114][T30854] team0: Port device netdevsim0 removed [ 2094.141525][T30854] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2094.189710][T30859] IPv6: sit2: Disabled Multicast RS [ 2094.220084][T30859] sit2: entered allmulticast mode [ 2094.510861][T30870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5107'. [ 2098.743031][T30925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5119'. [ 2098.767165][T30928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5118'. [ 2098.838722][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.845251][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.168420][T30970] tipc: Bearer : already 2 bearers with priority 10 [ 2101.177399][T30970] tipc: Bearer : trying with adjusted priority [ 2101.185282][T30970] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2103.203838][ T9] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 2103.505346][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2103.525054][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.546939][ T9] usb 3-1: Product: syz [ 2103.558965][ T9] usb 3-1: Manufacturer: syz [ 2103.583835][ T9] usb 3-1: SerialNumber: syz [ 2103.594756][ T9] usb 3-1: config 0 descriptor?? [ 2103.813654][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2104.720252][T31008] netlink: 'syz.0.5135': attribute type 10 has an invalid length. [ 2106.627592][T31017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5136'. [ 2106.656030][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2106.674750][ T9] usb 3-1: USB disconnect, device number 125 [ 2107.528555][ T30] audit: type=1326 audit(1770178300.908:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31030 comm="syz.0.5139" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2107.674334][ T9] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 2108.073217][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 2108.086430][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.120616][ T9] usb 2-1: config 0 descriptor?? [ 2108.172639][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input87 [ 2110.664247][ T30] audit: type=1326 audit(1770178303.868:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31056 comm="syz.2.5145" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2111.252741][ T5180] bcm5974 2-1:0.0: could not read from device [ 2111.259300][ T39] usb 2-1: USB disconnect, device number 126 [ 2111.284583][T30943] bcm5974 2-1:0.0: could not read from device [ 2111.501950][T30943] udevd[30943]: Error opening device "/dev/input/event4": No such device [ 2111.524141][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2111.549297][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2111.575240][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2111.603601][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2111.984376][T25508] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2112.193897][T25508] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2112.202122][T31087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5150'. [ 2112.211708][T31087] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2112.224413][T25508] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2112.256279][T25508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.268869][T31087] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2112.368785][T31093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5151'. [ 2112.421616][T25508] usb 4-1: config 0 descriptor?? [ 2113.099880][T31097] netlink: 'syz.2.5152': attribute type 1 has an invalid length. [ 2113.498642][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 2113.512683][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 2113.523982][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 2113.545521][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 2113.566760][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 2113.856819][T25508] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 2114.026095][T31114] overlayfs: missing 'lowerdir' [ 2114.181494][ T39] usb 4-1: USB disconnect, device number 99 [ 2115.728418][ T30] audit: type=1326 audit(1770178309.088:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31119 comm="syz.3.5158" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2117.539922][T31159] fuse: Unknown parameter 'group_id00000000000000000000' [ 2119.627148][T31181] overlayfs: missing 'lowerdir' [ 2119.731057][T31184] trusted_key: encrypted_key: insufficient parameters specified [ 2120.625129][T31194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5166'. [ 2121.175993][T31201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5171'. [ 2121.185169][T31201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5171'. [ 2123.365909][ T30] audit: type=1326 audit(1770178316.748:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31219 comm="syz.1.5174" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2125.002332][T31249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5178'. [ 2125.322332][T31254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5180'. [ 2126.242166][T31264] No buffer was provided with the request [ 2126.752181][T31267] binder: BINDER_SET_CONTEXT_MGR already set [ 2126.770461][T31267] binder: 31266:31267 ioctl 4018620d 80000040 returned -16 [ 2126.868742][T31267] fuse: Unknown parameter 'f-' [ 2127.614450][ T30] audit: type=1326 audit(1770178320.998:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31269 comm="syz.1.5185" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2127.646416][T31279] binder: 31263:31279 ioctl 40046205 0 returned -22 [ 2128.011702][T31292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5188'. [ 2129.216910][ T30] audit: type=1326 audit(1770178322.588:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31295 comm="syz.1.5190" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2130.223305][T31326] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2131.364461][T31339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5195'. [ 2131.506794][T31341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5196'. [ 2131.815718][T31346] netlink: 'syz.3.5197': attribute type 1 has an invalid length. [ 2133.122813][T31365] netlink: 'syz.3.5201': attribute type 4 has an invalid length. [ 2133.137776][ T30] audit: type=1400 audit(1770178326.518:2579): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=31360 comm="syz.3.5201" [ 2133.727560][T31374] binder: 31366:31374 ioctl 40046205 0 returned -22 [ 2133.926328][ T30] audit: type=1326 audit(1770178327.298:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2133.959551][ T30] audit: type=1326 audit(1770178327.298:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2134.058748][ T30] audit: type=1326 audit(1770178327.298:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2134.243629][ T30] audit: type=1326 audit(1770178327.298:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2134.327319][ T30] audit: type=1326 audit(1770178327.428:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2134.545394][ T30] audit: type=1326 audit(1770178327.428:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2135.055044][ T30] audit: type=1326 audit(1770178327.428:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31381 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf715572b code=0x7ffc0000 [ 2135.314039][ T30] audit: type=1326 audit(1770178327.578:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31381 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2135.464000][ T30] audit: type=1326 audit(1770178327.988:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed558 code=0x7ffc0000 [ 2135.504036][ T30] audit: type=1326 audit(1770178327.988:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31370 comm="syz.2.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2137.964487][T31425] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2137.975672][ T30] audit: type=1326 audit(1770178331.308:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.1.5212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 2137.975727][ T30] audit: type=1326 audit(1770178331.308:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.1.5212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 2137.975763][ T30] audit: type=1326 audit(1770178331.308:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31420 comm="syz.1.5212" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 2138.259596][T31428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5210'. [ 2138.316835][T31422] netlink: 'syz.3.5211': attribute type 1 has an invalid length. [ 2138.987953][T31439] fuse: Unknown parameter 'group_id00000000000000000000' [ 2139.512659][T31451] trusted_key: encrypted_key: insufficient parameters specified [ 2140.840555][T31465] tipc: Enabling of bearer rejected, failed to enable media [ 2142.242713][T31484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5224'. [ 2142.377445][T31480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5225'. [ 2143.703940][ T39] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 2143.934183][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 2144.007132][T31508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5229'. [ 2144.049760][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.121971][ T39] usb 3-1: config 0 descriptor?? [ 2144.291700][ T39] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 2145.034166][T31518] fuse: Unknown parameter 'group_id00000000000000000000' [ 2146.020551][T30943] bcm5974 3-1:0.0: could not read from device [ 2146.021032][ T39] usb 3-1: USB disconnect, device number 126 [ 2146.078439][ T5180] bcm5974 3-1:0.0: could not read from device [ 2146.142903][T30943] udevd[30943]: Error opening device "/dev/input/event4": No such file or directory [ 2146.202897][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2146.222115][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2146.324360][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2146.345642][T30943] udevd[30943]: Unable to EVIOCGABS device "/dev/input/event4" [ 2146.360766][T30943] udevd[30943]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 2146.667381][ T5195] udevd[5195]: worker [30943] terminated by signal 6 (Aborted) [ 2146.735718][ T5195] udevd[5195]: worker [30943] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88/event4' [ 2146.911771][T31542] trusted_key: encrypted_key: insufficient parameters specified [ 2146.948970][ T39] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2147.173659][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 2147.267093][ T39] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 2147.288338][ T39] usb 3-1: config 9 has no interface number 0 [ 2147.312482][ T39] usb 3-1: config 9 interface 37 has no altsetting 0 [ 2147.587173][ T39] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 2147.613499][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.641921][ T39] usb 3-1: Product: syz [ 2147.653707][ T39] usb 3-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠 [ 2147.714094][ T39] usb 3-1: SerialNumber: syz [ 2149.591148][ T39] gspca_main: spca506-2.14.0 probing 0734:043b [ 2150.444579][T31560] binder: 31559:31560 ioctl 40046205 0 returned -22 [ 2150.737404][ T39] usb 3-1: USB disconnect, device number 127 [ 2151.976919][T31597] fuse: Unknown parameter 'group_id00000000000000000000' [ 2152.253548][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2152.253568][ T30] audit: type=1326 audit(1770178345.548:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31593 comm="syz.2.5246" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2152.907053][T31607] veth1_to_bond: entered allmulticast mode [ 2153.669098][T31604] veth1_to_bond: left allmulticast mode [ 2153.855236][T31619] trusted_key: encrypted_key: insufficient parameters specified [ 2156.086404][T31638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5253'. [ 2157.141327][ T30] audit: type=1326 audit(1770178350.518:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31647 comm="syz.0.5256" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2157.450282][T31666] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2157.461861][ T30] audit: type=1326 audit(1770178350.788:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2157.635385][ T30] audit: type=1326 audit(1770178350.788:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2157.839942][ T30] audit: type=1326 audit(1770178350.788:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2157.902918][ T30] audit: type=1326 audit(1770178350.788:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2157.988741][ T30] audit: type=1326 audit(1770178350.788:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2158.016284][ T30] audit: type=1326 audit(1770178350.788:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2158.054525][ T30] audit: type=1326 audit(1770178350.788:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2158.184540][ T30] audit: type=1326 audit(1770178350.798:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2158.263876][ T30] audit: type=1326 audit(1770178350.808:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2158.326811][ T30] audit: type=1326 audit(1770178350.808:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31661 comm="syz.3.5259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2158.647308][T31673] tipc: Enabled bearer , priority 0 [ 2158.654916][T31673] syzkaller0: entered promiscuous mode [ 2158.660432][T31673] syzkaller0: entered allmulticast mode [ 2158.684566][T31673] tipc: Resetting bearer [ 2158.695238][T31671] tipc: Resetting bearer [ 2158.820699][T31680] xt_TCPMSS: Only works on TCP SYN packets [ 2158.976653][T31671] tipc: Disabling bearer [ 2160.269907][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.276369][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.757254][T31698] trusted_key: encrypted_key: insufficient parameters specified [ 2161.432431][T31711] binder: 31706:31711 ioctl 40046205 0 returned -22 [ 2162.583587][T28030] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 2162.798224][T28030] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.808435][T28030] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2162.821474][T28030] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2162.837906][T28030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.853462][T28030] usb 4-1: Product: syz [ 2162.857673][T28030] usb 4-1: Manufacturer: syz [ 2162.866705][T28030] usb 4-1: SerialNumber: syz [ 2162.893780][ T39] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2163.055420][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2163.055438][ T30] audit: type=1326 audit(1770178356.438:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31724 comm="syz.2.5271" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2163.369431][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2163.417062][ T39] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2163.433555][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.458470][ T39] usb 2-1: config 0 descriptor?? [ 2163.926242][ T39] hid (null): report_id 0 is invalid [ 2163.935530][ T39] creative-sb0540 0003:041E:3100.0031: report_id 0 is invalid [ 2163.945033][ T39] creative-sb0540 0003:041E:3100.0031: item 0 0 1 8 parsing failed [ 2163.957082][ T39] creative-sb0540 0003:041E:3100.0031: parse failed [ 2163.973506][ T39] creative-sb0540 0003:041E:3100.0031: probe with driver creative-sb0540 failed with error -22 [ 2164.730793][T31748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.742562][T31748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.429007][T31757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5275'. [ 2165.438748][T31757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5275'. [ 2165.730594][ T30] audit: type=1326 audit(1770178359.108:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31751 comm="syz.4.5276" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2165.814133][ T39] usb 2-1: USB disconnect, device number 127 [ 2166.735037][T28030] usb 4-1: 0:2 : does not exist [ 2166.821314][T28030] usb 4-1: USB disconnect, device number 100 [ 2167.103496][ T30] audit: type=1326 audit(1770178360.478:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31769 comm="syz.3.5280" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2167.194139][T31768] binder: 31767:31768 ioctl 40046205 0 returned -22 [ 2167.873290][T31786] trusted_key: encrypted_key: insufficient parameters specified [ 2168.202082][T31794] netlink: 'syz.1.5284': attribute type 1 has an invalid length. [ 2169.227545][T31803] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2170.693520][ T30] audit: type=1326 audit(1770178363.788:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.1.5286" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x0 [ 2170.783086][T31800] delete_channel: no stack [ 2173.230651][T31855] binder: BINDER_SET_CONTEXT_MGR already set [ 2173.236783][T31855] binder: 31854:31855 ioctl 4018620d 80000040 returned -16 [ 2173.246423][T31855] binder: 31854:31855 ioctl c0306201 80001a80 returned -11 [ 2173.617670][T31862] netlink: 'syz.4.5297': attribute type 1 has an invalid length. [ 2174.813613][T31868] misc userio: No port type given on /dev/userio [ 2174.944040][T31875] xt_bpf: check failed: parse error [ 2176.021651][T31886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5303'. [ 2176.327219][T31891] binder: 31884:31891 ioctl 4018620d 0 returned -22 [ 2176.441496][T31893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5305'. [ 2177.718076][T31891] binder: 31884:31891 ioctl d000941e 0 returned -22 [ 2178.708680][T31909] trusted_key: encrypted_key: insufficient parameters specified [ 2179.576131][T31925] trusted_key: encrypted_key: insufficient parameters specified [ 2180.104364][ T30] audit: type=1326 audit(1770178373.488:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.192060][ T30] audit: type=1326 audit(1770178373.508:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.222578][ T30] audit: type=1326 audit(1770178373.508:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.263276][ T30] audit: type=1326 audit(1770178373.508:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.463680][ T30] audit: type=1326 audit(1770178373.508:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.603451][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2180.622604][ T30] audit: type=1326 audit(1770178373.508:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.803609][ T30] audit: type=1326 audit(1770178373.508:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.833588][ T30] audit: type=1326 audit(1770178373.508:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.856074][ T30] audit: type=1326 audit(1770178373.518:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.893426][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 2180.893488][ T30] audit: type=1326 audit(1770178373.518:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31928 comm="syz.2.5312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2180.956445][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.149017][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.170466][ T39] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2181.180723][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.190505][ T39] usb 3-1: config 0 descriptor?? [ 2182.379605][ T39] hid_parser_main: 5 