last executing test programs: 19.928848329s ago: executing program 0 (id=1178): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000280), &(0x7f0000000200)="22cff5", 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x8, 0x88, 0x7ee}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x98, 0x24, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x1002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a300000"], 0x122}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r7 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x24, 0x301, 0x0, 0x80, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000840)={0x0, 0xe, 0x49, "c3184f6c2443a46b7669507256a770ffb2c30effff0000207e45669624fb8cda074aa45fab27befe5230b7cb28b47d319ba7490cde0c89ac4cac0f39303864433d6ad46e98787facca381f5fb9594f0539aa4394b8f02e0fda01efec66b08d31d7b5f898bd16cab483ec51286ac6d086b300000000000000000000000000000000b99e12777a35ac446affd540bf07ed83f085bf039d9f40021d8851a299a0c3afcbb78f961f287f88612c490fffc7a646fc631bd8ea495ea1b41adcb2e3533a4b7bd014c493df14a2bf8892f6a9"}, 0x89) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 18.775987198s ago: executing program 2 (id=1179): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaa232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"], 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64=r5], 0x2c2) write$UHID_INPUT(r2, 0x0, 0x0) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) readahead(0xffffffffffffffff, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 18.049076432s ago: executing program 4 (id=1180): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) move_mount(r1, &(0x7f0000000fc0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x165) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) io_setup(0x8, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c00)="1486184e05de316fd4727d7b6d9a20406561207d565f2c6903b396a6a980db1ca0c40dc93ff563ec5a0606612556717f9e35b78cee0ee68950165bef1b5c002d9aa1e8611dc2afd828b424f1a28dd16040be8c", 0x53}, {0x0}, {&(0x7f0000001880)="12b1887382c23b269aca1f6add6cfbb2faabb61556159484dd635123bc34f79d15fdf639d21de9d46e9c200f42855847dcc83f4a0eaa9e8e3ad3d91c50f5a3fe7aa900f2c165cff2398520ef8adad1ebcfb5f9e715d688f8147b15216c71cbed970dda48b02ca4676aff6664d7885c1a7014718451d8c5e121e052edaf4049a3d45fc8d2bff0d35cf80364563a1a63ef13b4814de0f028f56e0f3b9ed1f98eb42d3c9bdeb0581674754365fc224b6f670887e020442004099f75e370fea143e0b60d51aae67e4d0dfa8dd50bc69a5ea786bdf36d517179ed43ee40a5099496b74646e3564a4ea17b31a11ad36530949ca287aeea62fe4873eb7ebfa1d44f9cf67f44b4181964e2b97b2d7b8308908d7b85e2a0fadde7b0c649ce613e4227ebaa650453b2f59f16817e61f4b24e383320a1f147b14e115fdc2f9325c0bad555897d63ae67d2cab4be21df3e9ba5c70781573819299d744922c964fde41733b056c20c51a830df00571625e66aad9bb6a2d88d7d9886d1f3bf6b6a6d7cad79b05869733e643b4c17f105a9a58858c082eca8a41ba517ce21ed2ca6db7f3ac3f9404f6569e3adbb50dfe0fe28088e294ca33a458aa0bde1c7ebe6f3bfd297438cd5c928043780718907bd351b8df1d9bde4a4c3d791a04a6ba81401effb62381afcdd3d4ae17b38fbc9039ede5b0209c231582fa80018f926ca305593bd613790d55b2e40cb41ab9baa0918982e9bfca86f887b3ab1487aedc9aa6925161b6f129e3f7de25fc0dc6ffd652d68b7526f57451dc81b83b9648b3046903df219d045184a775982c191387aa3be1946dcb0fc0dc7ace7848d64973b3afbb11b1348191a32dfab9bebd89ae4ece9ceda5012e6ab017922a7bec464ddbb6748a29ea539cb9fcfc74fb56fa6625b8b79b00106c18d20a9bd4d0edada52c5dec6f67dfbbffd95a897dc0ae7c05b734c9666590bafc9f6484c7eba35b4645bf51f957a5a17e3b0158e3bcd614932ea4d57975bf45dfce93aad56104652abe80f23cbce3a7c92436d95968173a663ab78572a16c6272db05e8b2ad2a42e69d83f3daf5490beef6df40d58592f6d9c0e9552b509d19e985c3b4f85ec46b53b1fec8896cfdedc5e7dda26212f9687e8567f75ecb17916985b32eb34d13ac9b2eca5d3714ce8269d8c001e65d15bdfbdd26164a222ad6de89ff861bb810a0523f9625fed9678a67c517bc500e8701e1269b67fbaaca0c49efdd3da89829c9fe3b24d2810023cbd4baf542b1746d446e33faf1a96dad2c6dbbde6811561154cd5f5814c3485568f3ef0ce109017c398fc32037a6bbd847d1736aed1345054098abf7030ad99096171d547f17d5eba8dca89415fcd3130fcf0712eae140cc121b49c58c905110c4cc770279fe9a2283857548e977b8b512725375e12ad65a360d20a86f791ee0f0676931a4238e622840e680147ccd9a134f834f895cb39211a548fcd68eaf995a668c16173d0f6754e72713a7a79708dc38122546bc66b9b3e9ce9467bd724cb76f4d6a514676ccc03cd51ca01d57b0e197fcc3401375ef8251013661fc5d9b282c817e0c4a3671db40e3b9191fbe93fe82ff88c2c0d7bd639c87c8ecc9a2abe3e031cdf329a65f19a04101a057a805a82da14cad8e57cd2058d737ca1336720ea1052166942a79990ef940ec828e4816356ebd8529df4aefed2f8e31e8db4d79eaff7e14abd0dea38f6748e4b81c080b563ebf7eeb041c2984831d2e4fe736bfc9bbf387d6383b2237d401608cb0bd2996c702e75aec37d7bfd361b8414774b4ebdcdce3b1d9425ffd41fa0ec509d9dd8fdbfe098fd6e9a86df048896c226f085e40ec234632d825404a2e765c4df57928fa26fb7831748213781940548b4ed2006eeb7ebec3912fee9144070919e4bf9275262d0e60b9b35dc0c8f7a566639fe8773da8d5b66cc9533a6651c2996784bdf046765b0e91d59d3fbc42861dac69e66091eae5ca303be8f48f17a7e1440579a36071303d52ea386aae48c5163a6f70fdb3330aa405c8fd8eed81fc3e1d4088a09b4d2eb4cacbc8952f4fc5fa18bfdb5d1b0d93b0e13c16789789eca2e78759c83d16acc5aaccdeb439c9e4dbe7dcb64b8160f358587a5d8f74c68bfd03946b981404edf79cf8819fe8c4a8e219b10893b81be8c715c7aad01b0874299f463846b9f038b719db0be44504e865aff0fad44b05df7b7fb6510216455c7f223e0f613bcd740244e37f15d6ced76d02b1e03b741585aab4f9f75c51810919adb125765016550909ae408700bd25ea0a4c28c41959ab70890aa9ede545b53f89b32328009a5c77d802125010e5015be3ce10c4077375b26378fcb0e753e99ef9d47c0ba74e51af7e29fa7d6c4c99f4a8b342e3f4a6e80d0d8fbf550acba08607d26c443dc6a8ea3656ca23e0e9df976649d1f6acd573a0900bbf81be4efe69e8abaf542febe541147dc3df65613c8896c7c917bb56cd0bef5b1de0649171ea74058e02f91fb8b078a1419559980d0dfbb4a99d0eb83f57809bf1c28c6b52f0f85f1fc628d1fb33a6f2e7291203e3b1938a35a66b55d1076a994244c8fd10e070f62faa533619eb9504397e20562c833efbea02f90205bf348cb77076537f94969988f312cf01cd8264dd6914a2d87dde898e026a11ef9768f6e04a85d5c70fb79a1816cda9209518f70ae26741682447d8041f5b46cd34ad185c30d66d22f6c51cc837bf8fb4fa3476e115f14bef3860fa43678a5611f2cf5ccb3e8465568eb43b287900f31791b06b50784cb0220415e04999ed137d15b389912085b373472c144a186cf7d415762d4b6bc4445c9ac3cf0c414f05a6257d0d7242f70d42709e006b2998fb941fe617b5cc3929b7ac59f4f33135f3b3ce7976303f1745c62a4e745534ea3d6cfa234931110252557bb0d3bc2ad3cc82dc7fbd7b8ea2feb6cb48fd4262bd182b8bd4495d8c1ebdd8f8bd2741b11b468e6265f283be34bc4330279a840e17e709a2a7b62ca0452f3589459f2d310f0b8617852d34e86188dc67b406d047f292c8f97264db354f7e4b6700b26e632cad14a04b6a091127c3c09a6247493fecdf5912181c2e32ffadda35b8b5483c5d352a69e43bd342a70a558cf98670a38ddf6f1b911fe3cbfbba4f60cadd0f41d2bc6390ac5a4935be01efabb749185a34498b4527c5d9b215970f57153cd8419be2ba478e62de22cfadd3566f4fcab39f90b5144f777ade9f9101eb23e0e46fd070f891af957cc087d9bfbf7eb63930f7deedea2543aa2118f6ed2c64207af21a5dddfd05d2caef5ff0bc4e175037dc06b90da74a339cd0efef774d830204fdc97a140ad6e229b21d80a85d0e3b2a3ac0c4070713b797dd4641ca4ee4c13792c6473e8a3ea988b91ba8203de8556556130a4f3d1a7c5656fc554a6ff1f9ad4badd39a3392b4b9a432605ebc5d305cc1a93698b9b484d839775446ff865c5a4231f28e8d9edf9ca4866f4260cf41a86b0b5f02acdec194e7f57f7834167798dab56d66c812815a79a1c2ba06fae2f3dceb03418c97a74ca08726262783cb587391017e286d73f6a01f489dc473ed7497d140dcfebe7f78df6ebee63440b2b74509b18374710ab60f33e61fb6265c69f562e812b8fd001db970b9ddc5afc850264474f49163b6642fd48c4e0940ae38e7f9fe63442a513e9f23bc9b800d13a186e1bcee8aa4bc8693ee2250155dfe3bade96d8a0a228cae52ebc52d0242017c603e7482807d43e6af231c6c08c34a0611c0234161d36fba9b0b6113d11194803912a5d6befa85fb0945a310835d346c6a63d95f7e7ce030c8620b691be3aee168183798febc48331ce5ba947e9a1a5a62293b952643cb7fe1c3cbf8980ffc82b776916687da03ba0670c1e73c4af6cf8b7d8e66d93cfdc6a9e7ed29cab96956207a0fb39cf690b8746457b0987edcfb4542ea1396348bb6f65df97e4679cc29c1dd0baac13a91b22fd9c44bdfcab156352478dd248464d6b1b98356ea93359e3cb1d688bf134635dbbb6065951eb812847fcfca1c574d6889c6e3e3533618ffd4dab435f1b708740e4cf7030adfd7c7311796d12e022f8b1624e01d83f6426e0c1ee20f399f9f5d363c9b84abc88b32644f2c6ea7c417750fa60038c0393e4c107fae2047349e5f1a9bc7bf2b31597096f2205d20f28766dae8cce0a395623235d487d42650a6925e491a5877570dd9a23c1f3ebca64415795eaff9893fd1ad20a967c5d3dfcc748b89f409d0fd654295b1b5ce80f4206aa65bbb31d925f8427d6f17b2099de6a1f90a469986fb163aff6702c96811deca2fc8bb5736e4c91f3d37c167b265d1203d55a05a3d8822272520dfb87982df89b79f52086257539c0b928b30efb5eede7874738a51cd8712894ff36310565fe6ccf1e197f960772ba395fdf827905dfd87c254b86730aaa0c115a7a2f4713fd7e2bd232b53bd872cd0e2ab1b4238b83ecf0c44a643d05037c0e4319b0c39bd48ddf01a51246418b176e933bdd26e3847499be419897e6226360ee2e25a98733d72c72747cc4ed2d05243d0bb01ed791b450d38d23e91c1002b936e8206b30f098e23761caa78c37e1826ceafabf09cf34895cab8bcc335e37d53eac999438a677ffc9dc52b657dae654b9874b906ef29a0497c4e8f1d9252a646be863ee9ceaf03f473527d25dc8e4326f00175a054fbbfea6d29f1514f2b3878ccf7bb7de5b2f4095e386a2a1ad99db69757828d4ce5fa79868e435916ef099a09647ddd7c88c655ae3e43cb23b78c98f39069b11ec45b24b27a16c65bbc6e9da9942cb347445b7130ab32235a7c8ddcc078dd86335fb1b708f2f60503bc4159bfdfafb71f69f842632f39797e9ce9a76ce0ae427f89043e55bf7fec76ad2146a340152fd6b20e3d7f475f927e36f0fa34d4a9531c717a79da2217941603f7f9250ebd21789f40352accc8710fdd2f0da2a8219610453619a811e525ab37bd34957663c3759c9958ce8ae1fb0f46531b7431fe3792a4f337abc8f684d614a08598b967406dba127d3a1fd3f14fc8372e2ae4d6d58c2cf82e4ceaa98b0f8eba6255acb7b9c5de5a6fe3e669c30e6fd4a03ea0c777f2613ce8132f25df7cb08b5385184bb2e7e331a5ab6fa43bab944e115c02f2547f65930cff252959f6131e9f526ba2387b4e9d168bf95edfd588e430055c0a0dd384a9fbdb7e33545a8fad5d8539fbbd0feaff03bf6b4a49a11f4edc8a9f858e8587de7bdcb4fcc08c07dced0a8d470e394c8ae5d64f1fe7082a332f3edad0731d6e7462e5e6780a434f5ca89d2945e93b0f3eada52ddf9ec0f6e6a30467476560379b84eb6ead28b8d0c150a8aed1deeeee35407adc85fdd72210e0f267e4ac0abf387d62580954214555360ddeda7165157c1a8f6817c955386881309aa6d06bb2c74b4f68b1a4f17b6ba5a031a7e5ef0a407e4ae7637cf927a5890201ad54ad0e641528a0a99fb67bb3cf69d7e451df726ddaad4e94937dd1fc23c83e1f2aec983cbdf43a7d468e41eb0c978aecc103836a165f7c5b05e8494a1ea0d81bf7343b390a308d4a9e0b1df1b127b0d9efb0d78df82445984e2df83634a517c74892fa647581f2c46138aaa95831086d02175bed7caa1070107818a0d07d643e65d294613d5fed156b9376c7ecb36b8e17c768efb50e1809d276c11c1d117abf7938ecb647909b32e34b0240a672a42e56df5879feb414e82bb5a2783e4146f14157e31c9affeab90cab0878c4211787bb5e18fca7b4b1ea779b123", 0x1000}, {&(0x7f0000000d00)="721f6f2ef8f464ca70c3ddd5d318d8fedcc1f6fabf7e21817e9b17220790e4dc1c7b82b1513e880201d0ea4a66c3aff75c512f1466732a01aabb8e609972801680f86f6d2ba19a3a3c37ab81e5784ed3f8e8ce4ff0566cdc82bcd0ec57015e16e6078fdfba1b70108f76a84a2abafcb5881d1d58e9b2ce0aa4048fdefbe3051ef38cc50edbfa1274a1504feb94bbb4cf0cabf2bd4a01fd5363e6ff576bbf55b336cec77aa58eca1d37a7", 0xaa}, {&(0x7f0000000dc0)="8033c2faca9b47faafd26bebceae487a6cd48bd6961ac6154bb23316c5452242e91571d37bf6437f065a2eae4d3f299dedb360832a3eebdc446a3a0e57423928f82bb98452a8dd2c8e2ea0fc1c136de37a79f019aa519c27bd28e3cbc3db6e7badcb360906cf6318d24742", 0x6b}, {&(0x7f0000000e40)="4c3f035f4d7532c470b20d340b5409292337111bd1fa0b69660659eb5162df430c5976ea2d421dfd229b3c98aa96ecd0e4b4f9506ebd9749c62fd3971cb6d18a310af982f841fea4fac4a54df7f6d2d386a6b204789544f833e69ecae6485f0923a2bbda168ad3ee03993b3cd8a49f6c4a1bf18084641184ebec86cefcbdd82d6eaed13f96c2bb7576882944a527cccb1e07343803804606fd1c0b8590ce952bf7da558db4826d0e4ed79eb7a714cc808e638de8e22ad1a393a6978f0cb7f9a5c9858c3b91e55cab9c8bd8268774c1d7eabe", 0xd2}], 0x6}], 0x1, 0x40800) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 17.339910106s ago: executing program 0 (id=1181): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f000090c000/0x2000)=nil, 0x2000}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a000000000000000000000001071300e000000200000000ffffffffac14140c00"], 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.339186675s ago: executing program 3 (id=1182): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0xfffffffe, 0x1, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x41448000) 16.077099955s ago: executing program 1 (id=1183): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, 0x0, 0x814) listen(r4, 0x2000fff) accept(r4, 0xfffffffffffffffd, &(0x7f0000000180)=0x21) sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r7}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x6, 0xfff, 0x8, 0x2, 0x1, 0x8000000000000001}, {0x8, 0x82, 0xd, 0x8, 0x7fffffffffffffff, 0xee}], ['\x00', '\x00', '\x00']}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) 16.00128909s ago: executing program 2 (id=1184): socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20004000) syz_open_dev$radio(0x0, 0x2, 0x2) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x20385655, 0x32525942, 0xc, [{0x0, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {}, {}, {0xfffffffc}, {0x200}], 0x3, 0xfc, 0x0, 0x0, 0x5}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0xffffffff, 0x6c7d, 0xcfa, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfffffffe, 0x5, 0xe, 0x0, 0x0, 0x0, 0x4, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x6, 0x3, 0x0, 0x8003, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xa0000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0xef7, 0x0, 0x10800000, 0x3, 0xfffffffb, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x4, 0xffffffff], [0xffffffff, 0x7f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfff, 0x1ffffffe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0x8], [0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x802, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x10000, 0x0, 0x0, 0x6507, 0x0, 0x0, 0x0, 0x8000001, 0x3, 0x0, 0xa, 0x0, 0x100000]}, 0x45c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0xfc, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x22, 0x4, 0x3, 0x80, {0x4e24, 0x4e22, [0x8, 0xc5, 0x8, 0xa], [0x4, 0x6a5, 0x6, 0x7], 0x0, [0xffff, 0xe]}, 0x7e, 0x584}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "528a0873d791ef3050e46561283128c35db3872b4a4fad33bbea4b80d79cabdfd89f0c30e4f9850b377482ca777155141d433362a74733db85159bda56508d8d4cf3211baf46761f95eb698d3d8ea07b156e16b8aae73c24838a18c5ecfeb7334620e3396ad5e51e14e715d2ff8c307cb9bee02d2d54eba8a88239686a01f06fefeebd311912f65ea98bca9c52cf119704d16fbe271a062a9bba04b8ab1beb6e2fb6d1eecbde218c99a901ec"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000021}, 0x40408c0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 15.125958578s ago: executing program 4 (id=1185): socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0xffff, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40000) recvmsg(r3, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2120}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000bc00038008000400000000000800020009000000a50005004d44a939ae492e68fa989bb7c0387bda6c34476edcc56fd1fd38890800aa71a85d9d6eade591656fc7214c9802338436acbd0ff1a9ee4cb9683d12319126aad3a45b996444ce369192f8392fea7a4efb935e1782c6c7ff687d3fb88ff838e1ae364982697cf23dc0da59e1ee4fad88247eaec1edcf425c3931a88cda83563da287169baa8532c30d592baa876ca5713dee55f0866de2f11f2e4cc4570189dc1dd7000000180001801400020073797a5f74756e"], 0xe8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0xbc, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x11}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xef}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x25, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf5e, 0x910e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0x1f, r5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 14.216699848s ago: executing program 0 (id=1186): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000002a40), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000002b00)=@multiplanar_overlay={0x66906dc8, 0x1, 0x4, 0x4000, 0xff, {0x0, 0x2710}, {0x0, 0xc, 0x1, 0x0, 0x8, 0x9, "88998790"}, 0x9, 0x3, {0x0}, 0x101}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x207}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r7 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r10 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r10, 0xc0205647, &(0x7f0000000000)={0xf498000, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x4, @remote, 0xfffffff8}}, [0x3, 0x10000, 0x4, 0xffff, 0x0, 0x5, 0x4, 0x5, 0xa, 0x3, 0x40, 0xd775, 0x9f8, 0x4, 0x8c8]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000200)={r11, 0x9, 0xfffd}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r9], 