last executing test programs: 15.983675535s ago: executing program 1 (id=1875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000000101017e02000000000000000a0000930c00198008000200080800001000198004"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r7, &(0x7f0000000500)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x5}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000040)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x41, 0x10000000}, 0xfffffffd}}, 0x10, 0x0}, 0x4000) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000370403000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b1b040000000000340012800b0001006970366772650000240002800800140007fff800040012001400060000000000200000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0xca, @local, 0x4}}, 0xffffffff, 0x7, 0xffa2, 0x562, 0x6}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000002c0)={0x39f, 0x81, 0x206, 0x9, 0x6, 0x8001, 0x7, 0x7, r10}, &(0x7f0000000300)=0x20) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f0000003400)=[{{&(0x7f00000003c0)=@rc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/96, 0x60}, {&(0x7f0000003380)=""/74, 0x4a}], 0x2, &(0x7f0000000580)=""/152, 0x98}, 0x4}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)=""/43, 0x2b}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f00000034c0)=""/4097, 0x1001}, {&(0x7f0000001900)=""/130, 0x82}], 0x5}, 0x7}, {{&(0x7f00000019c0)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a40)=""/60, 0x3c}, {&(0x7f00000004c0)=""/4, 0x4}], 0x2, &(0x7f0000001b00)=""/4085, 0xff5}, 0x5}, {{&(0x7f0000002b00)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/188, 0xbc}, {&(0x7f0000002c80)=""/145, 0x91}], 0x3, &(0x7f0000002d80)=""/140, 0x8c}, 0x6}, {{&(0x7f0000002e40)=@nfc_llcp, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002ec0)=""/123, 0x7b}], 0x1, &(0x7f0000002f80)=""/251, 0xfb}, 0x9}, {{&(0x7f0000003080)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/30, 0x1e}, {&(0x7f0000003140)=""/70, 0x46}, {&(0x7f00000031c0)=""/38, 0x26}], 0x3, &(0x7f0000003240)=""/75, 0x4b}, 0x3}], 0x6, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r3, &(0x7f0000000000)={0xa0000001}) r12 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x210000, 0x1) fchdir(r12) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe) pipe(&(0x7f0000000040)) epoll_wait(r11, &(0x7f0000000340)=[{}], 0x1, 0x1000) 14.896523613s ago: executing program 1 (id=1879): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000004c0)={0x0, 0x14, 0x7, "5e6424818327b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000240)={&(0x7f0000000080)=[{0x81, 0x1000, 0x0, 0x0}], 0x1}) 11.765175693s ago: executing program 2 (id=1885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r2, r7, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 9.953565749s ago: executing program 1 (id=1889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2240, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0xc}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x4200) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 9.733881739s ago: executing program 0 (id=1890): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 9.658894253s ago: executing program 3 (id=1891): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000080)={0x20071026}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r8, r9, 0x3, 0x8, 0xffffffff, 0x80000804, {0xac7c, 0x1, 0x3, 0x6a, 0xf4b, 0x1, 0x2, 0x0, 0x412f, 0xe154, 0x1000, 0x7f, 0x5, 0xfffffffe, "fe1d00003413000000000020b42717e47f00"}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000480)="8f77fa"}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x70, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@local, 0x0, r11}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r13 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r13, 0xc0cc5640, &(0x7f0000000040)={0xd, @pix_mp={0x3a, 0xfff, 0x56544943, 0x5, 0x3, [{0x0, 0x4}, {0x5, 0x101}, {0xff, 0x8}, {0xb, 0x8}, {0x8, 0x1}, {0x1, 0x5}, {0x7, 0x80000000}, {0xc, 0xfffff801}], 0x0, 0xd4, 0x0, 0x3, 0x5}}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x4, 0x10000016, 0xfffffffd, 0x100, 0x0}) 9.504509609s ago: executing program 2 (id=1892): socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) listen(0xffffffffffffffff, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 9.504214473s ago: executing program 3 (id=1893): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40080) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000400)=0x3) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x1000008, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000380)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x18}}, 0x24008040) dup(r3) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r9, &(0x7f0000002e00), 0x0, 0x20000881) 9.075964742s ago: executing program 3 (id=1894): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000001680)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x800007, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x38c, 0xffffffff, 0x268, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @remote, [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'netdevsim0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0xd, 0x0, 0x2}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x1, [0x6, 0x47de, 0x5, 0x3, 0x20, 0xe000, 0x0, 0x5400, 0x1222, 0x1, 0x7, 0x40, 0x8, 0x400, 0x3, 0x400], 0xb}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf6fa, 'syz1\x00', {0xab7}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) mremap(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f0000000680)) 8.947342682s ago: executing program 4 (id=1895): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x7ff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xffff}, {0x10000003, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x3, 0x489aa92e}, {0x5}, {0x40, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000ffbcabbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a050005002100f0000000"], 0x28}}, 0x8000) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 7.616414545s ago: executing program 0 (id=1896): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 7.602153584s ago: executing program 2 (id=1897): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x50000022, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) r4 = io_uring_setup(0x5ee3, &(0x7f00000001c0)={0x0, 0x690e, 0x2, 0x0, 0x10000150}) r5 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xfffffffd, 0xbfdffffc, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x85c3}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000400)=""/46, 0x316000, 0x1800, 0xfffffffd, 0x2}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) io_uring_enter(r5, 0x7323, 0x0, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0xffffffffffffff81) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008000000002800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001", @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="2000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1800000001000000010000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xdc, 0x4}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000880)="fe03d629ec306aa617d508d9808c6844f2eba771c9bf14240a3b131ed5727badebe152180a3ee296448140f5585e6f45b9b4f3b6c3ee4a736d005a6beddf4d", 0x3f}, {&(0x7f00000009c0)="c3a541c6647d2185a455259b42984456eddc8a4f0de6c886ccff10f4fc0cca76f1cca8ba7a6823c81871629e73", 0x2d}], 0x2, 0x0, 0x0, 0x20000040}}, {{&(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000b00)}}], 0x3, 0x4004800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x43) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 7.561947124s ago: executing program 1 (id=1898): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x5, 0x6, 'n'}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x17, &(0x7f00000001c0)={0xffffffff, 0x400000000000040, 0xb, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0x1, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0, 0x88000000, 0x400000}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r6, 0x11a, 0x2, &(0x7f0000000000)=0x304, 0x4) sendmmsg(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="8a78dec529db51db9f7bb1ef77ca653fea1f9e09eaed8829de5191d679e04fd5afcfc3a2ebcc68c7e550a9fdf9b1216c2c5a930889124cc3e73e6fc272e8b68a0eb3684fb8244683abf581591e541202025a99142694e6b2882297d072", 0x5d}, {&(0x7f00000003c0)="ba66a29816f5536705bc6e79ec74a2a1338bf623925a27d01f3beb62f4084ff1df36078d5739c3852e6493ba913cc2b2a986fcdce59636f7580a1986f79f1bc3c9e658", 0x43}, {&(0x7f0000000080)="f25d541cf194a971e361b2fb27be44d44537eba509", 0x15}, {&(0x7f0000000440)="f8d36c502eec39d951efdcb3528da0490296402a23644f9ddd618df4c8e4d5573c4bdd5d98da13d2fe7c33e15106d8eeb53cd0496aec66a211bfe2ab65c105827baabf", 0x43}, {&(0x7f00000004c0)="932d979aa7784d4365b74187cdcbb0195436a9e75e3a34338ad568c72cbc060bf468118207f315feded00b4e7f7e3fc09c7d77d8746f1553abb72df7e8d1df306d99f420b4c71fef6d182bfa5396caf0b67eff7024dffd8351e6e3a3517bdb9ad387b9300b980275ca5468ae931be9c0eb02c143975a349bcf8bea4bd629a9fe8bd50a318dcd96a84babb62d527cde46a066ebb198b46bb5aa246071e745165b24a5023d0024476fea87f9e70bc90b4fdce01344afde2dc1ae9839d4945f239652adaf5e7108d322736ebec01e92a86e9d9f8cece7e20312470d5396c9433e6c09", 0xe1}, {&(0x7f00000005c0)="deeaa88e33c62d922764c0be56b39bc8048cee355be89a3227ac84df67952f7f2c6b509aa967186ffee12feed8108413911aff747ada70d5f83fb2e4332f5b3397a49ab0a842da13a6e427e0c9c7bf5d439af3bd0b2503a478f4c90f08a32b163f49eb", 0x63}], 0x6, &(0x7f0000000640)=[{0xfc, 0x10c, 0xfffffffa, "84811a333776b672325bf4cb075a9fecd6cf744eb726cdc3ef85c5875bb197829d6f7c56192a177d56bed58c54c9a79440582e4cf0f817a669323211d799f16ffd8f09900236c5e0bacc976be6e997a7190d8a0abd2662cb81593def0b578b5f97f5ba2b44cab34dad612145304819011e581a3550396d5f8a83b5f1797dce9a5d6bc72bc25f9df7251fffa76124ba507b9d944e0abffc1cc52024033f7b036df7709f2d4f8af67880cf81d34911f0e4f62197a73e4a4d2e4e6bc9b3accc1b2536927edea13a84bf2dce69c72a0061c7e4a79fbe7d70b1001ca402811191e9275f897007e48eb8703ebf3ab2c843f3"}, {0x28, 0x10d, 0x5104, "630dc1a40bf16e39057c46852710a5e90d39f53dc8e6d274be43"}, {0x68, 0x114, 0xffff, "4ab67e528ac9fa792e99deb88b979c4d4d6168a996bd175a52042c3e16aa9304e57ae7e0e98599a0cc05f84db88eecfd21bcfc8a5babaa83166b570d76a49c5f71ed6077dea71b2cc5a93b6223620dbf0e94f35ecf376e4d24"}, {0xa0, 0x112, 0x7, "0f9709880e8afbaa0b9b3005b673e1f0b21ad66cbf669312bd6ebc3047b8ae7ba741332044ca067d7b27b5675a26273796bf84cfab62e78ec1cf12b7cf2fe113deac51e4bd77620a3e23f85906ec9c625817689c6b085416e744caf6efad111339f53e89ad862c746fd3d0edbc363577b61c30fd15ee4e91487f2ccafcb346f38a8071c248c6e19a8f79113eb45886a8045d75"}, {0x7c, 0x114, 0x0, "86a8865e74d0b19b25c92437b1aac441eef621537e54a7735105e09d5fcd20fd7d1a6b880296515ea2d5712665fceb135e83e7d239a91f3497726fbcb79f768b710b43e34619ea1697bb2467646da3887641bdff93df64d938ac71b58d0cfba1edad0820cc6406179e374279c93c99e6"}], 0x2a8}}, {{&(0x7f0000000980)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a00)="f493fcbfc60c901c56920b68312bde3b2a208bc484fc9570c031f44ad4283689907170d0e5e7e5d89629dd3a63f6ec5d8c84e135b6f4490068d625f3c37e907e3b618bdc1093f4048a641e1bf64e75a1d5219878259a1f7b94f3dbf3920867caec7a2ae563ed9f64a195ea45ed62de9b3c662fcc54", 0x75}, {&(0x7f00000002c0)="c541e2422fcde75fffce2cc4b3b4d04a80ff7e20c71369089fde71a5a8f5295b52b534017b176a8443fd5ca1", 0x2c}, {&(0x7f0000000e40)="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", 0x14b}], 0x3, &(0x7f0000000bc0)=[{0xf4, 0xff, 0x2, "dc1a3ab4c649052eec5570a586c3fe7d6722c643df52155df3c424f0b81b8ef5f54e4140e7785ef34fe38abe545ce750acfb4884491f84b6b6d3040536c9ad11b8c859ab402aa0667145fff1afb98b23b5befb08f70f38fedd0b8a6c3a9dc19d1d0199c2fa69cd2ff704bc3cead330aa4f25478f7406613e881cc89b0d1b1a73bfb97ca137b4e3915ca2c1466f7b93e0a707a46eaf77a3dbc9f212695a381164159ea76ab2eec0e5af8f036afeedebc3bde5e6498810eeb0dd39ff15e51d316bdaeb930c0226f32bfbdb7e3992a0fbbbea5c95b7107e6b9edf979b99a86fa579b6569645e9"}, {0xc8, 0x107, 0xe, "c164e6703f0c366566a51d18e3f5b2a46a683e7694aaab2aa3bfe6fe327b294668f64a47ba4d90920a7166f4fc65d49eff9bebdeffcda951cfb8b6f820e67a701f34a52e86dc00893a28772032f724b7dbc89d20294c4af8981533d31d28acdfe48c0c5f10742165f066c60419c12a022763a4fd206b8bb3120d0583a421059b7aa2f836d721f5954ff4ac7fb209ea35d3db87af518488d1d8c6844d7ce535c44a2e433b8687f04ed5883d38ad0d64c1a7d37a10f4ab0994c845"}, {0x68, 0x112, 0x68b1, "c3de6689581a7e2d393d7d1827a731f33424741b7d32ea589cfa1b02741a467ad91cf2f63b52d2bbbc7c4cd623fb2458caba6b673f5734babe2625c1d547c8707c9cb2dd5d1bd81d9c0505b9145b1a444460107e25bea0cf71cc"}], 0x224}}], 0x2, 0x8001) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=@newlink={0x58, 0x10, 0x503, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x800}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x58}}, 0xc080) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) io_uring_enter(r1, 0x2de7, 0x4000, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x10}, [], {0x4, 0x6}}, 0x24, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0x14, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)) r12 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080009000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.286884598s ago: executing program 4 (id=1899): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 6.237325052s ago: executing program 1 (id=1900): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000004c0)={0x0, 0x14, 0x7, "5e6424818327b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000240)={&(0x7f0000000080)=[{0x81, 0x1000, 0x0, 0x0}], 0x1}) 5.765118267s ago: executing program 3 (id=1901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0x1fc, &(0x7f0000000480)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0x1c2, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0xa, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x2, 0x6, 0x90, 0x4, [0x88a5, 0x1, 0x2]}}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff, 0x1, '\x00', [@pad1, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, @hopopts={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x37}, @enc_lim={0x4, 0x1, 0x80}]}, @hopopts={0x2}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "148a96", 0x9, "1f8e33"}, "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"}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34, 0x62, 0x34, 0x35, 0x65, 0x31, 0x38, 0x37, 0x66, 0x32, 0x65, 0x33, 0x39, 0x63, 0x66, 0x62]}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) syz_emit_ethernet(0x12, &(0x7f00000000c0)={@random="dfa473846208", @random="cc4a363554da", @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0x8906}}}, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) 5.540854021s ago: executing program 4 (id=1902): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000000)=""/48, 0x30, &(0x7f0000000040)=""/104, 0x3, 0x1}}, 0x48) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000200)={0x0, "01a745f5e5afb5456ec14533ed039421"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001200)={0x0, 