last executing test programs: 8m44.234826979s ago: executing program 0 (id=2590): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'veth1_to_bridge\x00'}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) dup2(r0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4008, @multicast, 'vcan0\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fsetxattr$trusted_overlay_opaque(r1, 0x0, &(0x7f0000000140), 0x2, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x8, 0x89, @vifc_lcl_addr=@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 8m41.043941964s ago: executing program 0 (id=2601): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x40, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8m40.636920269s ago: executing program 0 (id=2602): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32], 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000003080)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x2, 0x1, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) 8m40.236873787s ago: executing program 0 (id=2604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 8m38.39134372s ago: executing program 0 (id=2613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xffff, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0x5, 0x6, 0x6ad880, 0x266d, 0x7, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x8, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20801, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0x9, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 8m38.098313789s ago: executing program 0 (id=2616): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 8m37.665212752s ago: executing program 32 (id=2616): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 6m2.788881944s ago: executing program 3 (id=3021): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000003c0)) setsockopt$inet_buf(r4, 0x0, 0x11, &(0x7f0000000040)="02d242", 0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, r1, 0x14, 0x0, @void}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000800), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r5, 0x16, 0x0, 0x80000000, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) 6m1.058334465s ago: executing program 3 (id=3026): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') sendfile(r4, r3, &(0x7f0000000080)=0xb, 0x8) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x94, &(0x7f0000000000)=""/148}, &(0x7f00000000c0)="5b8e7ecf0140", 0x0, 0x0, 0x0, 0x0, 0x0}) 6m0.636064686s ago: executing program 3 (id=3027): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3cee6b8, 0xfffffe0000000004, 0xfa13, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xff) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r4, r5, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r4, r5, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)={0x10, 0x2c, 0x15, 0x70bd2b, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x810}, 0x44800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 5m58.71740527s ago: executing program 3 (id=3032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 5m57.070511344s ago: executing program 3 (id=3037): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') sendfile(r4, r3, &(0x7f0000000080)=0xb, 0x8) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x94, &(0x7f0000000000)=""/148}, &(0x7f00000000c0)="5b8e7ecf0140", 0x0, 0x0, 0x0, 0x0, 0x0}) 5m56.615256777s ago: executing program 3 (id=3038): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) fanotify_init(0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 5m55.7184594s ago: executing program 33 (id=3038): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) fanotify_init(0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 16.618991456s ago: executing program 1 (id=3804): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x90800a, 0x0) 11.563163375s ago: executing program 1 (id=3810): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x6, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 11.562317816s ago: executing program 5 (id=3820): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x40, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.936802477s ago: executing program 1 (id=3813): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x40, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.143101185s ago: executing program 1 (id=3814): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) 9.059250401s ago: executing program 5 (id=3815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.024272996s ago: executing program 2 (id=3816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20c, 0x10, 0x4, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_VFINFO_LIST={0x1e4, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0xfff, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0xff, 0xbcd, 0xe}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xc538}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x80}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xa, 0x6, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x3ff, 0x4, 0xb}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xe}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x8a4, 0xb8a6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6367, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x4a6, 0x0, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x857, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x5, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @random="03c59b9d8ab7"}}]}, {0xac, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x200, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x401, 0xffffffffffffff25}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x199473bd, 0xb6dc}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x2a1, 0xac}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x4a5, 0x7, 0x8100}}, {0x14, 0x1, {0xc, 0xa22, 0x6}}, {0x14, 0x1, {0xa6f3, 0x2b7, 0x6, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x2, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x10, 0xb, {0x2, 0x1}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7fff, 0x3}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x189, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x80000001}}]}]}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x20c}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000040)={r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06464ce, &(0x7f0000000440)={r7, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000001c0)={r7, 0xff7fffff, 0x1ff, 0x9, 0x3, [], [0x40000c0, 0xe8, 0x7, 0x19], [0x8, 0xa2d, 0x53cc, 0x35], [0x6, 0x8, 0x7, 0x7fff]}) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="09032dbdd56e21a2df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x74, r9, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x1001}, 0x4000000) 8.925488309s ago: executing program 2 (id=3817): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(0x0, 0xc15db06e676022ae, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef", 0x5f, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "00000000000000000100070000400000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) 8.711907091s ago: executing program 6 (id=3819): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x9, 0x3, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007440)=""/60, 0x3c}, 0x6}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x40680) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee4, 0x100, 0xffffffff, 0x2d6}, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/igmp\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000680)=""/161, 0xa1}], 0x1, 0x3d1, 0x1ff) io_uring_enter(r3, 0x75fa, 0xe475, 0xd, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 8.474914354s ago: executing program 4 (id=3821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x19}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x20000004) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) 8.214496185s ago: executing program 6 (id=3822): socket(0x10, 0x2, 0x0) unshare(0x22020400) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) fanotify_init(0x10, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x7, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x5}, 0x50) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2d8ce192, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) inotify_init() setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvfrom$l2tp(r2, 0x0, 0x0, 0x40010160, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7.80541351s ago: executing program 6 (id=3823): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x3457, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x8280, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x1fc, 0x0, 0x40000000001}]}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x10100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_DF={0xfffffffffffffe7b, 0xd, 0xc3}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 7.132737767s ago: executing program 5 (id=3824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0)=0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000030601080000000000000000000000270900020073797a31000000000500010007001000"], 0x28}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000004) 7.041695139s ago: executing program 1 (id=3825): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_usb_connect$uac3(0x4, 0x123, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x111, 0x3, 0x1, 0x6, 0x80, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x19, 0xe0e}, [@cluster_info_segment={0x6, 0x20, 0x1, 0x0, 0x7}, @processing_unit={0x9, 0x24, 0x9, 0x5, 0x1, [0xa55576ad9e76fec7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x7, 0x0, "183b743692b5"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf9, 0x2, 0xe, 0x31, "0f1333", "25dd"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa7, 0x7, 0xaa, 0xb9, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x40, 0x7f, "ec79e40d365b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x1, 0x9, {0xa, 0x25, 0x25, 0xfffffff7, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xb7, 0xe, 0x7, 0x1001, 0x2, 0x5, 0x401, 0xfe}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x2, 0xfc, "99700342c818478804"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x66, 0x4, 0x8, 0x4, "9f5b0fb75c2d"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}, @as_header={0x17, 0x24, 0x1, 0x1, 0x8, 0x8, 0x2, 0x7, 0xfb}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xb, 0xa1, {0xa, 0x25, 0x25, 0x292, 0x9}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x4, 0x8, 0x3, 0x10}, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="050f610005071002127a02001c100a81040000000fd00710ff0300d80000000000000f0000000b100108490006f80300079c889e160000000008000000000000003de9dd96b12d91e302404a2d0a483b8bb0ae4837dc7a762b8d8e5ba10978d1219fb1c478809703c6"], 0xa, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x447}}, {0xd9, &(0x7f0000000580)=@string={0xd9, 0x3, "d1db8ae5c3297c1fbe5be3d1f8b05e1f83b5a29c873a5a0a538337c3b3829cc5cdf52ae5798176847fd77d2d208b04bb4b6f44c5b672dd400099094204cfbdc49c7eb55102a877dd403ace0c9368133bfc0daeb3f3dd59e72567d8d4f87f4460dc9c6d86870c0668f0ac0ebae3de13247e18eb72fb05b9b4cfe62b7935e0cd1fddd65b8a7da10140a2154e1b7432776bad522fec9cd27d9e14f51436e9c208fe86729e575bc8ee40253eb2e181ac052bce37a705a679ea29371dfea48f4d4cc2d36aa4bcd6d584e58be5ba0f8d1ab4f9fd5bc97b56443d"}}, {0xd2, &(0x7f0000000680)=@string={0xd2, 0x3, "e2f30f23f2758f928e99959f09178d8c43dd2092a7103cf3ae193c3d53b1226be2ca19f98448c0415cedd56efae502bd364b139c708df838a9ed457b80e7cc8f08dd90810eba7bd83f39aef88bab6c48620f925422facbfb484a5109afc86dbb4884689784b1ded2fe6d5b1f91406986cba0f23056a9d5f3760f2dcadfc37e6e75ccc74a15d902feed507f2a3f6b784e88f32718666452e31a8d2fbdcd242126714271662e2a93e81aa9512ef0129fd1e1f69c2aaf446080b8122f0317f25be15c7e981d81bb7afd32510f8013c31017"}}, {0x88, &(0x7f0000000780)=@string={0x88, 0x3, "a81e5533630daf9b606bcf3ff8ed7638c633c77bab566de56ff3e5b3af1ea864ed867cfe16d3ccf6dcf0a112ff421536879132eb6e6a477822bc60039d022b7739f76b94c256ea51ea0b26871afda4ed6c130e65f9b3b3096cbf33a91f46cab8538980b90452b0f71e03c84e464cd241cce44673d17656072494387e6b682c7ae543870a12bb"}}, {0xb, &(0x7f00000001c0)=@string={0xb, 0x3, "2e75e6b1974fd00128"}}, {0x24, &(0x7f0000000840)=@string={0x24, 0x3, "9513f5d3affd6aa3e5cf4cd2f63ddf865e6d1063c5c30be18f981cf32eeb26c29577"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x26, &(0x7f0000000900)=@string={0x26, 0x3, "25b9f40e914acc659012af944b5242b175febdd573ef4a5bf7ea51c8f954a3a19eba38a9"}}, {0x41, &(0x7f0000000940)=@string={0x41, 0x3, "6e6edb8c3934e8ec970896fe762e14762ea6623acbfe5baa1a4fad531c6b8f24392fcd355f265311e928c680cefb7ebf78031e005676e244f765d3896aef68"}}]}) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 6.762258794s ago: executing program 2 (id=3826): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000240)={0x8, @vbi}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x8001) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000340)) 6.494807896s ago: executing program 4 (id=3827): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x40, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.094880866s ago: executing program 4 (id=3828): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x40, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.454794732s ago: executing program 4 (id=3829): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r5, 0x0, 0x0, 0x6, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) close(r6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') sendfile(r4, r3, &(0x7f0000000080)=0xb, 0x8) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x94, &(0x7f0000000000)=""/148}, &(0x7f00000000c0)="5b8e7ecf0140", 0x0, 0x0, 0x0, 0x0, 0x0}) 5.016685629s ago: executing program 5 (id=3830): write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x2ff00) io_uring_setup(0x1b24, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) 4.839447057s ago: executing program 4 (id=3831): r0 = socket(0x11, 0x800000002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2b, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/protocols\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, 0x3c, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x0, @private=0xf30a3fff}}) 4.402987039s ago: executing program 2 (id=3832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x3}, @mss={0x2, 0xaf0}, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x8000, 0x81}, @sack_perm], 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r6, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x29, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.402759809s ago: executing program 6 (id=3833): openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) accept4$alg(r2, 0x7000000, 0x0, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB]) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x40000, 0x0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) 3.049557488s ago: executing program 1 (id=3834): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x24000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.984026424s ago: executing program 2 (id=3835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.983775408s ago: executing program 6 (id=3836): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r4, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000180)) close(r0) 1.971439038s ago: executing program 5 (id=3845): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0xa4ff}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) 677.606205ms ago: executing program 4 (id=3837): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x4800, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) memfd_create(0x0, 0x2) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) landlock_restrict_self(r6, 0xc) 66.410208ms ago: executing program 2 (id=3838): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x40, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.418767ms ago: executing program 6 (id=3839): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x40, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 5 (id=3840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000007c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r4}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x2, 0xfffffffe, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) kernel console output (not intermixed with test programs): idProduct=0002, bcdDevice=ba.c0 [ 1068.028127][ T5945] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1068.037166][ T5840] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1068.080428][ T5945] usb 7-1: Manufacturer: syz [ 1068.098152][ T5840] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1068.114080][ T5945] usb 7-1: config 0 descriptor?? [ 1068.137868][ T5840] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1068.164868][ T5840] usb 5-1: media controller created [ 1068.238212][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1068.328466][ T5945] rc_core: IR keymap rc-hauppauge not found [ 1068.343880][ T5945] Registered IR keymap rc-empty [ 1068.354986][ T5945] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1068.370381][ T5840] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1068.407273][ T5945] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input40 [ 1068.476986][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 1068.504108][ T5840] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1068.514012][T17644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.566983][ T5840] usb 5-1: USB disconnect, device number 59 [ 1068.661366][T17644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.719201][T17650] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1068.772785][T17650] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1069.727447][T17664] hub 1-0:1.0: USB hub found [ 1069.754309][T17664] hub 1-0:1.0: 1 port detected [ 1070.107711][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 1070.107731][ T29] audit: type=1326 audit(1773897228.564:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.186715][ T29] audit: type=1326 audit(1773897228.594:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.283133][ T29] audit: type=1326 audit(1773897228.594:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.368119][ T29] audit: type=1326 audit(1773897228.594:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.406794][ T29] audit: type=1326 audit(1773897228.594:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.437742][ T29] audit: type=1326 audit(1773897228.594:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.483554][ T29] audit: type=1326 audit(1773897228.594:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.507013][ T29] audit: type=1326 audit(1773897228.594:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.557413][ T29] audit: type=1326 audit(1773897228.604:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1070.588065][ T29] audit: type=1326 audit(1773897228.604:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17665 comm="syz.2.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1071.357478][ T5840] usb 7-1: USB disconnect, device number 2 [ 1072.702059][T17685] syzkaller0: entered promiscuous mode [ 1072.731495][T17685] syzkaller0: entered allmulticast mode [ 1072.834024][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.841260][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.848277][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.855110][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.861928][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.868758][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.875573][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.882421][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.889265][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.896029][T17685] tc action pedit offset must be on 32 bit boundaries [ 1072.902924][T17685] 0: reclassify loop, rule prio 0, protocol 800 [ 1073.048846][ T5918] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1073.257622][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 1073.282236][ T5918] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.313925][ T5918] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.373000][ T5918] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1073.410004][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.438988][ T5918] usb 7-1: Product: syz [ 1073.443194][ T5918] usb 7-1: Manufacturer: syz [ 1073.458997][ T5918] usb 7-1: SerialNumber: syz [ 1073.490560][ T5918] cdc_ether 7-1:1.0: skipping garbage [ 1073.496038][ T5918] usb 7-1: bad CDC descriptors [ 1073.527756][ T5918] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1073.550437][ T5918] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1073.640460][T17693] tipc: Enabled bearer , priority 0 [ 1073.663287][T17691] syzkaller0: entered promiscuous mode [ 1073.690826][T17691] syzkaller0: entered allmulticast mode [ 1073.805149][T17691] tipc: Resetting bearer [ 1073.852160][T17690] tipc: Resetting bearer [ 1073.859117][T12162] usb 7-1: USB disconnect, device number 3 [ 1074.018105][T17690] tipc: Disabling bearer [ 1076.076810][T17738] : renamed from dummy0 (while UP) [ 1077.224843][T17756] Cannot find del_set index 0 as target [ 1078.384282][ T7640] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 57277 - 0 [ 1078.509838][ T7640] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 57277 - 0 [ 1078.546431][ T7640] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 57277 - 0 [ 1078.604250][ T7640] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 57277 - 0 [ 1078.629078][T17782] hub 1-0:1.0: USB hub found [ 1078.668521][T17782] hub 1-0:1.0: 1 port detected [ 1082.941626][T17849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.969618][T17849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.002997][T17849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3084'. [ 1083.041285][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3080'. [ 1083.106618][ T5945] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1083.267342][ T5945] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 1083.304615][ T5945] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1083.320545][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1083.354590][ T5945] usb 2-1: Product: syz [ 1083.376987][ T5945] usb 2-1: Manufacturer: syz [ 1083.389483][ T5945] usb 2-1: SerialNumber: syz [ 1083.421392][ T5945] usb 2-1: config 0 descriptor?? [ 1083.449361][ T5945] ims_pcu 2-1:0.0: Zero length descriptor [ 1083.469554][ T5945] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 1083.868797][ T5883] usb 2-1: USB disconnect, device number 67 [ 1085.875896][ T5918] IPVS: starting estimator thread 0... [ 1085.968160][T17893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.979761][T17893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.043380][T17891] IPVS: using max 40 ests per chain, 96000 per kthread [ 1086.476618][T15756] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1086.677883][T15756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1086.734750][T15756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.789269][T15756] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1086.823956][T15756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.877618][T15756] usb 5-1: config 0 descriptor?? [ 1087.560629][T15756] usbhid 5-1:0.0: can't add hid device: -71 [ 1087.660841][T15756] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1087.737972][T15756] usb 5-1: USB disconnect, device number 60 [ 1090.051060][T17931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.058611][T17931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.792530][T17931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.805494][T17931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.030556][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.039816][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.049225][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.058957][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.416333][T17950] nvme_fabrics: missing parameter 'transport=%s' [ 1091.424157][T17950] nvme_fabrics: missing parameter 'nqn=%s' [ 1093.355345][T17973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3109'. [ 1093.463389][T17973] bridge_slave_1: default FDB implementation only supports local addresses [ 1093.692414][T17979] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 1094.655266][T17983] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 1094.720186][T17983] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 1095.626400][T18003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.639110][T17996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.646869][T17996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.679029][T18003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.506284][T17996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.546382][T17996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.870721][T18009] binder: 18008:18009 ioctl c0306201 80000180 returned -14 [ 1097.105750][ T7640] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.118743][ T7640] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.139013][ T7640] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.154957][ T7640] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.683481][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3119'. [ 1099.393369][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3120'. [ 1099.452838][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3120'. [ 1100.026774][ T5909] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1100.233650][ T5909] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 1100.273598][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.320792][ T5909] usb 2-1: config 0 has no interfaces? [ 1100.352980][ T5909] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1100.423378][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.477216][ T5909] usb 2-1: config 0 descriptor?? [ 1102.665700][ T5918] usb 2-1: USB disconnect, device number 68 [ 1103.390890][T18076] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 1103.407474][T18076] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 1105.550621][T18098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.605633][T18098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.196840][ T1099] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.246666][ T1099] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.294625][ T1099] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.332786][ T1099] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.371264][ T1099] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.446611][ T1099] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.519497][ T1099] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.604333][T18116] hub 1-0:1.0: USB hub found [ 1106.609291][ T1099] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.626664][T18116] hub 1-0:1.0: 1 port detected [ 1109.027609][T18148] ALSA: mixer_oss: invalid OSS volume '*' [ 1112.485720][T18183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3150'. [ 1112.564440][T18188] bridge_slave_1: default FDB implementation only supports local addresses [ 1113.303711][T18201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3152'. [ 1113.486080][T18201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3152'. [ 1113.686707][ T5909] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1113.906672][ T5909] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1113.929397][ T5909] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.979448][ T5909] usb 7-1: config 0 has no interfaces? [ 1114.005959][ T5909] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1114.058799][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.076007][ T5909] usb 7-1: config 0 descriptor?? [ 1115.901016][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.907643][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.523274][ T5909] usb 7-1: USB disconnect, device number 4 [ 1116.789165][T18228] sctp: [Deprecated]: syz.5.3169 (pid 18228) Use of int in max_burst socket option. [ 1116.789165][T18228] Use struct sctp_assoc_value instead [ 1117.483774][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3162'. [ 1117.502099][T18247] vlan2: left allmulticast mode [ 1117.568484][T18247] bridge1: left allmulticast mode [ 1117.668964][T18247] macvtap1: left allmulticast mode [ 1117.732405][T18247] ipvlan2: left allmulticast mode [ 1117.769441][T18247] bond0: left allmulticast mode [ 1117.819103][T18247] ip6gretap1: left allmulticast mode [ 1117.912743][T18247] vlan0: left allmulticast mode [ 1117.999705][T18247] veth0_to_bond: left allmulticast mode [ 1118.066882][T18247] erspan1: left allmulticast mode [ 1118.146401][T18247] geneve2: left promiscuous mode [ 1119.267613][T18264] ALSA: mixer_oss: invalid OSS volume '' [ 1120.274653][T18266] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 1120.297061][T18266] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 1121.240498][T18294] bridge0: port 3(macvtap1) entered blocking state [ 1121.306988][T18294] bridge0: port 3(macvtap1) entered disabled state [ 1121.370013][T18294] macvtap1: entered allmulticast mode [ 1121.376501][T18294] bridge0: entered allmulticast mode [ 1121.513563][T18294] macvtap1: left allmulticast mode [ 1121.525066][T18294] bridge0: left allmulticast mode [ 1121.799854][T18297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1121.856698][ T5945] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1122.081547][ T5945] usb 6-1: config 0 has no interfaces? [ 1122.099187][ T5945] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1122.157808][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.243090][ T5945] usb 6-1: config 0 descriptor?? [ 1123.416721][ T5945] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1123.569436][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1123.608211][ T5945] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.698386][ T5945] usb 5-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 1123.781561][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 1123.816602][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.896146][ T5945] usb 5-1: Product: syz [ 1123.933240][ T5945] usb 5-1: Manufacturer: syz [ 1123.978286][ T5945] usb 5-1: SerialNumber: syz [ 1124.617559][ T5945] usb 5-1: USB disconnect, device number 61 [ 1124.648655][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1124.682996][ T5909] usb 6-1: USB disconnect, device number 8 [ 1125.346570][ T5945] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1125.559784][ T5945] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.623107][ T5945] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1125.698081][ T5945] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1125.750447][ T5945] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1125.769838][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.789795][ T5945] usb 6-1: Product: syz [ 1125.807369][ T5945] usb 6-1: Manufacturer: syz [ 1125.824125][ T5945] usb 6-1: SerialNumber: syz [ 1125.861950][ T5945] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 1125.896748][ T5945] cdc_ncm 6-1:1.0: bind() failure [ 1125.944557][T18338] ALSA: mixer_oss: invalid OSS volume '*' [ 1127.090971][T18356] xt_hashlimit: max too large, truncated to 1048576 [ 1127.307438][ T5945] psmouse serio3: Failed to reset mouse on : -5 [ 1127.316963][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3187'. [ 1127.342008][T18360] bridge_slave_1 (unregistering): left allmulticast mode [ 1127.372150][T18360] bridge_slave_1 (unregistering): left promiscuous mode [ 