0x44}}, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x46, 0x6c, 0x39, 0x40, 0x1784, 0x6, 0xbb2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x30, 0x3, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x62, 0x3, 0x94, 0x98, 0x2f, 0xd7, [], [{{0x9, 0x5, 0x4, 0x2, 0x400, 0x26, 0xe, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0x4, 0x7}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x0, 0x30, 0xe0}}]}}]}}]}}, 0x0) 13.13518465s ago: executing program 3 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3da71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000891}, 0x20040040) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000002d00010026bdf0007cdbdf2504000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb080045ffff3700000000000190780a010101ac1414"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x614ff7c896522663) fcntl$setstatus(r4, 0x4, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) r8 = io_uring_setup(0x6613, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0x0, 0x1fb}) r9 = io_uring_setup(0x63d5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000001580)=[{0x4, 0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}], 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 12.510526149s ago: executing program 1 (id=1188): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaa232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"], 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e900000000000000000000f313f6005e00f8f67efb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf1995688dace6cde7ba4a400b4b0b4dbe64f64b1d63f26796dcbec498623d6a838c69a69dfce9cdd5906f174a666a8529a45773407dbdab2885baf050000000000b3016f6465762d6eb17b2300f9daa1ee23266ecf85fea65eb2d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae89480687bd7f3d7f298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238501000000aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9cf3ee3884002a91c54528b807a89ca184d16645f06188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f299f061f75b7797ce1e411ea918ebd888c1e156b8456931d2ea726ba9609d51a41dd3de304bd7c7ed0a456f0ae12516105c9478f7ded2dc47ec13c0f6af88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000007461b0ccaaa1933a0e8a826b14d4fcb2989ffaaa1acffa8054e9559dfae4697aa00b03b3d80e5524f8495fee7e8d88cb5a040302acb0d1260f2584db48e8d9064e8ce178ce396e85b97e4886444049810f25f1ceca975deb491a125bf0d72f87cc10b0154e", @ANYRES32=0x0, @ANYRES64=r5], 0x2c2) write$UHID_INPUT(r2, 0x0, 0x0) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) readahead(0xffffffffffffffff, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 11.964820003s ago: executing program 4 (id=1189): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) clock_settime(0xa, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000140)) syz_emit_ethernet(0xa2, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaa9d943faaaabb080046000094fffc000000019078ac1e0001ac1414aa9404000004009078030000004d00000000000000002f0000ac1414bbe00000028327df0000000000000000ac1414aaac14ab37581f0000640101000a010101e0000002e0000001862e0000000306020002020ed109567cb50ec760777fb82455050bc92d3002d91d907b790002020684924d890502860b00c60000000005ade34b"], 0x0) 11.903130596s ago: executing program 2 (id=1190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000900000000000000", @ANYRES32=0x1, @ANYRES8=r5, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000100013040000000000000000fe8000000000000000000000000000aa20010000000000000000000000000000fffd00004e2400020200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}}, 0x804) 11.219177427s ago: executing program 1 (id=1191): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0000}]}) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)=""/210) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000200), &(0x7f0000000780)=ANY=[@ANYBLOB="00fb47070bcc3a6481d38a5b6216fc9fc7d6f60ec40d2c720813ecbb1c34600ac2894e1f14eb9de0f3a96237d8909904042eff17a916a93b22608019f5f6117c93bf50c4332457"], 0x47, 0x2) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$isdn(0x22, 0x3, 0x4) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xfffffffeffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 10.183999049s ago: executing program 4 (id=1192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f0000001440)=[{0x0}], 0x1) connect$qrtr(r3, &(0x7f0000000140)={0x2a, 0x3, 0x7fff}, 0xc) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8001902}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x84, 0x9, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_COMMENT={0xb, 0x1a, ',-)\\]\'\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4010) socket$nl_rdma(0x10, 0x3, 0x14) close(r4) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xfffffffffffffd66, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x24}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 9.493131004s ago: executing program 0 (id=1193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000004f00)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}) socket(0x400000000010, 0x3, 0x0) poll(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) read$FUSE(r5, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r7, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000180)=0x1) write$binfmt_elf32(r4, 0x0, 0x4cd) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES32=0x0, @ANYBLOB="01e38020000008000300060100"/24], 0x54}}, 0x20000080) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000100)=ANY=[@ANYRES8=r6], 0x0) 9.253036051s ago: executing program 3 (id=1194): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaa232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"], 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64=r5], 0x2c2) write$UHID_INPUT(r2, 0x0, 0x0) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) readahead(0xffffffffffffffff, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 8.463648046s ago: executing program 1 (id=1195): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x47ff, 0x0, 0x0, 0x87d1513da606f9f3, 0x1, 0x1}, 0x20) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) exit(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x520000, 0x0, 0x9, 0x9, 0x2, 0xeb11, 0xfffffffe}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x923d01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x5, 0x8001, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x399, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x4, 0x9, 0x6, 0x5, 0x401, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x3, 0x143, 0x5, 0xb, 0x2009, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x5, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x40, 0x5, 0x8, 0x86, 0x2, 0x800, 0x6, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0xa, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x9, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x5, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffff9f, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10002, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0x0, 0xffff7441, 0xfff]}, 0x45c) write$char_usb(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x137) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r4, 0x78f) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[], 0x28000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x68040300) 8.096907147s ago: executing program 2 (id=1196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00000000000b80558ddbba9b37786fd8", 0x28}], 0x1}, 0x24004010) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000a00)={r8}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000240)={0x18, r9}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 7.185735397s ago: executing program 3 (id=1197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) r3 = syz_clone(0x10027800, &(0x7f0000000100)="d109995b275615f7de48f67c16923074ef91e78b9f638a2194cf6efa2764d8", 0x1f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="35d9c751acdf1ea044ae4016238b95c328322bfb5a3162070991e1b73a359a09ae6f080c30e8eee0f3b4c2403bb02ea7f698149dcf6aa49a") sched_getattr(r3, &(0x7f0000000280)={0x38}, 0x38, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x118, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xec, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x406}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0xc040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r10, r10, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r11, 0x0, 0x0, 0x0) recvfrom(r12, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 5.897257969s ago: executing program 1 (id=1198): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) clock_settime(0xa, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000140)) syz_emit_ethernet(0xa2, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaa9d943faaaabb080046000094fffc000000019078ac1e0001ac1414aa9404000004009078030000004d00000000000000002f0000ac1414bbe00000028327df0000000000000000ac1414aaac14ab37581f0000640101000a010101e0000002e0000001862e0000000306020002020ed109567cb50ec760777fb82455050bc92d3002d91d907b790002020684924d890502860b00c60000000005ade34b"], 0x0) 5.241355618s ago: executing program 4 (id=1199): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') sendmsg$nl_route(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYBLOB], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r6, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r5, r6, 0x0) write$FUSE_STATFS(r8, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x42) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r10, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) 4.103541051s ago: executing program 0 (id=1200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r6, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x1) fchdir(r7) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$char_usb(0xc, 0xb4, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f00000000c0)={'ip6_vti0\x00', 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r9, 0x8008f511, 0x0) 3.646286641s ago: executing program 3 (id=1201): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000b40)={0x0, 0xffffffffffffffc7, &(0x7f0000000600)=[{&(0x7f0000000640)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x46) r7 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {&(0x7f0000000480)="7540d8d901cb197301018595109be3b8ac14f3059416511cb78798420e7d084d41e734b66c98e3c9aa439b165519a6c55a3c86993e31ad1e667453deeed34482f1bf0d167c1d96209b7a374155a9f136133042ae77c8f58b6baa259d7fd86fe401723eae2826cd9111d7ccba45724c3ed6ef156a7200ef9dfe0399771f6ba6e21b3566efdd19d5d0923261f97c9c6798628817a9c585c1769ffe3f5e03180d30c1a12f3426fb06215cdad006b8d1b0259864de5e393e5032185430d8e114b0b9449ee7fc45158fce125bcce91e39be6adaefe096c433c5dc24f27cba1feb", 0xde}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05", 0xaa}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000900)=[{0x88, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x48, 0x10e, 0x96, "441ca7fddda290dae91e8b290f9a642b066eb2b552ce05ee55be7847bcf07d1d8c31ae790e11969960a62268cb112e53fad6f0e7"}, {0x50, 0x112, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x28, 0x116, 0x5, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0x10, 0x3a, 0x40}, {0x28, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x58, 0x10e, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}], 0x1d8}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) 2.846879182s ago: executing program 1 (id=1202): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) clock_settime(0xa, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000140)) syz_emit_ethernet(0xa2, &(0x7f0000002300)=ANY=[@ANYBLOB="0180c200000eaaaaaa9d943faaaabb080046000094fffc000000019078ac1e0001ac1414aa9404000004009078030000004d00000000000000002f0000ac1414bbe00000028327df0000000000000000ac1414aaac14ab37581f0000640101000a010101e0000002e0000001862e0000000306020002020ed109567cb50ec760777fb82455050bc92d3002d91d907b790002020684924d890502860b00c60000000005ade34b"], 0x0) 2.330320965s ago: executing program 2 (id=1203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') socket$inet6_sctp(0xa, 0x0, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffb}, 0x0) getpid() ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) setns(0xffffffffffffffff, 0x8020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0xe5c, 0x80000) r6 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0x7, 0x2, r6}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r8, 0x7, 0x2, r8}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x400000000000290, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x35, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x1, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c5210}) 1.654139404s ago: executing program 4 (id=1204): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r2, 0x0, 0x0) r3 = getpgid(0x0) kcmp(r3, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x350, 0x8, 0x40, 0x3}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.175330808s ago: executing program 3 (id=1205): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0x78) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000740)={0x2, 0x0, [{0xa, 0x2, 0x5, 0x7f, 0x6}, {0x80000008, 0x8001, 0x2, 0x0, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7, 0x49, 0xfff, 0x3}) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) 209.859725ms ago: executing program 0 (id=1206): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0000}]}) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)=""/210) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000200), &(0x7f0000000780)=ANY=[@ANYBLOB="00fb47070bcc3a6481d38a5b6216fc9fc7d6f60ec40d2c720813ecbb1c34600ac2894e1f14eb9de0f3a96237d8909904042eff17a916a93b22608019f5f6117c93bf50c4332457"], 0x47, 0x2) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$isdn(0x22, 0x3, 0x4) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xfffffffeffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 0s ago: executing program 2 (id=1207): r0 = socket(0x23, 0x3, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = signalfd4(r0, &(0x7f0000000000)={[0xfff]}, 0x8, 0x80800) write$P9_RXATTRCREATE(r4, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000003c0)={&(0x7f0000000340)="596bebf13816c310eaf565f1afe9b978ca6b93a85db43dbc785b17479dc7a65eb05bc87cd18fc0bf6c1dc324e50a3fd3d942963725606a2dd0199bd2a5b1ee08f9e3d9ff286bee02", 0x48}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x80, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x10004}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) accept$alg(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): =61.23 [ 557.003496][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.311183][ T10] usb 4-1: usb_control_msg returned -32 [ 557.407513][ T10] usbtmc 4-1:16.0: can't read capabilities [ 557.950286][ T10] usb 3-1: USB disconnect, device number 24 [ 558.289665][T10248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.414293][T10251] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 558.429214][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 558.449091][T10238] netlink: 'syz.3.756': attribute type 5 has an invalid length. [ 558.556043][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.756'. [ 558.661800][T10242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.684141][T10242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.700809][T10238] geneve2: entered promiscuous mode [ 558.748886][T10238] geneve2: entered allmulticast mode [ 558.808601][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.817515][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.830381][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.844383][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.852813][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.861377][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.870200][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.878558][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.886937][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.895879][T10259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.170224][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 559.235422][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 