last executing test programs: 20.948200529s ago: executing program 0 (id=937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) gettid() bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000480)=@bloom_filter={0x1e, 0x100, 0x4, 0xfffffff9, 0x4600, 0xffffffffffffffff, 0x3dc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x3}, 0x50) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x3}) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x5393, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x48001059, r7, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="04170f06596146a2136b"], 0xa, 0x3) fchown(r7, 0x0, 0x0) 16.950428524s ago: executing program 0 (id=942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0xa8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.341230154s ago: executing program 1 (id=943): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x12) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n']) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) 15.436765395s ago: executing program 2 (id=945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) socket(0x2b, 0x80801, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x14, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 14.861263315s ago: executing program 3 (id=946): r0 = socket$kcm(0x10, 0x2, 0x0) pivot_root(&(0x7f0000001080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7499, 0x400, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x6}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xf8, 0x7, 0x1, 0x558, 0x10000000}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={r7, 0x9}, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r8 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x279}, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) r11 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r11, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}], 0x1, 0x48041) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r12, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x5, 0x0, r8, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) 14.08222578s ago: executing program 4 (id=947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) unshare(0x26020480) unshare(0x22020400) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x6, 0xc, 0x3, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x5, 0x7, 0x10001, 0xffff, 0x0, 0x4, 0x0, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x3, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x935, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1000, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffefff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x250, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7abe, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x3, 0xc92, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x4, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x6db, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x4, 0x3, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0xa476, 0x5, 0x80000001, 0xffff, 0xd, 0xfffffffc, 0x6, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 13.229627499s ago: executing program 2 (id=948): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000180001000000200000000000021400000000000a0000000005001b0002000000"], 0x24}}, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x42}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x5, 0x800, 0x4008002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x81&\xf5\t\x00\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xa9J3\x18\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V\x01\x00\x00\x00\x00\x00\x00\x00\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOe+\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\x99I\x9a9+r\x91\x06\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx', 0x3) write$binfmt_elf64(r6, &(0x7f00000002c0)=ANY=[], 0x78) fcntl$addseals(r6, 0x409, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000001900)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 13.014425911s ago: executing program 1 (id=949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES16, @ANYBLOB="830004002a60000020001280080001"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b02, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x5b07, 0x0) syz_usb_disconnect(r3) r5 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) unshare(0x2040400) r8 = open(&(0x7f0000000a40)='.\x00', 0x414480, 0x0) utimensat(r8, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r8}, 0x18) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r9, 0x0, r10, 0x0, 0xa, 0x0) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12.455273532s ago: executing program 3 (id=950): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40c4) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) socket(0x2b, 0x80801, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r5}}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x12, r1, 0xf7a96000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 12.294016412s ago: executing program 0 (id=951): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000080)=ANY=[], 0xfdef) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1ec, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff0001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x158, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "89c90bed569a1222634139ba9057adc786d1ea43f2022cf5628b5307da8ce5fa718ee55031ee62b6c5954d464977d4ac17d1ba04c74ccc317850f4cf89ce12b757ff2b32fb1f39e4dfda61e32d82fd08f1be0eb2fba036f92980cca0b3541105525bd9337849e0d3acbc569372a87e79ce569edfb0eac1fe94bcc2a9ec0b0c4413ada0a5624f07a6b305d216c0d52a0c9150b7482e4f9485a39b18f554f8d323cb1a8e99c6c50f7f5729b3f77275143d413d5a073598cf280beb3897a2dadd1be996aaaf5e4ce4f4ae8b77c4d29586f95d7a305812ef5a197d5a3044bcf75e0b2dad9191dfb6d2d1eecc247388d3f31146"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x398}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfefffffffffffffc, 0x4, 0x0, {0x6, 0x0, 0x4cb5, 0x0, 0x8000000000000, 0x0, 0x21, 0x9, 0x1, 0x3751d9cca550117d, 0x0, r8, r9, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x1, 0x4, 0x9}}) 11.606079666s ago: executing program 4 (id=952): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r0 = socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) listen(0xffffffffffffffff, 0x200000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x401d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x200009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x10000003, 0x5, 0x2, 0x1f461e2c, 0x4, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x400006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x80000004, 0x3, 0x0, 0x7, 0x5, 0x4800, 0x924, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x10000, 0x2, 0x7f, 0x1, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x2, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0xffffffff, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x3, 0xffffffff, 0x80000000, 0x0, 0x8, 0x40c8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0xe09, 0xb1c, 0x1, 0x1fd, 0xffbf2441]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1]) memfd_secret(0x0) mmap(&(0x7f0000777000/0x2000)=nil, 0x2000, 0x100000d, 0x2010, r3, 0x5c6d8000) ftruncate(r3, 0x9) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000280000000000cf0000000000ff030000000200129f0c596df82dec2d04d1320000050000000d0000000b00000008000000030000003f685b38182bc6a2aa06bd7d93ce8772ff0000"]) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT], 0x40}}, 0x8008) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) 10.702736314s ago: executing program 3 (id=953): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x108c, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r4}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x1034, 0x1, {{'sha512-neon\x00'}, 0x7f60, "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"}}]}, 0x108c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f0000000100)={0xa, 0xa9d, 0x3, @mcast1}, 0x1c) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x840) 9.199025559s ago: executing program 0 (id=954): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r7, 0x4080}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="ce802fde"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c011}, 0xc000) 8.969878677s ago: executing program 2 (id=955): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f0000000240)={0xa, 0x0, [{0x4, 0x2, 0x2, 0x5, 0x400, 0x2, 0x3aa}, {0x2, 0x0, 0x0, 0x82e8, 0x200, 0xffffffff, 0x6}, {0x7, 0x9, 0x4, 0x2, 0x1, 0x3, 0x1}, {0x80000007, 0x6, 0x0, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x5, 0x807, 0x2, 0x2}, {0xb, 0x5877c6ba, 0x5, 0x0, 0xf1, 0x0, 0x4}, {0x7, 0x7ff, 0x4, 0x18000000, 0x82e, 0x7, 0xd}, {0x1, 0xfffffff8, 0x1, 0xa, 0x5, 0xd0b, 0xd5}]}) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000500)="e3", 0x1}], 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x50}}, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000540)) 8.871350258s ago: executing program 1 (id=956): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r4, &(0x7f00000192c0)=[{&(0x7f0000019380)}, {&(0x7f00000191c0)}, {&(0x7f000001a500)="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", 0x10c}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) 8.348527397s ago: executing program 4 (id=957): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f3], [0x2, 0x5, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20001]], '\x00', [{}, {}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000}, {}, {0x0, 0x4}, {0x5, 0x2}, {0xd, 0x400000}, {0xe}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000001080)={'filter\x00', 0x0, 0x4, 0xff2, [0x8, 0x800, 0x100000001, 0x5, 0xffffffffffffffff], 0x8, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/4082}, &(0x7f0000001100)=0x78) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x41) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) futex(&(0x7f0000001140), 