0x2c1af2d6, 0x2, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001600)={0x0, 0x66f5d3a2, 0x388f, 0x1}) r1 = socket$unix(0x1, 0x9e1b8e7ba07bb0a1, 0x0) connect$unix(r1, &(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e) r2 = getpid() syz_clone3(&(0x7f0000002000)={0x400, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)=0x0, {0x39}, &(0x7f0000001f40)=""/48, 0x30, &(0x7f0000001f80)=""/45, &(0x7f0000001fc0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) kcmp(r2, r3, 0x3, r1, r4) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000020c0)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000002240)={@nfc_llcp={0x27, r6, 0x1, 0x7, 0x10, 0x2, "f53cd44e2b214f7ea08c5211571d88d98ba8b47168aef54e641cafb99b92a14ea12d980c6852d5da3866a39339d1134ce0124546cd2df3272490e8f949f2e6", 0x32}, {&(0x7f0000002100)=""/220, 0xdc}, &(0x7f0000002200), 0x14}, 0xa0) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000002300), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000002340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '{+', 0x3a, '', 0x3a, './file0', 0x3a, [0x50]}, 0x2a) 5.256914909s ago: executing program 2 (id=1903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x20000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffff89) lseek(r3, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) mlock2(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) poll(0x0, 0x0, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xcf4e74310708dfc5, 0xc}) sendmmsg$inet6(r4, &(0x7f0000003940)=[{{0x0, 0x32, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000002c0)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @generic={0x5d, 0x8, 0xf, 0x5, 0x6}], &(0x7f00000000c0)='GPL\x00'}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4.88821301s ago: executing program 0 (id=1904): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 4.515382047s ago: executing program 4 (id=1905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2240, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0xc}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x4200) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 4.357573793s ago: executing program 0 (id=1906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf8, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x0, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.225582347s ago: executing program 4 (id=1907): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3.13964631s ago: executing program 3 (id=1908): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x2240, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26a, 0x0, 0xc}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x4200) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 2.952705478s ago: executing program 2 (id=1909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x43, 0x359f35d7abcd234}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, @info_reply={0x10, 0x0, 0x0, 0x6764, 0xf}}}}}, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000030100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0xb56, &(0x7f00000000c0)=0x5) io_setup(0x3ff, 0x0) set_mempolicy(0x6, 0x0, 0xe0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(0x0, 0x7, 0x88600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x30}}, 0x0) 2.253221346s ago: executing program 0 (id=1910): setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x10000, 0x8, 0x9, 0x3}, 0x0) listen(0xffffffffffffffff, 0x3) close(0x3) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020400) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2b637075a0"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d6370f720"], 0x5) unshare(0x2a020400) 1.38859971s ago: executing program 4 (id=1911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x80c00) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000240)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000080)=0x100) 971.726379ms ago: executing program 1 (id=1912): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0xa, 0x4c, 0xd, 0xfff, 0xfffffff3, 0xc3b, 0x401, 0x8, 0x1, 0x19, 0x1f, 0x17, 0x5, 0xb261}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040898}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 911.418793ms ago: executing program 3 (id=1913): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r8}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) 773.124632ms ago: executing program 2 (id=1914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000040002800800", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x108) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r12, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x884) 0s ago: executing program 0 (id=1915): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x108) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r12, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x884) kernel console output (not intermixed with test programs): [T12781] usb 2-1: config 0 descriptor?? [ 860.639234][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 860.639253][ T30] audit: type=1326 audit(1765887885.001:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 860.830134][ T30] audit: type=1326 audit(1765887885.011:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 860.857614][T12781] ft260 0003:0403:6030.003C: unknown main item tag 0x7 [ 860.878542][ T30] audit: type=1326 audit(1765887885.011:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 860.908355][ T30] audit: type=1326 audit(1765887885.011:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 861.031494][ T30] audit: type=1326 audit(1765887885.231:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 861.206385][T12781] ft260 0003:0403:6030.003C: failed to retrieve chip version [ 861.235799][ T30] audit: type=1326 audit(1765887885.231:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 861.236147][T12781] ft260 0003:0403:6030.003C: probe with driver ft260 failed with error -5 [ 861.411428][ T30] audit: type=1326 audit(1765887885.231:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 861.740703][ T30] audit: type=1326 audit(1765887885.231:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 861.837762][T13774] kernel profiling enabled (shift: 63) [ 861.843486][T13774] profiling shift: 63 too large [ 862.047008][ T30] audit: type=1326 audit(1765887885.561:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 862.127140][ T30] audit: type=1326 audit(1765887885.581:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 863.739198][T12781] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 863.957321][ T5949] usb 2-1: USB disconnect, device number 53 [ 864.049232][T12781] usb 5-1: Using ep0 maxpacket: 32 [ 864.105153][T12781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.242291][T12781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.296612][T12781] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 864.303542][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 864.329209][T12781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.367301][T12781] usb 5-1: config 0 descriptor?? [ 864.372700][T13796] 8021q: adding VLAN 0 to HW filter on device bond6 [ 867.052718][T13819] hub 1-0:1.0: USB hub found [ 867.058119][T13819] hub 1-0:1.0: 1 port detected [ 867.697503][T12781] usb 5-1: string descriptor 0 read error: -71 [ 867.706960][T12781] usbhid 5-1:0.0: can't add hid device: -71 [ 867.724551][T12781] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 867.918168][T12781] usb 5-1: USB disconnect, device number 65 [ 868.111081][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1441'. [ 869.154476][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 869.154494][ T30] audit: type=1326 audit(1765887893.451:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 869.186570][T13850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 869.643301][T13857] netlink: 'syz.2.1444': attribute type 5 has an invalid length. [ 869.803911][T13857] ip6erspan0: entered promiscuous mode [ 869.902808][ T30] audit: type=1326 audit(1765887893.451:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 869.952141][ T30] audit: type=1326 audit(1765887893.451:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 870.466463][ T30] audit: type=1326 audit(1765887893.461:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 870.527660][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.534025][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.559215][ T30] audit: type=1326 audit(1765887893.461:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 870.679161][ T30] audit: type=1326 audit(1765887893.461:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 870.879166][ T30] audit: type=1326 audit(1765887893.461:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 870.889207][T13864] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 870.975591][ T30] audit: type=1326 audit(1765887893.461:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 871.242904][T13864] usb 5-1: Using ep0 maxpacket: 32 [ 871.356202][T13864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.397932][ T30] audit: type=1326 audit(1765887893.461:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 871.398741][T13864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.534303][T13864] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 871.597710][ T30] audit: type=1326 audit(1765887893.461:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.0.1443" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 871.608420][T13864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.708640][T13864] usb 5-1: config 0 descriptor?? [ 872.510174][T13864] ft260 0003:0403:6030.003D: unknown main item tag 0x7 [ 872.778616][T13864] ft260 0003:0403:6030.003D: failed to retrieve chip version [ 872.790682][T13864] ft260 0003:0403:6030.003D: probe with driver ft260 failed with error -5 [ 873.985817][T13897] vivid-004: disconnect [ 874.921307][T13897] vivid-004: reconnect [ 875.039247][ T6570] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 875.117357][ T5889] usb 5-1: USB disconnect, device number 66 [ 875.202201][ T6570] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 875.211507][ T6570] usb 2-1: config 0 has no interface number 0 [ 875.239211][ T6570] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 875.285894][ T6570] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 875.329188][ T6570] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 875.557792][T13918] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1455' sets config #0 [ 875.567860][T13918] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1455' sets config #1 [ 875.677771][ T6570] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 875.728260][T13923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1457'. [ 875.747441][ T6570] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 875.874935][ T6570] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 875.907302][ T6570] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 875.926812][ T6570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.984164][ T6570] usb 2-1: config 0 descriptor?? [ 876.041335][T13907] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 876.048775][T13907] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 876.104685][ T6570] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 877.699892][ T5890] usb 2-1: USB disconnect, device number 54 [ 877.707859][ T5890] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 880.152597][T13959] vivid-008: disconnect [ 880.599439][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 880.599455][ T30] audit: type=1326 audit(1765887904.971:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 881.105924][ T30] audit: type=1326 audit(1765887904.971:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 881.179174][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 881.474673][T13959] vivid-008: reconnect [ 881.488737][ T30] audit: type=1326 audit(1765887904.971:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 881.569161][ T30] audit: type=1326 audit(1765887904.971:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 881.671342][ T30] audit: type=1326 audit(1765887904.971:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 881.756564][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 882.039050][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.081038][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.090983][ T30] audit: type=1326 audit(1765887904.971:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 882.134475][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 882.180517][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.251490][ T30] audit: type=1326 audit(1765887904.971:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 882.281434][ T9] usb 4-1: config 0 descriptor?? [ 882.370410][ T30] audit: type=1326 audit(1765887904.971:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 882.533477][ T30] audit: type=1326 audit(1765887905.031:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 882.631022][ T30] audit: type=1326 audit(1765887905.031:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13957 comm="syz.3.1466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 882.756911][T13982] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 882.850696][ T9] ft260 0003:0403:6030.003E: unknown main item tag 0x7 [ 882.881392][T13985] bond7: (slave bridge5): making interface the new active one [ 882.921196][T13985] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 882.958875][T13982] macvlan2: entered promiscuous mode [ 882.964491][T13982] macvlan2: entered allmulticast mode [ 882.980656][T13982] bond7: entered promiscuous mode [ 882.996418][T13982] bridge5: entered promiscuous mode [ 883.072632][T13982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 883.092709][ T9] ft260 0003:0403:6030.003E: failed to retrieve chip version [ 883.116161][ T9] ft260 0003:0403:6030.003E: probe with driver ft260 failed with error -5 [ 883.126500][T13982] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 883.317601][T13982] bond7: left promiscuous mode [ 883.379151][T13982] bridge5: left promiscuous mode [ 883.625013][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.632472][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.183022][T13991] tipc: Resetting bearer [ 884.304162][T13991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.468758][T13991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.556874][T14000] hub 1-0:1.0: USB hub found [ 884.562903][T14000] hub 1-0:1.0: 1 port detected [ 884.885680][ T76] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.904259][ T76] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.941672][ T76] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.993040][ T76] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.242555][T14009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1474'. [ 885.251799][T14009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1474'. [ 885.264693][T14009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1474'. [ 885.318654][ T980] usb 4-1: USB disconnect, device number 48 [ 886.723671][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 886.723687][ T30] audit: type=1326 audit(1765887911.091:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 886.816320][ T30] audit: type=1326 audit(1765887911.091:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 886.944285][ T30] audit: type=1326 audit(1765887911.091:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 887.253359][ T30] audit: type=1326 audit(1765887911.091:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 887.399500][T14033] IPVS: stopping backup sync thread 7341 ... [ 887.739266][ T30] audit: type=1326 audit(1765887911.091:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 888.404660][ T30] audit: type=1326 audit(1765887911.091:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 888.429842][ T30] audit: type=1326 audit(1765887911.091:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 888.452129][ T30] audit: type=1326 audit(1765887911.101:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 888.529895][ T30] audit: type=1326 audit(1765887911.101:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 888.791118][ T30] audit: type=1326 audit(1765887911.101:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 889.935906][T13864] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 890.179227][T13864] usb 4-1: Using ep0 maxpacket: 32 [ 890.254216][T13864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.301344][T13864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.389370][T13864] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 890.617035][T13864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.115159][T13864] usb 4-1: config 0 descriptor?? [ 891.788203][T13864] ft260 0003:0403:6030.003F: unknown main item tag 0x7 [ 891.795212][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 891.795228][ T30] audit: type=1326 audit(1765887916.161:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 891.823664][ T30] audit: type=1326 audit(1765887916.161:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 891.845748][ T30] audit: type=1326 audit(1765887916.181:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 892.032003][T13864] ft260 0003:0403:6030.003F: failed to retrieve chip version [ 892.079570][T13864] ft260 0003:0403:6030.003F: probe with driver ft260 failed with error -5 [ 892.088205][ T30] audit: type=1326 audit(1765887916.381:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 892.220398][ T30] audit: type=1326 audit(1765887916.381:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 892.376762][ T30] audit: type=1326 audit(1765887916.411:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 892.446400][ T30] audit: type=1326 audit(1765887916.411:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 892.713685][ T30] audit: type=1326 audit(1765887916.411:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 892.906099][ T30] audit: type=1326 audit(1765887916.701:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 893.061066][T14104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1489'. [ 893.071478][T14104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1489'. [ 893.088337][ T30] audit: type=1326 audit(1765887916.701:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14050 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 893.191007][T14107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1489'. [ 893.759431][ T6570] usb 4-1: USB disconnect, device number 49 [ 894.582150][T14128] QAT: failed to copy from user. [ 899.500588][T14168] tipc: Resetting bearer [ 899.746633][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.810081][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.099274][ T5985] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.136138][ T5985] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.230877][ T5985] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.256336][ T5985] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.611682][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 900.646519][ T30] audit: type=1326 audit(1765887924.991:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 900.720757][ T30] audit: type=1326 audit(1765887924.991:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 900.754168][ T30] audit: type=1326 audit(1765887924.991:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 900.809610][ T30] audit: type=1326 audit(1765887924.991:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 900.858919][ T30] audit: type=1326 audit(1765887925.011:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 900.924075][ T30] audit: type=1326 audit(1765887925.061:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.2.1501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 903.059631][ T5890] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 903.373180][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.389472][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 903.491345][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 903.584942][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 903.627451][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.749509][ T5890] usb 5-1: Product: syz [ 903.871028][ T5890] usb 5-1: Manufacturer: syz [ 903.875655][ T5890] usb 5-1: SerialNumber: syz [ 903.929278][ T5890] cdc_ncm 5-1:1.0: skipping garbage [ 903.968527][ T5890] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 903.981528][ T5890] cdc_ncm 5-1:1.0: bind() failure [ 904.039204][ T30] audit: type=1400 audit(1765887928.391:4314): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3AFFFFFFFFFFFFFFFF pid=14225 comm="syz.2.1508" [ 904.246254][T14231] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 904.442423][T14232] bond12: (slave bridge12): making interface the new active one [ 904.462123][T14232] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 904.479708][T14231] macvlan0: entered promiscuous mode [ 904.485180][T14231] macvlan0: entered allmulticast mode [ 904.491690][T14231] bond12: entered promiscuous mode [ 904.497053][T14231] bridge12: entered promiscuous mode [ 904.503296][T14231] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 904.514298][T14231] bond12: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 904.533424][T14231] bond12: left promiscuous mode [ 904.538372][T14231] bridge12: left promiscuous mode [ 904.870613][T14240] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 904.883981][T14240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.211336][T14244] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 905.368529][T14247] bond6: (slave bridge5): making interface the new active one [ 905.379985][T14247] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 905.462722][T14249] ipip0: entered promiscuous mode [ 905.474500][T14249] ipip0: entered allmulticast mode [ 905.502142][T14250] macvlan2: entered promiscuous mode [ 905.531889][ T5927] usb 5-1: USB disconnect, device number 67 [ 905.781435][T14250] macvlan2: entered allmulticast mode [ 905.787501][T14250] bond6: entered promiscuous mode [ 905.849451][T14250] bridge5: entered promiscuous mode [ 905.885272][T14250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 905.919623][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 905.942443][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 905.954955][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 905.978814][T14250] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 906.179444][T14250] bond6: left promiscuous mode [ 906.219749][T14250] bridge5: left promiscuous mode [ 907.983413][T14261] tipc: Resetting bearer [ 908.577774][T14261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.918813][T14261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.581555][ T6979] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.660963][ T6979] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.670497][ T6979] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.706630][ T6979] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.810602][T14293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 909.862176][T14293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1520'. [ 909.994357][T14293] bond7: option resend_igmp: invalid value (511) [ 910.019233][T14293] bond7: option resend_igmp: allowed values 0 - 255 [ 910.295545][T14293] bond7 (unregistering): Released all slaves [ 911.117007][T14303] netlink: 'syz.4.1525': attribute type 1 has an invalid length. [ 911.376741][T14303] bond8: (slave bridge6): making interface the new active one [ 911.422308][T14303] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 911.513042][T14303] macvlan2: entered promiscuous mode [ 911.520962][T14303] macvlan2: entered allmulticast mode [ 911.536734][T14303] bond8: entered promiscuous mode [ 911.546792][T14303] bridge6: entered promiscuous mode [ 911.659891][T14303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 911.670972][T14303] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 911.839918][T14303] bond8: left promiscuous mode [ 911.866599][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 911.889635][T14303] bridge6: left promiscuous mode [ 912.352180][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 913.354274][T14332] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 913.362704][T14332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.515391][T14335] netlink: 'syz.2.1530': attribute type 1 has an invalid length. [ 913.566655][T14335] bond7: (slave bridge6): making interface the new active one [ 913.574935][T14335] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 913.596560][T14335] macvlan2: entered promiscuous mode [ 913.601935][T14335] macvlan2: entered allmulticast mode [ 913.607853][T14335] bond7: entered promiscuous mode [ 913.612957][T14335] bridge6: entered promiscuous mode [ 913.619500][T14335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 913.627467][T14335] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 913.660180][T14335] bond7: left promiscuous mode [ 913.665098][T14335] bridge6: left promiscuous mode [ 913.936962][T14338] netlink: 'syz.0.1541': attribute type 1 has an invalid length. [ 914.201423][T14338] bond13: (slave bridge13): making interface the new active one [ 914.216000][T14338] bond13: (slave bridge13): Enslaving as an active interface with an up link [ 914.337106][T14349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.353862][T14349] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.415320][T14349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.535736][T14351] macvlan0: entered promiscuous mode [ 914.561989][T14351] macvlan0: entered allmulticast mode [ 914.601082][T14351] bond13: entered promiscuous mode [ 914.624942][T14351] bridge13: entered promiscuous mode [ 914.640038][T14351] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 914.670969][T14351] bond13: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 914.687922][T14351] bond13: left promiscuous mode [ 914.693202][T14351] bridge13: left promiscuous mode [ 915.349067][T14362] ipip0: entered promiscuous mode [ 915.354384][T14362] ipip0: entered allmulticast mode [ 915.381189][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 915.398393][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 915.412371][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 915.813951][T14369] tipc: Enabling of bearer rejected, failed to enable media [ 918.930225][ T30] audit: type=1326 audit(1765887943.311:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14388 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 918.971678][ T30] audit: type=1326 audit(1765887943.331:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14388 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 919.010348][ T30] audit: type=1326 audit(1765887943.331:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14388 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 919.033896][ T30] audit: type=1326 audit(1765887943.331:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14388 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 919.056268][ T30] audit: type=1326 audit(1765887943.331:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14388 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 919.081081][ T30] audit: type=1326 audit(1765887943.331:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14388 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 919.129420][T14175] IPVS: starting estimator thread 0... [ 919.245119][T14405] IPVS: using max 38 ests per chain, 91200 per kthread [ 921.593913][T14440] netlink: 'syz.2.1549': attribute type 2 has an invalid length. [ 924.022487][T14462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.036545][T14462] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.195046][T14462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 926.523343][T14481] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 927.138347][T14489] bond14: (slave bridge14): making interface the new active one [ 927.191698][T14489] bond14: (slave bridge14): Enslaving as an active interface with an up link [ 927.299903][T14498] usb usb8: usbfs: process 14498 (syz.4.1562) did not claim interface 0 before use [ 927.680948][T14481] macvlan0: entered promiscuous mode [ 927.696481][T14481] macvlan0: entered allmulticast mode [ 927.705407][T14481] bond14: entered promiscuous mode [ 927.751532][T14481] bridge14: entered promiscuous mode [ 927.762172][T14481] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 927.774127][T14481] bond14: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 927.879642][T14481] bond14: left promiscuous mode [ 927.913436][T14481] bridge14: left promiscuous mode [ 930.209463][T14521] IPv6: NLM_F_CREATE should be specified when creating new route [ 931.492370][T14537] binfmt_misc: register: failed to install interpreter file ./file0 [ 931.500493][ T30] audit: type=1326 audit(1765887955.861:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 931.677417][ T30] audit: type=1326 audit(1765887955.861:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 931.843446][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.849875][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.858385][ T30] audit: type=1326 audit(1765887955.861:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 932.339475][ T30] audit: type=1326 audit(1765887955.861:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 932.552318][ T30] audit: type=1326 audit(1765887955.861:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 