559.333951][T10264] hub 9-0:1.0: USB hub found [ 559.345361][T10264] hub 9-0:1.0: 1 port detected [ 559.350370][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 559.372597][ T1014] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 560.859388][ T10] usb 4-1: USB disconnect, device number 18 [ 561.481495][T10280] loop6: detected capacity change from 0 to 524288000 [ 561.957010][T10284] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 561.966164][T10284] team0: Port device batadv1 added [ 562.026882][T10284] hub 9-0:1.0: USB hub found [ 562.034278][T10284] hub 9-0:1.0: 1 port detected [ 562.998600][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.005193][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.975125][ T6228] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 564.160483][ T6228] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 564.234338][ T6228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.256278][ T6228] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 564.269879][ T6228] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.307110][ T6228] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 564.334556][ T6228] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 564.346046][ T6228] usb 4-1: Product: syz [ 564.352540][ T6228] usb 4-1: Manufacturer: syz [ 564.439582][ T6228] cdc_wdm 4-1:1.0: skipping garbage [ 564.455245][ T6228] cdc_wdm 4-1:1.0: skipping garbage [ 564.468789][ T6228] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 565.302722][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 565.467914][ T30] audit: type=1326 audit(1760184897.802:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10314 comm="syz.2.769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x0 [ 565.808735][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 566.434252][ T6228] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 566.802588][T10327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.771'. [ 566.840062][T10327] netlink: 'syz.1.771': attribute type 11 has an invalid length. [ 566.849906][T10327] netlink: 19 bytes leftover after parsing attributes in process `syz.1.771'. [ 566.986601][ T5821] usb 4-1: USB disconnect, device number 19 [ 567.010161][ T6228] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.067512][ T6228] usb 5-1: config 0 has no interface number 0 [ 567.274386][ T6228] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 567.283493][ T6228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.372416][ T6228] usb 5-1: config 0 descriptor?? [ 567.381293][ T6228] usb 5-1: selecting invalid altsetting 1 [ 567.387370][ T6228] dvb_ttusb_budget: ttusb_init_controller: error [ 567.395593][ T6228] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 567.459111][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 567.481078][T10331] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 567.516341][T10331] bond4: entered promiscuous mode [ 567.521914][T10331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 567.789632][ T6228] DVB: Unable to find symbol cx22700_attach() [ 567.986105][T10331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.003184][T10331] bond4: (slave bond5): making interface the new active one [ 568.011027][T10331] bond5: entered promiscuous mode [ 568.020031][T10331] bond4: (slave bond5): Enslaving as an active interface with an up link [ 568.731833][ T6228] DVB: Unable to find symbol tda10046_attach() [ 568.742049][ T6228] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 569.232486][T10351] loop6: detected capacity change from 0 to 524288000 [ 569.821178][ T44] usb 5-1: USB disconnect, device number 18 [ 570.616644][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.629435][T10361] team0: Port device batadv0 added [ 570.634843][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 570.796343][T10361] hub 9-0:1.0: USB hub found [ 570.804171][T10361] hub 9-0:1.0: 1 port detected [ 570.914731][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 571.009139][ T44] usb 1-1: config 0 has no interfaces? [ 571.044376][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 571.221851][ T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 571.270554][ T44] usb 1-1: Manufacturer: syz [ 571.287525][ T44] usb 1-1: config 0 descriptor?? [ 573.731111][T10393] loop6: detected capacity change from 0 to 524288000 [ 573.926152][T10393] support for the xor transformation has been removed. [ 574.269017][ T44] usb 1-1: USB disconnect, device number 14 [ 576.532403][T10423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.734304][ T5821] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 577.293017][ T5821] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.301464][ T5821] usb 4-1: config 0 has no interface number 0 [ 577.308406][ T5821] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 577.342835][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.360408][ T5821] usb 4-1: config 0 descriptor?? [ 577.371521][ T5821] usb 4-1: selecting invalid altsetting 1 [ 577.378093][ T5821] dvb_ttusb_budget: ttusb_init_controller: error [ 577.384847][ T5821] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 577.566838][ T5821] DVB: Unable to find symbol cx22700_attach() [ 577.689758][ T5821] DVB: Unable to find symbol tda10046_attach() [ 577.698439][ T5821] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 581.532354][ T5898] usb 4-1: USB disconnect, device number 20 [ 583.968192][ T30] audit: type=1326 audit(1760184916.272:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 583.990494][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.100325][ T30] audit: type=1326 audit(1760184916.272:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 584.122670][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.227745][ T30] audit: type=1326 audit(1760184916.272:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 584.333120][ T30] audit: type=1326 audit(1760184916.272:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 584.370768][T10481] delete_channel: no stack [ 584.419882][ T30] audit: type=1326 audit(1760184916.272:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 584.502645][ T30] audit: type=1326 audit(1760184916.272:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 584.588337][ T30] audit: type=1326 audit(1760184916.272:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 584.616164][T10503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.745759][ T30] audit: type=1326 audit(1760184916.282:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 585.055833][ T30] audit: type=1326 audit(1760184916.282:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 585.144741][ T30] audit: type=1326 audit(1760184916.282:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 585.831997][T10513] loop6: detected capacity change from 0 to 524288000 [ 588.095202][ T6228] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 588.212841][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 588.258109][ T6228] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 588.274700][ T6228] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 588.291239][ T6228] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 588.302047][ T6228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.323229][ T6228] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 588.615279][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.694383][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.718814][T10527] delete_channel: no stack [ 588.974453][ T6228] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 589.261518][ T6228] usb 4-1: USB disconnect, device number 21 [ 589.478592][T10539] net_ratelimit: 615 callbacks suppressed [ 589.478608][T10539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.511089][T10553] geneve2: entered promiscuous mode [ 591.209901][T10557] vivid-007: ================= START STATUS ================= [ 591.217695][T10557] vivid-007: Enable Output Cropping: true [ 591.224288][T10557] vivid-007: Enable Output Composing: true [ 591.230199][T10557] vivid-007: Enable Output Scaler: true [ 591.235915][T10557] vivid-007: Tx RGB Quantization Range: Automatic [ 591.242392][T10557] vivid-007: Transmit Mode: HDMI [ 591.249333][T10557] vivid-007: Hotplug Present: 0x00000000 [ 591.255907][T10557] vivid-007: RxSense Present: 0x00000000 [ 591.267666][T10557] vivid-007: EDID Present: 0x00000000 [ 591.273115][T10557] vivid-007: ================== END STATUS ================== [ 591.634175][ T5821] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 591.660124][T10566] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 591.897749][ T5821] usb 3-1: config 0 has no interfaces? [ 591.929549][ T5821] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 591.938835][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.948436][ T5821] usb 3-1: Product: syz [ 591.958000][ T5821] usb 3-1: Manufacturer: syz [ 591.962715][ T5821] usb 3-1: SerialNumber: syz [ 592.093863][ T5821] usb 3-1: config 0 descriptor?? [ 592.224260][ T6228] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 592.424407][ T6228] usb 4-1: Using ep0 maxpacket: 32 [ 592.572278][ T6228] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 592.975641][ T6228] usb 4-1: config 0 has no interface number 0 [ 592.982002][ T6228] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 593.007922][ T6228] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 593.024406][ T6228] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 593.038269][ T6228] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 593.072670][ T6228] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 593.114915][ T6228] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 593.136163][ T6228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.163748][ T6228] usb 4-1: config 0 descriptor?? [ 593.209958][ T6228] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.455640][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.466160][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.131090][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 594.203713][ T6212] usb 3-1: USB disconnect, device number 25 [ 594.424693][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 594.703869][ T6228] usb 4-1: USB disconnect, device number 22 [ 594.764493][ T44] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 594.970317][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.980092][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 594.990634][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 595.034988][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 595.046019][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 595.046683][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 595.138606][T10589] input: syz1 as /devices/virtual/input/input24 [ 595.203023][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 595.377760][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.390159][T10589] gretap0: entered allmulticast mode [ 595.411202][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.428510][ T44] usb 1-1: Product: syz [ 595.437659][ T44] usb 1-1: Manufacturer: syz [ 595.442514][ T44] usb 1-1: SerialNumber: syz [ 595.483387][ T44] usb 1-1: config 0 descriptor?? [ 595.496345][ T44] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 595.508346][ T44] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 595.609317][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 595.817474][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.862976][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.949990][ T10] usb 2-1: Product: syz [ 595.973214][ T10] usb 2-1: Manufacturer: syz [ 596.024607][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 596.029860][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 596.191832][ T44] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 596.275899][ T44] em28xx 1-1:0.0: Config register raw data: 0x41 [ 596.291483][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 596.439641][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 596.579406][ T5898] usb 1-1: USB disconnect, device number 15 [ 596.589547][ T5898] em28xx 1-1:0.0: Disconnecting em28xx [ 596.613031][ T5898] em28xx 1-1:0.0: Freeing device [ 597.806577][ T44] usb 2-1: USB disconnect, device number 18 [ 598.260306][ T5898] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 598.634123][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 598.666448][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.694205][ T5898] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 598.853701][ T5898] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.968335][ T5898] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.033593][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 599.209520][ T5898] usb 1-1: config 1 interface 1 has no altsetting 0 [ 599.214764][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 599.239148][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 599.263346][ T44] usb 4-1: config 8 has an invalid interface number: 132 but max is 0 [ 599.272506][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 599.302719][ T44] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 599.324609][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.332622][ T5898] usb 1-1: Product: syz [ 599.417585][ T5898] usb 1-1: Manufacturer: syz [ 599.494244][ T44] usb 4-1: config 8 has no interface number 0 [ 599.510957][ T44] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.540994][ T44] usb 4-1: config 8 interface 132 has no altsetting 0 [ 599.541004][ T5898] usb 1-1: SerialNumber: syz [ 599.545836][ T44] usb 4-1: string descriptor 0 read error: -22 [ 599.564560][ T44] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 599.601841][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.643656][ T44] usb-storage 4-1:8.132: USB Mass Storage device detected [ 599.709563][ T44] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a [ 600.096186][T10639] netlink: 'syz.2.824': attribute type 13 has an invalid length. [ 600.215001][T10636] bond3 (unregistering): Released all slaves [ 600.480748][T10639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.464157][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 601.624482][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 601.647106][ T6212] usb 4-1: USB disconnect, device number 23 [ 601.667805][ T10] usb 2-1: config 0 has no interfaces? [ 601.679529][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 601.688833][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 601.719032][ T10] usb 2-1: Manufacturer: syz [ 601.751260][ T10] usb 2-1: config 0 descriptor?? [ 602.531026][ T5898] usb 1-1: USB disconnect, device number 16 [ 602.589769][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.935372][T10663] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 604.284230][ T5898] usb 2-1: USB disconnect, device number 19 [ 604.391711][T10664] gretap0: entered promiscuous mode [ 604.401199][T10664] bond3: (slave gretap0): making interface the new active one [ 604.432922][T10664] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 604.663175][T10666] macvlan0: entered promiscuous mode [ 604.715973][T10666] macvlan0: entered allmulticast mode [ 604.732475][T10666] bond3: entered promiscuous mode [ 604.743786][T10666] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 604.764589][T10666] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 604.816160][T10666] bond3: left promiscuous mode [ 604.864391][T10674] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 605.425128][T10676] binder: BINDER_SET_CONTEXT_MGR already set [ 605.431376][T10676] binder: 10675:10676 ioctl 4018620d 200000000040 returned -16 [ 605.638203][T10681] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 606.191845][T10692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.201281][T10692] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 606.675920][T10699] netlink: 56 bytes leftover after parsing attributes in process `syz.2.836'. [ 608.487088][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 608.644124][ T6228] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 608.878489][T10711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.839'. [ 