0x1, 0x1, &(0x7f00000011c0), &(0x7f0000001200)=0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 5.571848212s ago: executing program 2 (id=958): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x80) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r4 = syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002700)="b540bc234aa31963438a3256773c9a4714887e00008ff85b747644a0a56ed2dcfd98", 0x22}, {&(0x7f0000000240)="c9be3da19ffebdcf92b102f6030649392ab54e50472a4f2ff42fa7b7f830ea646d4244a40fa9d2603ab727327169a54d634c4fac58bf0edb1ce948e6720660fc3e58d223e0adb430f2b4a2bfd9e691709ef3e57a6cf3f84573abd126cf09010331466c6bcdc724dd340369f0ab6ff2617b0a889d1a1fd0f936cf37d80658005262d87ba2de3d55fa22e47a89e4d89fefb8dd9a7a163a95cd7c3195bbf1cd84e293cd07dc507f2998d062", 0xaa}, {&(0x7f0000000980)="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", 0x52b}], 0x3}, 0x4048805) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000002340)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0x2, 0x42, 0x1, 0x5, {0x0, 0x101, 0x6eb2, 0xfff8, 0xaf87, 0xfffc, 0x800, 0x55, 0xe, 0x7, 0x1ff, 0x2, 0xc, 0x16, "4313e224e0bef3296423aa8129fd185504d0a7ae1288a773ab83e501c75640eb"}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2c, r6, 0x5, 0x70bd28, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}}, 0x40006) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r8, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 5.505241671s ago: executing program 1 (id=959): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x24040801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 5.428657735s ago: executing program 4 (id=960): syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000000c0)=@string={0x2}}, {0x12, &(0x7f0000000180)=@string={0x12, 0x3, "975fe9318817068be22f51f39edd01dc"}}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb", 0x7}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xc8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.286226697s ago: executing program 0 (id=961): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x80000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000300)={'ip6gre0\x00', 0x314}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffcc3, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6={0xa, 0x4e23, 0xb3, @mcast1, 0x80000000}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000240)={r9}, &(0x7f00000002c0)=0x8) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d01014000010203010902780003010000000904000000010300000a2401000000020102082408000000007009040100000102000009040101010102000007246b0cccf1ad912b2601060400002ae30905010900000000000725010100000009"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$FS_IOC_GETVERSION(r11, 0xc0145b0e, &(0x7f0000000000)) 3.851108078s ago: executing program 4 (id=963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') statx(r2, 0x0, 0x7000, 0x200, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000180)={0x20007, r3}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r6, 0x0) r7 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x459, 0x10, r8, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r11 = gettid() fcntl$lock(r4, 0x24, &(0x7f0000000140)={0x1, 0x1, 0xa58, 0xfffffffffffff001, r11}) close_range(r10, 0xffffffffffffffff, 0x0) 3.453074726s ago: executing program 1 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) accept$unix(r4, 0x0, &(0x7f0000000300)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180), 0x0, 0x5}]) sendfile(r5, r6, 0x0, 0x20000023896) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0100001a00130700000000fcdbdf25200100"/28, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x401, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8000, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.378600412s ago: executing program 2 (id=965): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) 2.076612938s ago: executing program 0 (id=966): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r3, &(0x7f00000192c0)=[{&(0x7f0000019380)}, {&(0x7f00000191c0)}, {&(0x7f000001a500)="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", 0x10c}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) 1.433470835s ago: executing program 4 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r2 = creat(0x0, 0x80) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, 0x0, 0x4000084) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x65, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wg0\x00', @random="df47feb2d30a"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, &(0x7f0000000100)=0x8) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 1.180285448s ago: executing program 2 (id=968): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000fbdbdf25140000001c0007800c0004000800000000edffff0b000300"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18800018}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0xf4, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xcc}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000001480)=[{0x9, 0x8001, 0x0, 0x0}, {0x8, 0x11, 0x0, 0x0}], 0x2}) r5 = syz_open_dev$sg(0x0, 0xffff0000, 0x40) lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x81000000000000, 0x400040) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000040000"]) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) socket$caif_stream(0x25, 0x1, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.153733751s ago: executing program 3 (id=969): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x3, 0x6, 0x0, 0xfffffffc, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x1, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000200)=0x6) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)=0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x25c25000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 442.523796ms ago: executing program 1 (id=970): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r3, &(0x7f00000192c0)=[{&(0x7f0000019380)}, {&(0x7f00000191c0)}, {&(0x7f000001a500)="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", 0x10c}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) 0s ago: executing program 3 (id=971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d00000000e30000000240"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x20) kernel console output (not intermixed with test programs): 553.849:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 395.023934][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 395.145347][ T30] audit: type=1326 audit(1765548553.909:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 395.269891][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 395.283175][ T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 395.297679][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.358070][ T30] audit: type=1326 audit(1765548553.909:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 395.385711][ T24] usb 1-1: config 0 has no interface number 0 [ 395.413667][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 395.424249][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.453356][ T24] usb 1-1: Product: syz [ 395.465465][ T24] usb 1-1: Manufacturer: syz [ 395.474724][ T30] audit: type=1326 audit(1765548553.909:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 395.502004][ T24] usb 1-1: SerialNumber: syz [ 395.524755][ T24] usb 1-1: config 0 descriptor?? [ 395.552811][ T24] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 395.611465][ T24] uvcvideo 1-1:0.105: No valid video chain found. [ 395.652023][ T30] audit: type=1326 audit(1765548553.909:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 395.714928][ T30] audit: type=1326 audit(1765548553.929:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 395.878864][ T30] audit: type=1326 audit(1765548553.929:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 396.035442][ T30] audit: type=1326 audit(1765548553.929:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 396.249770][ T30] audit: type=1326 audit(1765548553.929:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 396.417923][ T30] audit: type=1326 audit(1765548553.929:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 396.455097][ T8535] QAT: failed to copy from user. [ 397.460980][ T5829] usb 1-1: USB disconnect, device number 9 [ 399.702931][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 399.702953][ T30] audit: type=1326 audit(1765548558.939:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 399.829771][ T30] audit: type=1326 audit(1765548558.939:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 399.930969][ T30] audit: type=1326 audit(1765548558.939:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f562c38df90 code=0x7ffc0000 [ 400.135243][ T30] audit: type=1326 audit(1765548558.939:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 400.319772][ T30] audit: type=1326 audit(1765548558.939:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 400.484074][ T30] audit: type=1326 audit(1765548558.939:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 400.544293][ T30] audit: type=1326 audit(1765548558.939:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 400.673569][ T30] audit: type=1326 audit(1765548558.949:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 401.044769][ T30] audit: type=1326 audit(1765548558.949:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 401.157243][ T30] audit: type=1326 audit(1765548558.949:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8561 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 404.633192][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 405.369905][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 405.684665][ T24] usb 1-1: config 0 has no interfaces? [ 405.691455][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 406.002801][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.162964][ T24] usb 1-1: config 0 descriptor?? [ 406.832362][ T24] usb 1-1: USB disconnect, device number 10 [ 407.577962][ T5918] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 407.749993][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 407.757994][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.767139][ T5918] usb 5-1: config 0 has no interface number 0 [ 407.789993][ T5918] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 407.804395][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.822973][ T5918] usb 5-1: Product: syz [ 407.842237][ T5918] usb 5-1: Manufacturer: syz [ 407.850802][ T5918] usb 5-1: SerialNumber: syz [ 407.867332][ T5918] usb 5-1: config 0 descriptor?? [ 407.900652][ T5918] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 407.914048][ T5918] usb 5-1: selecting invalid altsetting 1 [ 407.933436][ T5918] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 407.967037][ T5918] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.998386][ T5918] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 408.021949][ T5918] usb 5-1: media controller created [ 408.320508][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.537008][ T8652] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 409.320033][ T8638] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 409.741947][ T5918] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 409.749798][ T5918] zl10353_read_register: readreg error (reg=127, ret==-32) [ 410.379723][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 410.383432][ T5918] usb 5-1: USB disconnect, device number 16 [ 410.766737][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 410.789187][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 410.811973][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.829426][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.846000][ T24] usb 2-1: string descriptor 0 read error: -22 [ 410.863909][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.923114][ T8669] input: syz1 as /devices/virtual/input/input13 [ 411.065673][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.114046][ T24] usb 2-1: 0:2 : does not exist [ 411.335705][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.488'. [ 411.509673][ T8674] gretap2: entered allmulticast mode [ 412.398164][ T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 412.414651][ T24] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 412.538871][ T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 412.634405][ T8686] netdevsim netdevsim2: Direct firmware load for . [ 412.634405][ T8686] failed with error -2 [ 412.646198][ T8686] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 412.646198][ T8686] [ 412.759046][ T5918] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 412.843139][ T24] usb 2-1: USB disconnect, device number 13 [ 412.942194][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.973936][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 412.993145][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.025694][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.106272][ T5918] usb 4-1: string descriptor 0 read error: -22 [ 413.121272][ T5918] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.136789][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.292071][ T5918] usb 4-1: 0:2 : does not exist [ 413.617086][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 414.111515][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 414.112922][ T5918] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 414.194857][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 414.232760][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 414.234770][ T5918] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 414.262524][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.281990][ T5918] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 414.297339][ T24] usb 2-1: Product: syz [ 414.308051][ T24] usb 2-1: Manufacturer: syz [ 414.330722][ T24] usb 2-1: SerialNumber: syz [ 414.382485][ T5918] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 414.383246][ T24] usb 2-1: config 0 descriptor?? [ 414.425309][ T5918] usb 4-1: USB disconnect, device number 16 [ 414.490382][ T24] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 414.544414][ T24] em28xx 2-1:0.0: Device initialization failed. [ 414.614260][ T24] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 417.463717][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.471374][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.719169][ T3091] usb 2-1: USB disconnect, device number 14 [ 417.839038][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 418.144806][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 418.225230][ T24] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 418.269963][ T24] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 418.420515][ T24] usb 5-1: config 127 has no interface number 1 [ 418.428819][ T24] usb 5-1: config 127 interface 171 has no altsetting 0 [ 418.482912][ T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 418.493010][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.535764][ T24] usb 5-1: Product: syz [ 418.540942][ T24] usb 5-1: Manufacturer: syz [ 418.548221][ T24] usb 5-1: SerialNumber: syz [ 420.449733][ T5944] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 420.669822][ T5944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 420.680281][ T5944] usb 4-1: not running at top speed; connect to a high speed hub [ 420.780465][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.849776][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.322354][ T5944] usb 4-1: string descriptor 0 read error: -22 [ 421.328724][ T5944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.339291][ T24] xr_serial 5-1:127.171: xr_serial converter detected [ 421.359057][ T24] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 421.365828][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.373918][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 421.384037][ T8755] program syz.2.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.393605][ T8755] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 421.447029][ T24] usb 5-1: USB disconnect, device number 17 [ 421.484704][ T5944] usb 4-1: 0:2 : does not exist [ 421.697685][ T24] xr_serial 5-1:127.171: device disconnected [ 422.220451][ T8766] team0: Device gtp0 is of different type [ 423.544368][ T8749] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.558611][ T8749] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.565952][ T8749] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.576069][ T8749] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.737920][ T8774] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 423.754114][ T8749] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 423.824791][ T8774] bond2: entered promiscuous mode [ 423.837597][ T5944] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 423.850089][ T5944] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 423.904003][ T5944] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 423.946216][ T5944] usb 4-1: USB disconnect, device number 17 [ 423.960055][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 423.975926][ T8774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.132865][ T8776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.140577][ T8776] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 424.169828][ T8776] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 424.194575][ T8776] bond2: (slave gre1): making interface the new active one [ 424.202110][ T8776] gre1: entered promiscuous mode [ 424.213219][ T8776] bond2: (slave gre1): Enslaving as an active interface with an up link [ 425.650954][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.659305][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 425.667458][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 425.800636][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 427.514040][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 428.438816][ T8821] netlink: 128 bytes leftover after parsing attributes in process `syz.2.515'. [ 431.724205][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.524'. [ 433.713769][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.528'. [ 434.285575][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 434.306709][ T8884] netlink: 156 bytes leftover after parsing attributes in process `syz.1.530'. [ 438.747071][ T8926] vlan2: entered promiscuous mode [ 438.752408][ T8926] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 439.147706][ T8930] trusted_key: syz.3.538 sent an empty control message without MSG_MORE. [ 439.867971][ T5918] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 440.125297][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.132588][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.147622][ T5918] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 440.159228][ T5918] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 440.269729][ T5918] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 440.431357][ T5918] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.479715][ T5918] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 440.499178][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.834672][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.874569][ T5918] usb 3-1: invalid MIDI out EP 0 [ 441.422699][ T5918] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 442.328386][ T8964] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 442.391410][ T8965] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 442.472272][ T8964] team0: Port device dummy0 added [ 442.507910][ T8965] team0: Port device dummy0 removed [ 442.541346][ T8965] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 442.619750][ T5918] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 