932.639706][ T30] audit: type=1326 audit(1765887955.861:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 932.759375][ T30] audit: type=1326 audit(1765887955.861:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 932.849343][ T30] audit: type=1326 audit(1765887955.861:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 933.026512][ T30] audit: type=1326 audit(1765887955.861:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 933.159501][ T30] audit: type=1326 audit(1765887955.871:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.3.1568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 933.359616][T14559] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 933.366140][T14559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 933.385533][T14562] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 933.395669][T14562] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 933.420744][T14559] vhci_hcd vhci_hcd.0: Device attached [ 933.951058][T14175] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 934.175243][T14569] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 934.213594][T14569] bond7: (slave bridge9): making interface the new active one [ 934.230075][T14569] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 934.381601][T14569] macvlan3: entered promiscuous mode [ 934.381620][T14569] macvlan3: entered allmulticast mode [ 934.382105][T14569] bond7: entered promiscuous mode [ 934.382118][T14569] bridge9: entered promiscuous mode [ 934.382640][T14569] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 934.383077][T14569] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 934.383427][T14569] bond7: left promiscuous mode [ 934.383438][T14569] bridge9: left promiscuous mode [ 934.916375][T14577] bridge0: port 1(erspan0) entered blocking state [ 934.923128][T14577] bridge0: port 1(erspan0) entered disabled state [ 934.930574][T14577] erspan0: entered allmulticast mode [ 934.947142][T14577] erspan0: entered promiscuous mode [ 935.449579][T14579] vhci_hcd vhci_hcd.0: port 0 already used [ 935.470271][T14579] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 935.476903][T14579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.502668][T14579] vhci_hcd vhci_hcd.0: Device attached [ 935.519568][T14588] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 935.526215][T14588] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 935.687223][T14599] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 935.693861][T14599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.710247][T14579] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 935.716886][T14579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.735115][T14588] vhci_hcd vhci_hcd.0: Device attached [ 935.812481][T14588] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(17) [ 935.819119][T14588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 935.877016][T14579] vhci_hcd vhci_hcd.0: Device attached [ 935.888223][T14608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 935.949937][T14599] vhci_hcd vhci_hcd.0: Device attached [ 935.993595][T14588] vhci_hcd vhci_hcd.0: Device attached [ 936.033992][T14579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 936.132601][T14588] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 936.179325][T14579] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(25) [ 936.185937][T14579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 936.211250][T14588] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(34) [ 936.217852][T14588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 936.298575][T14579] vhci_hcd vhci_hcd.0: Device attached [ 936.309455][T14588] vhci_hcd vhci_hcd.0: Device attached [ 936.588028][T14612] vhci_hcd: connection closed [ 936.589190][ T5985] vhci_hcd vhci_hcd.0: stop threads [ 936.589216][ T5985] vhci_hcd vhci_hcd.0: release socket [ 936.589312][ T5985] vhci_hcd vhci_hcd.0: disconnect device [ 936.632343][T14592] vhci_hcd: connection closed [ 936.632566][ T50] vhci_hcd vhci_hcd.0: stop threads [ 936.632582][ T50] vhci_hcd vhci_hcd.0: release socket [ 936.633550][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 936.633667][T14584] vhci_hcd: connection closed [ 936.639397][T14589] vhci_hcd: connection closed [ 936.649193][T14600] vhci_hcd: connection closed [ 936.649589][ T50] vhci_hcd vhci_hcd.0: stop threads [ 936.649689][ T50] vhci_hcd vhci_hcd.0: release socket [ 936.649764][T14605] vhci_hcd: connection closed [ 936.649794][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 936.659319][ T50] vhci_hcd vhci_hcd.0: stop threads [ 936.659339][ T50] vhci_hcd vhci_hcd.0: release socket [ 936.659428][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 936.675898][ T50] vhci_hcd vhci_hcd.0: stop threads [ 936.889968][ T50] vhci_hcd vhci_hcd.0: release socket [ 936.920487][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 936.944109][ T50] vhci_hcd vhci_hcd.0: stop threads [ 936.987650][ T50] vhci_hcd vhci_hcd.0: release socket [ 937.003132][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 937.469224][T14614] vhci_hcd: connection closed [ 937.483708][ T5985] vhci_hcd vhci_hcd.0: stop threads [ 937.667021][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 937.667034][ T30] audit: type=1326 audit(1765887961.951:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 937.776763][ T5985] vhci_hcd vhci_hcd.0: release socket [ 937.783164][ T5985] vhci_hcd vhci_hcd.0: disconnect device [ 937.799201][ T30] audit: type=1326 audit(1765887961.951:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 937.866169][ T30] audit: type=1326 audit(1765887962.001:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 937.900337][ T30] audit: type=1326 audit(1765887962.011:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 938.449228][ T30] audit: type=1326 audit(1765887962.011:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 938.528632][ T30] audit: type=1326 audit(1765887962.091:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 938.569864][ T30] audit: type=1326 audit(1765887962.091:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 938.676803][ T30] audit: type=1326 audit(1765887962.091:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 938.946272][ T30] audit: type=1326 audit(1765887962.091:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 939.119192][ T30] audit: type=1326 audit(1765887962.101:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 939.149199][T14651] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 939.217553][T14651] bond8: (slave bridge10): making interface the new active one [ 939.227871][T14651] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 939.244885][T14651] macvlan3: entered promiscuous mode [ 939.250469][T14651] macvlan3: entered allmulticast mode [ 939.256492][T14651] bond8: entered promiscuous mode [ 939.261688][T14651] bridge10: entered promiscuous mode [ 939.267608][T14651] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 939.275134][T14651] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 939.291785][T14651] bond8: left promiscuous mode [ 939.296611][T14651] bridge10: left promiscuous mode [ 940.246771][T14663] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 940.469619][T14663] bond9: (slave bridge7): making interface the new active one [ 940.508192][T14663] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 940.527271][T14663] macvlan2: entered promiscuous mode [ 940.536917][T14663] macvlan2: entered allmulticast mode [ 940.544388][T14663] bond9: entered promiscuous mode [ 940.589193][T14663] bridge7: entered promiscuous mode [ 940.625800][T14663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 940.648467][T14663] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 940.719815][T14663] bond9: left promiscuous mode [ 940.724673][T14663] bridge7: left promiscuous mode [ 940.890511][T13295] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 941.003233][T14682] IPv6: NLM_F_CREATE should be specified when creating new route [ 941.139175][T13295] usb 2-1: Using ep0 maxpacket: 32 [ 941.150315][T13295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.207459][T13295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.230066][T13295] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 941.326482][T13295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.398118][T13295] usb 2-1: config 0 descriptor?? [ 942.521845][T13295] ft260 0003:0403:6030.0040: unknown main item tag 0x7 [ 942.716638][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 942.716654][ T30] audit: type=1326 audit(1765887967.091:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 942.716765][T13295] ft260 0003:0403:6030.0040: failed to retrieve chip version [ 942.752750][T13295] ft260 0003:0403:6030.0040: probe with driver ft260 failed with error -5 [ 943.060115][ T30] audit: type=1326 audit(1765887967.091:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 943.082889][ T30] audit: type=1326 audit(1765887967.091:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 943.336577][ T30] audit: type=1326 audit(1765887967.291:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 943.778161][ T30] audit: type=1326 audit(1765887967.321:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14662 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 944.609861][ T24] usb 2-1: USB disconnect, device number 55 [ 944.978934][ T30] audit: type=1326 audit(1765887969.301:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14716 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 945.048113][ T30] audit: type=1326 audit(1765887969.301:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14716 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 945.096160][ T30] audit: type=1326 audit(1765887969.301:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14716 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 945.311648][T14728] loop5: detected capacity change from 0 to 7 [ 945.334127][T14730] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 945.343894][ T30] audit: type=1326 audit(1765887969.301:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14716 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 945.349326][T14728] Dev loop5: unable to read RDB block 7 [ 945.399203][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 945.478324][ T30] audit: type=1326 audit(1765887969.301:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14716 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 945.529577][T14728] loop5: unable to read partition table [ 945.599303][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 945.654013][T14733] bond5: (slave bridge2): making interface the new active one [ 945.699511][T14728] loop5: partition table beyond EOD, truncated [ 945.707998][T14733] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 945.717109][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.719273][T14728] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 945.746395][T14736] macvlan2: entered promiscuous mode [ 946.139542][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.153031][T14736] macvlan2: entered allmulticast mode [ 946.220049][T14736] bond5: entered promiscuous mode [ 946.327411][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 946.336759][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.436246][T14736] bridge2: entered promiscuous mode [ 946.453046][T14736] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 946.461175][ T24] usb 2-1: config 0 descriptor?? [ 946.487597][T14736] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 946.561552][T14736] bond5: left promiscuous mode [ 946.574976][T14736] bridge2: left promiscuous mode [ 946.947144][ T24] ft260 0003:0403:6030.0041: unknown main item tag 0x7 [ 947.214533][ T24] ft260 0003:0403:6030.0041: failed to retrieve chip version [ 947.225363][ T24] ft260 0003:0403:6030.0041: probe with driver ft260 failed with error -5 [ 947.253818][T14746] kernel profiling enabled (shift: 63) [ 947.259431][T14746] profiling shift: 63 too large [ 948.276366][T14760] IPv6: NLM_F_CREATE should be specified when creating new route [ 949.144356][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 949.144370][ T30] audit: type=1326 audit(1765887973.401:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 949.180969][T14767] xfrm0: entered promiscuous mode [ 949.186045][T14767] xfrm0: entered allmulticast mode [ 949.214619][ T30] audit: type=1326 audit(1765887973.401:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 949.281592][ T30] audit: type=1326 audit(1765887973.401:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 949.356286][ T30] audit: type=1326 audit(1765887973.461:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 949.394107][T14765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1611'. [ 949.556210][ T30] audit: type=1326 audit(1765887973.461:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 949.591171][T14292] usb 2-1: USB disconnect, device number 56 [ 949.679437][ T30] audit: type=1326 audit(1765887973.551:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 949.851711][ T30] audit: type=1326 audit(1765887973.551:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 949.930723][ T30] audit: type=1326 audit(1765887973.551:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 950.005306][ T30] audit: type=1326 audit(1765887973.551:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 950.055600][ T30] audit: type=1326 audit(1765887973.551:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14762 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 950.469227][T13864] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 950.639235][T13864] usb 2-1: Using ep0 maxpacket: 32 [ 950.661670][T13864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.684104][T13864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.727735][T13864] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 950.761672][T13864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.803943][T13864] usb 2-1: config 0 descriptor?? [ 951.053317][T14794] fuse: Unknown parameter 'mGN‡8o«ad' [ 951.137316][T14795] netlink: 'syz.3.1616': attribute type 2 has an invalid length. [ 951.240085][T13864] ft260 0003:0403:6030.0042: unknown main item tag 0x7 [ 951.590844][T14795] : entered promiscuous mode [ 951.601979][T13864] ft260 0003:0403:6030.0042: failed to retrieve chip version [ 951.610314][T13864] ft260 0003:0403:6030.0042: probe with driver ft260 failed with error -5 [ 953.180073][T14292] usb 2-1: USB disconnect, device number 57 [ 954.359561][T14830] fuse: root generation should be zero [ 955.536826][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 955.536838][ T30] audit: type=1326 audit(1765887979.911:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 956.034414][ T30] audit: type=1326 audit(1765887979.921:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 