608.942221][ T6228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 608.973686][ T6228] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 608.988663][ T6228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.003925][ T6228] usb 3-1: Product: syz [ 609.012234][ T6228] usb 3-1: Manufacturer: syz [ 609.020815][ T6228] usb 3-1: SerialNumber: syz [ 609.085722][ T6228] usb 3-1: config 0 descriptor?? [ 609.656976][T10715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.839'. [ 611.582728][ T6228] usb 3-1: USB disconnect, device number 26 [ 612.150708][T10737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.661721][T10753] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 616.048729][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 616.048747][ T30] audit: type=1326 audit(1760184948.392:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 616.227983][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 616.254137][ T30] audit: type=1326 audit(1760184948.402:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 616.425060][T10785] input: syz1 as /devices/virtual/input/input25 [ 616.513008][ T30] audit: type=1326 audit(1760184948.402:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 616.540419][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 616.693232][T10786] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 616.716043][ T30] audit: type=1326 audit(1760184948.402:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 616.739998][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.773795][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 616.818024][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 616.841826][ T30] audit: type=1326 audit(1760184948.402:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 616.882630][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 617.239263][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 617.349801][ T30] audit: type=1326 audit(1760184948.432:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 617.408574][ T6212] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 617.601939][ T30] audit: type=1326 audit(1760184948.432:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 617.604200][ T10] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 617.638202][ T30] audit: type=1326 audit(1760184948.432:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 617.664539][ T6212] usb 4-1: Using ep0 maxpacket: 16 [ 617.707038][ T6212] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 617.721425][ T30] audit: type=1326 audit(1760184948.432:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 617.746452][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.760298][ T6212] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 617.771191][ T10] usb 5-1: Product: syz [ 617.775434][ T10] usb 5-1: Manufacturer: syz [ 617.780057][ T6212] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 617.789947][ T10] usb 5-1: SerialNumber: syz [ 617.794853][ T30] audit: type=1326 audit(1760184948.432:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 617.818927][ T10] usb 5-1: config 0 descriptor?? [ 617.823886][ T6212] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 617.835389][ T6212] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 617.846738][ T6212] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 617.862471][ T6212] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.878879][ T6212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.887377][ T6212] usb 4-1: SerialNumber: syz [ 617.906838][ T6212] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 618.233378][T10792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.342884][T10794] netlink: 72 bytes leftover after parsing attributes in process `syz.4.852'. [ 619.912558][ T5927] usb 4-1: USB disconnect, device number 24 [ 620.546762][T10814] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 620.973404][T10818] netlink: 'syz.1.859': attribute type 27 has an invalid length. [ 620.981748][T10818] netlink: 'syz.1.859': attribute type 3 has an invalid length. [ 621.090156][T10818] netlink: 132 bytes leftover after parsing attributes in process `syz.1.859'. [ 621.491989][T10822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.184483][ T10] rc_core: IR keymap rc-imon-rsc not found [ 622.190428][ T10] Registered IR keymap rc-empty [ 622.223376][ T10] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 622.309975][ T10] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 622.428303][ T10] usb 5-1: USB disconnect, device number 19 [ 622.865455][T10832] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 624.044314][T10847] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 624.441681][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.448232][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.555888][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.867'. [ 625.793040][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.867'. [ 626.298173][T10868] netlink: 'syz.2.869': attribute type 3 has an invalid length. [ 626.305984][T10868] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.869'. [ 627.417220][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 627.417240][ T30] audit: type=1326 audit(1760184959.762:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 627.574607][ T30] audit: type=1326 audit(1760184959.762:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 627.646402][ T30] audit: type=1326 audit(1760184959.802:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 627.668680][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.714770][T10881] fuse: Bad value for 'fd' [ 627.824555][ T30] audit: type=1326 audit(1760184959.802:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 627.910561][ T30] audit: type=1326 audit(1760184959.802:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 628.117139][ T30] audit: type=1326 audit(1760184959.802:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 628.328571][ T30] audit: type=1326 audit(1760184959.802:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 628.350944][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.376674][T10891] netlink: 'syz.0.872': attribute type 12 has an invalid length. [ 628.384635][T10891] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.872'. [ 628.484102][ T30] audit: type=1326 audit(1760184959.802:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 628.814215][ T30] audit: type=1326 audit(1760184959.802:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 628.836578][ C0] vkms_vblank_simulate: vblank timer overrun [ 628.985695][T10896] netlink: 'syz.2.874': attribute type 27 has an invalid length. [ 629.016315][T10896] netlink: 'syz.2.874': attribute type 3 has an invalid length. [ 629.035713][ T30] audit: type=1326 audit(1760184959.802:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.1.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 629.035981][T10896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.874'. [ 629.580279][T10906] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 629.879492][T10891] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004 [ 630.783843][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 631.775010][T10910] delete_channel: no stack [ 632.504108][ T6212] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 632.551592][T10941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.883'. [ 633.018177][ T6212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 633.041181][ T6212] usb 2-1: not running at top speed; connect to a high speed hub [ 633.075366][ T6212] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.086719][ T6212] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 633.096966][ T6212] usb 2-1: config 1 has no interface number 1 [ 633.103185][ T6212] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 633.144278][ T6212] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 633.165561][ T6212] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 65532, setting to 1023 [ 633.628856][ T6212] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.664777][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.672827][ T6212] usb 2-1: Product: syz [ 633.764469][ T6212] usb 2-1: Manufacturer: syz [ 633.864207][ T6212] usb 2-1: SerialNumber: syz [ 634.254999][ T5927] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 634.303420][ T6212] hub 2-1:1.0: Invalid hub with more than one config or interface [ 634.327685][ T6212] hub 2-1:1.0: probe with driver hub failed with error -22 [ 634.339657][ T6212] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 634.433361][ T6212] usb 2-1: USB disconnect, device number 20 [ 634.480964][ T5927] usb 1-1: config 0 has no interfaces? [ 634.493419][ T5927] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 634.502577][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.532243][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.548670][ T5927] usb 1-1: Product: syz [ 634.553598][ T5927] usb 1-1: Manufacturer: syz [ 634.567841][ T5927] usb 1-1: SerialNumber: syz [ 634.604603][ T5927] usb 1-1: config 0 descriptor?? [ 634.867660][T10949] netlink: 196 bytes leftover after parsing attributes in process `syz.0.884'. [ 635.298353][T10963] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 635.828551][T10968] netlink: 64 bytes leftover after parsing attributes in process `syz.1.888'. [ 636.207403][T10975] netlink: 76 bytes leftover after parsing attributes in process `syz.4.890'. [ 636.222356][T10974] vim2m vim2m.0: vidioc_s_fmt queue busy [ 636.416021][T10970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.408670][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 637.408689][ T30] audit: type=1326 audit(1760184969.562:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 637.443763][ T30] audit: type=1326 audit(1760184969.562:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 637.466073][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.564142][ T30] audit: type=1326 audit(1760184969.562:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 637.743908][ T30] audit: type=1326 audit(1760184969.572:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 637.766224][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.134082][ T30] audit: type=1326 audit(1760184969.572:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb894b8d710 code=0x7ffc0000 [ 638.211746][ T30] audit: type=1326 audit(1760184969.572:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 638.234019][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.303064][ T30] audit: type=1326 audit(1760184969.572:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb894b8d710 code=0x7ffc0000 [ 638.375387][ T6212] usb 1-1: USB disconnect, device number 17 [ 638.384239][ T30] audit: type=1326 audit(1760184969.572:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 638.511451][ T30] audit: type=1326 audit(1760184969.582:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 638.533748][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.684147][ T30] audit: type=1326 audit(1760184969.582:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.3.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 639.364485][T11005] netlink: 'syz.0.895': attribute type 10 has an invalid length. [ 639.524159][T11005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.895'. [ 639.658431][T11005] team0: entered promiscuous mode [ 639.672984][T11005] team0: entered allmulticast mode [ 639.699801][T11005] bridge0: port 1(team0) entered blocking state [ 639.754603][T11005] bridge0: port 1(team0) entered disabled state [ 642.567821][T11039] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 645.716407][T11077] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 645.957210][T11080] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 645.968571][T11080] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 646.044737][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 646.502998][T11077] gretap2: entered promiscuous mode [ 646.543524][T11077] bond3: (slave gretap2): making interface the new active one [ 646.569332][T11077] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 647.372903][T11093] netlink: 148 bytes leftover after parsing attributes in process `syz.2.912'. [ 647.605364][T11094] IPv6: Can't replace route, no match found [ 647.656442][T11093] syz.2.912 (11093): drop_caches: 2 [ 648.574211][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.913'. [ 648.824359][ T6212] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 649.014922][ T6212] usb 5-1: Using ep0 maxpacket: 32 [ 649.146667][ T6212] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 649.159546][ T6212] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 649.202755][T11108] syz.3.915: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 649.226566][ T6212] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 649.235934][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.244304][ T6212] usb 5-1: Product: syz [ 649.251921][ T6212] usb 5-1: Manufacturer: syz [ 649.264063][ T6212] usb 5-1: SerialNumber: syz [ 649.273509][T11108] CPU: 0 UID: 0 PID: 11108 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 649.273538][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 649.273557][T11108] Call Trace: [ 649.273579][T11108] [ 649.273589][T11108] dump_stack_lvl+0x189/0x250 [ 649.273622][T11108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.273646][T11108] ? __pfx__printk+0x10/0x10 [ 649.273671][T11108] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 649.273702][T11108] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 649.273735][T11108] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 649.273770][T11108] warn_alloc+0x214/0x310 [ 649.273804][T11108] ? stack_depot_save_flags+0x40/0x860 [ 649.273837][T11108] ? __pfx_warn_alloc+0x10/0x10 [ 649.273873][T11108] ? kasan_save_track+0x3e/0x80 [ 649.273902][T11108] ? __kasan_kmalloc+0x93/0xb0 [ 649.273936][T11108] ? xsk_setsockopt+0x4dc/0x8d0 [ 649.273959][T11108] ? do_sock_setsockopt+0x17c/0x1b0 [ 649.273987][T11108] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 649.274011][T11108] ? do_syscall_64+0xfa/0xfa0 [ 649.274038][T11108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.274070][T11108] __vmalloc_node_range_noprof+0x125/0x12d0 [ 649.274133][T11108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 649.274171][T11108] ? __kasan_kmalloc+0x93/0xb0 [ 649.274211][T11108] vmalloc_user_noprof+0xad/0xf0 [ 649.274244][T11108] ? xskq_create+0xbf/0x170 [ 649.274272][T11108] xskq_create+0xbf/0x170 [ 649.274302][T11108] xsk_init_queue+0xb0/0x110 [ 649.274331][T11108] xsk_setsockopt+0x4dc/0x8d0 [ 649.274359][T11108] ? __pfx_xsk_setsockopt+0x10/0x10 [ 649.274386][T11108] ? __pfx_aa_sk_perm+0x10/0x10 [ 649.274418][T11108] ? aa_sock_opt_perm+0xff/0x1b0 [ 649.274453][T11108] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 649.274474][T11108] ? __pfx_xsk_setsockopt+0x10/0x10 [ 649.274513][T11108] do_sock_setsockopt+0x17c/0x1b0 [ 649.274544][T11108] __x64_sys_setsockopt+0x13f/0x1b0 [ 649.274578][T11108] do_syscall_64+0xfa/0xfa0 [ 649.274609][T11108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.274630][T11108] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.274653][T11108] ? clear_bhb_loop+0x60/0xb0 [ 649.274680][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.274718][T11108] RIP: 0033:0x7fb894b8eec9 [ 649.274740][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.274759][T11108] RSP: 002b:00007fb892db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 649.274780][T11108] RAX: ffffffffffffffda RBX: 00007fb894de6180 RCX: 00007fb894b8eec9 [ 649.274796][T11108] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 649.274808][T11108] RBP: 00007fb894c11f91 R08: 0000000000000052 R09: 0000000000000000 [ 649.274821][T11108] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.274834][T11108] R13: 00007fb894de6218 R14: 00007fb894de6180 R15: 00007fb894f0fa28 [ 649.274868][T11108] [ 649.897956][ T6212] usb 5-1: config 0 descriptor?? [ 649.934794][T11108] Mem-Info: [ 649.966792][T11108] active_anon:8583 inactive_anon:0 isolated_anon:0 [ 649.966792][T11108] active_file:3726 inactive_file:40119 isolated_file:0 [ 649.966792][T11108] unevictable:768 