442.832397][ T5918] usb 4-1: config 0 has no interfaces? [ 442.856620][ T5918] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 442.874794][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.922011][ T5918] usb 4-1: Product: syz [ 442.936499][ T5918] usb 4-1: Manufacturer: syz [ 442.946950][ T5918] usb 4-1: SerialNumber: syz [ 442.974431][ T5918] usb 4-1: config 0 descriptor?? [ 443.102991][ T5918] usb 3-1: USB disconnect, device number 11 [ 443.909864][ T5819] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 443.951501][ T5922] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 444.107462][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.116093][ T5819] usb 2-1: not running at top speed; connect to a high speed hub [ 444.134989][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.157555][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.215448][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.228757][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 444.260075][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.302081][ T5819] usb 2-1: string descriptor 0 read error: -22 [ 444.308410][ T5819] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.313452][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 444.343543][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.406992][ T5819] usb 2-1: 0:2 : does not exist [ 444.519814][ T5922] usb 3-1: SerialNumber: syz [ 445.230610][ T5918] usb 4-1: USB disconnect, device number 18 [ 445.903817][ T5819] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 445.959961][ T5819] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 446.043980][ T5819] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 446.065727][ T5922] usb 3-1: 0:2 : does not exist [ 446.070156][ T5819] usb 2-1: USB disconnect, device number 15 [ 446.099240][ T5922] usb 3-1: unit 255 not found! [ 446.986771][ T24] usb 3-1: USB disconnect, device number 12 [ 447.293261][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 449.362307][ T9019] IPVS: sh: FWM 3 0x00000003 - no destination available [ 449.370001][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 449.403897][ T9019] program syz.2.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.459686][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 453.655220][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 453.673400][ T9061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'. [ 453.808422][ T5918] IPVS: starting estimator thread 0... [ 453.843287][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 453.851972][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 453.873635][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.910478][ T9063] IPVS: using max 26 ests per chain, 62400 per kthread [ 453.919155][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.042637][ T24] usb 1-1: string descriptor 0 read error: -22 [ 454.063717][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.102217][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.161152][ T24] usb 1-1: 0:2 : does not exist [ 455.884274][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 455.904606][ T24] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 455.980884][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 456.021048][ T24] usb 1-1: USB disconnect, device number 11 [ 457.313703][ T9098] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 457.323146][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 457.605611][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 457.802366][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 457.840395][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.862762][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.879480][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.909633][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.943425][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.089687][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.556246][ T24] usb 4-1: usb_control_msg returned -32 [ 458.610336][ T24] usbtmc 4-1:16.0: can't read capabilities [ 459.101765][ T9105] random: crng reseeded on system resumption [ 459.973781][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 459.973802][ T30] audit: type=1326 audit(1765548619.279:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 460.549913][ T30] audit: type=1326 audit(1765548619.309:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 460.636627][ T30] audit: type=1326 audit(1765548619.309:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 460.732088][ T30] audit: type=1326 audit(1765548619.309:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 460.802111][ T30] audit: type=1326 audit(1765548619.309:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 460.898661][ T30] audit: type=1326 audit(1765548619.309:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 460.987571][ T30] audit: type=1326 audit(1765548619.309:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 461.035340][ T24] usb 4-1: USB disconnect, device number 19 [ 461.079919][ T30] audit: type=1326 audit(1765548619.309:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 461.383040][ T30] audit: type=1326 audit(1765548619.309:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 461.479560][ T30] audit: type=1326 audit(1765548619.309:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 461.668050][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 462.130071][ T5829] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 462.243682][ T9129] bond3: entered promiscuous mode [ 462.251707][ T9129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.409682][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 462.609484][ T5829] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.660140][ T5829] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.711451][ T5829] usb 1-1: config 0 interface 0 has no altsetting 0 [ 462.755378][ T5829] usb 1-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 462.779838][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.817209][ T5829] usb 1-1: config 0 descriptor?? [ 463.211860][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.221130][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.479911][ T5922] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 463.499434][ T5829] holtek_mouse 0003:04D9:A0C2.0002: unknown main item tag 0x0 [ 463.522681][ T5829] holtek_mouse 0003:04D9:A0C2.0002: unknown main item tag 0x0 [ 463.557833][ T5829] holtek_mouse 0003:04D9:A0C2.0002: unknown main item tag 0x0 [ 463.589679][ T5829] holtek_mouse 0003:04D9:A0C2.0002: unknown main item tag 0x0 [ 463.619664][ T5829] holtek_mouse 0003:04D9:A0C2.0002: unknown main item tag 0x0 [ 463.627311][ T5829] holtek_mouse 0003:04D9:A0C2.0002: unknown main item tag 0x0 [ 463.673971][ T5829] holtek_mouse 0003:04D9:A0C2.0002: item fetching failed at offset 6/7 [ 463.677438][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 463.711718][ T5922] usb 2-1: not running at top speed; connect to a high speed hub [ 463.711763][ T5829] holtek_mouse 0003:04D9:A0C2.0002: hid parse failed: -22 [ 463.721591][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.740096][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.770982][ T5829] holtek_mouse 0003:04D9:A0C2.0002: probe with driver holtek_mouse failed with error -22 [ 463.774532][ T5922] usb 2-1: string descriptor 0 read error: -22 [ 463.787876][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.809170][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.932690][ T5922] usb 2-1: 0:2 : does not exist [ 463.973556][ T24] usb 1-1: USB disconnect, device number 12 [ 464.562261][ T9154] usb usb8: usbfs: process 9154 (syz.3.581) did not claim interface 0 before use [ 465.016389][ T9153] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 465.024885][ T9153] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 465.033483][ T9153] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 465.066001][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 465.066024][ T30] audit: type=1326 audit(1765548624.319:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 465.496968][ T30] audit: type=1326 audit(1765548624.319:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 465.668094][ T5922] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 465.740101][ T30] audit: type=1326 audit(1765548624.319:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 465.841349][ T5922] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 465.890655][ T30] audit: type=1326 audit(1765548624.319:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 465.970286][ T5922] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 466.006240][ T30] audit: type=1326 audit(1765548624.319:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 466.041004][ T5922] usb 2-1: USB disconnect, device number 16 [ 466.099753][ T30] audit: type=1326 audit(1765548624.319:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 466.143349][ T30] audit: type=1326 audit(1765548624.319:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 466.210985][ T30] audit: type=1326 audit(1765548624.319:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9144 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 466.453871][ T9168] Invalid logical block size (7) [ 467.120389][ T5828] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 467.960749][ T9186] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 468.148171][ T9188] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 471.354573][ T9206] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 471.410236][ T9206] team0: Port device batadv1 added [ 471.668458][ T9214] hub 9-0:1.0: USB hub found [ 471.705626][ T9214] hub 9-0:1.0: 1 port detected [ 472.261160][ T9222] netlink: 'syz.1.594': attribute type 10 has an invalid length. [ 472.807018][ T5944] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 