1127.390756][T18360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.013748][ T5909] usb 6-1: USB disconnect, device number 9 [ 1128.347366][T18369] syzkaller0: entered promiscuous mode [ 1128.374240][T18369] syzkaller0: entered allmulticast mode [ 1128.392095][T18373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.438335][T18373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.669665][T18386] ALSA: mixer_oss: invalid OSS volume '*' [ 1130.870008][T18411] bridge0: port 2(macvtap1) entered blocking state [ 1130.908542][T18411] bridge0: port 2(macvtap1) entered disabled state [ 1130.953649][T18411] macvtap1: entered allmulticast mode [ 1131.031739][T18411] bridge0: entered allmulticast mode [ 1131.075039][T18411] macvtap1: left allmulticast mode [ 1131.105005][T18411] bridge0: left allmulticast mode [ 1131.166828][ T5945] misc userio: Buffer overflowed, userio client isn't keeping up [ 1131.436613][T15756] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1131.635735][T15756] usb 7-1: config 0 has no interfaces? [ 1131.652228][T15756] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1131.768887][T15756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.814621][T15756] usb 7-1: config 0 descriptor?? [ 1132.249740][ T5945] input: PS/2 Generic Mouse as /devices/serio3/input/input41 [ 1132.536658][ T5945] psmouse serio3: Failed to enable mouse on [ 1132.640609][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 1133.534007][T12162] usb 7-1: USB disconnect, device number 5 [ 1133.861941][T18438] sctp: [Deprecated]: syz.6.3202 (pid 18438) Use of int in max_burst socket option. [ 1133.861941][T18438] Use struct sctp_assoc_value instead [ 1133.888633][T18443] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1133.922326][T18443] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1134.273264][T18449] netlink: 'syz.6.3204': attribute type 4 has an invalid length. [ 1134.469904][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'. [ 1134.507484][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1134.507504][ T29] audit: type=1400 audit(1773897292.964:1679): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=18446 comm="syz.6.3204" [ 1134.615467][T18452] bridge_slave_1 (unregistering): left allmulticast mode [ 1134.632244][T18452] bridge_slave_1 (unregistering): left promiscuous mode [ 1134.696961][T18452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.108116][ T29] audit: type=1800 audit(1773897293.554:1680): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3219" name="nullb0" dev="devtmpfs" ino=3796 res=0 errno=0 [ 1135.318047][T18463] ALSA: mixer_oss: invalid OSS volume '*' [ 1135.720997][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1135.744110][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1135.811409][ T29] audit: type=1800 audit(1773897294.254:1681): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3209" name="nullb0" dev="devtmpfs" ino=3796 res=0 errno=0 [ 1135.833258][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1135.865402][T18469] syzkaller0: entered promiscuous mode [ 1135.879910][T18469] syzkaller0: entered allmulticast mode [ 1136.171052][T18486] hub 1-0:1.0: USB hub found [ 1136.206670][T18486] hub 1-0:1.0: 1 port detected [ 1136.849109][T18503] pim6reg: entered allmulticast mode [ 1137.593636][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1137.631496][T18511] bridge_slave_1 (unregistering): left allmulticast mode [ 1137.695924][T18511] bridge_slave_1 (unregistering): left promiscuous mode [ 1137.721792][T18511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.266227][ T29] audit: type=1800 audit(1773897296.714:1682): pid=18520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3223" name="nullb0" dev="devtmpfs" ino=3796 res=0 errno=0 [ 1138.724154][T18523] ALSA: mixer_oss: invalid OSS volume '*' [ 1138.732057][ T29] audit: type=1800 audit(1773897297.184:1683): pid=18530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3237" name="nullb0" dev="devtmpfs" ino=3796 res=0 errno=0 [ 1138.882523][T18536] IPVS: Error connecting to the multicast addr [ 1139.031398][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 1139.070969][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 1139.109406][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3230'. [ 1139.157107][T18545] syzkaller0: entered promiscuous mode [ 1139.182911][T18545] syzkaller0: entered allmulticast mode [ 1140.893889][T18563] hub 1-0:1.0: USB hub found [ 1140.919858][T18563] hub 1-0:1.0: 1 port detected [ 1141.423465][ T5909] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1141.596600][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 1141.614400][ T5909] usb 2-1: config 5 has an invalid interface number: 168 but max is 0 [ 1141.630705][ T5909] usb 2-1: config 5 has no interface number 0 [ 1141.656044][ T5909] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1141.737324][ T5909] usb 2-1: config 5 interface 168 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1141.810434][ T5909] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 0 [ 1141.857871][ T5909] usb 2-1: config 5 interface 168 has no altsetting 0 [ 1141.938036][ T5909] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1141.960294][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.990005][ T5909] usb 2-1: Product: syz [ 1142.004868][ T5909] usb 2-1: Manufacturer: syz [ 1142.018280][ T5909] usb 2-1: SerialNumber: syz [ 1142.049144][T18567] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1142.782086][ T5909] pn533_usb 2-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 1142.809335][ T5909] usb 2-1: USB disconnect, device number 69 [ 1142.827260][T18583] pim6reg: entered allmulticast mode [ 1143.503947][ T29] audit: type=1800 audit(1773897301.944:1684): pid=18593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3240" name="nullb0" dev="devtmpfs" ino=3796 res=0 errno=0 [ 1143.667615][T18594] ALSA: mixer_oss: invalid OSS volume '*' [ 1144.056633][ T5909] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1144.216657][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 1144.223910][ T5909] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1144.238009][ T5909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1144.249157][ T5909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.260705][ T5909] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.293300][ T5909] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1144.314762][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.564352][ T5909] usb 6-1: GET_CAPABILITIES returned 0 [ 1144.576912][ T5909] usbtmc 6-1:16.0: can't read capabilities [ 1144.797129][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1144.817984][T18598] usbtmc 6-1:16.0: Unable to send data, error -71 [ 1145.374247][ T5945] usb 6-1: USB disconnect, device number 10 [ 1146.677120][T18636] hub 1-0:1.0: USB hub found [ 1146.691167][T18636] hub 1-0:1.0: 1 port detected [ 1147.866741][T15756] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1148.036576][T15756] usb 6-1: Using ep0 maxpacket: 8 [ 1148.053215][T15756] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1148.069759][T15756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.082560][T15756] usb 6-1: Product: syz [ 1148.089523][T15756] usb 6-1: Manufacturer: syz [ 1148.097197][T15756] usb 6-1: SerialNumber: syz [ 1148.124594][T15756] usb 6-1: config 0 descriptor?? [ 1148.372313][T15756] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1148.958712][T18667] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1148.965228][T18667] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1149.887044][T15756] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1149.908891][T15756] usb 6-1: USB disconnect, device number 11 [ 1150.181024][T18678] netlink: 'syz.1.3257': attribute type 4 has an invalid length. [ 1150.271261][ T29] audit: type=1400 audit(1773897308.714:1685): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=18672 comm="syz.1.3257" [ 1150.330429][T18679] bridge0: port 2(macvtap3) entered blocking state [ 1150.339732][T18679] bridge0: port 2(macvtap3) entered disabled state [ 1150.348741][T18679] macvtap3: entered allmulticast mode [ 1150.356138][T18679] bridge0: entered allmulticast mode [ 1150.390139][T18679] macvtap3: left allmulticast mode [ 1150.395486][T18679] bridge0: left allmulticast mode [ 1150.460946][T18681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.472323][T18681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.127860][T18695] hub 1-0:1.0: USB hub found [ 1152.140134][T18695] hub 1-0:1.0: 1 port detected [ 1152.176582][ T5909] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1152.328449][ T5909] usb 2-1: config 0 has no interfaces? [ 1152.334593][ T5909] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1152.353761][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.390165][ T5909] usb 2-1: config 0 descriptor?? [ 1152.773542][ T5909] usb 2-1: USB disconnect, device number 70 [ 1155.755604][T18742] netlink: 'syz.5.3271': attribute type 4 has an invalid length. [ 1155.852956][ T29] audit: type=1400 audit(1773897314.304:1686): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=18736 comm="syz.5.3271" [ 1157.577244][ T5945] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1157.745917][T18754] hub 1-0:1.0: USB hub found [ 1157.764868][ T5945] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1157.778665][T18754] hub 1-0:1.0: 1 port detected [ 1157.793241][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.830949][ T5945] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1157.849515][ T5945] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1157.870139][ T5945] usb 7-1: Manufacturer: syz [ 1157.893166][ T5945] usb 7-1: config 0 descriptor?? [ 1158.070449][ T5945] rc_core: IR keymap rc-hauppauge not found [ 1158.082313][ T5945] Registered IR keymap rc-empty [ 1158.097805][ T5945] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1158.126042][ T5945] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input42 [ 1158.209663][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 1158.246788][ T5909] usb 7-1: USB disconnect, device number 6 [ 1158.786582][ T5909] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1158.946543][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 1158.958270][ T5909] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 1158.974404][ T5909] usb 5-1: config 5 has no interface number 0 [ 1158.983074][ T5909] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1159.007887][ T29] audit: type=1326 audit(1773897317.464:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.010898][ T5909] usb 5-1: config 5 interface 168 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1159.045589][ T5909] usb 5-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 0 [ 1159.061474][ T5909] usb 5-1: config 5 interface 168 has no altsetting 0 [ 1159.071200][ T5909] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1159.100880][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.141450][ T29] audit: type=1326 audit(1773897317.464:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.143996][ T5909] usb 5-1: Product: syz [ 1159.206166][ T5909] usb 5-1: Manufacturer: syz [ 1159.215147][ T5909] usb 5-1: SerialNumber: syz [ 1159.238815][ T29] audit: type=1326 audit(1773897317.464:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.297383][ T29] audit: type=1326 audit(1773897317.464:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.320842][ T29] audit: type=1326 audit(1773897317.494:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.350119][T18761] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1159.360714][ T29] audit: type=1326 audit(1773897317.494:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.431026][ T29] audit: type=1326 audit(1773897317.494:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.492151][ T29] audit: type=1326 audit(1773897317.944:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.520175][ T29] audit: type=1326 audit(1773897317.944:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.2.3284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 1159.744872][ T5909] pn533_usb 5-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 1159.771282][ T5909] usb 5-1: USB disconnect, device number 62 [ 1160.593048][T18798] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1160.619911][T18798] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1160.741537][T18805] netlink: 'syz.4.3286': attribute type 4 has an invalid length. [ 1160.953118][T18807] pim6reg: entered allmulticast mode [ 1164.606993][T18849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.665028][T18849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.090986][T18866] netlink: 'syz.2.3305': attribute type 10 has an invalid length. [ 1166.110188][T18866] veth0_vlan: entered allmulticast mode [ 1166.122015][T18866] veth0_vlan: left promiscuous mode [ 1166.172483][T18866] veth0_vlan: entered promiscuous mode [ 1166.200917][T18866] team0: Device veth0_vlan failed to register rx_handler [ 1166.404747][T18870] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1166.439957][T18870] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1167.514508][T18872] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3306'. [ 1167.776606][ T5909] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1168.243081][ T5909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1168.255513][ T5909] usb 6-1: not running at top speed; connect to a high speed hub [ 1168.520508][ T5909] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1168.542942][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.570804][ T5909] usb 6-1: Product: syz [ 1168.595177][ T5909] usb 6-1: Manufacturer: syz [ 1168.655205][ T5909] usb 6-1: SerialNumber: syz [ 1170.688374][ T5945] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1170.908375][T18916] netlink: 'syz.2.3316': attribute type 31 has an invalid length. [ 1170.914604][ T5909] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1170.953924][ T5909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1170.971430][ T5945] usb 7-1: config 0 has no interfaces? [ 1170.977370][ T5909] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1170.986530][ T5945] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1171.016642][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.044091][ T5909] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1171.071150][ T5945] usb 7-1: config 0 descriptor?? [ 1171.083730][ T5909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1171.116636][ T5840] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1171.129157][ T5909] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1171.183662][ T5909] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1171.205360][ T5909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1171.280279][ T5909] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1171.315432][ T5840] usb 2-1: config 0 has no interfaces? [ 1171.321382][ T5909] usb 6-1: USB disconnect, device number 12 [ 1171.346604][ T5840] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1171.390701][T15791] udevd[15791]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1171.494252][T12162] usb 7-1: USB disconnect, device number 7 [ 1171.521646][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.602997][ T5840] usb 2-1: config 0 descriptor?? [ 1173.009436][T18941] netlink: 'syz.5.3332': attribute type 4 has an invalid length. [ 1173.055870][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1173.055890][ T29] audit: type=1400 audit(1773897331.504:1697): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=18935 comm="syz.5.3332" [ 1173.564450][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1173.609413][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1173.659201][T18946] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1173.982773][T18947] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3322'. [ 