dirty:413 writeback:0 [ 649.966792][T11108] slab_reclaimable:6715 slab_unreclaimable:126208 [ 649.966792][T11108] mapped:32082 shmem:2043 pagetables:1493 [ 649.966792][T11108] sec_pagetables:0 bounce:0 [ 649.966792][T11108] kernel_misc_reclaimable:0 [ 649.966792][T11108] free:1283440 free_pcp:19204 free_cma:0 [ 650.119558][T11108] Node 0 active_anon:37032kB inactive_anon:0kB active_file:14816kB inactive_file:160272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130540kB dirty:1652kB writeback:0kB shmem:8936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12536kB pagetables:5816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 650.276837][T11117] batadv_slave_1: entered promiscuous mode [ 650.376588][T11108] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 650.423606][T11108] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 650.465712][T11108] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 650.477452][T11108] Node 0 DMA32 free:1230648kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45432kB inactive_anon:0kB active_file:14816kB inactive_file:160272kB unevictable:1536kB writepending:1652kB zspages:0kB present:3129332kB managed:2561664kB mlocked:0kB bounce:0kB free_pcp:36172kB local_pcp:19112kB free_cma:0kB [ 650.799458][T11108] lowmem_reserve[]: 0 0 1 1 1 [ 650.895967][T11108] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.107881][T11108] lowmem_reserve[]: 0 0 0 0 0 [ 651.236453][T11108] Node 1 Normal free:3877456kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39652kB local_pcp:28152kB free_cma:0kB [ 651.456426][T11108] lowmem_reserve[]: 0 0 0 0 0 [ 651.463915][T11108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 651.478065][T11108] Node 0 DMA32: 1050*4kB (U) 266*8kB (UM) 96*16kB (UE) 229*32kB (UME) 125*64kB (UME) 84*128kB (UME) 33*256kB (UME) 19*512kB (UME) 6*1024kB (UME) 4*2048kB (M) 283*4096kB (UM) = 1225624kB [ 651.497046][T11108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 651.513140][T11108] Node 1 Normal: 125*4kB (UE) 34*8kB (UE) 2*16kB (U) 103*32kB (U) 34*64kB (UE) 8*128kB (UE) 2*256kB (UE) 2*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 943*4096kB (M) = 3877508kB [ 651.531992][T11108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.547710][T11108] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 651.557793][T11108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.614630][T11108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 651.615350][T11103] batadv_slave_1: left promiscuous mode [ 651.623966][T11108] 48417 total pagecache pages [ 651.723291][T11108] 0 pages in swap cache [ 651.753762][T11108] Free swap = 124996kB [ 651.758137][T11108] Total swap = 124996kB [ 651.762324][T11108] 2097051 pages RAM [ 651.771666][T11108] 0 pages HighMem/MovableOnly [ 651.784173][ T6208] usb 5-1: USB disconnect, device number 20 [ 651.794711][T11108] 424545 pages reserved [ 651.798906][T11108] 0 pages cma reserved [ 652.860962][T11141] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 653.036835][T11143] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 653.051912][T11143] team0: Port device batadv1 added [ 653.330880][T11143] hub 9-0:1.0: USB hub found [ 653.336740][T11143] hub 9-0:1.0: 1 port detected [ 654.055983][T11149] wireguard0: entered promiscuous mode [ 654.079857][T11149] wireguard0: entered allmulticast mode [ 654.558521][T11156] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 655.511450][T11163] fuse: Unknown parameter 'mGN8oad' [ 655.912128][T11168] netlink: 'syz.2.924': attribute type 2 has an invalid length. [ 656.599212][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 656.828403][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.927'. [ 658.763496][T11189] kvm: user requested TSC rate below hardware speed [ 660.015603][T11203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.424133][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 660.619070][T11216] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 660.634188][T11216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 660.662465][T11216] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 660.700338][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 660.714129][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.752438][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 660.778789][T11221] fuse: Unknown parameter 'fd0x000000000000000a' [ 660.983932][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 660.983951][ T30] audit: type=1326 audit(1760184993.252:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 660.985422][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.471152][ T30] audit: type=1326 audit(1760184993.262:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 661.604335][ T10] usb 4-1: Product: syz [ 661.626436][ T10] usb 4-1: Manufacturer: syz [ 661.635847][ T10] usb 4-1: SerialNumber: syz [ 661.643273][ T30] audit: type=1326 audit(1760184993.262:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 661.691658][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 661.714122][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 661.744976][ T30] audit: type=1326 audit(1760184993.262:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11190 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 662.114292][ T6208] usb 4-1: USB disconnect, device number 25 [ 662.540039][T11234] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 665.109731][T11251] syz.4.940 (11251): drop_caches: 2 [ 665.302362][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'. [ 665.488304][ T30] audit: type=1326 audit(1760184997.792:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 665.668815][ T30] audit: type=1326 audit(1760184997.802:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 665.843708][ T30] audit: type=1326 audit(1760184997.802:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 665.894112][ T30] audit: type=1326 audit(1760184997.802:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 665.930217][ T30] audit: type=1326 audit(1760184997.802:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.056581][ T30] audit: type=1326 audit(1760184997.802:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.149098][ T30] audit: type=1326 audit(1760184997.812:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.414552][ T30] audit: type=1326 audit(1760184997.812:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.467085][ T30] audit: type=1326 audit(1760184997.812:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.582967][ T30] audit: type=1326 audit(1760184997.822:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.659760][ T30] audit: type=1326 audit(1760184997.822:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.719852][ T30] audit: type=1326 audit(1760184997.822:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 666.779672][ T30] audit: type=1326 audit(1760184997.822:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 667.037812][ T30] audit: type=1326 audit(1760184997.822:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 667.173845][T11269] program syz.3.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.199958][T11269] syz.3.943 (11269): drop_caches: 2 [ 667.311479][ T30] audit: type=1326 audit(1760184997.822:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 667.354140][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 667.535944][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.553860][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.640512][ T10] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 667.727233][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.756382][ T10] usb 3-1: config 0 descriptor?? [ 670.730147][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 670.743287][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 670.768161][ T10] usb 3-1: USB disconnect, device number 27 [ 673.094246][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 673.377950][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 673.401045][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 673.421762][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.466826][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.560158][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 673.644208][ T6212] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 673.747655][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.757890][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.785750][T11318] fuse: Bad value for 'user_id' [ 673.790804][T11318] fuse: Bad value for 'user_id' [ 673.844670][ T6212] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 673.852874][ T6212] usb 1-1: config 0 has no interface number 0 [ 673.922377][ T6212] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 673.950978][ T6212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.991145][ T6212] usb 1-1: config 0 descriptor?? [ 674.011877][ T6212] usb 1-1: selecting invalid altsetting 1 [ 674.018955][ T6212] dvb_ttusb_budget: ttusb_init_controller: error [ 674.028080][ T6212] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 674.321527][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 674.321548][ T30] audit: type=1400 audit(1760185006.632:855): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=11320 comm="syz.0.953" [ 674.826440][ T6212] DVB: Unable to find symbol cx22700_attach() [ 674.864711][ T6208] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 675.044407][ T6208] usb 3-1: Using ep0 maxpacket: 16 [ 675.094085][ T6208] usb 3-1: unable to get BOS descriptor or descriptor too short [ 675.134525][ T6208] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 675.209992][ T6208] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 675.302773][ T6212] DVB: Unable to find symbol tda10046_attach() [ 675.312512][ T6212] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 675.365441][ T6208] usb 3-1: config 8 has no interface number 0 [ 675.397675][ T6208] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.454995][ T6208] usb 3-1: config 8 interface 132 has no altsetting 0 [ 675.511705][ T6208] usb 3-1: string descriptor 0 read error: -22 [ 675.572422][ T6208] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 675.713827][ T6208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.796287][ T6208] usb-storage 3-1:8.132: USB Mass Storage device detected [ 675.906001][ T6208] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 676.671434][ T10] usb 2-1: USB disconnect, device number 21 [ 676.787265][ T6208] usb 1-1: USB disconnect, device number 18 [ 677.082460][T11349] netlink: 148 bytes leftover after parsing attributes in process `syz.0.957'. [ 677.120195][T11349] syz.0.957 (11349): drop_caches: 2 [ 677.134347][T11349] IPv6: Can't replace route, no match found [ 677.152709][ T6228] usb 3-1: USB disconnect, device number 28 [ 679.226038][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 679.310205][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 680.038894][T11381] netlink: 'syz.4.963': attribute type 27 has an invalid length. [ 680.046869][T11381] netlink: 'syz.4.963': attribute type 3 has an invalid length. [ 680.054611][T11381] netlink: 132 bytes leftover after parsing attributes in process `syz.4.963'. [ 680.205263][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 680.222695][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 682.455879][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 682.868798][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 682.881241][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 683.380668][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 685.034974][T11433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.049796][T11430] fuse: Bad value for 'fd' [ 685.891257][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.897660][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.646805][T11453] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 688.634186][ T6208] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 688.876834][ T30] audit: type=1326 audit(1760185021.142:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 688.942894][ T30] audit: type=1326 audit(1760185021.142:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.007941][ T6208] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 689.017672][ T6208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.028713][ T6208] usb 2-1: config 0 descriptor?? [ 689.036096][ T30] audit: type=1326 audit(1760185021.142:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.058355][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.076375][ T6208] gspca_main: spca508-2.14.0 probing 8086:0110 [ 689.151480][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 689.199429][ T30] audit: type=1326 audit(1760185021.142:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.222605][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.229363][ T30] audit: type=1326 audit(1760185021.142:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.278139][ T6208] gspca_spca508: reg_read err -32 [ 689.327242][ T30] audit: type=1326 audit(1760185021.142:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.450038][ T30] audit: type=1326 audit(1760185021.142:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.472394][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.501854][ T30] audit: type=1326 audit(1760185021.142:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.524198][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.824144][ T6208] gspca_spca508: reg_read err -110 [ 689.848405][ T6208] gspca_spca508: reg_read err -32 [ 689.857539][ T30] audit: type=1326 audit(1760185021.142:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 689.884182][ T6208] gspca_spca508: reg_read err -32 [ 689.897817][ T6208] gspca_spca508: reg write: error -32 [ 689.935811][ T6208] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 689.945813][ T30] audit: type=1326 audit(1760185021.152:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 690.816054][T11484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.192537][T11492] vlan5: entered allmulticast mode [ 691.208720][T11492] bridge0: entered allmulticast mode [ 691.336588][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 691.626195][ T6212] usb 2-1: USB disconnect, device number 22 [ 691.725574][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.824109][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 691.866745][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 691.926273][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 691.976158][T11499] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 691.984390][T11499] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.986'. [ 692.122121][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.187379][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.227380][ T10] usb 3-1: config 0 descriptor?? [ 692.483487][T11502] netlink: 'syz.1.987': attribute type 27 has an invalid length. [ 692.500348][T11502] netlink: 'syz.1.987': attribute type 3 has an invalid length. [ 692.518600][T11502] netlink: 132 bytes leftover after parsing attributes in process `syz.1.987'. [ 692.692042][ T10] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 692.803628][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 694.118326][T11513] fuse: Unknown parameter 'fJ' [ 694.126481][T11513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.342187][ T5927] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 694.714108][ T5927] usb 3-1: device descriptor read/64, error -32 [ 694.748808][T11520] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 695.011436][ T5927] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 695.630145][T11531] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 696.043258][ T10] usb 3-1: USB disconnect, device number 29 [ 697.684537][T11558] netlink: 'syz.1.998': attribute type 4 has an invalid length. [ 697.729986][T11558] netlink: 'syz.1.998': attribute type 4 has an invalid length. [ 698.974364][ T6208] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 699.300250][ T6208] usb 3-1: config 0 has no interfaces? [ 699.327071][ T6208] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 699.354451][ T6208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.400131][ T6208] usb 3-1: Product: syz [ 699.420655][ T6208] usb 3-1: Manufacturer: syz [ 699.428382][ T6208] usb 3-1: SerialNumber: syz [ 699.457265][ T6208] usb 3-1: config 0 descriptor?? [ 699.524074][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 700.094087][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 700.297260][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.334339][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.354165][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 700.417182][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.430325][ T10] usb 5-1: config 0 descriptor?? [ 700.438919][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 700.446128][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 700.456360][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 700.548220][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 700.548254][ T30] audit: type=1326 audit(1760185032.872:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11570 comm="syz.0.1001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x0 [ 701.949118][T11587] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 701.966149][T11587] team0: Port device batadv2 added [ 702.121690][ T10] usb 3-1: USB disconnect, device number 30 [ 702.154533][ T6208] usb 5-1: USB disconnect, device number 21 [ 702.156527][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 702.374087][ T5927] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 702.488250][T11600] input: syz1 as /devices/virtual/input/input27 [ 702.801275][T11600] gretap1: entered allmulticast mode [ 703.294084][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 703.422600][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.433803][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 703.459805][ T5927] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 703.469216][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.507485][ T5927] usb 2-1: Product: syz [ 703.569695][ T5927] usb 2-1: Manufacturer: syz [ 703.670054][ T5927] usb 2-1: SerialNumber: syz [ 703.719047][ T5927] usb 2-1: config 0 descriptor?? [ 703.810616][ T5927] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 705.258283][T11616] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 707.137035][ T6208] usb 2-1: USB disconnect, device number 23 [ 708.475264][T11629] delete_channel: no stack [ 709.617621][T11656] fuse: Unknown parameter 'd' [ 712.054088][ T6208] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 712.204139][ T6208] usb 1-1: Using ep0 maxpacket: 8 [ 712.225544][ T6208] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 712.240130][ T6208] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 712.438555][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 712.544565][ T6208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 712.617921][ T6208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 712.655852][ T6208] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 712.708238][ T6208] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 712.717764][ T6208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.726560][ T6208] usb 1-1: Product: syz [ 712.730869][ T6208] usb 1-1: Manufacturer: syz [ 712.739538][ T6208] usb 1-1: SerialNumber: syz [ 712.772364][ T6208] usb 1-1: config 0 descriptor?? [ 713.161602][T11682] delete_channel: no stack [ 713.322369][T11696] debugfs: '!' already exists in 'ieee80211' [ 713.534869][ T6228] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 713.683419][ T30] audit: type=1326 audit(1760185045.992:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 713.730894][ T6228] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 713.740620][ T6228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.805745][ T6228] usb 3-1: Product: syz [ 713.817601][ T30] audit: type=1326 audit(1760185045.992:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 713.843922][ T6228] usb 3-1: Manufacturer: syz [ 713.850960][ T6228] usb 3-1: SerialNumber: syz [ 713.873860][ T6228] usb 3-1: config 0 descriptor?? [ 713.906313][ T6228] hub 3-1:0.0: bad descriptor, ignoring hub [ 713.912795][ T6228] hub 3-1:0.0: probe with driver hub failed with error -5 [ 713.955415][ T6228] usbsevseg 3-1:0.0: USB 7 Segment device now attached [ 713.972334][ T30] audit: type=1326 audit(1760185045.992:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 713.994873][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.344445][ T30] audit: type=1326 audit(1760185045.992:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 714.488677][ T30] audit: type=1326 audit(1760185045.992:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 714.511049][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.548038][ T30] audit: type=1326 audit(1760185045.992:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 714.572197][ T30] audit: type=1326 audit(1760185045.992:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 714.594625][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.608034][ T30] audit: type=1326 audit(1760185045.992:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 714.651162][ T30] audit: type=1326 audit(1760185045.992:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 714.678529][ T30] audit: type=1326 audit(1760185045.992:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11694 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 715.266121][ T5927] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 715.296862][ T6208] rc_core: IR keymap rc-imon-rsc not found [ 715.308278][ T6208] Registered IR keymap rc-empty [ 715.327669][ T6208] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 715.454936][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 715.474906][ T5927] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 715.484175][ T5927] usb 5-1: config 0 has no interface number 0 [ 715.506508][ T6208] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 715.574200][ T5927] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 715.608052][ T5927] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 715.634806][ T6208] usb 1-1: USB disconnect, device number 19 [ 715.732524][ T5927] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 715.785903][ T5927] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 715.810124][ T5927] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 715.938890][ T5927] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 715.976884][ T5927] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 715.997123][ T5927] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 716.017221][ T5927] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 716.054188][ T5927] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.081591][ T5927] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 716.090881][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.099174][ T5927] usb 5-1: Product: syz [ 716.103415][ T5927] usb 5-1: Manufacturer: syz [ 716.108280][ T5927] usb 5-1: SerialNumber: syz [ 716.241274][ T5927] usb 5-1: config 0 descriptor?? [ 716.261554][T11706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 716.273896][T11706] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 716.290499][ T5927] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 716.314369][ T5927] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 716.392139][ T5927] scsi host1: microtekX6 [ 716.507118][ T6208] usb 3-1: USB disconnect, device number 31 [ 716.513702][ T6208] usbsevseg 3-1:0.0: USB 7 Segment now disconnected [ 717.698263][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 717.799340][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 717.810013][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 718.760639][ T5927] usb 5-1: USB disconnect, device number 22 [ 722.968864][T11792] fuse: Bad value for 'fd' [ 725.190493][T11804] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1044'. [ 725.288218][T11806] input: syz1 as /devices/virtual/input/input29 [ 725.855432][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 725.855452][ T30] audit: type=1326 audit(1760185058.142:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 726.280514][ T30] audit: type=1326 audit(1760185058.142:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 726.496532][T11821] dummy0: Caught tx_queue_len zero misconfig [ 726.524488][ T30] audit: type=1326 audit(1760185058.142:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 726.680496][ T30] audit: type=1326 audit(1760185058.142:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 726.834214][ T30] audit: type=1326 audit(1760185058.142:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 727.212337][ T30] audit: type=1326 audit(1760185058.142:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 727.283237][ T30] audit: type=1326 audit(1760185058.142:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40a258d710 code=0x7ffc0000 [ 727.384442][ T30] audit: type=1326 audit(1760185058.142:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 727.626343][ T30] audit: type=1326 audit(1760185058.142:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 727.807741][ T30] audit: type=1326 audit(1760185058.142:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11808 comm="syz.0.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 727.864104][ T5927] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 728.044362][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 728.056910][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 728.070681][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 728.118443][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 728.192462][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 728.226753][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 728.308173][T11833] netlink: 'syz.0.1050': attribute type 15 has an invalid length. [ 728.316577][T11833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 728.415084][ T5927] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 728.425697][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.510770][ T5927] usb 3-1: Product: syz [ 728.542486][ T5927] usb 3-1: Manufacturer: syz [ 728.552243][ T5927] usb 3-1: SerialNumber: syz [ 728.582859][ T5927] usb 3-1: config 0 descriptor?? [ 728.740294][T11843] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 729.472503][T11846] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1048'. [ 731.614497][ T6212] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 731.784865][ T6212] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 731.792949][ T6212] usb 1-1: config 0 has no interface number 0 [ 731.799360][ T6212] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 731.808514][ T6212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.820444][ T6212] usb 1-1: config 0 descriptor?? [ 731.917754][ T6212] usb 1-1: selecting invalid altsetting 1 [ 731.927977][ T6212] dvb_ttusb_budget: ttusb_init_controller: error [ 731.942342][ T6212] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 732.004734][T11866] random: crng reseeded on system resumption [ 732.463485][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 732.463505][ T30] audit: type=1400 audit(1760185064.612:999): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=11858 comm="syz.0.1054" [ 732.756300][ T6212] DVB: Unable to find symbol cx22700_attach() [ 733.157371][ T6212] DVB: Unable to find symbol tda10046_attach() [ 733.163746][ T6212] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 733.355216][ T5927] rc_core: IR keymap rc-imon-rsc not found [ 733.361228][ T5927] Registered IR keymap rc-empty [ 733.369415][ T5927] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 733.706768][ T5927] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 733.751643][ T5927] usb 3-1: USB disconnect, device number 32 [ 734.254139][ T6212] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 734.416799][ T6212] usb 2-1: Using ep0 maxpacket: 16 [ 734.433243][ T6212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 734.663594][ T6212] usb 2-1: config 8 has an invalid interface number: 132 but max is 0 [ 734.693637][ T6212] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 734.727067][ T6212] usb 2-1: config 8 has no interface number 0 [ 734.802793][ T6212] usb 2-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.868124][ T6212] usb 2-1: config 8 interface 132 has no altsetting 0 [ 734.937118][ T6212] usb 2-1: string descriptor 0 read error: -22 [ 734.964144][ T6212] usb 2-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 735.003074][ T5927] usb 1-1: USB disconnect, device number 20 [ 735.094674][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.164759][ T6212] usb-storage 2-1:8.132: USB Mass Storage device detected [ 735.214429][ T6212] usb-storage 2-1:8.132: Quirks match for vid 07cf pid 1001: a [ 735.872459][T11904] syzkaller1: entered allmulticast mode [ 737.494613][ T5927] usb 2-1: USB disconnect, device number 24 [ 738.603162][ T30] audit: type=1326 audit(1760185070.882:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.4.1064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ffbb8eec9 code=0x0 [ 738.996722][T11932] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1066'. [ 739.557396][T11939] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 739.565462][T11939] netlink: 'syz.3.1067': attribute type 2 has an invalid length. [ 739.665112][T11939] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1067'. [ 739.939940][T11941] syz.3.1067 (11941): drop_caches: 2 [ 741.140180][T11956] netlink: 'syz.3.1071': attribute type 1 has an invalid length. [ 741.263475][T11961] macvlan2: entered promiscuous mode [ 741.269026][T11961] macvlan2: entered allmulticast mode [ 741.276667][T11961] bond6: entered promiscuous mode [ 741.283236][T11961] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 741.441170][T11961] bond6: left promiscuous mode [ 741.530278][T11965] fuse: Unknown parameter 'mGN8oad' [ 741.831065][T11967] binder: 11959:11967 ioctl c00c6211 0 returned -14 [ 742.654470][ T30] audit: type=1326 audit(1760185074.972:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 742.697617][ T30] audit: type=1326 audit(1760185074.972:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 742.742022][ T30] audit: type=1326 audit(1760185074.972:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 742.764506][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.844650][ T30] audit: type=1326 audit(1760185074.972:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 742.867102][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.980995][ T30] audit: type=1326 audit(1760185074.972:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.178222][T11976] trusted_key: encrypted_key: master key parameter 'sbiWlCҠ0bBaޱTgwHX}\hpzc+taGqvb@N%%ay' is invalid [ 743.224298][ T30] audit: type=1326 audit(1760185074.972:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.246768][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.364309][ T30] audit: type=1326 audit(1760185074.972:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.508209][ T30] audit: type=1326 audit(1760185074.972:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.532518][ T30] audit: type=1326 audit(1760185074.972:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.615663][ T30] audit: type=1326 audit(1760185074.972:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.724619][ T30] audit: type=1326 audit(1760185074.982:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.909254][ T30] audit: type=1326 audit(1760185074.992:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 743.932845][ T30] audit: type=1326 audit(1760185075.002:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11968 comm="syz.0.