956.241403][ T30] audit: type=1326 audit(1765887979.961:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 956.412873][ T30] audit: type=1326 audit(1765887979.961:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 956.537042][ T30] audit: type=1326 audit(1765887979.961:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 956.637445][ T30] audit: type=1326 audit(1765887979.961:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 956.789899][T14850] syz.0.1624 (14850): drop_caches: 2 [ 956.822723][ T30] audit: type=1326 audit(1765887979.961:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 957.108324][ T30] audit: type=1326 audit(1765887979.961:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 957.234088][ T30] audit: type=1326 audit(1765887979.961:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 957.307412][ T30] audit: type=1326 audit(1765887979.961:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 958.683043][T14886] fuse: Unknown parameter 'mGN‡8o«ad' [ 959.943502][T14902] xt_bpf: check failed: parse error [ 960.475133][T14900] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.482527][T14900] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.667512][T14900] tipc: Resetting bearer [ 961.028253][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 961.128961][T14900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.345782][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1637'. [ 961.423124][T14900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.112854][T14925] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 962.456213][ T6979] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.465539][ T6979] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.567901][T14925] team0: Port device netdevsim0 added [ 962.607438][ T6979] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.633558][ T6979] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.646758][T14948] kernel profiling enabled (shift: 6) [ 964.553160][T14951] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 964.693773][T14951] bond10: (slave bridge8): making interface the new active one [ 964.723926][T14951] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 964.734271][T14960] delete_channel: no stack [ 964.768418][T14951] macvlan2: entered promiscuous mode [ 964.773884][T14951] macvlan2: entered allmulticast mode [ 964.793154][T14951] bond10: entered promiscuous mode [ 964.798852][T14951] bridge8: entered promiscuous mode [ 964.822264][T14951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 964.834852][T14951] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 964.856417][T14951] bond10: left promiscuous mode [ 964.863539][T14951] bridge8: left promiscuous mode [ 966.069566][T14972] binfmt_misc: register: failed to install interpreter file ./file0 [ 966.078138][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 966.078154][ T30] audit: type=1326 audit(1765887990.441:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.125929][ T30] audit: type=1326 audit(1765887990.441:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.176173][ T30] audit: type=1326 audit(1765887990.441:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.276534][ T30] audit: type=1326 audit(1765887990.441:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.341682][ T30] audit: type=1326 audit(1765887990.441:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.418189][ T30] audit: type=1326 audit(1765887990.441:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.511770][ T30] audit: type=1326 audit(1765887990.441:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.671380][ T30] audit: type=1326 audit(1765887990.441:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.759612][ T30] audit: type=1326 audit(1765887990.471:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.888496][ T30] audit: type=1326 audit(1765887990.471:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.4.1650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 966.978150][T14977] trusted_key: encrypted_key: insufficient parameters specified [ 968.582470][T15000] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1655'. [ 968.618543][T15000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1655'. [ 968.719256][T15000] netlink: 'syz.1.1655': attribute type 3 has an invalid length. [ 968.779506][T15000] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1655'. [ 969.143483][T15005] : renamed from bridge_slave_0 [ 969.999725][T15017] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 970.490424][T15017] bond9: (slave bridge11): making interface the new active one [ 970.500823][T15017] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 970.521951][T15017] macvlan3: entered promiscuous mode [ 970.527258][T15017] macvlan3: entered allmulticast mode [ 970.533499][T15017] bond9: entered promiscuous mode [ 970.538556][T15017] bridge11: entered promiscuous mode [ 970.544772][T15017] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 970.552213][T15017] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 970.609890][T15017] bond9: left promiscuous mode [ 970.885487][T15017] bridge11: left promiscuous mode [ 970.954517][T15029] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1661'. [ 970.964308][T15029] openvswitch: netlink: Flow key attr not present in new flow. [ 971.613126][T15038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 972.783560][T15044] delete_channel: no stack [ 973.099252][T14292] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 973.341946][T14292] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 973.356939][T14292] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 973.514723][T14292] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 973.596052][T14292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.659697][T15045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 973.755540][T14292] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 975.630241][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 975.708033][T14292] usb 2-1: USB disconnect, device number 58 [ 976.041089][T15076] 8021q: adding VLAN 0 to HW filter on device bond15 [ 976.127377][ T30] audit: type=1326 audit(1765888000.501:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 976.219658][ T30] audit: type=1326 audit(1765888000.511:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 976.448670][ T30] audit: type=1326 audit(1765888000.511:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 976.609190][ T30] audit: type=1326 audit(1765888000.511:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 976.631738][ T30] audit: type=1326 audit(1765888000.511:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 976.637679][T15090] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 976.777365][T15090] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 976.967900][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 976.977312][ T30] audit: type=1326 audit(1765888000.511:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 977.338414][T15087] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 977.360094][T15100] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 977.369377][ T30] audit: type=1326 audit(1765888000.511:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 977.393879][ T30] audit: type=1326 audit(1765888000.511:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 977.723156][T15090] macvlan2: entered promiscuous mode [ 977.731070][T15090] macvlan2: entered allmulticast mode [ 977.744759][T15090] bond8: entered promiscuous mode [ 977.781565][T15090] bridge7: entered promiscuous mode [ 977.808947][T15090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 977.849071][T15090] bond8: left promiscuous mode [ 977.866710][T15090] bridge7: left promiscuous mode [ 978.063419][T15101] macvlan2: entered promiscuous mode [ 978.068882][T15101] macvlan2: entered allmulticast mode [ 978.075127][T15101] bond11: entered promiscuous mode [ 978.081158][T15101] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 978.125696][T15101] bond11: left promiscuous mode [ 980.252335][T15113] syz.1.1676 (15113): drop_caches: 2 [ 983.991182][T15166] netlink: 'syz.0.1695': attribute type 3 has an invalid length. [ 984.080122][T15167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'. [ 985.526948][T15171] bond12: (slave vxcan11): The slave device specified does not support setting the MAC address [ 985.609988][T15171] bond12: (slave vxcan11): Error -95 calling set_mac_address [ 986.130497][T15169] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 987.032143][T15197] xt_bpf: check failed: parse error [ 988.872266][T15216] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 988.890466][T15216] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 988.915535][T15216] netlink: 'syz.4.1696': attribute type 1 has an invalid length. [ 989.509678][ T30] audit: type=1326 audit(1765888013.811:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 989.633750][ T30] audit: type=1326 audit(1765888013.811:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 989.633782][ T30] audit: type=1326 audit(1765888013.811:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 989.633808][ T30] audit: type=1326 audit(1765888013.911:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 991.166938][T15240] netlink: 'syz.1.1701': attribute type 1 has an invalid length. [ 991.210097][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1701'. [ 991.244411][T15240] bond10: (slave bridge13): making interface the new active one [ 991.253263][T15240] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 991.659790][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 993.343416][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.343457][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.964508][T15275] hub 1-0:1.0: USB hub found [ 993.965886][T15275] hub 1-0:1.0: 1 port detected [ 994.750609][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 995.319647][ T30] audit: type=1326 audit(1765888019.661:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 995.569202][ T6570] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 995.889333][ T6570] usb 2-1: Using ep0 maxpacket: 32 [ 995.935936][ T6570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.977086][ T6570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.003211][ T6570] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 996.154705][ T30] audit: type=1326 audit(1765888019.661:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 996.197548][ T30] audit: type=1326 audit(1765888019.661:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 996.226837][ T6570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.254759][ T6570] usb 2-1: config 0 descriptor?? [ 996.319698][ T30] audit: type=1326 audit(1765888019.661:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 996.379831][ T30] audit: type=1326 audit(1765888019.661:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 996.481061][ T30] audit: type=1326 audit(1765888019.661:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 996.595495][ T30] audit: type=1326 audit(1765888019.661:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 996.836409][ T6570] ft260 0003:0403:6030.0043: unknown main item tag 0x7 [ 996.851024][ T30] audit: type=1326 audit(1765888019.661:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 997.141159][ T6570] ft260 0003:0403:6030.0043: failed to retrieve chip version [ 997.180748][ T6570] ft260 0003:0403:6030.0043: probe with driver ft260 failed with error -5 [ 997.209743][ T30] audit: type=1326 audit(1765888019.661:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 997.485586][ T30] audit: type=1326 audit(1765888019.661:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15282 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 997.642456][T15310] netlink: 'syz.4.1713': attribute type 10 has an invalid length. [ 997.654900][T15310] team0: Port device netdevsim0 added [ 999.527034][T15323] bond13: (slave vxcan11): The slave device specified does not support setting the MAC address [ 999.630959][T15323] bond13: (slave vxcan11): Error -95 calling set_mac_address [ 999.665142][T15325] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 999.680969][T15330] macvlan2: entered promiscuous mode [ 999.686510][T15330] macvlan2: entered allmulticast mode [ 999.696393][T15330] bond13: entered promiscuous mode [ 999.702235][T15330] bridge11: entered promiscuous mode [ 999.708114][T15330] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 999.716931][T15330] bond13: left promiscuous mode [ 999.722186][T15330] bridge11: left promiscuous mode [ 1000.047190][ T24] usb 2-1: USB disconnect, device number 59 [ 1000.745324][T15350] program syz.0.1722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1000.849802][T15353] netlink: 'syz.1.1720': attribute type 3 has an invalid length. [ 1002.178803][T15360] misc userio: No port type given on /dev/userio [ 1003.355676][T15371] loop5: detected capacity change from 0 to 7 [ 1003.394055][T15371] Dev loop5: unable to read RDB block 7 [ 1003.400113][T15371] loop5: unable to read partition table [ 1003.431096][T15371] loop5: partition table beyond EOD, truncated [ 1003.621486][T15389] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 1003.821162][T15371] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1003.889147][T15389] team0: Port device netdevsim0 added [ 1006.896363][T15418] input: syz0 as /devices/virtual/input/input24 [ 1007.553152][T15434] input: syz0 as /devices/virtual/input/input25 [ 1009.008987][T15443] input: syz1 as /devices/virtual/input/input26 [ 1009.429051][T15449] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 1009.539804][T15449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1752'. [ 1009.878797][T15449] bond14: (slave bridge12): making interface the new active one [ 1009.887413][T15449] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 1009.927378][T15449] macvlan2: entered promiscuous mode [ 1009.933039][T15449] macvlan2: entered allmulticast mode [ 1009.939185][T15449] bond14: entered promiscuous mode [ 1009.944499][T15449] bridge12: entered promiscuous mode [ 1010.074002][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 1010.085066][T15449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1010.097990][T15449] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1010.125318][T15449] bond14: left promiscuous mode [ 1010.132385][T15449] bridge12: left promiscuous mode [ 1010.948916][T15462] loop5: detected capacity change from 0 to 7 [ 1011.024024][T15468] binder: BINDER_SET_CONTEXT_MGR already set [ 1011.030717][T15468] binder: 15463:15468 ioctl 4018620d 80000040 returned -16 [ 1011.038306][T15462] Dev loop5: unable to read RDB block 7 [ 1011.051379][T15462] loop5: unable to read partition table [ 1011.057621][T15462] loop5: partition table beyond