473.483310][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 473.493818][ T5944] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 473.507932][ T5944] usb 2-1: config 0 has no interface number 0 [ 473.713702][ T9222] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 473.725152][ T5944] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 473.725387][ T9223] wg1: entered promiscuous mode [ 473.739266][ T9223] wg1: entered allmulticast mode [ 473.894985][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.942751][ T5944] usb 2-1: Product: syz [ 473.946960][ T5944] usb 2-1: Manufacturer: syz [ 473.966893][ T5944] usb 2-1: SerialNumber: syz [ 474.120561][ T9235] netlink: 'syz.4.593': attribute type 12 has an invalid length. [ 474.177239][ T5944] usb 2-1: config 0 descriptor?? [ 474.258827][ T5944] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 474.277418][ T5944] usb 2-1: Detected SIO [ 474.301614][ T5944] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 476.710008][ T909] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 476.960068][ T909] usb 1-1: Using ep0 maxpacket: 8 [ 476.970626][ T909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 477.356404][ T909] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 477.365865][ T909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.724877][ T909] usb 1-1: Product: syz [ 477.729092][ T909] usb 1-1: Manufacturer: syz [ 477.873711][ T909] usb 1-1: SerialNumber: syz [ 477.921846][ T909] usb 1-1: config 0 descriptor?? [ 477.932408][ T909] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 478.203625][ T5829] usb 2-1: USB disconnect, device number 17 [ 478.213776][ T5829] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 478.237712][ T5829] ftdi_sio 2-1:0.217: device disconnected [ 478.692532][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.603'. [ 478.706416][ T9278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.603'. [ 479.639766][ T5829] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 479.656215][ T5944] usb 1-1: USB disconnect, device number 13 [ 479.725786][ T9285] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 479.824209][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 479.847239][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.857778][ T5829] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 479.867914][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.930132][ T5829] usb 5-1: config 0 descriptor?? [ 480.635007][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 480.831509][ T9300] vim2m vim2m.0: vidioc_s_fmt queue busy [ 482.005229][ T9309] input: syz1 as /devices/virtual/input/input15 [ 482.038956][ T9309] binder: 9305:9309 ioctl c0306201 0 returned -14 [ 482.918197][ T9313] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 483.260761][ T5922] usb 5-1: USB disconnect, device number 18 [ 483.296753][ T9315] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 483.648857][ T9320] bond4: (slave gretap1): making interface the new active one [ 483.661615][ T9320] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 483.683811][ T9323] macvlan2: entered promiscuous mode [ 483.690392][ T9323] macvlan2: entered allmulticast mode [ 483.741300][ T9323] bond4: entered promiscuous mode [ 483.748301][ T9323] gretap1: entered promiscuous mode [ 483.780871][ T9323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.807661][ T9323] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 483.917717][ T9323] bond4: left promiscuous mode [ 483.932367][ T9323] gretap1: left promiscuous mode [ 484.542590][ T9309] syz.0.608 (9309): drop_caches: 2 [ 484.732191][ T9326] bond2: entered promiscuous mode [ 484.737822][ T9326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.294943][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.613'. [ 487.856848][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 488.224753][ T45] usb 5-1: config 0 has no interfaces? [ 488.267066][ T45] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 488.299116][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.325116][ T45] usb 5-1: Product: syz [ 488.347408][ T45] usb 5-1: Manufacturer: syz [ 488.363760][ T45] usb 5-1: SerialNumber: syz [ 488.632096][ T45] usb 5-1: config 0 descriptor?? [ 488.739702][ T909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 488.932069][ T909] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 488.953644][ T909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.970853][ T909] usb 2-1: Product: syz [ 488.990831][ T909] usb 2-1: Manufacturer: syz [ 489.000100][ T909] usb 2-1: SerialNumber: syz [ 489.091734][ T9360] loop6: detected capacity change from 0 to 524288000 [ 489.200427][ T9361] support for the xor transformation has been removed. [ 489.286313][ T9372] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.619'. [ 489.998417][ T9379] hub 1-0:1.0: USB hub found [ 490.003983][ T9379] hub 1-0:1.0: 1 port detected [ 491.039910][ T5829] usb 5-1: USB disconnect, device number 19 [ 491.479213][ T909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 491.630891][ T909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 491.960021][ T909] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 492.181277][ T909] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 492.368657][ T909] usb 2-1: USB disconnect, device number 18 [ 493.485775][ T9407] loop7: detected capacity change from 0 to 16384 [ 493.646349][ T9411] usb usb8: usbfs: process 9411 (syz.2.626) did not claim interface 0 before use [ 493.814205][ T9408] loop7: detected capacity change from 16384 to 0 [ 493.821590][ C1] I/O error, dev loop7, sector 2816 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 493.823128][ C0] I/O error, dev loop7, sector 13296 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.841439][ C0] Buffer I/O error on dev loop7, logical block 1662, async page read [ 493.977878][ T909] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 494.292860][ T909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 494.303480][ T909] usb 5-1: not running at top speed; connect to a high speed hub [ 494.327714][ T909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.360466][ T909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.389911][ T909] usb 5-1: string descriptor 0 read error: -22 [ 494.396328][ T909] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.405905][ T909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.494659][ T909] usb 5-1: 0:2 : does not exist [ 494.500015][ T5829] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 494.732078][ T5829] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 494.742747][ T5829] usb 1-1: config 7 has no interface number 0 [ 494.750391][ T5829] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 494.790175][ T5829] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 494.819895][ T5829] usb 1-1: config 7 interface 252 has no altsetting 0 [ 494.867077][ T5829] usb 1-1: string descriptor 0 read error: -22 [ 494.879773][ T5829] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 494.899393][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.947923][ T5829] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 494.965735][ T45] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 495.163085][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 495.193394][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 495.227819][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.261968][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.296483][ T45] usb 3-1: string descriptor 0 read error: -22 [ 495.322242][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.351609][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.777330][ T909] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 495.802517][ T909] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 495.815770][ T9433] usb usb8: usbfs: process 9433 (syz.0.629) did not claim interface 0 before use [ 496.314485][ T909] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 496.765302][ T45] usb 3-1: 0:2 : does not exist [ 496.778729][ T909] usb 5-1: USB disconnect, device number 20 [ 497.397637][ T9444] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 498.496962][ T5944] usb 1-1: USB disconnect, device number 14 [ 498.949047][ T9454] random: crng reseeded on system resumption [ 499.237935][ T45] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 499.271296][ T45] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 499.298898][ T45] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 499.340373][ T45] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 499.506128][ T45] usb 3-1: USB disconnect, device number 13 [ 501.466042][ T9482] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 501.742446][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.749177][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.929950][ T909] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 504.343279][ T909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 504.362110][ T909] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 504.535918][ T909] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 504.559622][ T909] usb 4-1: config 1 interface 0 has no altsetting 0 [ 504.619678][ T3091] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 504.723463][ T909] usb 4-1: string descriptor 0 read error: -22 [ 504.750590][ T909] usb 4-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 504.769071][ T909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.799886][ T3091] usb 2-1: Using ep0 maxpacket: 16 [ 504.807525][ T3091] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 504.824983][ T3091] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.939800][ T3091] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 504.950524][ T3091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.973967][ T3091] usb 2-1: Product: syz [ 504.978371][ T3091] usb 2-1: Manufacturer: syz [ 505.009793][ T3091] usb 2-1: SerialNumber: syz [ 505.042378][ T3091] usb 2-1: config 0 descriptor?? [ 505.108082][ T3091] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.159771][ T3091] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 505.673535][ T3091] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 505.680733][ T3091] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 505.927684][ T3091] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 505.944890][ T3091] em28xx 2-1:0.0: No AC97 audio processor [ 507.133284][ T909] usbhid 4-1:1.0: can't add hid device: -71 [ 507.150501][ T909] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 507.181619][ T9518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.647'. [ 507.223866][ T909] usb 4-1: USB disconnect, device number 20 [ 508.269979][ T909] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 508.411886][ T3091] usb 2-1: USB disconnect, device number 19 [ 508.418859][ T3091] em28xx 2-1:0.0: Disconnecting em28xx [ 508.471298][ T3091] em28xx 2-1:0.0: Freeing device [ 508.641099][ T909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.649499][ T909] usb 1-1: not running at top speed; connect to a high speed hub [ 508.690954][ T909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.865423][ T909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.939853][ T909] usb 1-1: string descriptor 0 read error: -22 [ 508.962400][ T909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.289680][ T5944] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 509.320796][ T909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.436755][ T909] usb 1-1: 0:2 : does not exist [ 509.796625][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.828208][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.870691][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.925793][ T5944] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.044371][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.259969][ T5944] usb 3-1: config 0 descriptor?? [ 510.424587][ T9548] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 510.483829][ T9546] geneve2: entered allmulticast mode [ 510.853710][ T5944] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 511.072625][ T909] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 511.103266][ T909] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 511.157444][ T909] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 511.185804][ T909] usb 1-1: USB disconnect, device number 15 [ 511.413311][ T5829] usb 3-1: USB disconnect, device number 14 [ 512.490812][ T9558] netlink: 104 bytes leftover after parsing attributes in process `syz.1.654'. [ 514.982519][ T9587] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 515.047813][ T9588] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 515.211501][ T9587] team0: Port device dummy0 added [ 515.292763][ T9588] team0: Port device dummy0 removed [ 515.388707][ T9588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 515.475783][ T30] audit: type=1326 audit(1765548674.779:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 515.632499][ T30] audit: type=1326 audit(1765548674.779:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 516.010146][ T30] audit: type=1326 audit(1765548674.779:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 516.129778][ T5944] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 516.159835][ T30] audit: type=1326 audit(1765548674.779:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 516.220521][ T30] audit: type=1326 audit(1765548674.779:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 516.360761][ T30] audit: type=1326 audit(1765548674.779:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 516.422287][ T30] audit: type=1326 audit(1765548674.979:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 516.462772][ T30] audit: type=1326 audit(1765548674.979:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 516.799995][ T5944] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 516.810937][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.819067][ T5944] usb 2-1: Product: syz [ 516.831368][ T5944] usb 2-1: Manufacturer: syz [ 516.834079][ T30] audit: type=1326 audit(1765548674.999:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f562c3c2005 code=0x7ffc0000 [ 516.836023][ T5944] usb 2-1: SerialNumber: syz [ 517.014352][ T5944] usb 2-1: config 0 descriptor?? [ 517.060884][ T30] audit: type=1326 audit(1765548675.009:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.1.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 517.065249][ T5944] ch341 2-1:0.0: ch341-uart converter detected [ 517.209724][ T3091] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 517.459844][ T5829] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 517.500774][ T3091] usb 4-1: Using ep0 maxpacket: 32 [ 517.678531][ T9613] SET target dimension over the limit! [ 517.693680][ T9613] QAT: Device 128 not found [ 517.726757][ T5829] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.745209][ T5829] usb 3-1: config 0 has no interface number 0 [ 517.775577][ T5829] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 517.833730][ T5829] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 517.875738][ T5829] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 517.905482][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.957717][ T5829] usb 3-1: config 0 descriptor?? [ 517.990175][ T9615] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 518.049923][ T5829] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 518.260799][ T5829] usb 3-1: USB disconnect, device number 15 [ 518.260881][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 518.281665][ T5944] usb 2-1: failed to receive control message: -110 [ 518.303596][ T5944] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 518.478194][ T9615] netlink: 'syz.2.664': attribute type 5 has an invalid length. [ 519.441133][ T909] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 519.746350][ T909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 519.775143][ T5829] usb 2-1: USB disconnect, device number 20 [ 519.830260][ T5829] ch341 2-1:0.0: device disconnected [ 519.887501][ T909] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 519.962326][ T909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.989288][ T909] usb 1-1: Product: syz [ 520.006597][ T909] usb 1-1: Manufacturer: syz [ 520.133407][ T909] usb 1-1: SerialNumber: syz [ 520.209195][ T909] usb 1-1: config 0 descriptor?? [ 520.232700][ T909] hub 1-1:0.0: bad descriptor, ignoring hub [ 520.260660][ T909] hub 1-1:0.0: probe with driver hub failed with error -5 [ 520.330159][ T909] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 520.956363][ T5918] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 521.129843][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 521.259852][ T5918] usb 2-1: config 0 has no interfaces? [ 521.287537][ T5918] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 521.326188][ T5918] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 521.469975][ T5918] usb 2-1: Manufacturer: syz [ 521.513713][ T5918] usb 2-1: config 0 descriptor?? [ 521.643689][ T3091] usb 4-1: unable to get BOS descriptor or descriptor too short [ 521.652522][ T3091] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 521.672849][ T3091] usb 4-1: can't read configurations, error -71 [ 522.062845][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 522.062866][ T30] audit: type=1326 audit(1765548681.369:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 522.101370][ T30] audit: type=1326 audit(1765548681.399:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 522.172667][ T30] audit: type=1326 audit(1765548681.399:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 522.622893][ T9639] usb usb8: usbfs: process 9639 (syz.3.669) did not claim interface 0 before use [ 522.710291][ T9640] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 522.718892][ T9640] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 522.741368][ T9640] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 522.832611][ T30] audit: type=1326 audit(1765548681.399:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 523.541804][ T30] audit: type=1326 audit(1765548681.399:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 523.584834][ T30] audit: type=1326 audit(1765548681.399:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 523.857391][ T30] audit: type=1326 audit(1765548681.409:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 524.159662][ T30] audit: type=1326 audit(1765548681.439:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 524.619674][ T30] audit: type=1326 audit(1765548681.449:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 524.723001][ T909] usb 2-1: USB disconnect, device number 21 [ 524.829977][ T30] audit: type=1326 audit(1765548681.509:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9632 comm="syz.3.