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 745.433722][T12005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1079'. [ 745.832998][T12013] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 747.318923][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.326256][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.826872][T12030] fuse: Unknown parameter 'mGN8oad' [ 749.144969][ T6208] IPVS: starting estimator thread 0... [ 749.294580][T12038] IPVS: using max 40 ests per chain, 96000 per kthread [ 749.657580][T12018] usb usb8: usbfs: process 12018 (syz.1.1082) did not claim interface 0 before use [ 749.747529][ T30] audit: type=1400 audit(1760185082.002:1014): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12016 comm="syz.1.1082" [ 750.394117][ T5927] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 750.607884][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 750.833714][ T5927] usb 4-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.029867][ T5927] usb 4-1: config 1 interface 0 has no altsetting 0 [ 751.264674][ T5927] usb 4-1: New USB device found, idVendor=2e81, idProduct=0898, bcdDevice= 0.40 [ 751.284106][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.300774][ T5927] usb 4-1: Product: syz [ 751.310831][ T5927] usb 4-1: Manufacturer: syz [ 751.371850][ T5927] usb 4-1: SerialNumber: syz [ 751.842079][T12051] ip6erspan0: entered promiscuous mode [ 751.860018][T12051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.869225][T12051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.076220][ T5927] usbhid 4-1:1.0: can't add hid device: -71 [ 753.092528][ T5927] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 753.191871][ T5927] usb 4-1: USB disconnect, device number 26 [ 753.297723][T12071] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 754.657257][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 754.711672][ T30] audit: type=1326 audit(1760185086.932:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 754.804615][T12085] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 754.815815][ T30] audit: type=1326 audit(1760185086.932:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 754.974172][T12084] netlink: 'syz.4.1095': attribute type 27 has an invalid length. [ 754.982968][T12084] netlink: 'syz.4.1095': attribute type 3 has an invalid length. [ 754.992106][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1095'. [ 755.095150][ T30] audit: type=1326 audit(1760185086.942:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 755.279534][ T30] audit: type=1326 audit(1760185086.942:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 755.389054][ T30] audit: type=1326 audit(1760185086.942:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 755.554103][ T30] audit: type=1326 audit(1760185086.942:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 755.576574][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.714600][ T30] audit: type=1326 audit(1760185086.942:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 755.844180][ T30] audit: type=1326 audit(1760185086.942:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 755.947744][ T30] audit: type=1326 audit(1760185086.942:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 756.024129][ T30] audit: type=1326 audit(1760185086.942:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 756.104199][ T30] audit: type=1326 audit(1760185086.942:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.1.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 757.014966][T12107] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 758.304079][ T5927] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 758.685053][ T5927] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 758.704178][ T5927] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 758.731281][ T5927] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 758.767406][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.806493][T12115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 758.890378][ T5927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 760.965104][T12132] netlink: 'syz.0.1104': attribute type 27 has an invalid length. [ 760.973170][T12132] netlink: 'syz.0.1104': attribute type 3 has an invalid length. [ 760.982512][T12132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1104'. [ 761.513619][ T5927] usb 5-1: USB disconnect, device number 23 [ 762.074659][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 762.074685][ T30] audit: type=1326 audit(1760185094.412:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 762.103247][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.568785][ T30] audit: type=1326 audit(1760185094.422:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 762.591221][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.028007][ T30] audit: type=1326 audit(1760185094.422:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 763.347863][ T30] audit: type=1326 audit(1760185094.422:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 763.370335][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.444998][ T30] audit: type=1326 audit(1760185094.422:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 763.536110][ T30] audit: type=1326 audit(1760185094.502:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 763.558562][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.793080][ T30] audit: type=1326 audit(1760185094.502:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 763.947239][ T30] audit: type=1326 audit(1760185094.502:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 763.969802][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.092692][ T30] audit: type=1326 audit(1760185094.502:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 764.202070][ T30] audit: type=1326 audit(1760185094.502:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12146 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5cd8eec9 code=0x7ffc0000 [ 764.224511][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.972944][T12169] netlink: 'syz.0.1110': attribute type 27 has an invalid length. [ 764.981239][T12169] netlink: 'syz.0.1110': attribute type 3 has an invalid length. [ 765.002772][T12169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1110'. [ 765.095793][ T5927] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 765.266209][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.287141][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.298107][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 765.322015][ T5927] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.337473][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.359441][ T5927] usb 2-1: config 0 descriptor?? [ 765.851672][ T5927] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 766.985110][T12181] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1112'. [ 768.376290][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 768.514433][ T44] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 768.654271][ T44] usb 2-1: device descriptor read/64, error -32 [ 768.760109][T12198] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 768.924306][ T44] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 769.096054][ T44] usb 2-1: device descriptor read/64, error -32 [ 769.501090][ T44] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 769.714354][ T44] usb 2-1: device descriptor read/8, error -32 [ 770.325186][T12217] fuse: Unknown parameter '00000000000000000005' [ 770.697397][ T6208] usb 2-1: USB disconnect, device number 25 [ 782.332762][T12334] netlink: 'syz.3.1137': attribute type 5 has an invalid length. [ 782.424268][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 782.424289][ T30] audit: type=1800 audit(1760185114.762:1103): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1137" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 783.310612][T12339] netlink: 'syz.2.1141': attribute type 27 has an invalid length. [ 783.318653][T12339] netlink: 'syz.2.1141': attribute type 3 has an invalid length. [ 783.326749][T12339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1141'. [ 783.480976][T12341] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 783.493810][T12341] bond0: (slave lo): Error: Device can not be enslaved while up [ 783.587027][T12341] snd_aloop snd_aloop.0: control 2:1883:2954:syz1:64272 is already present [ 783.704423][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 784.842617][ T30] audit: type=1326 audit(1760185117.002:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.310407][ T30] audit: type=1326 audit(1760185117.002:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.366352][ T30] audit: type=1326 audit(1760185117.002:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.511335][ T30] audit: type=1326 audit(1760185117.002:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.544084][ T30] audit: type=1326 audit(1760185117.002:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.575589][ T30] audit: type=1326 audit(1760185117.022:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.623212][ T30] audit: type=1326 audit(1760185117.022:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.674331][ T30] audit: type=1326 audit(1760185117.082:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 785.725909][ T30] audit: type=1326 audit(1760185117.082:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12351 comm="syz.3.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb894b8eec9 code=0x7ffc0000 [ 786.167904][T12372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 786.167904][T12372] The task syz.0.1148 (12372) triggered the difference, watch for misbehavior. [ 787.044051][ T5927] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 787.331041][ T5927] usb 4-1: device descriptor read/64, error -71 [ 787.676058][ T5927] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 788.295495][ T5927] usb 4-1: device descriptor read/64, error -71 [ 788.439987][ T5927] usb usb4-port1: attempt power cycle [ 788.795178][ T5927] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 789.054906][ T5927] usb 4-1: device descriptor read/8, error -71 [ 789.554971][ T5927] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 790.832117][ T5927] usb 4-1: device descriptor read/8, error -71 [ 791.026274][ T5927] usb usb4-port1: unable to enumerate USB device [ 792.641814][T12427] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 792.653721][T12427] batadv3: entered promiscuous mode [ 792.660108][T12427] batadv3: entered allmulticast mode [ 792.668983][T12427] team0: Port device batadv3 added [ 792.718164][ T60] bridge0: port 1(team0) entered blocking state [ 792.724615][ T60] bridge0: port 1(team0) entered forwarding state [ 792.799684][T12428] hub 9-0:1.0: USB hub found [ 792.836011][T12428] hub 9-0:1.0: 1 port detected [ 793.263805][ T1173] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 793.273113][ T1173] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 794.578027][T12443] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 794.715352][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 794.733577][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 796.159676][ T6208] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 796.357169][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 796.357194][ T30] audit: type=1326 audit(1760185128.562:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 796.470742][ T30] audit: type=1326 audit(1760185128.562:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 796.494312][ T30] audit: type=1326 audit(1760185128.572:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 796.528241][ T30] audit: type=1326 audit(1760185128.572:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 796.606613][ T6208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.624108][ T6208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.672520][ T6208] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 796.746219][ T6208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 796.774544][ T6208] usb 3-1: SerialNumber: syz [ 797.098258][ T30] audit: type=1326 audit(1760185128.572:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40a258d710 code=0x7ffc0000 [ 797.201703][ T30] audit: type=1326 audit(1760185128.572:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 797.224216][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.557487][ T30] audit: type=1326 audit(1760185128.572:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 797.784181][ T30] audit: type=1326 audit(1760185128.572:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 797.807737][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.854036][ T30] audit: type=1326 audit(1760185128.572:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 797.876433][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.909972][ T30] audit: type=1326 audit(1760185128.572:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12448 comm="syz.0.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 798.675229][T12478] netlink: 'syz.0.1169': attribute type 27 has an invalid length. [ 798.683231][T12478] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 798.691455][T12478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1169'. [ 799.874755][ T44] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 800.060617][ T44] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 800.069057][ T44] usb 2-1: config 0 has no interface number 0 [ 800.076045][ T44] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 800.266534][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.285217][ T44] usb 2-1: config 0 descriptor?? [ 800.295300][ T44] usb 2-1: selecting invalid altsetting 1 [ 800.301883][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 800.318394][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 800.883270][ T44] DVB: Unable to find symbol cx22700_attach() [ 800.986512][ T44] DVB: Unable to find symbol tda10046_attach() [ 800.998544][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 801.451702][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 801.451722][ T30] audit: type=1326 audit(1760185133.402:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 801.514771][ T30] audit: type=1326 audit(1760185133.402:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 801.584245][ T30] audit: type=1326 audit(1760185133.512:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 801.650993][ T6208] usb 3-1: 0:2 : does not exist [ 801.703916][ T6208] usb 3-1: unit 5: unexpected type 0x0e [ 801.716877][ T30] audit: type=1326 audit(1760185133.512:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 801.773840][ T30] audit: type=1326 audit(1760185133.562:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 801.864107][ T30] audit: type=1326 audit(1760185133.562:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 801.890269][ T30] audit: type=1326 audit(1760185133.562:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 801.948669][ T30] audit: type=1326 audit(1760185133.562:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 802.040637][ T30] audit: type=1326 audit(1760185133.562:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 802.144927][ T30] audit: type=1326 audit(1760185133.562:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.0.