EOD, truncated [ 1011.077441][T15462] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1011.627064][T15476] bond15: (slave vxcan11): The slave device specified does not support setting the MAC address [ 1011.740805][T15476] bond15: (slave vxcan11): Error -95 calling set_mac_address [ 1011.836679][T15481] macvlan2: entered promiscuous mode [ 1011.859351][T15481] macvlan2: entered allmulticast mode [ 1012.296414][T15481] bond15: entered promiscuous mode [ 1012.310413][T15481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1012.404338][T15481] bond15: left promiscuous mode [ 1014.793542][T15508] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 1014.940225][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 1014.985111][T15515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1751'. [ 1015.134831][T15508] macvlan2: entered promiscuous mode [ 1015.141951][T15508] macvlan2: entered allmulticast mode [ 1015.186887][T15508] bond9: entered promiscuous mode [ 1015.246184][T15508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1015.265298][T15508] bond9: left promiscuous mode [ 1015.550743][T15516] bond9: (slave bridge8): Enslaving as an active interface with a down link [ 1017.154304][T15531] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1755'. [ 1017.175553][T15531] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1755'. [ 1017.214001][T15531] netlink: 'syz.0.1755': attribute type 3 has an invalid length. [ 1017.225645][T15531] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1755'. [ 1017.279503][T15533] : renamed from bridge_slave_0 [ 1017.725036][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1018.062361][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1018.069763][ T24] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 8 [ 1018.101220][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1018.111940][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.129735][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.242931][ T24] usb 2-1: Product: syz [ 1018.247130][ T24] usb 2-1: Manufacturer: syz [ 1018.348132][ T24] usb 2-1: SerialNumber: syz [ 1018.402211][T15543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1018.501645][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 1018.558806][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 1018.583883][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 1018.641094][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 1018.747759][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 1019.467784][T15575] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 1019.609411][T15578] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 1019.618661][T15578] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1019.633782][T15578] bond0: (slave netdevsim0): Releasing backup interface [ 1019.671514][T15578] team0: Port device netdevsim0 added [ 1019.679274][T14292] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1019.840098][T14292] usb 5-1: Using ep0 maxpacket: 32 [ 1019.848508][T14292] usb 5-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1019.863085][T14292] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1019.874922][T14292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.883192][T14292] usb 5-1: Product: syz [ 1019.887418][T14292] usb 5-1: Manufacturer: syz [ 1019.936909][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1019.954334][T14292] usb 5-1: SerialNumber: syz [ 1019.964652][ T24] usb 2-1: USB disconnect, device number 60 [ 1020.001073][T14292] usb 5-1: config 0 descriptor?? [ 1020.027779][T14292] usb 5-1: bad CDC descriptors [ 1020.047123][T14292] usb 5-1: unsupported MDLM descriptors [ 1020.320224][ T39] usb 5-1: USB disconnect, device number 68 [ 1021.149510][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1021.149524][ T30] audit: type=1326 audit(1765888045.501:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1021.313328][ T30] audit: type=1326 audit(1765888045.501:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1021.427311][ T30] audit: type=1326 audit(1765888045.501:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1021.471458][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1021.488363][ T30] audit: type=1326 audit(1765888045.501:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1021.657155][ T30] audit: type=1326 audit(1765888045.501:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1021.680215][ T30] audit: type=1326 audit(1765888045.501:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1021.814623][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1021.826636][T15603] nvme_fabrics: missing parameter 'transport=%s' [ 1021.956915][ T30] audit: type=1326 audit(1765888045.501:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1021.979817][ T30] audit: type=1326 audit(1765888045.501:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1022.002488][ T30] audit: type=1326 audit(1765888045.501:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1022.028836][ T30] audit: type=1326 audit(1765888045.501:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15589 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1022.052610][T15617] __nla_validate_parse: 1 callbacks suppressed [ 1022.052627][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 1022.080966][T15603] nvme_fabrics: missing parameter 'nqn=%s' [ 1022.119486][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.204138][T15618] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 1022.233697][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.245086][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1022.255229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.270024][ T9] usb 2-1: config 0 descriptor?? [ 1022.287126][T15618] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 1022.364211][T15618] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 1022.971783][ T9] ft260 0003:0403:6030.0044: unknown main item tag 0x7 [ 1023.053343][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 1023.160312][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 1023.310673][ T9] ft260 0003:0403:6030.0044: failed to retrieve chip version [ 1023.320383][ T9] ft260 0003:0403:6030.0044: probe with driver ft260 failed with error -5 [ 1024.183794][T15636] input: syz0 as /devices/virtual/input/input27 [ 1025.372021][ T9] usb 2-1: USB disconnect, device number 61 [ 1025.651533][T15657] netlink: 'syz.1.1781': attribute type 10 has an invalid length. [ 1025.664476][T15657] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1026.009735][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1026.190141][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1026.787174][ T24] usb 4-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1026.847235][ T24] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1026.857267][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.949659][ T24] usb 4-1: Product: syz [ 1026.961665][ T24] usb 4-1: Manufacturer: syz [ 1026.989661][ T24] usb 4-1: SerialNumber: syz [ 1027.018035][ T24] usb 4-1: config 0 descriptor?? [ 1027.030961][ T24] usb 4-1: bad CDC descriptors [ 1027.106746][ T24] usb 4-1: unsupported MDLM descriptors [ 1027.181922][T15668] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1027.255844][T14292] usb 4-1: USB disconnect, device number 50 [ 1027.732240][T15668] netdevsim netdevsim4: Direct firmware load for / [ 1027.732240][T15668] failed with error -2 [ 1027.743739][T15668] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 1027.743739][T15668] [ 1028.983095][T15694] input: syz0 as /devices/virtual/input/input28 [ 1029.438754][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1029.438764][ T30] audit: type=1326 audit(1765888053.811:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1029.694794][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 1029.734528][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 1029.780529][ T30] audit: type=1326 audit(1765888053.841:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1029.802722][ T30] audit: type=1326 audit(1765888053.841:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1029.824845][ T30] audit: type=1326 audit(1765888053.851:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1029.847083][ T30] audit: type=1326 audit(1765888053.851:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1029.889433][ T30] audit: type=1326 audit(1765888053.851:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1030.084722][T15705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1791'. [ 1030.186077][ T30] audit: type=1326 audit(1765888053.851:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1030.379753][ T30] audit: type=1326 audit(1765888053.891:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1031.590149][T15734] netlink: 'syz.0.1797': attribute type 2 has an invalid length. [ 1031.624228][ T30] audit: type=1326 audit(1765888056.001:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.0.1797" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0 [ 1036.164069][T15771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1036.183745][T15771] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1803'. [ 1036.699759][ T30] audit: type=1326 audit(1765888060.931:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1036.983964][ T30] audit: type=1326 audit(1765888060.931:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.042760][ T30] audit: type=1326 audit(1765888060.931:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.117163][ T30] audit: type=1326 audit(1765888060.931:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.255858][ T30] audit: type=1326 audit(1765888060.931:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.421168][ T30] audit: type=1326 audit(1765888060.931:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.531608][T14292] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1037.550930][ T30] audit: type=1326 audit(1765888060.931:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.587839][ T30] audit: type=1326 audit(1765888060.931:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.672865][ T30] audit: type=1326 audit(1765888060.931:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.706700][ T30] audit: type=1326 audit(1765888060.941:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1037.798301][T14292] usb 4-1: device descriptor read/64, error -71 [ 1038.081007][T14292] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1038.219297][T14292] usb 4-1: device descriptor read/64, error -71 [ 1038.403616][T14292] usb usb4-port1: attempt power cycle [ 1038.692163][T15795] hub 1-0:1.0: USB hub found [ 1038.700005][T15795] hub 1-0:1.0: 1 port detected [ 1038.760078][T14292] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1038.799898][T14292] usb 4-1: device descriptor read/8, error -71 [ 1039.059516][T14292] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1039.124198][T14292] usb 4-1: device descriptor read/8, error -71 [ 1039.239752][T14292] usb usb4-port1: unable to enumerate USB device [ 1039.339777][ T39] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1039.526506][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 1039.560486][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1039.613408][T15803] netlink: 'syz.2.1811': attribute type 4 has an invalid length. [ 1039.630149][T15803] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1039.645132][ T39] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1039.667658][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.704545][ T39] usb 5-1: Product: syz [ 1039.735100][ T39] usb 5-1: Manufacturer: syz [ 1039.744965][ T39] usb 5-1: SerialNumber: syz [ 1039.802356][ T39] usb 5-1: config 0 descriptor?? [ 1040.250530][ T39] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1040.502775][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1813'. [ 1040.548992][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'. [ 1040.832460][ T39] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1040.842443][ T39] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 1041.283799][T15799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.381019][T15799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.298731][T15837] IPVS: stopping backup sync thread 6699 ... [ 1043.277503][ T24] usb 5-1: USB disconnect, device number 69 [ 1043.619831][ T24] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 1043.730839][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1043.770187][ T30] audit: type=1326 audit(1765888068.101:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1043.812934][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1043.836401][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1043.886452][ T30] audit: type=1326 audit(1765888068.101:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1043.909305][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.946618][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1043.984902][ T30] audit: type=1326 audit(1765888068.101:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1044.030360][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1044.052971][ T6570] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1044.068782][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1044.251647][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1044.265308][ T30] audit: type=1326 audit(1765888068.101:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1044.453963][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1044.467239][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1044.481454][ T30] audit: type=1326 audit(1765888068.101:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1044.739745][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1044.753870][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1044.763924][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1044.775187][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1044.787345][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1044.789306][ T30] audit: type=1326 audit(1765888068.101:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1044.839275][ T6570] usb 1-1: Using ep0 maxpacket: 32 [ 1044.839634][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1044.859030][ T24] usb 5-1: string descriptor 0 read error: -22 [ 1044.865942][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1044.879675][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.898728][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1044.915973][ T6570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.983044][ T30] audit: type=1326 audit(1765888068.101:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1045.189285][ T6570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.200650][ T6570] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1045.220709][ T30] audit: type=1326 