1174.107816][ T5840] usb 2-1: USB disconnect, device number 71 [ 1175.102850][T18966] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1175.122814][T18966] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1175.306577][ T5909] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1175.482019][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 1175.523876][ T5909] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1175.548443][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1175.580219][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1175.614951][ T5909] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1175.656605][ T5909] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1175.684443][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.940779][ T5909] usb 5-1: GET_CAPABILITIES returned 0 [ 1175.970805][ T5909] usbtmc 5-1:16.0: can't read capabilities [ 1176.213991][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1176.225490][T18961] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1176.773260][ T5840] usb 5-1: USB disconnect, device number 63 [ 1177.038629][T18988] ALSA: mixer_oss: invalid OSS volume '*' [ 1177.342646][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.349723][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.577904][T19003] netlink: 'syz.1.3335': attribute type 2 has an invalid length. [ 1178.541497][T19010] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3337'. [ 1179.396220][T19022] netlink: 'syz.5.3340': attribute type 31 has an invalid length. [ 1179.800468][T19031] netlink: 'syz.5.3341': attribute type 10 has an invalid length. [ 1179.824439][T19031] veth0_vlan: entered allmulticast mode [ 1179.858417][T19031] veth0_vlan: left promiscuous mode [ 1179.874254][T19031] veth0_vlan: entered promiscuous mode [ 1179.883925][T19031] team0: Device veth0_vlan failed to register rx_handler [ 1181.376553][ T5840] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1181.547608][ T5840] usb 7-1: Using ep0 maxpacket: 8 [ 1181.558134][ T5840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1181.580306][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1181.606745][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1181.634178][ T5840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.663909][ T5840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1181.703484][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.951368][ T5840] usb 7-1: GET_CAPABILITIES returned 0 [ 1181.966684][ T5840] usbtmc 7-1:16.0: can't read capabilities [ 1182.216225][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1182.226824][T19041] usbtmc 7-1:16.0: Unable to send data, error -71 [ 1182.791860][ T5840] usb 7-1: USB disconnect, device number 8 [ 1183.311041][T19071] bridge0: port 2(macvtap1) entered blocking state [ 1183.353164][T19071] bridge0: port 2(macvtap1) entered disabled state [ 1183.380119][T19071] macvtap1: entered allmulticast mode [ 1183.385676][T19071] bridge0: entered allmulticast mode [ 1183.394241][T19071] macvtap1: left allmulticast mode [ 1183.399572][ T5840] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1183.428882][T19071] bridge0: left allmulticast mode [ 1183.506726][T19075] openvswitch: netlink: Message has 76 unknown bytes. [ 1183.515582][T19075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.609966][ T5840] usb 5-1: Using ep0 maxpacket: 32 [ 1183.625475][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1183.655350][ T5840] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1183.707406][ T5840] usb 5-1: string descriptor 0 read error: -22 [ 1183.714013][ T5840] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1183.725701][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.825549][T19070] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1183.872351][ T5840] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1183.897256][ T5943] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1183.995591][ T5840] usb 5-1: MIDIStreaming interface descriptor not found [ 1184.073157][ T5943] usb 6-1: config 0 has no interfaces? [ 1184.088394][ T5943] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1184.151028][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.237643][ T5943] usb 6-1: config 0 descriptor?? [ 1184.553906][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 1185.814042][T19087] netlink: 'syz.6.3352': attribute type 31 has an invalid length. [ 1186.691578][ T5918] usb 5-1: USB disconnect, device number 64 [ 1187.226616][ T5918] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1187.312850][ T5909] usb 6-1: USB disconnect, device number 13 [ 1187.404350][ T5918] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1187.458971][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.516287][ T5918] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1187.567798][ T5918] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1187.604358][ T5918] usb 5-1: Manufacturer: syz [ 1187.662980][ T5918] usb 5-1: config 0 descriptor?? [ 1187.877553][ T5918] rc_core: IR keymap rc-hauppauge not found [ 1187.898013][ T5918] Registered IR keymap rc-empty [ 1187.942697][ T5918] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1188.002815][ T5918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 1188.112361][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1188.305619][ T5918] usb 5-1: USB disconnect, device number 65 [ 1188.976504][T19116] program syz.5.3356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1189.393882][T19127] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1189.425043][T19127] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1190.347038][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3363'. [ 1190.399814][T19139] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3363'. [ 1190.754576][T19130] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3361'. [ 1191.693049][T19153] ALSA: mixer_oss: invalid OSS volume '' [ 1191.724198][T19150] netlink: 'syz.1.3366': attribute type 31 has an invalid length. [ 1194.466702][T19186] netlink: 'syz.1.3373': attribute type 10 has an invalid length. [ 1198.435671][T19219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.482561][T19219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.394170][T19235] netlink: 'syz.1.3384': attribute type 4 has an invalid length. [ 1199.523406][ T29] audit: type=1400 audit(1773897357.954:1698): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=19226 comm="syz.1.3384" [ 1199.626596][ T5918] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1199.726363][T19244] fuse: Bad value for 'fd' [ 1199.794956][ T5918] usb 6-1: config 0 has no interfaces? [ 1199.825289][ T5918] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1199.860460][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.941765][ T5918] usb 6-1: config 0 descriptor?? [ 1200.562471][ T5943] usb 6-1: USB disconnect, device number 14 [ 1202.512847][T19271] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 1204.754600][T19285] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1204.777579][T19283] syzkaller0: entered promiscuous mode [ 1204.783104][T19283] syzkaller0: entered allmulticast mode [ 1204.821452][T19283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1204.843143][T19283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1205.078921][T19290] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1206.689662][T19308] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3401'. [ 1208.165094][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3406'. [ 1208.241017][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3406'. [ 1208.320390][T19330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3406'. [ 1208.737916][T19331] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3406'. [ 1209.406174][T19335] syzkaller0: entered promiscuous mode [ 1209.415353][T19335] syzkaller0: entered allmulticast mode [ 1209.430397][T19335] tcf_pedit_act: 7 callbacks suppressed [ 1209.430489][T19335] tc action pedit offset must be on 32 bit boundaries [ 1210.049486][T19345] program syz.4.3410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1211.227033][ T5840] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1211.427635][ T5840] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1211.451366][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.480446][ T5840] usb 7-1: Product: syz [ 1211.492150][ T5840] usb 7-1: Manufacturer: syz [ 1211.508840][ T5840] usb 7-1: SerialNumber: syz [ 1211.531342][ T5840] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1211.545456][ T5840] r8152-cfgselector 7-1: config 0 descriptor?? [ 1212.021149][ T5909] r8152-cfgselector 7-1: USB disconnect, device number 9 [ 1212.865194][T19390] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1213.101844][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3420'. [ 1213.839495][T19417] netlink: 'syz.2.3425': attribute type 2 has an invalid length. [ 1215.841023][T19437] ALSA: mixer_oss: invalid OSS volume '*' [ 1216.706889][T19457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.719811][T19457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.738647][T19458] openvswitch: netlink: Message has 76 unknown bytes. [ 1216.757423][T19458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.929460][T19458] ip6tnl0: Caught tx_queue_len zero misconfig [ 1219.603755][T19489] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1219.642829][T19489] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1220.010707][T19496] ALSA: mixer_oss: invalid OSS volume '*' [ 1222.582788][T19524] fuse: Bad value for 'fd' [ 1224.648142][T19542] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1225.315552][T19549] syzkaller0: entered promiscuous mode [ 1225.322555][T19549] syzkaller0: entered allmulticast mode [ 1225.927487][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1225.961834][T19563] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1226.012724][T19567] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1226.047869][T19567] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1226.424377][ T5909] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1226.637445][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 1226.715024][ T5909] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1226.743909][ T5909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1226.821303][ T5909] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1226.892649][ T5909] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.986110][ T5909] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1227.027882][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.326244][ T5909] usb 7-1: GET_CAPABILITIES returned 0 [ 1227.365940][ T5909] usbtmc 7-1:16.0: can't read capabilities [ 1229.315064][T19593] bridge0: port 2(macvtap3) entered blocking state [ 1229.334199][T19593] bridge0: port 2(macvtap3) entered disabled state [ 1229.379916][T19602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.391104][T19593] macvtap3: entered allmulticast mode [ 1229.412762][T19593] bridge0: entered allmulticast mode [ 1229.423921][T19603] kAFS: unable to lookup cell '' [ 1229.433559][T19602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.450784][T19593] macvtap3: left allmulticast mode [ 1229.462450][T19593] bridge0: left allmulticast mode [ 1232.006588][ T5909] usb 7-1: USB disconnect, device number 10 [ 1232.788904][T19630] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1232.795359][T19630] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1233.309163][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3471'. [ 1233.433398][T19640] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3471'. [ 1234.887649][ T5943] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1234.923947][T19651] netlink: 'syz.4.3473': attribute type 10 has an invalid length. [ 1234.933278][T19651] veth0_vlan: entered allmulticast mode [ 1234.956280][T19651] veth0_vlan: left promiscuous mode [ 1234.973459][T19651] veth0_vlan: entered promiscuous mode [ 1235.014636][T19651] team0: Device veth0_vlan failed to register rx_handler [ 1235.082722][ T5943] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 1235.094627][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.137417][ T5943] usb 2-1: config 0 has no interface number 0 [ 1235.167648][ T5943] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1235.229160][ T5943] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1235.280683][ T5943] usb 2-1: config 0 interface 106 has no altsetting 0 [ 1235.301334][ T5943] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1235.333723][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.381102][ T5943] usb 2-1: config 0 descriptor?? [ 1235.415030][ T5943] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1235.807276][T19657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.826259][T19657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.033702][T19657] team0: Device gtp0 is of different type [ 1236.495455][ T48] usb 2-1: Failed to submit usb control message: -110 [ 1236.511777][ T48] usb 2-1: unable to send the bmi data to the device: -110 [ 1236.540506][ T48] usb 2-1: unable to get target info from device [ 1236.587188][ T48] usb 2-1: could not get target info (-110) [ 1236.618658][ T48] usb 2-1: could not probe fw (-110) [ 1237.087500][T19670] ALSA: mixer_oss: invalid OSS volume '*' [ 1237.669386][T19680] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1237.723788][T19680] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1238.271537][ T5943] usb 2-1: USB disconnect, device number 72 [ 1238.707014][ T5909] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1238.795287][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.802321][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.827137][ T5943] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1238.875156][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.924470][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.968226][ T5909] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1238.990793][ T5943] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1239.011308][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.021546][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.045263][ T5943] usb 5-1: config 0 has no interface number 0 [ 1239.065405][ T5909] usb 6-1: config 0 descriptor?? [ 1239.083728][ T5943] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1239.128598][ T5943] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1239.157744][ T5943] usb 5-1: config 0 interface 106 has no altsetting 0 [ 1239.178175][ T5943] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1239.200436][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.231361][ T5943] usb 5-1: config 0 descriptor?? [ 1239.335323][ T5943] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1239.588559][ T5909] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x7 [ 1239.804408][T19710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.340295][T19710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.348192][ T5909] logitech-djreceiver 0003:046D:C71F.001B: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 1240.379237][T19691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.419578][T19710] gtp0: entered promiscuous mode [ 1240.430574][T19710] team0: Device gtp0 is of different type [ 1240.468661][ T7640] usb 5-1: Failed to submit usb control message: -110 [ 1240.480522][ T7640] usb 5-1: unable to send the bmi data to the device: -110 [ 1240.519976][T19691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.549048][ T7640] usb 5-1: unable to get target info from device [ 1240.583645][ T5909] usb 6-1: USB disconnect, device number 15 [ 1240.589756][ T7640] usb 5-1: could not get target info (-110) [ 1240.595958][ T7640] usb 5-1: could not probe fw (-110) [ 