callbacks suppressed [ 2182.379619][ T39] ft260 0003:0403:6030.0032: unknown main item tag 0x7 [ 2182.663842][ T39] ft260 0003:0403:6030.0032: failed to retrieve chip version [ 2182.681968][ T39] ft260 0003:0403:6030.0032: probe with driver ft260 failed with error -32 [ 2184.278576][T19351] usb 3-1: USB disconnect, device number 2 [ 2185.317884][T31985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2185.347343][T31977] can: request_module (can-proto-3) failed. [ 2185.398311][T31983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5319'. [ 2185.640776][T31990] [U] v3f"S/4:XTzWtlW= [ 2186.720922][T31974] [U] J"e:" [ 2187.026005][T31998] trusted_key: encrypted_key: insufficient parameters specified [ 2187.944018][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 2187.944040][ T30] audit: type=1326 audit(1770178381.318:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31999 comm="syz.4.5327" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2191.221499][T32043] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5335'. [ 2191.234730][T32042] syz.0.5335 (32042): drop_caches: 2 [ 2193.524925][T32067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5341'. [ 2193.536393][T32067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5341'. [ 2193.805448][T28030] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2193.954754][T32076] trusted_key: encrypted_key: insufficient parameters specified [ 2193.990228][T28030] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2194.006554][T28030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.036092][T28030] usb 3-1: config 0 has no interface number 0 [ 2194.118029][T28030] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2194.248862][T28030] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2194.331328][T28030] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2194.340655][T28030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.354755][T28030] usb 3-1: Product: syz [ 2194.361886][T28030] usb 3-1: Manufacturer: syz [ 2194.386872][T28030] usb 3-1: SerialNumber: syz [ 2194.401232][T28030] usb 3-1: config 0 descriptor?? [ 2194.942049][T32090] trusted_key: encrypted_key: insufficient parameters specified [ 2196.046309][T28030] usb 3-1: USB disconnect, device number 3 [ 2196.958597][ T30] audit: type=1326 audit(1770178390.338:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32101 comm="syz.3.5349" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x0 [ 2199.750164][T32144] binder: 32124:32144 ioctl 40046205 0 returned -22 [ 2199.811510][T32145] netlink: 'syz.3.5357': attribute type 1 has an invalid length. [ 2200.559409][T32153] can: request_module (can-proto-3) failed. [ 2200.879964][T32164] [U] v3f"S/4:XTzWtlW= [ 2201.105184][T32169] trusted_key: encrypted_key: insufficient parameters specified [ 2201.943690][ T30] audit: type=1326 audit(1770178395.308:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32167 comm="syz.0.5361" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2201.982058][T32152] [U] J"e:" [ 2204.242506][T32207] trusted_key: encrypted_key: insufficient parameters specified [ 2205.636704][T28030] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2205.757483][T32222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5370'. [ 2205.878327][T28030] usb 3-1: Using ep0 maxpacket: 8 [ 2206.164788][T28030] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2206.177366][T28030] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2206.188534][T28030] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2206.200218][T28030] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2206.230501][T28030] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2206.259687][T28030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.659999][T32212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2206.689978][T32212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2206.739668][T28030] usb 3-1: GET_CAPABILITIES returned 0 [ 2206.778459][T28030] usbtmc 3-1:16.0: can't read capabilities [ 2206.817641][T32225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5372'. [ 2207.217866][T28030] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2207.221363][T32232] binder: 32229:32232 ioctl 40046205 0 returned -22 [ 2207.258524][T32231] binder: 32219:32231 ioctl 40046205 0 returned -22 [ 2207.401127][T28030] usb 2-1: Using ep0 maxpacket: 32 [ 2207.408791][T28030] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2207.419411][T28030] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 2207.463457][T28030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.497259][T32239] input: syz1 as /devices/virtual/input/input89 [ 2207.562963][T28030] usb 2-1: config 0 descriptor?? [ 2208.030411][T32243] netlink: 'syz.4.5375': attribute type 1 has an invalid length. [ 2208.038429][T32243] netlink: 'syz.4.5375': attribute type 1 has an invalid length. [ 2208.054851][T28030] magicmouse 0003:05AC:0265.0033: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 2208.063664][T32243] netlink: 'syz.4.5375': attribute type 1 has an invalid length. [ 2208.081744][T32243] netlink: 'syz.4.5375': attribute type 1 has an invalid length. [ 2208.347498][ T39] usb 3-1: USB disconnect, device number 4 [ 2208.400054][T32227] netlink: 'syz.1.5372': attribute type 2 has an invalid length. [ 2208.434486][T32227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5372'. [ 2208.533821][ T30] audit: type=1326 audit(1770178401.878:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32246 comm="syz.4.5376" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 2208.709655][T32256] vivid-006: disconnect [ 2209.849621][T28030] usb 2-1: USB disconnect, device number 2 [ 2210.144607][T32271] netlink: 'syz.4.5380': attribute type 1 has an invalid length. [ 2210.197437][T32274] syzkaller0: entered promiscuous mode [ 2210.203009][T32274] syzkaller0: entered allmulticast mode [ 2210.223565][T32271] netlink: 'syz.4.5380': attribute type 1 has an invalid length. [ 2211.085679][T32271] netlink: 'syz.4.5380': attribute type 1 has an invalid length. [ 2211.234594][T32291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5382'. [ 2213.477793][T32311] input: syz1 as /devices/virtual/input/input90 [ 2213.791291][T32318] xt_bpf: check failed: parse error [ 2215.360729][T32329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 2217.923087][ T30] audit: type=1326 audit(1770178411.248:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2218.042504][ T30] audit: type=1326 audit(1770178411.248:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2218.187574][ T39] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2218.312169][ T30] audit: type=1326 audit(1770178411.248:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2218.387038][ T30] audit: type=1326 audit(1770178411.248:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2218.493471][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 2218.499584][ T30] audit: type=1326 audit(1770178411.248:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2218.647762][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2218.666336][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2218.700548][ T30] audit: type=1326 audit(1770178411.248:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2218.734460][ T39] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2218.840596][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.855254][ T30] audit: type=1326 audit(1770178411.248:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2218.898784][ T39] usb 4-1: config 0 descriptor?? [ 2218.963479][ T30] audit: type=1326 audit(1770178411.258:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2219.050759][ T30] audit: type=1326 audit(1770178411.258:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2219.132239][ T30] audit: type=1326 audit(1770178411.258:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32359 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 2219.737057][T32380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5401'. [ 2219.881216][ T39] ft260 0003:0403:6030.0034: unknown main item tag 0x7 [ 2220.270096][ T39] ft260 0003:0403:6030.0034: failed to retrieve chip version [ 2220.322095][ T39] ft260 0003:0403:6030.0034: probe with driver ft260 failed with error -32 [ 2220.393525][T28030] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 2220.863994][T28030] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2220.889084][T28030] usb 3-1: config 0 has no interface number 0 [ 2220.900780][T28030] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2220.923651][T28030] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2220.966604][T28030] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2221.075323][T28030] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2221.123502][T28030] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2221.179823][T28030] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2221.233400][T28030] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2221.274692][T28030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.391362][T28030] usb 3-1: config 0 descriptor?? [ 2221.405090][T32387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2221.412835][T32387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2221.429262][T28030] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2221.691222][T32385] ldusb 3-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 2221.707796][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.716090][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.865170][T32403] xt_bpf: check failed: parse error [ 2222.590729][ T39] usb 4-1: USB disconnect, device number 101 [ 2223.413257][ T39] usb 3-1: USB disconnect, device number 5 [ 2223.602643][ T39] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2224.846052][T32438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5414'. [ 2225.986399][T32450] binder: BINDER_SET_CONTEXT_MGR already set [ 2225.992763][T32450] binder: 32443:32450 ioctl 4018620d 80000040 returned -16 [ 2226.031535][T32450] fuse: Unknown parameter 'f-' [ 2227.714427][ T39] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 2227.923571][ T39] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 2227.931763][ T39] usb 2-1: config 0 has no interface number 0 [ 2228.138197][ T39] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2228.147479][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.161872][ T39] usb 2-1: Product: syz [ 2228.283822][T32477] trusted_key: encrypted_key: insufficient parameters specified [ 2228.374927][ T39] usb 2-1: Manufacturer: syz [ 2228.546751][T32481] syzkaller0: entered promiscuous mode [ 2228.555093][T32481] syzkaller0: entered allmulticast mode [ 2228.598934][ T39] usb 2-1: SerialNumber: syz [ 2228.642212][ T39] usb 2-1: config 0 descriptor?? [ 2230.722388][T32500] binder: BINDER_SET_CONTEXT_MGR already set [ 2230.783798][T32503] fuse: Unknown parameter 'f-' [ 2230.799123][T32500] binder: 32498:32500 ioctl 4018620d 80000040 returned -16 [ 2230.818126][T32505] Lens A: ================= START STATUS ================= [ 2230.827484][T32505] Lens A: Focus, Absolute: 0 [ 2230.843010][T32505] Lens A: ================== END STATUS ================== [ 2231.231528][ T39] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 2231.240723][ T39] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 2231.248993][ T39] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 2231.358424][ T39] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 2231.373893][ T39] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2231.395065][ T39] usb 2-1: USB disconnect, device number 3 [ 2231.417382][ T39] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2231.478319][ T39] keyspan 2-1:0.133: device disconnected [ 2231.928457][T32515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5430'. [ 2232.152334][T32518] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5429'. [ 2232.252583][T32516] syz.1.5429 (32516): drop_caches: 2 [ 2233.835909][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 2233.835926][ T30] audit: type=1326 audit(1770178427.218:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32527 comm="syz.0.5433" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2234.083494][T19351] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2234.309247][T19351] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.321417][T19351] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2234.371152][T19351] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2234.403274][T19351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.416753][T19351] usb 2-1: config 0 descriptor?? [ 2234.439465][T19351] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2234.492658][T19351] dvb-usb: bulk message failed: -22 (3/0) [ 