audit(1765888068.101:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1045.253428][ T6570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.413791][ T6570] usb 1-1: config 0 descriptor?? [ 1045.864116][ T30] audit: type=1326 audit(1765888068.111:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1046.086169][ T6570] ft260 0003:0403:6030.0045: unknown main item tag 0x7 [ 1046.203297][ T30] audit: type=1326 audit(1765888068.111:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15843 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1046.288842][ T6570] ft260 0003:0403:6030.0045: failed to retrieve chip version [ 1046.300074][ T6570] ft260 0003:0403:6030.0045: probe with driver ft260 failed with error -5 [ 1046.843572][T15870] usb 1-1: USB disconnect, device number 79 [ 1046.995253][T15874] hub 1-0:1.0: USB hub found [ 1047.145659][T15874] hub 1-0:1.0: 1 port detected [ 1047.369259][ T6570] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1047.558624][T14292] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1047.940078][ T6570] usb 2-1: config 0 has no interfaces? [ 1048.059889][ T6570] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1048.085906][ T6570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.102901][ T6570] usb 2-1: Product: syz [ 1048.107204][ T6570] usb 2-1: Manufacturer: syz [ 1048.129287][ T6570] usb 2-1: SerialNumber: syz [ 1048.193085][ T6570] usb 2-1: config 0 descriptor?? [ 1048.421764][ T24] usb 5-1: USB disconnect, device number 70 [ 1049.814143][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1049.814155][ T30] audit: type=1326 audit(1765888074.191:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1049.845424][ T30] audit: type=1326 audit(1765888074.221:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1049.871693][ T30] audit: type=1326 audit(1765888074.251:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1049.895138][ T30] audit: type=1326 audit(1765888074.251:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1049.920162][ T30] audit: type=1326 audit(1765888074.251:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1050.010526][ T24] usb 2-1: USB disconnect, device number 62 [ 1050.052251][ T30] audit: type=1326 audit(1765888074.271:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1050.120157][ T30] audit: type=1326 audit(1765888074.271:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1050.209216][T14292] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1050.219809][ T30] audit: type=1326 audit(1765888074.271:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1050.243117][ T30] audit: type=1326 audit(1765888074.301:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1050.329951][ T30] audit: type=1326 audit(1765888074.301:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000 [ 1050.459880][T14292] usb 1-1: Using ep0 maxpacket: 32 [ 1050.468200][T14292] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1050.485208][T14292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.513337][T14292] usb 1-1: config 0 descriptor?? [ 1050.561810][T14292] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1051.469773][T14292] gspca_sunplus: reg_r err -110 [ 1051.475440][T14292] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1051.576580][T15916] input: syz0 as /devices/virtual/input/input29 [ 1051.796592][ T39] usb 1-1: USB disconnect, device number 81 [ 1051.850571][ T24] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1052.011203][ T24] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 1052.021854][ T24] usb 5-1: config 7 has no interface number 0 [ 1052.052332][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1052.064010][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.088711][T15918] netlink: 'syz.0.1835': attribute type 4 has an invalid length. [ 1052.097332][ T24] usb 5-1: Product: syz [ 1052.111041][ T24] usb 5-1: Manufacturer: syz [ 1052.121558][T15918] netlink: 'syz.0.1835': attribute type 4 has an invalid length. [ 1052.139751][ T24] usb 5-1: SerialNumber: syz [ 1052.201078][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 1052.773727][T15922] could not allocate digest TFM handle sha224-generic [ 1053.076549][ T24] as10x_usb: device has been detected [ 1053.086036][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1053.104016][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1053.111489][T15927] bridge9: port 1(veth3) entered blocking state [ 1053.163796][T15928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.179566][T15928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.249793][T15927] bridge9: port 1(veth3) entered disabled state [ 1053.263374][T15927] veth3: entered allmulticast mode [ 1053.542361][T15927] veth3: entered promiscuous mode [ 1053.572277][ T24] as10x_usb: error during firmware upload part1 [ 1053.578979][ T24] Registered device Elgato EyeTV DTT Deluxe [ 1053.627162][T15932] bridge9: port 2(veth0_to_bond) entered blocking state [ 1053.641542][T15932] bridge9: port 2(veth0_to_bond) entered disabled state [ 1053.689829][T15932] veth0_to_bond: entered allmulticast mode [ 1053.746873][T15932] veth0_to_bond: entered promiscuous mode [ 1054.175304][T15934] bridge9: port 3(veth5) entered blocking state [ 1054.184210][T15934] bridge9: port 3(veth5) entered disabled state [ 1054.193553][T15934] veth5: entered allmulticast mode [ 1054.200551][ T6570] usb 5-1: USB disconnect, device number 71 [ 1054.218541][T15934] veth5: entered promiscuous mode [ 1054.608703][ T6570] Unregistered device Elgato EyeTV DTT Deluxe [ 1054.643731][ T6570] as10x_usb: device has been disconnected [ 1054.673506][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.758905][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.266169][T15959] input: syz1 as /devices/virtual/input/input30 [ 1055.437804][T15958] hub 1-0:1.0: USB hub found [ 1055.448236][T15958] hub 1-0:1.0: 1 port detected [ 1055.553958][T15959] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 1055.820183][T15965] gretap2: entered allmulticast mode [ 1055.842370][T15965] bond10: (slave gretap2): making interface the new active one [ 1055.878621][T15965] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 1057.088424][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1057.088477][ T30] audit: type=1326 audit(1765888081.421:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1057.208372][ T30] audit: type=1326 audit(1765888081.421:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1057.252010][ T30] audit: type=1326 audit(1765888081.421:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1057.395580][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1057.550675][ T30] audit: type=1326 audit(1765888081.421:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1057.561577][T15989] block device autoloading is deprecated and will be removed. [ 1057.577222][ T30] audit: type=1326 audit(1765888081.421:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1057.603207][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1057.727153][ T30] audit: type=1326 audit(1765888081.421:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1057.915051][ T30] audit: type=1326 audit(1765888081.421:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1057.915123][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.056117][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.074238][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1058.087888][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.088245][ T30] audit: type=1326 audit(1765888081.421:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1058.127063][ T24] usb 2-1: config 0 descriptor?? [ 1058.180637][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 1058.262521][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1848'. [ 1058.472507][ T30] audit: type=1326 audit(1765888081.421:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1058.571679][ T30] audit: type=1326 audit(1765888081.421:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1058.706446][ T24] ft260 0003:0403:6030.0046: unknown main item tag 0x7 [ 1058.925583][ T24] ft260 0003:0403:6030.0046: failed to retrieve chip version [ 1058.934679][ T24] ft260 0003:0403:6030.0046: probe with driver ft260 failed with error -5 [ 1059.672569][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1853'. [ 1059.896223][T16012] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1060.014960][T16013] pim6reg: entered allmulticast mode [ 1060.066394][T16012] netdevsim netdevsim2: Direct firmware load for / [ 1060.066394][T16012] failed with error -2 [ 1060.101886][T16012] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 1060.101886][T16012] [ 1060.629569][T16015] bridge13: port 1(veth3) entered blocking state [ 1060.712345][T13864] usb 2-1: USB disconnect, device number 63 [ 1060.730924][T16015] bridge13: port 1(veth3) entered disabled state [ 1060.745271][T16015] veth3: entered allmulticast mode [ 1060.792371][T16015] veth3: entered promiscuous mode [ 1061.010160][T16018] bridge13: port 2(veth0_to_bond) entered blocking state [ 1061.027446][T16018] bridge13: port 2(veth0_to_bond) entered disabled state [ 1061.057300][T16018] veth0_to_bond: entered allmulticast mode [ 1061.101651][T16018] veth0_to_bond: entered promiscuous mode [ 1061.191359][T16019] bridge13: port 3(veth5) entered blocking state [ 1061.197847][T16019] bridge13: port 3(veth5) entered disabled state [ 1061.311578][T16019] veth5: entered allmulticast mode [ 1061.343248][T16019] veth5: entered promiscuous mode [ 1061.545757][T16004] pim6reg: left allmulticast mode [ 1062.168857][T16035] hub 1-0:1.0: USB hub found [ 1062.175020][T16035] hub 1-0:1.0: 1 port detected [ 1062.248196][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 1062.260447][T16036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1857'. [ 1062.471157][T16040] input: syz1 as /devices/virtual/input/input31 [ 1062.859827][T16040] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 1062.940081][T16041] gretap2: entered allmulticast mode [ 1062.964328][T16041] bond16: (slave gretap2): making interface the new active one [ 1063.241041][T16041] bond16: (slave gretap2): Enslaving as an active interface with an up link [ 1064.150301][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1861'. [ 1064.469397][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 1064.482075][T16069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 1066.177973][T16083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 1067.672153][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 1069.439841][T16117] hub 1-0:1.0: USB hub found [ 1069.448266][T16117] hub 1-0:1.0: 1 port detected [ 1070.488967][T16123] netlink: 'syz.3.1872': attribute type 2 has an invalid length. [ 1070.577157][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1070.577173][ T30] audit: type=1326 audit(1765888094.951:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16120 comm="syz.3.1872" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 1070.863098][T16134] tipc: Can't bind to reserved service type 1 [ 1070.874796][T16134] ip6gre1: entered promiscuous mode [ 1070.880431][T16134] ip6gre1: entered allmulticast mode [ 1071.836041][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1877'. [ 1071.848719][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1877'. [ 1072.101862][ T30] audit: type=1326 audit(1765888096.441:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1072.163133][ T30] audit: type=1326 audit(1765888096.441:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1072.512103][ T30] audit: type=1326 audit(1765888096.441:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1072.559765][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1072.596228][ T30] audit: type=1326 audit(1765888096.441:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1072.719214][ T30] audit: type=1326 audit(1765888096.441:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1072.789163][ T30] audit: type=1326 audit(1765888096.451:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1072.799731][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1072.856086][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.882273][ T30] audit: type=1326 audit(1765888096.451:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1072.939540][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.977429][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1072.980532][ T30] audit: type=1326 audit(1765888096.451:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1073.052384][ T30] audit: type=1326 audit(1765888096.451:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.1.1879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1073.082798][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.116643][ T24] usb 2-1: config 0 descriptor?? [ 1073.322782][T16160] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1073.381318][T16160] netdevsim netdevsim0: Direct firmware load for / [ 1073.381318][T16160] failed with error -2 [ 1073.435100][T16160] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1073.435100][T16160] [ 1073.570549][ T24] ft260 0003:0403:6030.0047: unknown main item tag 0x7 [ 1073.705436][T16165] loop2: detected capacity change from 0 to 7 [ 1073.716067][T16165] Dev loop2: unable to read RDB block 7 [ 1073.757553][ T24] ft260 0003:0403:6030.0047: failed to retrieve chip version [ 1073.773860][T16165] loop2: AHDI p1 p2 p3 [ 1073.781418][T16165] loop2: partition table partially beyond EOD, truncated [ 1073.791055][ T24] ft260 0003:0403:6030.0047: probe with driver ft260 failed with error -5 [ 1073.823097][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 1073.841592][T16165] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1073.859593][T16165] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1074.291901][T16169] bridge3: port 1(veth3) entered blocking state [ 1074.305240][T16169] bridge3: port 1(veth3) entered disabled state [ 1074.315412][T16169] veth3: entered allmulticast mode [ 1074.349004][T16169] veth3: entered promiscuous mode [ 1074.361206][T16172] bridge3: port 2(veth0_to_bond) entered blocking state [ 1074.441844][T16172] bridge3: port 2(veth0_to_bond) entered disabled state [ 1074.449054][T16172] veth0_to_bond: entered allmulticast mode [ 1074.563981][T16172] veth0_to_bond: entered promiscuous mode [ 1074.676273][T16173] bridge3: port 3(veth5) entered blocking state [ 1074.690294][T16173] bridge3: port 3(veth5) entered disabled state [ 1074.700941][T16173] veth5: entered allmulticast mode [ 1074.786183][T16173] veth5: entered promiscuous mode [ 1075.425066][T16187] IPVS: stopping backup sync thread 7176 ... [ 1076.650728][ T24] usb 2-1: USB disconnect, device number 64 [ 1079.188307][T16231] netlink: 'syz.1.1898': attribute type 9 has an invalid length. [ 1079.245170][T16234] ip6t_REJECT: ECHOREPLY is not supported [ 1079.286607][T16231] netlink: 