1240.674998][T19711] fido_id[19711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1241.485540][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3486'. [ 1241.674057][T19730] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3486'. [ 1242.149995][ T5840] usb 5-1: USB disconnect, device number 66 [ 1243.415563][T19753] netlink: 'syz.6.3488': attribute type 10 has an invalid length. [ 1243.437860][T19753] veth0_vlan: entered allmulticast mode [ 1243.462135][T19753] veth0_vlan: left promiscuous mode [ 1243.477677][T19753] veth0_vlan: entered promiscuous mode [ 1243.499996][T19753] team0: Device veth0_vlan failed to register rx_handler [ 1245.334702][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'. [ 1245.353686][T19773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.401302][T19773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.513072][T19775] batadv_slave_1: entered promiscuous mode [ 1246.514193][T19762] batadv_slave_1: left promiscuous mode [ 1248.047077][T12162] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1248.227187][T12162] usb 2-1: Using ep0 maxpacket: 16 [ 1248.241598][T12162] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1248.303803][T12162] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1248.348345][T12162] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1248.399401][T12162] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1248.468612][T12162] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1248.503884][T12162] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1248.527289][T12162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.580215][T12162] usb 2-1: Product: syz [ 1248.597442][T12162] usb 2-1: Manufacturer: syz [ 1248.606332][T12162] usb 2-1: SerialNumber: syz [ 1248.660753][T19795] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1248.914706][T12162] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input44 [ 1249.313453][T19807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.353177][T19807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.949864][T12162] usb 2-1: USB disconnect, device number 73 [ 1249.949864][ C1] bcm5974 2-1:1.0: trackpad urb failed: -19 [ 1249.978330][T19812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1250.005956][T19794] bcm5974 2-1:1.0: could not read from device [ 1250.270073][T19821] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3500'. [ 1251.261009][ T5840] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1251.307079][T12162] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1251.337077][ T5943] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1251.427813][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 1251.449828][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.469768][T12162] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 1251.488958][ T5840] usb 2-1: config 0 has no interfaces? [ 1251.488955][T12162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.488984][T12162] usb 6-1: config 0 has no interface number 0 [ 1251.494511][ T5840] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1251.531793][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.548704][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.578561][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1251.603696][T12162] usb 6-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1251.615526][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.639466][ T5943] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1251.656259][T12162] usb 6-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1251.683192][ T5840] usb 2-1: config 0 descriptor?? [ 1251.688821][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.693914][T12162] usb 6-1: config 0 interface 106 has no altsetting 0 [ 1251.743660][T12162] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1251.758324][ T5943] usb 5-1: config 0 descriptor?? [ 1251.778360][T12162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.801634][T12162] usb 6-1: config 0 descriptor?? [ 1251.852072][T12162] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1252.069345][ T5840] usb 2-1: USB disconnect, device number 74 [ 1252.207395][ T5943] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 1252.279570][ T5943] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1252.486243][T19836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.532185][T19836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.724116][T12162] usb 5-1: USB disconnect, device number 67 [ 1252.873633][ T1099] usb 6-1: Failed to submit usb control message: -110 [ 1252.891851][ T1099] usb 6-1: unable to send the bmi data to the device: -110 [ 1252.912301][ T1099] usb 6-1: unable to get target info from device [ 1252.930119][ T1099] usb 6-1: could not get target info (-110) [ 1252.958263][ T1099] usb 6-1: could not probe fw (-110) [ 1253.163965][T19836] team0: Device gtp0 is of different type [ 1253.284178][T19848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3509'. [ 1253.587634][ T5943] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1253.791543][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 1253.811193][ T5943] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1253.902743][ T5943] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 1253.927138][ T5943] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.957079][ T5943] usb 7-1: config 7 has no interface number 0 [ 1253.977298][ T5943] usb 7-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1254.014321][ T5943] usb 7-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.078348][ T5943] usb 7-1: config 7 interface 187 has no altsetting 0 [ 1254.123797][ T5943] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1254.153701][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.189820][ T5943] usb 7-1: Product: syz [ 1254.222404][ T5943] usb 7-1: Manufacturer: syz [ 1254.255862][ T5943] usb 7-1: SerialNumber: syz [ 1254.672340][ T5943] usb 7-1: Limiting number of CPorts to U8_MAX [ 1254.705279][ T5943] usb 7-1: Unknown endpoint type found, address 0x07 [ 1254.738133][ T5943] usb 7-1: Not enough endpoints found in device, aborting! [ 1254.899330][ T5943] usb 7-1: USB disconnect, device number 11 [ 1255.278440][ T5943] usb 6-1: USB disconnect, device number 16 [ 1255.334597][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1255.907054][T12162] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1256.107644][T12162] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1256.147837][T12162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.184768][T12162] usb 7-1: Product: syz [ 1256.200319][T12162] usb 7-1: Manufacturer: syz [ 1256.220252][T12162] usb 7-1: SerialNumber: syz [ 1256.252804][T12162] usb 7-1: config 0 descriptor?? [ 1256.495875][T12162] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1256.805886][T19884] netlink: 'syz.2.3519': attribute type 21 has an invalid length. [ 1256.845329][T19884] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3519'. [ 1256.875939][T19893] netlink: 'syz.2.3519': attribute type 21 has an invalid length. [ 1256.907684][T19893] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3519'. [ 1257.101168][T19892] usb usb8: usbfs: process 19892 (syz.1.3520) did not claim interface 0 before use [ 1257.139668][T19892] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1257.148904][T19892] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1257.167524][T19892] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1257.979341][T12162] usb 7-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1257.994886][T12162] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1258.024876][T12162] usb 7-1: media controller created [ 1258.063982][T12162] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.105600][T12162] dvb_usb_rtl28xxu 7-1:0.0: unknown tuner MT2266 [ 1258.264543][T19900] kAFS: unable to lookup cell '' [ 1258.280978][T12162] usb 7-1: USB disconnect, device number 12 [ 1258.310038][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'. [ 1258.921106][T19911] pim6reg: left allmulticast mode [ 1258.989920][T19913] trusted_key: encrypted_key: insufficient parameters specified [ 1259.242946][T19918] loop9: detected capacity change from 0 to 8 [ 1259.287052][T19918] Dev loop9: unable to read RDB block 8 [ 1259.301921][T19918] loop9: unable to read partition table [ 1259.319704][T19918] loop9: partition table beyond EOD, truncated [ 1259.327187][T12162] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1259.358839][T19918] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1259.517100][T12162] usb 7-1: Using ep0 maxpacket: 32 [ 1259.548788][T12162] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1259.602372][T12162] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1259.685369][T12162] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1259.737207][T12162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.787972][T12162] usb 7-1: Product: syz [ 1259.807210][T12162] usb 7-1: Manufacturer: syz [ 1259.824176][T12162] usb 7-1: SerialNumber: syz [ 1259.855430][T12162] usb 7-1: config 0 descriptor?? [ 1259.920611][T12162] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1259.947300][T19928] fuse: Unknown parameter '' [ 1260.020245][T19928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3528'. [ 1260.156524][ T5943] usb 7-1: USB disconnect, device number 13 [ 1260.164082][ T1099] usb 7-1: Failed to submit usb control message: -71 [ 1260.207234][ T1099] usb 7-1: unable to send the bmi data to the device: -71 [ 1260.262181][ T1099] usb 7-1: unable to get target info from device [ 1260.278188][ T1099] usb 7-1: could not get target info (-71) [ 1260.301728][ T1099] usb 7-1: could not probe fw (-71) [ 1261.297099][T12162] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1261.446842][T12162] usb 7-1: Using ep0 maxpacket: 16 [ 1261.455260][T12162] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.478260][T12162] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.494443][T12162] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1261.517090][T12162] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1261.529550][T12162] usb 7-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1261.547237][T12162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.564845][T12162] usb 7-1: config 0 descriptor?? [ 1261.644102][ T29] audit: type=1800 audit(1773897420.094:1699): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3541" name="nullb0" dev="devtmpfs" ino=3796 res=0 errno=0 [ 1261.783305][T12162] usbhid 7-1:0.0: can't add hid device: -71 [ 1261.797531][T12162] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1261.832310][T12162] usb 7-1: USB disconnect, device number 14 [ 1261.889362][T19955] ALSA: mixer_oss: invalid OSS volume 'RgECLEV' [ 1261.896070][T19955] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1262.560599][T19964] openvswitch: netlink: Flow key attr not present in new flow. [ 1262.880801][T19969] ALSA: mixer_oss: invalid OSS volume '' [ 1263.837915][T19981] netlink: 'syz.1.3540': attribute type 10 has an invalid length. [ 1266.347712][T20004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.410434][T20004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.097826][T12162] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1267.329295][T12162] usb 2-1: Using ep0 maxpacket: 16 [ 1267.393707][T12162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1267.543395][T12162] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1267.624463][T20025] ALSA: mixer_oss: invalid OSS volume '*' [ 1267.669584][T12162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.801147][T12162] usb 2-1: Product: syz [ 1267.864665][T12162] usb 2-1: Manufacturer: syz [ 1267.927669][T12162] usb 2-1: SerialNumber: syz [ 1268.041264][T12162] usb 2-1: config 0 descriptor?? [ 1268.244192][T12162] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1268.791763][T20034] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1269.257401][ T48] usb 2-1: Failed to submit usb control message: -110 [ 1269.264694][ T48] usb 2-1: unable to send the bmi data to the device: -110 [ 1269.272647][ T48] usb 2-1: unable to get target info from device [ 1269.291806][ T48] usb 2-1: could not get target info (-110) [ 1269.312791][ T48] usb 2-1: could not probe fw (-110) [ 1270.009382][T20038] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1271.394739][ T5840] usb 2-1: USB disconnect, device number 75 [ 1271.527471][T20045] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3553'. [ 1271.620069][T20045] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3553'. [ 1271.914660][T20055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1276.320731][T20109] netlink: 'syz.4.3561': attribute type 7 has an invalid length. [ 1276.330112][T20109] netlink: 'syz.4.3561': attribute type 8 has an invalid length. [ 1276.648312][T20112] ALSA: mixer_oss: invalid OSS volume '*' [ 1277.477113][ T5840] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1277.647164][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 1277.691472][ T5840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1277.736024][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1277.799599][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.848783][ T5840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.898473][ T5840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1277.940736][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.244427][ T5840] usb 6-1: GET_CAPABILITIES returned 0 [ 1278.259478][ T5840] usbtmc 6-1:16.0: can't read capabilities [ 1278.907146][ T5840] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1278.951099][ T5943] IPVS: starting estimator thread 0... [ 1279.047056][T20141] IPVS: using max 32 ests per chain, 76800 per kthread [ 1279.071050][ T5840] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1279.099816][ T5840] usb 2-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1279.139000][ T5840] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1279.165231][ T5840] usb 2-1: config 1 has no interface number 1 [ 1279.180752][ T5840] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1279.237104][ T5840] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1279.281551][ T5840] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1279.300452][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.333064][ T5840] usb 2-1: Product: syz [ 1279.345804][ T5840] usb 2-1: Manufacturer: syz [ 1279.361772][ T5840] usb 2-1: SerialNumber: syz [ 1279.694671][T20145] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3568'. [ 1279.784681][T20145] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3568'. [ 1279.897204][ T5909] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1279.927270][ T5840] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1279.934816][ T5840] usb 2-1: MIDIStreaming interface descriptor not found [ 1280.107214][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 1280.128959][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1280.152186][ T5909] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1280.192977][ T5909] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1280.230675][ T5909] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1280.263984][ T5840] usb 2-1: USB disconnect, device number 76 [ 1280.270884][ T5909] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1280.291653][ T5909] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1280.324926][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.368416][ T5909] usb 5-1: Product: syz [ 1280.407063][ T5909] usb 5-1: Manufacturer: syz [ 1280.420035][T20154] udevd[20154]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.438355][ T5909] usb 5-1: SerialNumber: syz [ 1280.461318][T20144] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1280.741021][ T5909] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input45 [ 1280.754811][T20159] syzkaller0: entered promiscuous mode [ 1280.762092][T20159] syzkaller0: entered allmulticast mode [ 1281.141070][ T5840] usb 6-1: USB disconnect, device number 17 [ 1281.727659][ T5179] bcm5974 5-1:1.0: could not read from device [ 1281.739069][ T5909] bcm5974 5-1:1.0: could not read from device [ 1281.787058][ T5179] bcm5974 5-1:1.0: could not read from device [ 1281.834490][ T5909] input: failed to attach handler mousedev to device input45, error: -5 [ 1281.866985][ T5179] bcm5974 5-1:1.0: could not read from device [ 1281.871722][ T5909] usb 5-1: USB disconnect, device number 68 [ 1281.885423][ T5179] bcm5974 5-1:1.0: could not read from device [ 1282.582254][T20169] ALSA: mixer_oss: invalid OSS volume '*' [ 1282.934008][T20188] netlink: 'syz.2.3576': attribute type 7 has an invalid length. [ 1282.947100][T20188] netlink: 'syz.2.3576': attribute type 8 has an invalid length. [ 1284.548457][T20201] fuse: Unknown parameter '' [ 1284.617399][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3580'. [ 1286.903416][T20212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.024096][T20212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.292798][T20212] netlink: zone id is out of range [ 1287.317709][T20212] netlink: zone id is out of range [ 1287.326627][T20212] netlink: zone id is out of range [ 1287.331888][T20212] netlink: zone id is out of range [ 1287.374414][T20212] netlink: zone id is out of range [ 1287.415193][T20212] netlink: zone id is out of range [ 1287.424268][T20212] netlink: zone id is out of range [ 1287.432011][T20212] netlink: zone id is out of range [ 1287.439515][T20212] netlink: zone id is out of range [ 1287.453049][T20212] netlink: zone id is out of range [ 1289.337293][ T5840] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1289.508402][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 1289.519062][ T5840] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1289.529262][ T5840] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1289.544864][ T5840] usb 7-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1289.559190][ T5840] usb 7-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1289.582185][ T5840] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1289.597788][ T5840] usb 7-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1289.608220][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.616987][ T5840] usb 7-1: Product: syz [ 1289.622706][ T5840] usb 7-1: Manufacturer: syz [ 1289.629987][ T5840] usb 7-1: SerialNumber: syz [ 1289.639780][T20235] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1289.915781][T20241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.918910][ T5840] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input46 [ 1289.953442][T20241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.997803][T20244] pim6reg: left allmulticast mode [ 1290.069402][T20246] trusted_key: encrypted_key: insufficient parameters specified [ 1290.158393][T20249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.200618][T20249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.281793][T20249] gtp0: entered promiscuous mode [ 1290.287732][T20249] team0: Device gtp0 is of different type [ 1290.467200][ T5943] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1290.647992][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 1290.667356][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1290.695971][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1290.744039][ T5943] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1290.754515][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.769048][ T5943] usb 5-1: Product: syz [ 1290.773415][ T5943] usb 5-1: Manufacturer: syz [ 1290.779845][ T5179] bcm5974 7-1:1.0: could not read from device [ 1290.789637][ T5943] usb 5-1: SerialNumber: syz [ 1290.815684][ T5943] usb 5-1: config 0 descriptor?? [ 1290.841253][ T5943] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1290.915440][ T5840] bcm5974 7-1:1.0: could not read from device [ 1290.924559][ T5179] bcm5974 7-1:1.0: could not read from device [ 1290.972199][ T5840] input: failed to attach handler mousedev to device input46, error: -5 [ 1291.031603][ T5179] bcm5974 7-1:1.0: could not read from device [ 1291.060572][ T5840] usb 7-1: USB disconnect, device number 15 [ 1291.097213][ T5179] bcm5974 7-1:1.0: could not read from device [ 1291.129109][ T5943] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1291.192134][ T48] usb 5-1: Failed to submit usb control message: -71 [ 1291.192615][T12162] usb 5-1: USB disconnect, device number 69 [ 1291.228780][ T48] usb 5-1: unable to send the bmi data to the device: -71 [ 1291.278058][ T48] usb 5-1: unable to get target info from device [ 1291.292604][ T48] usb 5-1: could not get target info (-71) [ 1291.313332][ T48] usb 5-1: could not probe fw (-71) [ 1291.377815][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.412083][ T5943] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1291.475872][ T5943] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1291.496448][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1291.521804][ T5943] usb 2-1: SerialNumber: syz [ 1291.562489][ T5943] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1291.605379][ T5943] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1291.655650][ T5943] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1292.293046][T20272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1292.305180][T20267] syzkaller0: entered promiscuous mode [ 1292.347083][T20267] syzkaller0: entered allmulticast mode [ 1295.419521][T12162] usb 2-1: USB disconnect, device number 77 [ 1295.757015][T12162] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1295.979277][T12162] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1295.988769][T12162] usb 5-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1296.018706][T12162] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1296.043380][T12162] usb 5-1: config 1 has no interface number 1 [ 1296.061097][T12162] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1296.092955][T12162] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1296.171039][T12162] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1296.201268][T12162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.210085][T12162] usb 5-1: Product: syz [ 1296.214291][T12162] usb 5-1: Manufacturer: syz [ 1296.234804][T12162] usb 5-1: SerialNumber: syz [ 1297.233928][T12162] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1297.242298][T12162] usb 5-1: MIDIStreaming interface descriptor not found [ 1297.281637][T20301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3602'. [ 1297.340252][T12162] usb 5-1: USB disconnect, device number 70 [ 1297.537270][T20312] udevd[20312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.265954][T20327] fuse: Unknown parameter '' [ 1298.367904][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3614'. [ 1298.918148][T20337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.946194][T20337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.787409][T20341] pim6reg: left allmulticast mode [ 1299.850599][T20345] trusted_key: encrypted_key: insufficient parameters specified [ 1299.977186][ T5943] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1300.107666][T12162] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1300.116503][ T5840] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1300.128573][ T5943] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 1300.137607][ T5943] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.151688][ T5943] usb 7-1: config 0 has no interface number 0 [ 1300.158454][ T5943] usb 7-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 1300.170096][ T5943] usb 7-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 1300.183985][ T5943] usb 7-1: config 0 interface 106 has no altsetting 0 [ 1300.192032][ T5943] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1300.201866][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.213445][ T5943] usb 7-1: config 0 descriptor?? [ 1300.225356][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.232311][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.249593][ T5943] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1300.275262][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1300.287618][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1300.299132][T12162] usb 6-1: Using ep0 maxpacket: 32 [ 1300.304720][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1300.315459][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1300.329480][ T5840] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1300.329496][T12162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1300.339231][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.348037][ T5840] usb 2-1: config 0 descriptor?? [ 1300.364060][T12162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1300.379489][T12162] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1300.389648][T12162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.398490][T12162] usb 6-1: Product: syz [ 1300.403000][T12162] usb 6-1: Manufacturer: syz [ 1300.408513][T12162] usb 6-1: SerialNumber: syz [ 1300.418409][T12162] usb 6-1: config 0 descriptor?? [ 1300.450322][T12162] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1300.657189][T20364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.709848][T20364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.795775][ T5943] usb 6-1: USB disconnect, device number 18 [ 1300.804865][T12765] usb 6-1: Failed to submit usb control message: -71 [ 1300.832263][T12765] usb 6-1: unable to send the bmi data to the device: -71 [ 1300.852282][T12765] usb 6-1: unable to get target info from device [ 1300.891287][T20364] team0: Device gtp0 is of different type [ 1300.899607][ T5840] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 1300.921768][T12765] usb 6-1: could not get target info (-71) [ 1300.955038][T12765] usb 6-1: could not probe fw (-71) [ 1301.009194][ T5840] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1301.339438][ T35] usb 7-1: Failed to submit usb control message: -110 [ 1301.358098][ T35] usb 7-1: unable to send the bmi data to the device: -110 [ 1301.454489][ T35] usb 7-1: unable to get target info from device [ 1301.495005][ T35] usb 7-1: could not get target info (-110) [ 1301.579722][ T35] usb 7-1: could not probe fw (-110) [ 1301.698382][T20372] syzkaller0: entered promiscuous mode [ 1301.730058][T20372] syzkaller0: entered allmulticast mode [ 1301.907058][T12162] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1302.110082][T12162] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1302.119656][T12162] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1302.150962][T12162] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1302.203482][T20374] usb 2-1: string descriptor 0 read error: -71 [ 1302.210739][T12162] usb 6-1: config 1 has no interface number 1 [ 1302.246333][T12162] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1302.294414][T12162] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1302.382119][T12162] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1302.391866][T12162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.409449][T12162] usb 6-1: Product: syz [ 1302.439530][T12162] usb 6-1: Manufacturer: syz [ 1302.444217][T12162] usb 6-1: SerialNumber: syz [ 1302.706110][T20384] net_ratelimit: 44 callbacks suppressed [ 1302.706131][T20384] openvswitch: netlink: Flow key attr not present in new flow. [ 1303.008381][ T5918] usb 2-1: USB disconnect, device number 78 [ 1303.096056][ T5943] usb 7-1: USB disconnect, device number 16 [ 1303.160746][T20391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1303.438538][T20395] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1305.195157][T20400] block device autoloading is deprecated and will be removed. [ 1306.184823][T20405] fuse: Unknown parameter '' [ 1306.300641][T20405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1307.525285][T12162] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1307.537393][T12162] usb 6-1: MIDIStreaming interface descriptor not found [ 1308.447675][ T5918] usb 6-1: USB disconnect, device number 19 [ 1308.760784][T20429] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3625'. [ 1309.043954][T20440] syz.6.3636 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1310.625015][T20447] pim6reg1: entered promiscuous mode [ 1310.650564][T20447] pim6reg1: entered allmulticast mode [ 1310.735841][T20449] ALSA: mixer_oss: invalid OSS volume '*' [ 1310.784975][T20447] macsec0: entered promiscuous mode [ 1311.182764][T20459] ALSA: mixer_oss: invalid OSS volume '*' [ 1311.445138][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3631'. [ 1311.483433][T20472] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3631'. [ 1311.938321][T20477] syzkaller0: entered promiscuous mode [ 1311.962154][T20477] syzkaller0: entered allmulticast mode [ 1315.607824][T20512] openvswitch: netlink: Flow key attr not present in new flow. [ 1315.675095][T20513] PKCS7: Unknown OID: [5] (bad) [ 1315.681248][T20513] PKCS7: Only support pkcs7_signedData type [ 1317.416431][T20527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1317.423017][T20527] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1317.463111][T20527] vhci_hcd vhci_hcd.0: Device attached [ 1317.537428][T20533] random: crng reseeded on system resumption [ 1317.727089][ T5943] usb 38-1: SetAddress Request (2) to port 0 [ 1317.733270][ T5943] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1317.752542][T20539] blktrace: Concurrent blktraces are not allowed on sg0 [ 1317.854217][T20528] vhci_hcd: connection reset by peer [ 1317.872927][ T1099] vhci_hcd vhci_hcd.2: stop threads [ 1317.894427][ T1099] vhci_hcd vhci_hcd.2: release socket [ 1317.900667][ T5840] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1317.979868][ T1099] vhci_hcd vhci_hcd.2: disconnect device [ 1318.120206][ T5840] usb 2-1: config 0 has no interfaces? [ 1318.192802][ T5840] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1318.263549][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.285281][ T5840] usb 2-1: Product: syz [ 1318.310292][ T5840] usb 2-1: Manufacturer: syz [ 1318.346476][ T5840] usb 2-1: SerialNumber: syz [ 1318.397875][ T5840] usb 2-1: config 0 descriptor?? [ 1318.709371][T20535] macvlan0: entered promiscuous mode [ 1318.917148][ T5840] usb 2-1: USB disconnect, device number 79 [ 1319.145363][T20547] syzkaller0: entered promiscuous mode [ 1319.153528][T20547] syzkaller0: entered allmulticast mode [ 1319.382029][T20554] vivid-007: disconnect [ 1320.196176][T20551] vivid-007: reconnect [ 1322.858996][ T5943] usb 38-1: device descriptor read/8, error -110 [ 1323.248587][ T5943] usb usb38-port1: attempt power cycle [ 1323.667998][T20583] openvswitch: netlink: nsh attr 247 is out of range max 3 [ 1323.858576][ T5943] usb usb38-port1: unable to enumerate USB device [ 1324.955545][T20594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3660'. [ 1324.999059][T20596] tipc: Cannot configure node identity twice [ 1325.284847][T20593] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 1325.841851][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3663'. [ 1326.257315][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3663'. [ 1326.777075][ T5918] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1326.952451][ T5918] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1326.967621][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.002627][T20624] kvm: user requested TSC rate below hardware speed [ 1327.002750][ T5918] usb 6-1: Product: syz [ 1327.082744][ T5918] usb 6-1: Manufacturer: syz [ 1327.132283][ T5918] usb 6-1: SerialNumber: syz [ 1327.183299][ T5918] usb 6-1: config 0 descriptor?? [ 1327.431307][ T5918] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1328.002974][T20640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.027570][T20640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.187110][ T5943] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1328.986428][T20643] syzkaller0: entered promiscuous mode [ 1329.025684][T20643] syzkaller0: entered allmulticast mode [ 1329.248164][T20654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3672'. [ 1329.302951][ T5918] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1329.351673][ T5918] usb 6-1: USB disconnect, device number 20 [ 1331.357466][ T5943] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1331.527210][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 1331.553314][ T5943] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1331.562364][ T5943] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.603970][ T5943] usb 2-1: config 254 has no interface number 0 [ 1331.624841][ T5943] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1331.655773][ T5943] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1331.673964][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.705409][ T5943] usb 2-1: Product: syz [ 1331.710178][ T5943] usb 2-1: Manufacturer: syz [ 1331.714808][ T5943] usb 2-1: SerialNumber: syz [ 1331.787258][ T5943] usbtest 2-1:254.235: couldn't get endpoints, -22 [ 1331.793916][ T5943] usbtest 2-1:254.235: probe with driver usbtest failed with error -22 [ 1332.022176][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 1332.032870][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1332.514222][ T5943] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1332.697832][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 1332.710601][ T5943] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1332.723671][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1332.753294][ T5943] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1332.769493][ T5943] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1332.798031][ T5943] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1332.823153][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.054018][ T5943] usb 6-1: GET_CAPABILITIES returned 0 [ 1333.061035][ T5943] usbtmc 6-1:16.0: can't read capabilities [ 1334.498008][T20671] macvtap1: entered promiscuous mode [ 1334.503679][T20671] team0: entered promiscuous mode [ 1334.509686][T20671] team_slave_0: entered promiscuous mode [ 1334.524484][T20671] team_slave_1: entered promiscuous mode [ 1334.531145][T20671] batadv1: entered promiscuous mode [ 1334.538777][T20671] bridge0: entered promiscuous mode [ 1334.555314][T20671] vxlan0: entered promiscuous mode [ 1334.570586][T20671] macvtap1: entered allmulticast mode [ 1334.587121][T20671] team0: entered allmulticast mode [ 1334.593149][T20671] team_slave_0: entered allmulticast mode [ 1334.606337][T20671] team_slave_1: entered allmulticast mode [ 1334.630747][T20671] batadv1: entered allmulticast mode [ 1334.640058][T20671] bridge0: entered allmulticast mode [ 1334.645535][T20671] vxlan0: entered allmulticast mode [ 1334.653572][T20671] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1334.669088][T20686] team0: left allmulticast mode [ 1334.683490][T20686] team_slave_0: left allmulticast mode [ 1334.693042][T20686] team_slave_1: left allmulticast mode [ 1334.700788][T20686] batadv1: left allmulticast mode [ 1334.716168][T20686] bridge0: left allmulticast mode [ 1334.730038][T20686] vxlan0: left allmulticast mode [ 1334.745392][T20686] team0: left promiscuous mode [ 1334.756205][T20686] team_slave_0: left promiscuous mode [ 1334.771135][T20686] team_slave_1: left promiscuous mode [ 1334.787755][T20686] batadv1: left promiscuous mode [ 1334.797571][T20686] bridge0: left promiscuous mode [ 1334.805732][T20686] vxlan0: left promiscuous mode [ 1334.857683][ T5918] usb 2-1: USB disconnect, device number 81 [ 1335.366546][ T5943] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1335.548222][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 1335.556217][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1335.580420][ T5943] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1335.611829][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.636216][ T5943] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1335.661562][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.688163][ T5943] usb 2-1: Product: syz [ 1335.700678][ T5943] usb 2-1: Manufacturer: syz [ 1335.710473][ T5943] usb 2-1: SerialNumber: syz [ 1335.734549][ T5943] usb 2-1: config 0 descriptor?? [ 1336.031750][ T5943] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 1336.047391][ T5943] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1336.083728][ T5943] usb 2-1: USB disconnect, device number 82 [ 1338.599351][ T5943] usb 6-1: USB disconnect, device number 21 [ 1340.805467][T20746] tipc: Started in network mode [ 1340.811440][T20746] tipc: Node identity , cluster identity 4711 [ 1340.851503][T20746] tipc: Failed to obtain node identity [ 1340.863702][T20746] tipc: Enabling of bearer rejected, failed to enable media [ 1341.170517][T20754] netlink: 'syz.4.3690': attribute type 10 has an invalid length. [ 1341.229865][T20754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1342.169568][ T5918] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1342.357503][ T5918] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1342.405495][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.440498][ T5918] usb 7-1: Product: syz [ 1342.464523][ T5918] usb 7-1: Manufacturer: syz [ 1342.493858][ T5918] usb 7-1: SerialNumber: syz [ 1342.542006][ T5918] usb 7-1: config 0 descriptor?? [ 1342.829428][ T5918] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1343.817422][T12162] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1343.995455][T12162] usb 2-1: Using ep0 maxpacket: 16 [ 1344.021941][T12162] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.068408][T12162] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.114516][T12162] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1344.134219][T12162] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1344.179631][T12162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.222493][T12162] usb 2-1: config 0 descriptor?? [ 1344.269015][ T5918] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1344.357851][ T5918] usb 7-1: USB disconnect, device number 17 [ 1345.084871][T12162] hid (null): unknown global tag 0xe [ 1345.097877][T12162] hid (null): unknown global tag 0xe [ 1345.113092][T12162] hid (null): unknown global tag 0x63 [ 1345.120669][T12162] hid (null): unknown global tag 0xd [ 1345.381446][ T5840] usb 2-1: USB disconnect, device number 83 [ 1345.407099][T12162] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1345.589693][T12162] usb 7-1: Using ep0 maxpacket: 32 [ 1345.628430][T12162] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1345.658035][T12162] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.707205][T12162] usb 7-1: config 0 has no interface number 0 [ 1345.723291][T12162] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1345.775349][T12162] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1345.827200][T12162] usb 7-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1345.877747][T12162] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1345.911698][T12162] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1345.937082][T12162] usb 7-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1345.991794][T12162] usb 7-1: config 0 interface 239 has no altsetting 0 [ 1346.012688][T12162] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1346.032243][T12162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.061432][T12162] usb 7-1: Product: syz [ 1346.065666][T12162] usb 7-1: Manufacturer: syz [ 1346.102305][T12162] usb 7-1: SerialNumber: syz [ 1346.121485][T12162] usb 7-1: config 0 descriptor?? [ 1346.147790][T20790] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1346.159498][T20790] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1346.448108][ T5840] usb 7-1: USB disconnect, device number 18 [ 1346.977109][T12162] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1347.153583][T12162] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.177058][T12162] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1347.213267][T12162] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1347.233493][T12162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1347.252831][T12162] usb 6-1: SerialNumber: syz [ 1347.281736][T12162] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1347.309070][T12162] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1347.333579][T12162] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1347.421007][T20817] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3704'. [ 1349.131297][T20827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.174361][T20827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.229682][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1349.891671][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1350.029306][T12162] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1350.094139][T20836] ALSA: mixer_oss: invalid OSS volume '*' [ 1350.217200][T12162] usb 7-1: Using ep0 maxpacket: 8 [ 1350.252447][T12162] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1350.275850][ T5918] usb 6-1: USB disconnect, device number 22 [ 1350.313935][T12162] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1350.343228][T12162] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1350.374526][T12162] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1350.402996][T12162] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1350.422944][T12162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.671208][T12162] usb 7-1: GET_CAPABILITIES returned 0 [ 1350.677597][T12162] usbtmc 7-1:16.0: can't read capabilities [ 1352.583500][ T5840] usb 7-1: USB disconnect, device number 19 [ 1352.750635][T20845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1352.792876][T20845] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1352.898028][T20845] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1352.926082][T20845] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1352.997103][ T5943] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1353.188072][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 1353.201818][ T5943] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 1353.219695][ T5943] usb 5-1: config 0 has no interface number 0 [ 1353.239408][ T5943] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1353.266165][ T5943] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1353.293538][ T5943] usb 5-1: config 0 interface 49 has no altsetting 0 [ 1353.325954][ T5943] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1353.369075][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.410197][ T5943] usb 5-1: Product: syz [ 1353.431372][ T5943] usb 5-1: Manufacturer: syz [ 1353.451261][T20855] fuse: Bad value for 'fd' [ 1353.456407][ T5943] usb 5-1: SerialNumber: syz [ 1353.490242][ T5943] usb 5-1: config 0 descriptor?? [ 1353.609148][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'. [ 1353.815560][ T5943] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1354.060597][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3715'. [ 1354.224873][ T5943] gspca_sonixj: reg_r err -32 [ 1354.248488][ T5943] sonixj 5-1:0.49: probe with driver sonixj failed with error -32 [ 1354.341205][ T5943] usb 5-1: USB disconnect, device number 71 [ 1355.992929][T20896] fuse: Unknown parameter '' [ 1356.121791][ T5943] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1356.336293][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'. [ 1356.388877][ T5840] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1356.399891][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.424757][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1356.452468][ T5943] usb 5-1: config 1 has no interface number 0 [ 1356.468734][ T5943] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1356.497429][ T5943] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1356.522275][ T5943] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1356.582336][ T5943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1356.605454][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.616217][ T5840] usb 6-1: config 0 has no interfaces? [ 1356.632965][ T5840] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1356.650308][ T5943] usb 5-1: Product: syz [ 1356.664294][ T5943] usb 5-1: Manufacturer: syz [ 1356.670943][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.680065][ T5943] usb 5-1: SerialNumber: syz [ 1356.741564][ T5840] usb 6-1: config 0 descriptor?? [ 1356.750185][T20887] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1357.201611][ T5943] cdc_ncm 5-1:1.1: bind() failure [ 1357.228238][ T5943] usb 5-1: USB disconnect, device number 72 [ 1358.249712][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3724'. [ 1358.303830][T20906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.062576][T12162] usb 6-1: USB disconnect, device number 23 [ 1359.335228][T20925] PKCS7: Unknown OID: [5] (bad) [ 1359.360973][T20925] PKCS7: Only support pkcs7_signedData type [ 1359.391853][T20926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1361.392931][T20947] hub 1-0:1.0: USB hub found [ 1361.399827][T20947] hub 1-0:1.0: 1 port detected [ 1361.526900][T20953] hub 1-0:1.0: USB hub found [ 1361.533181][T20955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.564959][T20955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.638705][T20953] hub 1-0:1.0: 1 port detected [ 1361.661400][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.668709][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.207247][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3735'. [ 1365.096153][T20988] openvswitch: netlink: nsh attr 247 is out of range max 3 [ 1365.630230][T20993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.675218][T20993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.739617][T20993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1366.523233][T21005] PKCS7: Unknown OID: [5] (bad) [ 1366.704255][T21005] PKCS7: Only support pkcs7_signedData type [ 1367.423217][T21011] ALSA: mixer_oss: invalid OSS volume '' [ 1368.998489][ T5943] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1369.174161][ T5943] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1369.188219][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.205212][ T5943] usb 5-1: Product: syz [ 1369.240687][ T5943] usb 5-1: Manufacturer: syz [ 1369.254538][ T5943] usb 5-1: SerialNumber: syz [ 1370.095956][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3749'. [ 1370.937397][ T5943] (unnamed net_device) (uninitialized): Assigned a random MAC address: d6:08:0e:7d:f5:b5 [ 1370.965435][T21020] tipc: Started in network mode [ 1370.970875][T21020] tipc: Node identity , cluster identity 4711 [ 1370.977840][T21020] tipc: Failed to obtain node identity [ 1370.987318][T21020] tipc: Enabling of bearer rejected, failed to enable media [ 1371.007409][T21024] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1371.107278][ T5943] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 1371.125406][ T5943] usb 5-1: USB disconnect, device number 73 [ 1371.248867][T21045] fuse: Unknown parameter '' [ 1371.309185][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3751'. [ 1371.596462][T12162] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1372.141900][T21062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3753'. [ 1372.387028][T12162] usb 2-1: Using ep0 maxpacket: 8 [ 1372.671573][T12162] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1372.751048][T12162] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1372.817018][T12162] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1372.899854][T12162] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.995493][T12162] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1373.030898][T12162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.496976][T12162] usb 