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 802.146944][ T6208] usb 3-1: USB disconnect, device number 33 [ 802.708884][T12509] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 803.019339][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 803.115548][ T44] usb 2-1: USB disconnect, device number 26 [ 804.144494][ T5927] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 804.281226][T12525] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1178'. [ 804.631418][ T5927] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 804.658807][T12530] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 804.672329][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.697314][ T5927] usb 2-1: Product: syz [ 804.708353][ T5927] usb 2-1: Manufacturer: syz [ 804.717054][ T5927] usb 2-1: SerialNumber: syz [ 805.584286][T12534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1180'. [ 806.514149][ T44] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 806.766895][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 806.779345][ T44] usb 4-1: config 0 has no interfaces? [ 806.786697][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 806.796209][ T44] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 806.806144][ T44] usb 4-1: Manufacturer: syz [ 806.883106][ T44] usb 4-1: config 0 descriptor?? [ 807.095335][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 807.107929][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 807.119360][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 807.290772][T12549] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 807.300277][T12549] batadv4: entered promiscuous mode [ 807.306401][T12549] batadv4: entered allmulticast mode [ 807.312545][T12549] team0: Port device batadv4 added [ 807.548770][T12550] netlink: 'syz.1.1183': attribute type 27 has an invalid length. [ 807.561551][T12550] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 807.569798][T12550] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1183'. [ 807.571993][ T5927] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 807.678916][ T5927] usb 2-1: USB disconnect, device number 27 [ 807.794848][ T1173] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 807.804164][ T1173] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 808.446455][T12562] fuse: Bad value for 'fd' [ 808.764449][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.770969][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.839147][T12567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 809.847339][T12567] bond4: entered promiscuous mode [ 809.852538][T12567] bond4: entered allmulticast mode [ 809.858487][T12567] team0: Port device bond4 added [ 810.034099][ T5927] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 810.083006][ T10] usb 4-1: USB disconnect, device number 31 [ 810.165297][T12572] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 810.192140][T12572] bond7 (unregistering): Released all slaves [ 810.221901][ T5927] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 810.232417][ T5927] usb 1-1: config 48 interface 0 altsetting 98 bulk endpoint 0x9 has invalid maxpacket 1024 [ 810.242873][ T5927] usb 1-1: config 48 interface 0 has no altsetting 0 [ 810.253129][ T5927] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 810.269049][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.284055][ T5927] usb 1-1: Product: syz [ 810.289426][ T5927] usb 1-1: Manufacturer: syz [ 810.295513][ T5927] usb 1-1: SerialNumber: syz [ 810.306114][T12568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 810.313530][T12568] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 811.070904][T12580] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 811.079346][ T6208] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 811.245906][ T6208] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 811.399078][ T6208] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.496978][ T6208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 811.530512][ T6208] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.596661][ T6208] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 811.776641][ T6208] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 811.905179][ T6208] usb 4-1: Product: syz [ 811.909662][ T6208] usb 4-1: Manufacturer: syz [ 812.106490][ T6208] cdc_wdm 4-1:1.0: skipping garbage [ 812.123374][ T6208] cdc_wdm 4-1:1.0: skipping garbage [ 812.143897][ T6208] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 812.156945][ T6208] cdc_wdm 4-1:1.0: Unknown control protocol [ 812.372395][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 812.372420][ T30] audit: type=1326 audit(1760185144.682:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 812.514958][ T30] audit: type=1326 audit(1760185144.682:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 812.546531][ T30] audit: type=1326 audit(1760185144.682:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 812.638767][ T30] audit: type=1326 audit(1760185144.682:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 812.760830][ T30] audit: type=1326 audit(1760185144.682:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 812.849418][ T30] audit: type=1326 audit(1760185144.682:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 812.871944][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.108541][ T30] audit: type=1326 audit(1760185144.682:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 813.259538][ T30] audit: type=1326 audit(1760185144.682:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 813.504172][ T30] audit: type=1326 audit(1760185144.682:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 813.535609][ T30] audit: type=1326 audit(1760185144.692:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f04dfd8eec9 code=0x7ffc0000 [ 813.610399][ T5898] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 813.666033][ T5927] usb 1-1: USB disconnect, device number 21 [ 813.933370][ T10] usb 4-1: USB disconnect, device number 32 [ 814.025950][ T5898] usb 5-1: config 0 has no interfaces? [ 814.051458][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 814.063757][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.072076][ T5898] usb 5-1: Product: syz [ 814.094448][ T5898] usb 5-1: Manufacturer: syz [ 814.109150][ T5898] usb 5-1: SerialNumber: syz [ 814.143431][ T5898] usb 5-1: config 0 descriptor?? [ 814.343642][T12608] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 814.717735][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 815.384062][ T6208] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 815.524647][ T6208] usb 1-1: device descriptor read/64, error -71 [ 815.865418][ T6208] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 815.919647][ T44] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 816.035183][ T6208] usb 1-1: device descriptor read/64, error -71 [ 816.124812][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 816.144855][ T6208] usb usb1-port1: attempt power cycle [ 816.229739][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.365077][ T44] usb 3-1: config 0 has no interfaces? [ 816.379676][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 816.411543][ T44] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 816.480307][ T44] usb 3-1: Manufacturer: syz [ 816.511639][ T44] usb 3-1: config 0 descriptor?? [ 816.544503][ T6208] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 816.579218][ T6208] usb 1-1: device descriptor read/8, error -71 [ 816.844353][ T6208] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 816.865227][ T6208] usb 1-1: device descriptor read/8, error -71 [ 816.974301][ T6208] usb usb1-port1: unable to enumerate USB device [ 817.983435][ T5898] usb 5-1: USB disconnect, device number 24 [ 819.738018][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 819.738038][ T30] audit: type=1804 audit(1760185151.982:1327): pid=12641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1199" name="/newroot/242/file0" dev="fuse" ino=1 res=1 errno=0 [ 820.808740][ T44] usb 3-1: USB disconnect, device number 34 [ 820.884137][T12653] wg1: entered promiscuous mode [ 820.891495][T12653] wg1: entered allmulticast mode [ 822.854080][ T5898] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 823.110502][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 823.204515][ T5898] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 823.224387][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 823.264069][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.335488][ T5898] usb 5-1: config 0 descriptor?? [ 823.582974][ T5898] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 823.597765][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.615297][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.623619][ T10] usb 4-1: config 0 has no interface number 0 [ 823.630750][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 823.770093][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 823.787401][ T30] audit: type=1326 audit(1760185156.132:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12677 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 823.818319][T12670] dib0700: tx buffer length is larger than 4. Not supported. [ 824.002119][ T5898] usb 5-1: media controller created [ 824.022895][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.043538][ T30] audit: type=1326 audit(1760185156.132:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12677 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 824.101572][ T10] usb 4-1: config 0 descriptor?? [ 824.142757][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.156526][ T10] usb 4-1: selecting invalid altsetting 1 [ 824.164811][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 824.194171][ T30] audit: type=1326 audit(1760185156.212:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12677 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40a258eec9 code=0x7ffc0000 [ 824.354835][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 824.391061][T12676] ------------[ cut here ]------------ [ 824.396766][T12676] usb 5-1: BOGUS control dir, pipe 80001980 doesn't match bRequestType c0 [ 824.407105][T12676] WARNING: CPU: 0 PID: 12676 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 824.416984][T12676] Modules linked in: [ 824.421564][T12676] CPU: 0 UID: 0 PID: 12676 Comm: syz.3.1205 Not tainted syzkaller #0 PREEMPT(full) [ 824.431041][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 824.441422][T12676] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 824.447159][T12676] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 77 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 54 45 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 824.466955][T12676] RSP: 0018:ffffc9000dd2f820 EFLAGS: 00010246 [ 824.473028][T12676] RAX: 381561f8446b2300 RBX: ffff888142f74d00 RCX: 0000000000080000 [ 824.481051][T12676] RDX: ffffc900100d8000 RSI: 0000000000003c84 RDI: 0000000000003c85 [ 824.489083][T12676] RBP: 1ffff1100f983a08 R08: 0000000000000003 R09: 0000000000000004 [ 824.497134][T12676] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffff888030b27100 [ 824.505163][T12676] R13: ffff88807cc1d040 R14: 0000000080001980 R15: ffff888142f19c20 [ 824.513142][T12676] FS: 00007fb892db46c0(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 824.522193][T12676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.528832][T12676] CR2: 0000001b3111fff8 CR3: 00000000471b0000 CR4: 00000000003526f0 [ 824.536853][T12676] Call Trace: [ 824.540137][T12676] [ 824.543092][T12676] usb_start_wait_urb+0x114/0x4c0 [ 824.548431][T12676] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 824.554069][T12676] usb_control_msg+0x232/0x3e0 [ 824.558959][T12676] dib0700_i2c_xfer+0xba7/0xf70 [ 824.563848][T12676] __i2c_transfer+0x874/0x2170 [ 824.568669][T12676] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.573881][T12676] ? __pfx___i2c_transfer+0x10/0x10 [ 824.579180][T12676] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 824.584594][T12676] ? i2c_transfer+0x11d/0x3a0 [ 824.589275][T12676] i2c_transfer+0x25b/0x3a0 [ 824.593779][T12676] ? __pfx_i2c_transfer+0x10/0x10 [ 824.598893][T12676] ? _copy_from_user+0x94/0xb0 [ 824.603662][T12676] i2cdev_ioctl_rdwr+0x460/0x740 [ 824.608659][T12676] i2cdev_ioctl+0x64b/0x7f0 [ 824.613172][T12676] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 824.618239][T12676] ? __fget_files+0x3a0/0x420 [ 824.622907][T12676] ? __fget_files+0x2a/0x420 [ 824.627534][T12676] ? bpf_lsm_file_ioctl+0x9/0x20 [ 824.632471][T12676] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 824.637584][T12676] __se_sys_ioctl+0xf9/0x170 [ 824.642175][T12676] do_syscall_64+0xfa/0xfa0 [ 824.646719][T12676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.652800][T12676] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 824.658483][T12676] ? clear_bhb_loop+0x60/0xb0 [ 824.663161][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.669080][T12676] RIP: 0033:0x7fb894b8eec9 [ 824.673494][T12676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.693190][T12676] RSP: 002b:00007fb892db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.701652][T12676] RAX: ffffffffffffffda RBX: 00007fb894de6180 RCX: 00007fb894b8eec9 [ 824.709660][T12676] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 824.717671][T12676] RBP: 00007fb894c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 824.725693][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.733665][T12676] R13: 00007fb894de6218 R14: 00007fb894de6180 R15: 00007fb894f0fa28 [ 824.741683][T12676] [ 824.744730][T12676] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 824.752001][T12676] CPU: 0 UID: 0 PID: 12676 Comm: syz.3.1205 Not tainted syzkaller #0 PREEMPT(full) [ 824.761359][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 824.771416][T12676] Call Trace: [ 824.774693][T12676] [ 824.777636][T12676] dump_stack_lvl+0x99/0x250 [ 824.782232][T12676] ? __asan_memcpy+0x40/0x70 [ 824.786855][T12676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.792065][T12676] ? __pfx__printk+0x10/0x10 [ 824.796664][T12676] vpanic+0x237/0x6d0 [ 824.800686][T12676] ? __pfx_vpanic+0x10/0x10 [ 824.805209][T12676] panic+0xb9/0xc0 [ 824.808942][T12676] ? __pfx_panic+0x10/0x10 [ 824.813374][T12676] __warn+0x31b/0x4b0 [ 824.817366][T12676] ? usb_submit_urb+0x114d/0x18b0 [ 824.822391][T12676] ? usb_submit_urb+0x114d/0x18b0 [ 824.827417][T12676] report_bug+0x2be/0x4f0 [ 824.831755][T12676] ? usb_submit_urb+0x114d/0x18b0 [ 824.836781][T12676] ? usb_submit_urb+0x114d/0x18b0 [ 824.841799][T12676] ? usb_submit_urb+0x114f/0x18b0 [ 824.846820][T12676] handle_bug+0x84/0x160 [ 824.851084][T12676] exc_invalid_op+0x1a/0x50 [ 824.855599][T12676] asm_exc_invalid_op+0x1a/0x20 [ 824.860466][T12676] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 824.866182][T12676] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 77 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 54 45 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 824.885786][T12676] RSP: 0018:ffffc9000dd2f820 EFLAGS: 00010246 [ 824.891854][T12676] RAX: 381561f8446b2300 RBX: ffff888142f74d00 RCX: 0000000000080000 [ 824.899819][T12676] RDX: ffffc900100d8000 RSI: 0000000000003c84 RDI: 0000000000003c85 [ 824.907808][T12676] RBP: 1ffff1100f983a08 R08: 0000000000000003 R09: 0000000000000004 [ 824.915791][T12676] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffff888030b27100 [ 824.923767][T12676] R13: ffff88807cc1d040 R14: 0000000080001980 R15: ffff888142f19c20 [ 824.931759][T12676] usb_start_wait_urb+0x114/0x4c0 [ 824.936817][T12676] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 824.942390][T12676] usb_control_msg+0x232/0x3e0 [ 824.947162][T12676] dib0700_i2c_xfer+0xba7/0xf70 [ 824.952026][T12676] __i2c_transfer+0x874/0x2170 [ 824.956791][T12676] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.961993][T12676] ? __pfx___i2c_transfer+0x10/0x10 [ 824.967214][T12676] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 824.972591][T12676] ? i2c_transfer+0x11d/0x3a0 [ 824.977293][T12676] i2c_transfer+0x25b/0x3a0 [ 824.981800][T12676] ? __pfx_i2c_transfer+0x10/0x10 [ 824.986836][T12676] ? _copy_from_user+0x94/0xb0 [ 824.991603][T12676] i2cdev_ioctl_rdwr+0x460/0x740 [ 824.996572][T12676] i2cdev_ioctl+0x64b/0x7f0 [ 825.001078][T12676] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 825.006110][T12676] ? __fget_files+0x3a0/0x420 [ 825.010779][T12676] ? __fget_files+0x2a/0x420 [ 825.015391][T12676] ? bpf_lsm_file_ioctl+0x9/0x20 [ 825.020322][T12676] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 825.025395][T12676] __se_sys_ioctl+0xf9/0x170 [ 825.029990][T12676] do_syscall_64+0xfa/0xfa0 [ 825.034508][T12676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.040568][T12676] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 825.046197][T12676] ? clear_bhb_loop+0x60/0xb0 [ 825.050895][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.056783][T12676] RIP: 0033:0x7fb894b8eec9 [ 825.061195][T12676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.080805][T12676] RSP: 002b:00007fb892db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.089224][T12676] RAX: ffffffffffffffda RBX: 00007fb894de6180 RCX: 00007fb894b8eec9 [ 825.097206][T12676] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 825.105170][T12676] RBP: 00007fb894c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 825.113146][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.121127][T12676] R13: 00007fb894de6218 R14: 00007fb894de6180 R15: 00007fb894f0fa28 [ 825.129120][T12676] [ 825.132475][T12676] Kernel Offset: disabled [ 825.136800][T12676] Rebooting in 86400 seconds..