'syz.1.1898': attribute type 6 has an invalid length. [ 1079.343940][T16236] gre1: entered promiscuous mode [ 1080.644006][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1080.644017][ T30] audit: type=1326 audit(1765888105.021:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1080.733614][ T30] audit: type=1326 audit(1765888105.051:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1080.806708][ T30] audit: type=1326 audit(1765888105.051:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1080.860881][ T30] audit: type=1326 audit(1765888105.051:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1080.954787][ T30] audit: type=1326 audit(1765888105.061:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1080.987052][ T30] audit: type=1326 audit(1765888105.141:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1081.120764][ T30] audit: type=1326 audit(1765888105.141:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1081.199564][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1081.459769][ T30] audit: type=1326 audit(1765888105.271:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1081.489675][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1081.498772][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.529431][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.569027][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1081.579302][ T30] audit: type=1326 audit(1765888105.281:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1081.660108][T16264] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 1081.674093][T16264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.686001][T16264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1081.702892][T16264] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 1081.711131][T16264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1903'. [ 1081.720629][T16264] batadv0: entered promiscuous mode [ 1081.725879][T16264] batadv0: entered allmulticast mode [ 1081.808792][ T30] audit: type=1326 audit(1765888105.281:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1081.832708][T16264] bond0: (slave batadv0): Releasing backup interface [ 1081.903282][T16264] bridge0: port 3(batadv0) entered blocking state [ 1081.912275][T16264] bridge0: port 3(batadv0) entered disabled state [ 1082.080190][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.097356][ T24] usb 2-1: config 0 descriptor?? [ 1082.600732][ T5938] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1082.610030][ T5938] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1082.691003][ T24] ft260 0003:0403:6030.0048: unknown main item tag 0x7 [ 1082.724698][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1906'. [ 1083.292393][ T24] ft260 0003:0403:6030.0048: failed to retrieve chip version [ 1083.311427][ T24] ft260 0003:0403:6030.0048: probe with driver ft260 failed with error -5 [ 1085.661102][T14292] usb 2-1: USB disconnect, device number 65 [ 1086.152406][T16315] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1086.179974][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1086.179990][ T30] audit: type=1326 audit(1765888110.561:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1086.235910][T16317] pim6reg: entered allmulticast mode [ 1086.408657][T16316] netdevsim netdevsim3: Direct firmware load for / [ 1086.408657][T16316] failed with error -2 [ 1086.425513][T16316] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 1086.425513][T16316] [ 1086.458381][ T30] audit: type=1326 audit(1765888110.591:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1086.662767][ T30] audit: type=1326 audit(1765888110.591:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1086.811426][T16324] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 1087.081332][T16324] bond16: (slave bridge16): making interface the new active one [ 1087.082057][ T30] audit: type=1326 audit(1765888110.591:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1087.090456][T16324] bond16: (slave bridge16): Enslaving as an active interface with an up link [ 1087.199458][ T30] audit: type=1326 audit(1765888110.591:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1087.249456][ T30] audit: type=1326 audit(1765888110.591:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1087.272181][T16326] macvlan0: entered promiscuous mode [ 1087.277558][T16326] macvlan0: entered allmulticast mode [ 1087.287018][T16326] bond16: entered promiscuous mode [ 1087.295271][ T30] audit: type=1326 audit(1765888110.591:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1087.299856][ T31] INFO: task kworker/0:9:6495 blocked for more than 143 seconds. [ 1087.318090][T16326] bridge16: entered promiscuous mode [ 1087.341084][T16326] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1087.348566][ T30] audit: type=1326 audit(1765888110.591:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1087.372823][T16326] bond16: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1087.392123][ T30] audit: type=1326 audit(1765888110.591:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1087.397178][ T31] Tainted: G L syzkaller #0 [ 1087.425370][T16326] bond16: left promiscuous mode [ 1087.434189][T16326] bridge16: left promiscuous mode [ 1087.441710][ T30] audit: type=1326 audit(1765888110.591:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16310 comm="syz.1.1912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1087.494175][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.505048][ T31] task:kworker/0:9 state:D stack:21384 pid:6495 tgid:6495 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1087.525290][ T31] Workqueue: usb_hub_wq hub_event [ 1087.532046][ T31] Call Trace: [ 1087.536502][ T31] [ 1087.540408][ T31] __schedule+0x14bc/0x5000 [ 1087.546534][ T31] ? __pfx___schedule+0x10/0x10 [ 1087.554154][ T31] ? schedule+0x91/0x360 [ 1087.560831][ T31] schedule+0x165/0x360 [ 1087.565080][ T31] schedule_preempt_disabled+0x13/0x30 [ 1087.571861][ T31] __mutex_lock+0x7e6/0x1350 [ 1087.579951][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1087.585276][ T31] ? hub_event+0x2182/0x4ef0 [ 1087.595384][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1087.601754][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1087.607869][ T31] hub_event+0x2182/0x4ef0 [ 1087.613684][ T31] ? __pfx_hub_event+0x10/0x10 [ 1087.619490][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1087.625407][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.631021][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1087.636938][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1087.676116][ T31] process_scheduled_works+0xad1/0x1770 [ 1087.688474][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1087.709485][ T31] worker_thread+0x8a0/0xda0 [ 1087.714127][ T31] ? __kthread_parkme+0x7b/0x200 [ 1087.719071][ T31] kthread+0x711/0x8a0 [ 1087.724421][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1087.729591][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.734250][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.739561][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1087.744877][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.749599][ T31] ret_from_fork+0x599/0xb30 [ 1087.754229][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.759494][ T31] ? __switch_to_asm+0x39/0x70 [ 1087.764275][ T31] ? __switch_to_asm+0x33/0x70 [ 1087.769035][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.773773][ T31] ret_from_fork_asm+0x1a/0x30 [ 1087.778573][ T31] [ 1087.786934][ T31] [ 1087.786934][ T31] Showing all locks held in the system: [ 1087.803615][ T31] 1 lock held by khungtaskd/31: [ 1087.808936][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1087.818858][ T31] 1 lock held by klogd/5187: [ 1087.823602][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1087.833602][ T31] 2 locks held by getty/5588: [ 1087.838402][ T31] #0: ffff8880351be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1087.848257][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1087.858462][ T31] 5 locks held by kworker/0:9/6495: [ 1087.864156][ T31] #0: ffff888140ed8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1087.875620][ T31] #1: ffffc9000be9fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1087.887541][ T31] #2: ffff8880297ba198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 1087.896513][ T31] #3: ffff88814437d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 1087.906572][ T31] #4: ffff888143b6c668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 1087.916481][ T31] 5 locks held by kworker/1:10/7779: [ 1087.922014][ T31] #0: ffff888140ed8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1087.933682][ T31] #1: ffffc90002f37b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1087.945946][ T31] #2: ffff8881443ca198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 1087.954933][ T31] #3: ffff88802995c518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 1087.964972][ T31] #4: ffff88814471b168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 1087.974796][ T31] 5 locks held by kworker/1:8/14175: [ 1087.980322][ T31] #0: ffff888140ed8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1087.991755][ T31] #1: ffffc9001c0ffb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1088.003765][ T31] #2: ffff88814437b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 1088.012714][ T31] #3: ffff888143f57518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 1088.022820][ T31] #4: ffff888143b6c668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 1088.032581][ T31] 1 lock held by syz.1.1912/16310: [ 1088.037715][ T31] #0: ffffffff8f311c08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1088.046916][ T31] 3 locks held by syz.0.1915/16326: [ 1088.052179][ T31] #0: ffffffff8ea6f228 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1088.061785][ T31] #1: ffffffff8f311c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1088.070937][ T31] #2: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1088.081953][ T31] [ 1088.086423][ T31] ============================================= [ 1088.086423][ T31] [ 1088.098749][ T31] NMI backtrace for cpu 0 [ 1088.098768][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.098789][ T31] Tainted: [L]=SOFTLOCKUP [ 1088.098796][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.098806][ T31] Call Trace: [ 1088.098814][ T31] [ 1088.098822][ T31] dump_stack_lvl+0x189/0x250 [ 1088.098848][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.098869][ T31] ? __pfx__printk+0x10/0x10 [ 1088.098900][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1088.098925][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1088.098948][ T31] ? __pfx__printk+0x10/0x10 [ 1088.098983][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1088.099011][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1088.099036][ T31] sys_info+0x135/0x170 [ 1088.099055][ T31] watchdog+0xf95/0xfe0 [ 1088.099091][ T31] ? watchdog+0x20a/0xfe0 [ 1088.099119][ T31] kthread+0x711/0x8a0 [ 1088.099142][ T31] ? __pfx_watchdog+0x10/0x10 [ 1088.099164][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.099186][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.099208][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1088.099223][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.099245][ T31] ret_from_fork+0x599/0xb30 [ 1088.099264][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.099290][ T31] ? __switch_to_asm+0x39/0x70 [ 1088.099309][ T31] ? __switch_to_asm+0x33/0x70 [ 1088.099329][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.099350][ T31] ret_from_fork_asm+0x1a/0x30 [ 1088.099390][ T31] [ 1088.248619][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1088.253909][ C1] NMI backtrace for cpu 1 [ 1088.253930][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.253951][ C1] Tainted: [L]=SOFTLOCKUP [ 1088.253956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.253967][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1088.253988][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1088.254002][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1088.254017][ C1] RAX: 5f8de7e8e1b8f200 RBX: ffffffff81978eba RCX: 5f8de7e8e1b8f200 [ 1088.254029][ C1] RDX: 0000000000000001 RSI: ffffffff8d792222 RDI: ffffffff8bc08360 [ 1088.254040][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1088.254052][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f821e70 [ 1088.254063][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 1088.254074][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 1088.254087][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.254098][ C1] CR2: 00000000801b3018 CR3: 0000000056cf0000 CR4: 00000000003526f0 [ 1088.254113][ C1] Call Trace: [ 1088.254120][ C1] [ 1088.254126][ C1] default_idle+0x13/0x20 [ 1088.254144][ C1] default_idle_call+0x73/0xb0 [ 1088.254161][ C1] do_idle+0x1ea/0x520 [ 1088.254178][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 1088.254196][ C1] ? __pfx_do_idle+0x10/0x10 [ 1088.254219][ C1] cpu_startup_entry+0x44/0x60 [ 1088.254236][ C1] start_secondary+0x101/0x110 [ 1088.254257][ C1] common_startup_64+0x13e/0x147 [ 1088.254291][ C1] [ 1088.425627][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1088.432483][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.443179][ T31] Tainted: [L]=SOFTLOCKUP [ 1088.447491][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.457534][ T31] Call Trace: [ 1088.460811][ T31] [ 1088.463737][ T31] dump_stack_lvl+0x99/0x250 [ 1088.468320][ T31] ? __asan_memcpy+0x40/0x70 [ 1088.472899][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.478088][ T31] ? __pfx__printk+0x10/0x10 [ 1088.482701][ T31] vpanic+0x237/0x6d0 [ 1088.486675][ T31] ? __pfx_vpanic+0x10/0x10 [ 1088.491173][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1088.496627][ T31] panic+0xb9/0xc0 [ 1088.500343][ T31] ? __pfx_panic+0x10/0x10 [ 1088.504752][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1088.510116][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1088.516264][ T31] watchdog+0xfdf/0xfe0 [ 1088.520420][ T31] ? watchdog+0x20a/0xfe0 [ 1088.524748][ T31] kthread+0x711/0x8a0 [ 1088.528812][ T31] ? __pfx_watchdog+0x10/0x10 [ 1088.533481][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.538065][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.543255][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1088.548444][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.553028][ T31] ret_from_fork+0x599/0xb30 [ 1088.557609][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.562718][ T31] ? __switch_to_asm+0x39/0x70 [ 1088.567479][ T31] ? __switch_to_asm+0x33/0x70 [ 1088.572232][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.576815][ T31] ret_from_fork_asm+0x1a/0x30 [ 1088.581582][ T31] [ 1088.584945][ T31] Kernel Offset: disabled [ 1088.589259][ T31] Rebooting in 86400 seconds..