2-1: GET_CAPABILITIES returned 0 [ 1373.522884][T12162] usbtmc 2-1:16.0: can't read capabilities [ 1373.963147][T21088] openvswitch: netlink: nsh attr 247 is out of range max 3 [ 1375.033811][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1377.277053][T12162] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1377.432543][T12162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.447213][T12162] usb 5-1: config 0 has no interfaces? [ 1377.458548][T12162] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1377.468326][T12162] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1377.488556][T12162] usb 5-1: Product: syz [ 1377.492836][T12162] usb 5-1: Manufacturer: syz [ 1377.506988][T12162] usb 5-1: SerialNumber: syz [ 1377.519092][T12162] usb 5-1: config 0 descriptor?? [ 1378.801132][T12162] usb 2-1: USB disconnect, device number 84 [ 1380.380470][T21151] netlink: 'syz.6.3766': attribute type 10 has an invalid length. [ 1380.395882][T21151] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3766'. [ 1380.541921][T12162] usb 5-1: USB disconnect, device number 74 [ 1381.450840][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.461204][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.227350][T21179] random: crng reseeded on system resumption [ 1382.294391][T21177] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1382.301070][T21177] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1382.363941][T21177] vhci_hcd vhci_hcd.0: Device attached [ 1382.634908][ T5943] usb 46-1: SetAddress Request (2) to port 0 [ 1382.652535][ T5943] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1382.712528][T21178] vhci_hcd: connection reset by peer [ 1382.718923][ T7646] vhci_hcd vhci_hcd.6: stop threads [ 1382.724247][ T7646] vhci_hcd vhci_hcd.6: release socket [ 1382.730186][ T7646] vhci_hcd vhci_hcd.6: disconnect device [ 1382.761231][T21181] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 1384.187363][T12162] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1384.339726][T12162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1384.351509][T12162] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1384.375675][T12162] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 1384.385954][T12162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.394617][T12162] usb 6-1: Product: syz [ 1384.399649][T12162] usb 6-1: Manufacturer: syz [ 1384.404300][T12162] usb 6-1: SerialNumber: syz [ 1384.417686][T12162] usb 6-1: config 0 descriptor?? [ 1384.430457][T12162] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1384.440481][T12162] usb 6-1: Detected SIO [ 1384.444704][T12162] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 1384.455712][T12162] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1384.683002][T21205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.714827][T21205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.764271][ T5840] usb 6-1: USB disconnect, device number 24 [ 1384.787895][ T5840] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1384.816106][ T5840] ftdi_sio 6-1:0.0: device disconnected [ 1385.106970][T12162] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1385.266881][T12162] usb 5-1: Using ep0 maxpacket: 8 [ 1385.293063][T12162] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1385.350040][T12162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1385.401378][T12162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1385.453526][T12162] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1385.532921][T12162] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1385.598154][T12162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.908591][T12162] usb 5-1: GET_CAPABILITIES returned 0 [ 1385.937179][T12162] usbtmc 5-1:16.0: can't read capabilities [ 1387.738020][ T5943] usb 46-1: device descriptor read/8, error -110 [ 1387.932516][ T5840] usb 5-1: USB disconnect, device number 75 [ 1388.129568][ T5943] usb usb46-port1: attempt power cycle [ 1388.687889][ T5943] usb usb46-port1: unable to enumerate USB device [ 1390.212203][T21267] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3790'. [ 1390.212234][T21267] netlink: 'syz.6.3790': attribute type 7 has an invalid length. [ 1390.212257][T21267] netlink: 'syz.6.3790': attribute type 8 has an invalid length. [ 1390.212269][T21267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3790'. [ 1390.229995][T21267] team0: entered promiscuous mode [ 1390.232336][T21267] team_slave_0: entered promiscuous mode [ 1390.232516][T21267] team_slave_1: entered promiscuous mode [ 1390.233747][T21267] bond0: entered promiscuous mode [ 1390.233770][T21267] bond_slave_0: entered promiscuous mode [ 1390.233905][T21267] bond_slave_1: entered promiscuous mode [ 1390.238558][T21267] gretap0: entered promiscuous mode [ 1390.239532][T21267] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1390.239567][T21267] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 1390.239580][T21267] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 1390.242426][T21267] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1391.837046][T12162] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1392.020206][T12162] usb 2-1: config 0 has no interfaces? [ 1392.027038][T12162] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1392.065096][T12162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.150467][T12162] usb 2-1: config 0 descriptor?? [ 1393.090258][T21296] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1393.437150][T12162] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1393.637351][T12162] usb 7-1: Using ep0 maxpacket: 8 [ 1393.660568][T12162] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1393.684721][T12162] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1393.704162][T12162] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1393.719264][T12162] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.742273][T12162] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1393.753433][T12162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.005717][T12162] usb 7-1: GET_CAPABILITIES returned 0 [ 1394.030557][T12162] usbtmc 7-1:16.0: can't read capabilities [ 1394.921583][ T5918] usb 2-1: USB disconnect, device number 85 [ 1395.047016][T12162] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1395.223384][T12162] usb 6-1: Using ep0 maxpacket: 8 [ 1395.252608][T12162] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1395.293181][T12162] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1395.332295][T12162] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1395.375475][T12162] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1395.423728][T12162] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1395.476313][T12162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.605932][T21318] libceph: resolve '. [ 1395.605932][T21318] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1395.605932][T21318] ' (ret=-3): failed [ 1396.362475][T12162] usb 6-1: GET_CAPABILITIES returned 0 [ 1396.372603][T12162] usbtmc 6-1:16.0: can't read capabilities [ 1396.466221][ T5943] usb 7-1: USB disconnect, device number 20 [ 1397.817078][ T5840] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1397.980854][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 1397.988972][ T5840] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1397.998284][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.051756][ T5840] usb 7-1: config 0 has no interface number 0 [ 1398.075716][ T5840] usb 7-1: config 0 interface 8 altsetting 248 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1398.129443][ T5840] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1398.209532][ T5840] usb 7-1: config 0 interface 8 has no altsetting 0 [ 1398.229246][ T5840] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1398.241876][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.254844][ T5840] usb 7-1: Product: syz [ 1398.268325][ T5840] usb 7-1: Manufacturer: syz [ 1398.288359][ T5840] usb 7-1: SerialNumber: syz [ 1398.333337][ T5840] usb 7-1: config 0 descriptor?? [ 1399.891362][T12162] usb 6-1: USB disconnect, device number 25 [ 1400.100815][T21356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1401.699452][ T5840] ath6kl: Failed to submit usb control message: -71 [ 1401.707751][ T5840] ath6kl: unable to send the bmi data to the device: -71 [ 1401.717465][ T5840] ath6kl: Unable to send get target info: -71 [ 1401.724434][ T5840] ath6kl: Failed to init ath6kl core: -71 [ 1401.730701][ T5840] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1401.747893][ T5840] usb 7-1: USB disconnect, device number 21 [ 1401.840237][T21351] debugfs: '1^!l1*$pOcɔr$Gt' already exists in 'ieee80211' [ 1402.221718][T21375] PKCS7: Unknown OID: [5] (bad) [ 1402.227570][T21375] PKCS7: Only support pkcs7_signedData type [ 1402.343221][T12162] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1402.507060][ T5918] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1402.527094][T12162] usb 5-1: Using ep0 maxpacket: 32 [ 1402.534406][T12162] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1402.544441][T12162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.594512][T12162] usb 5-1: config 0 has no interface number 0 [ 1402.673175][T12162] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1402.711573][ T5918] usb 7-1: config 0 has no interfaces? [ 1402.728961][ T5918] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1402.739345][T12162] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1402.790833][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.825307][T12162] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1402.851013][ T5918] usb 7-1: config 0 descriptor?? [ 1402.936193][T12162] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1402.970779][T12162] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1403.002064][T12162] usb 5-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1403.133908][T12162] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1403.151798][T12162] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1403.164593][T12162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.195106][T12162] usb 5-1: Product: syz [ 1403.205712][T12162] usb 5-1: Manufacturer: syz [ 1403.231405][T12162] usb 5-1: SerialNumber: syz [ 1403.271961][T12162] usb 5-1: config 0 descriptor?? [ 1403.279208][T21365] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1403.336695][T21365] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1403.567259][ T5945] usb 7-1: USB disconnect, device number 22 [ 1403.762651][T12162] usb 5-1: USB disconnect, device number 76 [ 1404.957770][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3817'. [ 1405.557876][T21407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.292114][T21423] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3823'. [ 1409.547074][T12162] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1409.795675][T12162] usb 5-1: Using ep0 maxpacket: 8 [ 1409.823573][T12162] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1409.845483][T12162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1409.887953][T21464] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1409.906236][T12162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1409.945908][T12162] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1410.034152][T12162] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1410.073499][T12162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.458833][T12162] usb 5-1: GET_CAPABILITIES returned 0 [ 1410.464370][T12162] usbtmc 5-1:16.0: can't read capabilities [ 1412.785782][T12162] usb 5-1: USB disconnect, device number 77 [ 1413.913529][T21493] Oops: general protection fault, probably for non-canonical address 0xdffffc000000013c: 0000 [#1] SMP KASAN PTI [ 1413.925650][T21493] KASAN: null-ptr-deref in range [0x00000000000009e0-0x00000000000009e7] [ 1413.934112][T21493] CPU: 1 UID: 0 PID: 21493 Comm: syz.4.3837 Tainted: G L syzkaller #0 PREEMPT(full) [ 1413.945064][T21493] Tainted: [L]=SOFTLOCKUP [ 1413.949407][T21493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1413.959494][T21493] RIP: 0010:task_work_cancel+0x8a/0x220 [ 1413.965109][T21493] Code: b8 f1 f1 f1 f1 f8 f3 f3 f3 4b 89 44 25 00 e8 2d bc 35 00 43 c6 44 25 04 00 49 89 de 48 81 c3 e0 09 00 00 49 89 df 49 c1 ef 03 <43> 80 3c 27 00 74 08 48 89 df e8 37 fe 9f 00 48 83 3b 00 75 51 e8 [ 1413.984740][T21493] RSP: 0000:ffffc9000cbcfb20 EFLAGS: 00010206 [ 1413.990916][T21493] RAX: ffffffff818fe4b3 RBX: 00000000000009e0 RCX: 0000000000080000 [ 1413.998905][T21493] RDX: ffffc90011626000 RSI: 000000000000dbd9 RDI: 000000000000dbda [ 1414.006893][T21493] RBP: ffffc9000cbcfbd0 R08: ffffc9000cbcfc97 R09: 1ffff92001979f92 [ 1414.014894][T21493] R10: dffffc0000000000 R11: fffff52001979f93 R12: dffffc0000000000 [ 1414.022889][T21493] R13: 1ffff92001979f68 R14: 0000000000000000 R15: 000000000000013c [ 1414.030876][T21493] FS: 0000000000000000(0000) GS:ffff888125560000(0063) knlGS:00000000f545bb40 [ 1414.039832][T21493] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1414.046430][T21493] CR2: 0000000080041018 CR3: 0000000035da0000 CR4: 00000000003526f0 [ 1414.054423][T21493] Call Trace: [ 1414.057802][T21493] [ 1414.060768][T21493] ? __pfx___wait_for_common+0x10/0x10 [ 1414.066401][T21493] ? __pfx_task_work_cancel+0x10/0x10 [ 1414.071800][T21493] landlock_restrict_sibling_threads+0xdc4/0x11f0 [ 1414.078308][T21493] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 1414.084921][T21493] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 1414.091801][T21493] ? landlock_put_ruleset+0x10/0xb0 [ 1414.097076][T21493] __se_sys_landlock_restrict_self+0x540/0x810 [ 1414.103253][T21493] do_int80_emulation+0x173/0x4d0 [ 1414.108358][T21493] ? asm_int80_emulation+0x1a/0x20 [ 1414.113519][T21493] ? clear_bhb_loop+0x40/0x90 [ 1414.118213][T21493] ? clear_bhb_loop+0x40/0x90 [ 1414.122904][T21493] asm_int80_emulation+0x1a/0x20 [ 1414.127856][T21493] RIP: 0023:0xf70aef6c [ 1414.132064][T21493] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1414.151736][T21493] RSP: 002b:00000000f545b50c EFLAGS: 00000206 ORIG_RAX: 00000000000001be [ 1414.160188][T21493] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000000c [ 1414.168196][T21493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1414.176199][T21493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1414.184186][T21493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1414.192237][T21493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1414.200234][T21493] [ 1414.203284][T21493] Modules linked in: [ 1414.208237][T21493] ---[ end trace 0000000000000000 ]--- [ 1414.518197][T21493] RIP: 0010:task_work_cancel+0x8a/0x220 [ 1414.529950][T21493] Code: b8 f1 f1 f1 f1 f8 f3 f3 f3 4b 89 44 25 00 e8 2d bc 35 00 43 c6 44 25 04 00 49 89 de 48 81 c3 e0 09 00 00 49 89 df 49 c1 ef 03 <43> 80 3c 27 00 74 08 48 89 df e8 37 fe 9f 00 48 83 3b 00 75 51 e8 [ 1414.614322][T21493] RSP: 0000:ffffc9000cbcfb20 EFLAGS: 00010206 [ 1414.622014][T21493] RAX: ffffffff818fe4b3 RBX: 00000000000009e0 RCX: 0000000000080000 [ 1414.630596][T21493] RDX: ffffc90011626000 RSI: 000000000000dbd9 RDI: 000000000000dbda [ 1414.646894][T21493] RBP: ffffc9000cbcfbd0 R08: ffffc9000cbcfc97 R09: 1ffff92001979f92 [ 1414.665196][T21493] R10: dffffc0000000000 R11: fffff52001979f93 R12: dffffc0000000000 [ 1414.699421][T21493] R13: 1ffff92001979f68 R14: 0000000000000000 R15: 000000000000013c [ 1414.721549][T21493] FS: 0000000000000000(0000) GS:ffff888125560000(0063) knlGS:00000000f545bb40 [ 1414.732181][T21493] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1414.739465][T21493] CR2: 0000000034612ff8 CR3: 0000000035da0000 CR4: 00000000003526f0 [ 1414.755489][T21493] Kernel panic - not syncing: Fatal exception [ 1414.762268][T21493] Kernel Offset: disabled [ 1414.766644][T21493] Rebooting in 86400 seconds..