2234.533094][T19351] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2234.747374][T32542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.757272][T32542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2234.841330][T19351] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2234.868919][T19351] usb 2-1: media controller created [ 2234.916971][T19351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2235.160416][T19351] dvb-usb: bulk message failed: -22 (6/0) [ 2235.182720][T19351] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2235.204862][T19351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input91 [ 2235.243675][T19351] dvb-usb: schedule remote query interval to 150 msecs. [ 2235.265085][T19351] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2235.311390][T32547] trusted_key: encrypted_key: insufficient parameters specified [ 2235.434785][T19351] dvb-usb: bulk message failed: -22 (1/0) [ 2235.440630][T19351] dvb-usb: error while querying for an remote control event. [ 2235.756452][T19351] dvb-usb: bulk message failed: -22 (1/0) [ 2235.762255][T19351] dvb-usb: error while querying for an remote control event. [ 2235.973791][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 2235.979637][ T39] dvb-usb: error while querying for an remote control event. [ 2236.148339][T32393] usb 2-1: USB disconnect, device number 4 [ 2236.260571][T32393] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2236.731910][T32566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5441'. [ 2237.326860][T32569] binder: 32558:32569 ioctl 40046205 0 returned -22 [ 2237.426560][T32578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5442'. [ 2237.435690][T32578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5442'. [ 2237.448530][T32578] netlink: 'syz.0.5442': attribute type 13 has an invalid length. [ 2237.475838][T32578] gretap0: refused to change device tx_queue_len [ 2237.492191][T32579] xt_bpf: check failed: parse error [ 2237.629271][T32578] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2238.913425][T32594] fuse: Unknown parameter 'fd0x0000000000000007' [ 2241.185699][T32633] trusted_key: encrypted_key: insufficient parameters specified [ 2241.291242][T32634] batadv_slave_0: left promiscuous mode [ 2241.299050][T32634] veth0_vlan: left allmulticast mode [ 2241.358408][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5451'. [ 2241.372066][T32635] netlink: 'syz.4.5451': attribute type 5 has an invalid length. [ 2241.380039][T32635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5451'. [ 2241.402544][T32634] syzkaller0: left promiscuous mode [ 2241.439680][T32634] syzkaller0: left allmulticast mode [ 2241.446915][T32634] vcan1: left promiscuous mode [ 2241.536150][T32634] ip6gre1: left allmulticast mode [ 2241.541775][T32634] sit1: left allmulticast mode [ 2241.607569][T32634] bond5: left promiscuous mode [ 2241.612932][T32634] geneve2: left promiscuous mode [ 2241.618501][T32634] bond5: left allmulticast mode [ 2241.624186][T32634] geneve2: left allmulticast mode [ 2241.630656][T32634] geneve3: left allmulticast mode [ 2241.637987][T32634] bridge3: left promiscuous mode [ 2241.653298][T32634] bridge3: left allmulticast mode [ 2241.660512][T32634] ipip1: left promiscuous mode [ 2241.668218][T32634] ipip1: left allmulticast mode [ 2241.689044][T32635] geneve4: entered promiscuous mode [ 2241.715782][T32635] geneve4: entered allmulticast mode [ 2242.007478][ T2974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 46730 - 0 [ 2242.033648][ T2974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 46730 - 0 [ 2242.233935][ T2974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 46730 - 0 [ 2242.242775][ T2974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 46730 - 0 [ 2242.704061][T32652] syzkaller0: entered promiscuous mode [ 2242.709829][T32652] syzkaller0: entered allmulticast mode [ 2243.167884][T32661] binder: 32646:32661 ioctl 40046205 0 returned -22 [ 2243.324687][T32663] Lens A: ================= START STATUS ================= [ 2243.333241][T32663] Lens A: Focus, Absolute: 0 [ 2243.338917][T32663] Lens A: ================== END STATUS ================== [ 2244.516895][T32680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5458'. [ 2244.531200][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5458'. [ 2244.634381][ T30] audit: type=1326 audit(1770178437.998:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32672 comm="syz.0.5459" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 2246.104717][T32706] syz.2.5464 (32706): drop_caches: 2 [ 2246.124439][T32707] trusted_key: encrypted_key: insufficient parameters specified [ 2246.145748][T32706] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5464'. [ 2246.193452][T19351] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2246.453341][ C1] hrtimer: interrupt took 51853 ns [ 2246.815633][T19351] usb 4-1: Using ep0 maxpacket: 16 [ 2246.874977][T19351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2246.906493][T19351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2246.945645][T19351] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2247.014978][T19351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.095413][T19351] usb 4-1: config 0 descriptor?? [ 2247.715444][T19351] hid-multitouch 0003:1FD2:6007.0035: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 2247.963925][T32699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.987318][T32699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.174945][T32393] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2248.343657][T32393] usb 2-1: Using ep0 maxpacket: 32 [ 2248.351659][T32393] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2248.361814][T32393] usb 2-1: config 0 has no interface number 0 [ 2248.388892][T32393] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2248.521775][T32393] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2248.573806][T32393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.602378][T32393] usb 2-1: Product: syz [ 2248.613536][T32393] usb 2-1: Manufacturer: syz [ 2248.638771][T32393] usb 2-1: SerialNumber: syz [ 2248.739074][T32393] usb 2-1: config 0 descriptor?? [ 2248.758321][T32728] fuse: Unknown parameter 'f-' [ 2248.846739][T32393] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2248.880575][T32393] em28xx 2-1:0.132: Video interface 132 found: [ 2249.209863][T28030] usb 4-1: USB disconnect, device number 102 [ 2249.266621][T32393] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 2250.434495][T32393] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2250.469935][T32393] em28xx 2-1:0.132: board has no eeprom [ 2250.543428][T32393] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2250.553478][T32393] em28xx 2-1:0.132: analog set to bulk mode. [ 2250.618615][T28030] em28xx 2-1:0.132: Registering V4L2 extension [ 2250.715961][T28030] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2250.793504][T28030] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2250.961346][T28030] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2250.984878][T28030] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 2251.159446][T19351] usb 2-1: USB disconnect, device number 5 [ 2251.166083][T19351] em28xx 2-1:0.132: Disconnecting em28xx [ 2251.355562][T28030] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 2251.373464][T28030] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 2251.401119][T28030] em28xx 2-1:0.132: No AC97 audio processor [ 2251.441970][T28030] usb 2-1: Decoder not found [ 2251.451999][T28030] em28xx 2-1:0.132: failed to create media graph [ 2251.551875][T28030] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 2251.695735][ T30] audit: type=1326 audit(1770178444.968:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32755 comm="syz.2.5475" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x0 [ 2251.723959][ T303] trusted_key: encrypted_key: insufficient parameters specified [ 2252.163067][T32764] ================================================================== [ 2252.171197][T32764] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 2252.178658][T32764] Read of size 8 at addr ffff888065ffc740 by task v4l_id/32764 [ 2252.186187][T32764] [ 2252.188525][T32764] CPU: 1 UID: 0 PID: 32764 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2252.188541][T32764] Tainted: [L]=SOFTLOCKUP [ 2252.188545][T32764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2252.188553][T32764] Call Trace: [ 2252.188559][T32764] [ 2252.188565][T32764] dump_stack_lvl+0xe8/0x150 [ 2252.188584][T32764] print_report+0xba/0x230 [ 2252.188614][T32764] ? v4l2_fh_open+0xac/0x420 [ 2252.188626][T32764] kasan_report+0x117/0x150 [ 2252.188645][T32764] ? v4l2_fh_open+0xac/0x420 [ 2252.188657][T32764] v4l2_fh_open+0xac/0x420 [ 2252.188669][T32764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2252.188734][T32764] em28xx_v4l2_open+0x157/0x9a0 [ 2252.188810][T32764] ? do_raw_spin_lock+0x12b/0x2f0 [ 2252.188824][T32764] v4l2_open+0x1bf/0x3a0 [ 2252.188870][T32764] chrdev_open+0x4cd/0x5e0 [ 2252.188888][T32764] ? __pfx_chrdev_open+0x10/0x10 [ 2252.188897][T32764] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2252.188912][T32764] ? __pfx_chrdev_open+0x10/0x10 [ 2252.188920][T32764] do_dentry_open+0x7ce/0x1420 [ 2252.188935][T32764] vfs_open+0x3b/0x340 [ 2252.188944][T32764] ? path_openat+0x346e/0x3e20 [ 2252.188959][T32764] path_openat+0x3486/0x3e20 [ 2252.188978][T32764] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 2252.188992][T32764] ? getname_flags+0xb7/0x540 [ 2252.189002][T32764] ? __pfx_path_openat+0x10/0x10 [ 2252.189016][T32764] ? __lock_acquire+0x6b5/0x2cf0 [ 2252.189032][T32764] do_filp_open+0x22d/0x490 [ 2252.189046][T32764] ? __pfx_do_filp_open+0x10/0x10 [ 2252.189063][T32764] ? _raw_spin_unlock+0x28/0x50 [ 2252.189102][T32764] ? alloc_fd+0x64b/0x6c0 [ 2252.189114][T32764] do_sys_openat2+0x12f/0x220 [ 2252.189126][T32764] ? __pfx_do_sys_openat2+0x10/0x10 [ 2252.189138][T32764] ? exc_page_fault+0x6a/0xc0 [ 2252.189149][T32764] ? do_user_addr_fault+0xc7c/0x1360 [ 2252.189165][T32764] __x64_sys_openat+0x138/0x170 [ 2252.189178][T32764] do_syscall_64+0xe2/0xf80 [ 2252.189189][T32764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2252.189200][T32764] ? trace_irq_disable+0x37/0x100 [ 2252.189216][T32764] ? clear_bhb_loop+0x60/0xb0 [ 2252.189227][T32764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2252.189237][T32764] RIP: 0033:0x7fca0b8a7407 [ 2252.189248][T32764] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2252.189256][T32764] RSP: 002b:00007ffd579303a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2252.189268][T32764] RAX: ffffffffffffffda RBX: 00007fca0bf56880 RCX: 00007fca0b8a7407 [ 2252.189276][T32764] RDX: 0000000000000000 RSI: 00007ffd57931f1a RDI: ffffffffffffff9c [ 2252.189283][T32764] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2252.189289][T32764] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2252.189295][T32764] R13: 00007ffd579305f0 R14: 00007fca0c05b000 R15: 00005565d60da4d8 [ 2252.189309][T32764] [ 2252.189315][T32764] [ 2252.472405][T32764] Allocated by task 28030: [ 2252.476801][T32764] kasan_save_track+0x3e/0x80 [ 2252.481474][T32764] __kasan_kmalloc+0x93/0xb0 [ 2252.486041][T32764] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 2252.491392][T32764] em28xx_v4l2_init+0x10b/0x2e70 [ 2252.496312][T32764] em28xx_init_extension+0x120/0x1c0 [ 2252.501583][T32764] process_scheduled_works+0xaec/0x17a0 [ 2252.507146][T32764] worker_thread+0xda6/0x1360 [ 2252.511810][T32764] kthread+0x726/0x8b0 [ 2252.515864][T32764] ret_from_fork+0x51b/0xa40 [ 2252.520442][T32764] ret_from_fork_asm+0x1a/0x30 [ 2252.525191][T32764] [ 2252.527493][T32764] Freed by task 28030: [ 2252.531539][T32764] kasan_save_track+0x3e/0x80 [ 2252.536198][T32764] kasan_save_free_info+0x46/0x50 [ 2252.541208][T32764] __kasan_slab_free+0x5c/0x80 [ 2252.545953][T32764] kfree+0x1be/0x650 [ 2252.549858][T32764] em28xx_v4l2_init+0x1683/0x2e70 [ 2252.554871][T32764] em28xx_init_extension+0x120/0x1c0 [ 2252.560139][T32764] process_scheduled_works+0xaec/0x17a0 [ 2252.565672][T32764] worker_thread+0xda6/0x1360 [ 2252.570335][T32764] kthread+0x726/0x8b0 [ 2252.574382][T32764] ret_from_fork+0x51b/0xa40 [ 2252.578957][T32764] ret_from_fork_asm+0x1a/0x30 [ 2252.583706][T32764] [ 2252.586011][T32764] The buggy address belongs to the object at ffff888065ffc000 [ 2252.586011][T32764] which belongs to the cache kmalloc-8k of size 8192 [ 2252.600044][T32764] The buggy address is located 1856 bytes inside of [ 2252.600044][T32764] freed 8192-byte region [ffff888065ffc000, ffff888065ffe000) [ 2252.613997][T32764] [ 2252.616304][T32764] The buggy address belongs to the physical page: [ 2252.622707][T32764] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x65ff8 [ 2252.631450][T32764] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2252.639930][T32764] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2252.647475][T32764] page_type: f5(slab) [ 2252.651435][T32764] raw: 00fff00000000040 ffff88813fe27280 ffffea0001268600 0000000000000006 [ 2252.660011][T32764] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 2252.668582][T32764] head: 00fff00000000040 ffff88813fe27280 ffffea0001268600 0000000000000006 [ 2252.677236][T32764] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 2252.685887][T32764] head: 00fff00000000003 ffffea000197fe01 00000000ffffffff 00000000ffffffff [ 2252.694536][T32764] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2252.703184][T32764] page dumped because: kasan: bad access detected [ 2252.709592][T32764] page_owner tracks the page as allocated [ 2252.715286][T32764] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 31508, tgid 31505 (syz.1.5229), ts 2144017721505, free_ts 2143896768913 [ 2252.740103][T32764] post_alloc_hook+0x228/0x280 [ 2252.744855][T32764] get_page_from_freelist+0x24dc/0x2580 [ 2252.750386][T32764] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2252.756175][T32764] alloc_pages_mpol+0x232/0x4a0 [ 2252.761011][T32764] allocate_slab+0x86/0x3a0 [ 2252.765517][T32764] ___slab_alloc+0xd82/0x1760 [ 2252.770177][T32764] __slab_alloc+0x65/0x100 [ 2252.774594][T32764] __kvmalloc_node_noprof+0x673/0x8d0 [ 2252.779961][T32764] fq_resize+0x12e/0xa60 [ 2252.784297][T32764] fq_init+0x6d7/0x970 [ 2252.788351][T32764] qdisc_create+0x7ac/0xea0 [ 2252.792880][T32764] tc_modify_qdisc+0x16f0/0x2290 [ 2252.797806][T32764] rtnetlink_rcv_msg+0x77e/0xbe0 [ 2252.802823][T32764] netlink_rcv_skb+0x232/0x4b0 [ 2252.807607][T32764] netlink_unicast+0x80f/0x9b0 [ 2252.812420][T32764] netlink_sendmsg+0x813/0xb40 [ 2252.817164][T32764] page last free pid 0 tgid 0 stack trace: [ 2252.822947][T32764] __free_frozen_pages+0xbf8/0xd70 [ 2252.828045][T32764] __folio_put+0x414/0x4f0 [ 2252.832469][T32764] skb_release_data+0x4df/0x8e0 [ 2252.837384][T32764] __kfree_skb+0x5d/0x210 [ 2252.841712][T32764] tcp_ack+0x2317/0x68c0 [ 2252.846064][T32764] tcp_rcv_established+0x13e6/0x25b0 [ 2252.851333][T32764] tcp_v4_do_rcv+0xa90/0x1430 [ 2252.856044][T32764] tcp_v4_rcv+0x2d27/0x3780 [ 2252.860538][T32764] ip_protocol_deliver_rcu+0x221/0x440 [ 2252.866040][T32764] ip_local_deliver_finish+0x3bb/0x6f0 [ 2252.871485][T32764] NF_HOOK+0x336/0x3c0 [ 2252.875541][T32764] ip_sublist_rcv_finish+0x221/0x2a0 [ 2252.880806][T32764] ip_sublist_rcv+0x761/0xa70 [ 2252.885487][T32764] ip_list_rcv+0x3f1/0x450 [ 2252.889882][T32764] __netif_receive_skb_list_core+0x7e5/0x810 [ 2252.895945][T32764] netif_receive_skb_list_internal+0x995/0xcf0 [ 2252.902166][T32764] [ 2252.904473][T32764] Memory state around the buggy address: [ 2252.910081][T32764] ffff888065ffc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2252.918121][T32764] ffff888065ffc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2252.926175][T32764] >ffff888065ffc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2252.934219][T32764] ^ [ 2252.940353][T32764] ffff888065ffc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2252.948396][T32764] ffff888065ffc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2252.956437][T32764] ================================================================== [ 2252.971874][T28030] em28xx 2-1:0.132: Remote control support is not available for this card. [ 2253.033702][T32764] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2253.040937][T32764] CPU: 1 UID: 0 PID: 32764 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2253.051520][T32764] Tainted: [L]=SOFTLOCKUP [ 2253.055837][T32764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2253.065883][T32764] Call Trace: [ 2253.069157][T32764] [ 2253.072078][T32764] vpanic+0x1e0/0x670 [ 2253.076058][T32764] panic+0xc5/0xd0 [ 2253.079776][T32764] ? __pfx_panic+0x10/0x10 [ 2253.084187][T32764] ? preempt_schedule_common+0x82/0xd0 [ 2253.089641][T32764] ? v4l2_fh_open+0xac/0x420 [ 2253.094226][T32764] check_panic_on_warn+0x89/0xb0 [ 2253.099167][T32764] ? v4l2_fh_open+0xac/0x420 [ 2253.103754][T32764] end_report+0x6f/0x140 [ 2253.107993][T32764] kasan_report+0x128/0x150 [ 2253.112488][T32764] ? v4l2_fh_open+0xac/0x420 [ 2253.117077][T32764] v4l2_fh_open+0xac/0x420 [ 2253.121491][T32764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2253.127468][T32764] em28xx_v4l2_open+0x157/0x9a0 [ 2253.132318][T32764] ? do_raw_spin_lock+0x12b/0x2f0 [ 2253.137339][T32764] v4l2_open+0x1bf/0x3a0 [ 2253.141581][T32764] chrdev_open+0x4cd/0x5e0 [ 2253.145996][T32764] ? __pfx_chrdev_open+0x10/0x10 [ 2253.150928][T32764] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2253.157258][T32764] ? __pfx_chrdev_open+0x10/0x10 [ 2253.162190][T32764] do_dentry_open+0x7ce/0x1420 [ 2253.166961][T32764] vfs_open+0x3b/0x340 [ 2253.171022][T32764] ? path_openat+0x346e/0x3e20 [ 2253.175783][T32764] path_openat+0x3486/0x3e20 [ 2253.180381][T32764] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 2253.186012][T32764] ? getname_flags+0xb7/0x540 [ 2253.190681][T32764] ? __pfx_path_openat+0x10/0x10 [ 2253.195615][T32764] ? __lock_acquire+0x6b5/0x2cf0 [ 2253.200555][T32764] do_filp_open+0x22d/0x490 [ 2253.205057][T32764] ? __pfx_do_filp_open+0x10/0x10 [ 2253.210086][T32764] ? _raw_spin_unlock+0x28/0x50 [ 2253.214933][T32764] ? alloc_fd+0x64b/0x6c0 [ 2253.219257][T32764] do_sys_openat2+0x12f/0x220 [ 2253.223928][T32764] ? __pfx_do_sys_openat2+0x10/0x10 [ 2253.229125][T32764] ? exc_page_fault+0x6a/0xc0 [ 2253.233807][T32764] ? do_user_addr_fault+0xc7c/0x1360 [ 2253.239100][T32764] __x64_sys_openat+0x138/0x170 [ 2253.243951][T32764] do_syscall_64+0xe2/0xf80 [ 2253.248453][T32764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.254511][T32764] ? trace_irq_disable+0x37/0x100 [ 2253.259531][T32764] ? clear_bhb_loop+0x60/0xb0 [ 2253.264203][T32764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.270089][T32764] RIP: 0033:0x7fca0b8a7407 [ 2253.274499][T32764] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2253.294101][T32764] RSP: 002b:00007ffd579303a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2253.302512][T32764] RAX: ffffffffffffffda RBX: 00007fca0bf56880 RCX: 00007fca0b8a7407 [ 2253.310481][T32764] RDX: 0000000000000000 RSI: 00007ffd57931f1a RDI: ffffffffffffff9c [ 2253.318444][T32764] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2253.326409][T32764] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2253.334371][T32764] R13: 00007ffd579305f0 R14: 00007fca0c05b000 R15: 00005565d60da4d8 [ 2253.342340][T32764] [ 2253.345711][T32764] Kernel Offset: disabled [ 2253.350024][T32764] Rebooting in 86400 seconds..