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1074b8f749 code=0x7ffc0000 [ 525.086878][ T909] usb 1-1: USB disconnect, device number 16 [ 525.536424][ T9660] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 525.749051][ T9661] syz.0.673 (9661): /proc/9654/oom_adj is deprecated, please use /proc/9654/oom_score_adj instead. [ 527.711256][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.678'. [ 527.724363][ T9680] netlink: 52 bytes leftover after parsing attributes in process `syz.1.678'. [ 528.773367][ T9688] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 529.539147][ T9695] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 529.614759][ T9695] bond0: (slave dummy0): Releasing backup interface [ 529.655307][ T9696] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 529.807597][ T9695] team0: Port device dummy0 added [ 529.861093][ T9696] team0: Port device dummy0 removed [ 529.872661][ T9696] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 532.041061][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 532.041084][ T30] audit: type=1326 audit(1765548691.339:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 532.079774][ T30] audit: type=1326 audit(1765548691.339:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 532.110191][ T30] audit: type=1326 audit(1765548691.339:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 532.141155][ T30] audit: type=1326 audit(1765548691.349:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 532.331179][ T30] audit: type=1326 audit(1765548691.639:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9223c2005 code=0x7ffc0000 [ 532.396630][ T9727] netlink: 27 bytes leftover after parsing attributes in process `syz.1.687'. [ 532.430912][ T9728] Cannot find del_set index 1 as target [ 532.515729][ T30] audit: type=1326 audit(1765548691.639:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 532.539129][ T9727] team0: Device ipip0 is up. Set it down before adding it as a team port [ 532.741348][ T30] audit: type=1326 audit(1765548691.639:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 532.989661][ T909] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 533.201727][ T30] audit: type=1326 audit(1765548691.879:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 533.312656][ T30] audit: type=1326 audit(1765548691.879:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 533.462663][ T909] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 533.480024][ T909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.513289][ T30] audit: type=1326 audit(1765548691.879:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 533.539603][ T909] usb 3-1: Product: syz [ 533.548932][ T909] usb 3-1: Manufacturer: syz [ 533.566128][ T909] usb 3-1: SerialNumber: syz [ 533.637881][ T909] usb 3-1: config 0 descriptor?? [ 533.657508][ T909] ch341 3-1:0.0: ch341-uart converter detected [ 534.780004][ T909] usb 3-1: failed to receive control message: -110 [ 534.786790][ T909] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 536.089889][ T909] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 536.188614][ T5944] usb 3-1: USB disconnect, device number 16 [ 536.215444][ T5944] ch341 3-1:0.0: device disconnected [ 536.290448][ T909] usb 5-1: Using ep0 maxpacket: 16 [ 536.311008][ T909] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 536.341718][ T909] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 536.489811][ T909] usb 5-1: config 0 has no interface number 0 [ 536.505127][ T909] usb 5-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 536.519755][ T909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.541733][ T909] usb 5-1: Product: syz [ 536.549451][ T909] usb 5-1: Manufacturer: syz [ 536.653422][ T909] usb 5-1: SerialNumber: syz [ 536.709324][ T909] usb 5-1: config 0 descriptor?? [ 536.920212][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 537.282530][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 537.282550][ T30] audit: type=1326 audit(1765548696.559:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 537.326981][ T9752] netlink: 10 bytes leftover after parsing attributes in process `syz.4.691'. [ 537.372395][ T5918] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 537.410685][ T5918] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 537.426315][ T9767] usb usb8: usbfs: process 9767 (syz.0.694) did not claim interface 0 before use [ 537.493734][ T5944] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 537.522506][ T5918] usb 3-1: config 171 has no interface number 0 [ 537.529000][ T30] audit: type=1326 audit(1765548696.569:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 537.566979][ T5918] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 537.645458][ T5918] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 537.679388][ T30] audit: type=1326 audit(1765548696.799:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 537.705046][ T5918] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 537.727545][ T5918] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 537.738790][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.739658][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 537.769258][ T30] audit: type=1326 audit(1765548696.799:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 537.816011][ T5918] usb 3-1: Product: syz [ 537.825686][ T5918] usb 3-1: Manufacturer: syz [ 537.838203][ T5918] usb 3-1: SerialNumber: syz [ 537.874239][ T9762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.883908][ T30] audit: type=1326 audit(1765548696.799:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 537.925542][ T5944] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 537.967381][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.980354][ T9768] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 537.993718][ T30] audit: type=1326 audit(1765548696.799:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 538.145101][ T5944] pvrusb2: Hardware description: Terratec Grabster AV400 [ 538.157607][ T9768] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 538.228992][ T5944] pvrusb2: ********** [ 538.233962][ T30] audit: type=1326 audit(1765548696.799:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9760 comm="syz.0.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 538.267774][ T5944] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 538.297378][ T9768] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 538.382239][ T5944] pvrusb2: Important functionality might not be entirely working. [ 538.670507][ T5944] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 538.682939][ T5944] pvrusb2: ********** [ 538.851734][ T2342] pvrusb2: Invalid write control endpoint [ 539.066410][ T5918] ath6kl: Failed to submit usb control message: -110 [ 539.087779][ T5918] ath6kl: unable to send the bmi data to the device: -110 [ 539.102642][ T5918] ath6kl: Unable to send get target info: -110 [ 539.141334][ T5918] ath6kl: Failed to init ath6kl core: -110 [ 539.165493][ T5918] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 539.541705][ T9774] netlink: 'syz.2.693': attribute type 21 has an invalid length. [ 539.550418][ T9774] netlink: 156 bytes leftover after parsing attributes in process `syz.2.693'. [ 539.562016][ T9774] netlink: 'syz.2.693': attribute type 21 has an invalid length. [ 539.570289][ T9774] netlink: 156 bytes leftover after parsing attributes in process `syz.2.693'. [ 539.971604][ T2342] pvrusb2: Invalid write control endpoint [ 540.001028][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 540.039991][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 540.086874][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 540.274994][ T2342] pvrusb2: Device being rendered inoperable [ 540.301399][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 540.332564][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 540.368464][ T2342] pvrusb2: Attached sub-driver cx25840 [ 540.406903][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 540.464763][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 540.467342][ T909] rndis_host 5-1:0.109: More than one union descriptor, skipping ... [ 540.537593][ T909] usb 5-1: bad CDC descriptors [ 540.552353][ T909] cdc_acm 5-1:0.109: More than one union descriptor, skipping ... [ 540.733396][ T909] usb 5-1: USB disconnect, device number 21 [ 541.426548][ T5918] usb 4-1: USB disconnect, device number 23 [ 541.815767][ T909] usb 3-1: USB disconnect, device number 17 [ 544.133646][ T5819] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 544.319657][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 544.331437][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.362799][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.394830][ T5819] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 544.425186][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.466667][ T5819] usb 2-1: config 0 descriptor?? [ 545.109743][ T5944] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 545.438442][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 545.674190][ T5918] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 545.675039][ T9816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.705588][ T9818] netlink: 'syz.1.703': attribute type 9 has an invalid length. [ 545.722807][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 545.771590][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 545.784263][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 545.794028][ T9816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.808979][ T5944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 545.819906][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 545.830091][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.900057][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 546.054014][ T5918] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 546.067595][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.093628][ T5944] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 546.103234][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.112561][ T5944] usb 4-1: Product: syz [ 546.117012][ T5944] usb 4-1: Manufacturer: syz [ 546.125123][ T5944] usb 4-1: SerialNumber: syz [ 546.125138][ T5918] usb 5-1: Product: syz [ 546.125160][ T5918] usb 5-1: Manufacturer: syz [ 546.188034][ T5918] usb 5-1: SerialNumber: syz [ 546.225852][ T5944] usb 4-1: config 0 descriptor?? [ 546.242133][ T5918] usb 5-1: config 0 descriptor?? [ 546.280730][ T9819] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 546.343842][ T5944] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 546.635572][ T9816] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 546.665746][ T5918] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 546.680706][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.687047][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.741715][ T5918] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 546.752059][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.777753][ T5918] usb 5-1: media controller created [ 546.836297][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.987494][ T9816] bond1: left promiscuous mode [ 547.069073][ T9816] bond3: left promiscuous mode [ 547.136834][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.179861][ T5966] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.189088][ T5966] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.200262][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.262145][ T5966] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.273459][ T5966] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.412273][ T9826] netlink: 124 bytes leftover after parsing attributes in process `syz.4.706'. [ 547.473355][ T6310] usb 4-1: USB disconnect, device number 24 [ 547.486405][ T5918] zl10353_read_register: readreg error (reg=127, ret==0) [ 547.520235][ T5918] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 547.549614][ T5918] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 547.611539][ T5918] usb 5-1: USB disconnect, device number 22 [ 547.654886][ T9839] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 547.691864][ T5918] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 547.692874][ T9839] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 547.921884][ T30] audit: type=1800 audit(1765548707.229:675): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.707" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 548.006769][ T5819] usbhid 2-1:0.0: can't add hid device: -71 [ 548.028471][ T5819] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 548.061055][ T5819] usb 2-1: USB disconnect, device number 22 [ 548.996130][ T9861] fuse: Bad value for 'group_id' [ 549.001490][ T9861] fuse: Bad value for 'group_id' [ 549.745410][ T5819] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 550.050568][ T5819] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 550.059167][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.099971][ T5819] usb 3-1: config 0 has no interfaces? [ 550.111148][ T5819] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 550.179605][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.293535][ T5819] usb 3-1: config 0 descriptor?? [ 551.128768][ T9870] program syz.0.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.454015][ T909] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 551.624587][ T909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 551.651746][ T909] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 551.664153][ T909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.683183][ T909] usb 1-1: Product: syz [ 551.725157][ T909] usb 1-1: Manufacturer: syz [ 551.741256][ T909] usb 1-1: SerialNumber: syz [ 551.910993][ T909] usb 1-1: config 0 descriptor?? [ 551.922829][ T5918] usb 3-1: USB disconnect, device number 18 [ 552.670122][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 554.607458][ T6310] IPVS: starting estimator thread 0... [ 554.889738][ T9895] IPVS: using max 46 ests per chain, 110400 per kthread [ 554.987025][ T9902] random: crng reseeded on system resumption [ 555.148318][ T6788] usb 1-1: USB disconnect, device number 17 [ 555.969691][ T9914] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 556.189605][ T9914] bond3: entered promiscuous mode [ 556.196561][ T9914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.676971][ T9917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.700940][ T9917] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 556.729834][ T9917] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 556.753083][ T9917] bond3: (slave gre1): making interface the new active one [ 556.779936][ T9917] gre1: entered promiscuous mode [ 556.793195][ T9917] bond3: (slave gre1): Enslaving as an active interface with an up link [ 559.374556][ T9944] input: syz0 as /devices/virtual/input/input17 [ 560.141418][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 560.453329][ T9953] fuse: Bad value for 'fd' [ 561.872014][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 562.053293][ T9968] netlink: 104 bytes leftover after parsing attributes in process `syz.3.732'. [ 562.099829][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 562.146188][ T24] usb 5-1: config 0 has no interfaces? [ 562.179781][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 562.206510][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 562.248271][ T24] usb 5-1: Manufacturer: syz [ 562.269296][ T24] usb 5-1: config 0 descriptor?? [ 563.011942][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.019670][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.223822][ T9976] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 563.584550][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'. [ 564.005896][ T9983] netlink: 52 bytes leftover after parsing attributes in process `syz.1.734'. [ 564.356744][ T9964] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.364117][ T9964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.372984][ T9964] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.380223][ T9964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.651826][ T9964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.250994][ T9971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.796332][ T30] audit: type=1326 audit(1765548726.069:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 566.934563][ T30] audit: type=1326 audit(1765548726.069:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.079711][ T30] audit: type=1326 audit(1765548726.069:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.329780][ T30] audit: type=1326 audit(1765548726.069:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.359710][ T30] audit: type=1326 audit(1765548726.069:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.416578][ T30] audit: type=1326 audit(1765548726.069:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.489896][ T30] audit: type=1326 audit(1765548726.069:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.549639][ T30] audit: type=1326 audit(1765548726.069:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.609719][ T30] audit: type=1326 audit(1765548726.069:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.687727][ T30] audit: type=1326 audit(1765548726.069:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.0.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042078f749 code=0x7ffc0000 [ 567.877090][T10013] QAT: failed to copy from user cfg_data. [ 568.101072][ T9] usb 5-1: USB disconnect, device number 23 [ 569.574861][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.582473][T10038] bridge0: port 1() entered disabled state [ 569.684996][T10036] netlink: 116 bytes leftover after parsing attributes in process `syz.4.744'. [ 570.259165][T10029] delete_channel: no stack [ 570.477784][T10044] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 570.632096][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.747'. [ 570.704232][T10044] macvlan0: entered promiscuous mode [ 570.711686][T10044] macvlan0: entered allmulticast mode [ 570.718158][T10044] bond3: entered promiscuous mode [ 570.738190][T10044] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 570.763224][T10044] bond3: left promiscuous mode [ 571.475703][T10056] netlink: 'syz.3.748': attribute type 15 has an invalid length. [ 572.114991][T10065] Cannot find del_set index 1 as target [ 573.050367][T10072] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 573.070243][T10072] PKCS7: Only support pkcs7_signedData type [ 574.779965][T10095] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 577.461477][T10119] input: syz1 as /devices/virtual/input/input18 [ 577.769143][T10117] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 577.847351][T10117] gretap2: entered allmulticast mode [ 577.963433][T10117] bond4: (slave gretap2): making interface the new active one [ 577.980508][T10117] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 578.260292][T10125] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 578.670665][ T5828] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 579.785117][T10134] ALSA: mixer_oss: invalid OSS volume '' [ 579.855797][T10148] xt_connbytes: Forcing CT accounting to be enabled [ 579.863659][T10148] Cannot find del_set index 1 as target [ 582.197176][T10172] netlink: 'syz.3.771': attribute type 12 has an invalid length. [ 582.246264][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 582.246284][ T30] audit: type=1400 audit(1765548741.509:762): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10165 comm="syz.3.771" [ 582.478214][T10172] set match dimension is over the limit! [ 583.099647][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 583.329743][ T30] audit: type=1326 audit(1765548742.609:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 583.428216][ T30] audit: type=1326 audit(1765548742.609:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 583.479098][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 583.488166][ T30] audit: type=1326 audit(1765548742.609:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 583.550020][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.550862][ T30] audit: type=1326 audit(1765548742.609:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 583.627651][ T24] usb 2-1: Product: syz [ 583.649887][ T24] usb 2-1: Manufacturer: syz [ 583.666104][ T24] usb 2-1: SerialNumber: syz [ 583.869791][ T30] audit: type=1326 audit(1765548742.669:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 583.914431][ T30] audit: type=1326 audit(1765548742.669:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 583.951702][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 584.070730][ T24] usb 2-1: config 0 descriptor?? [ 584.133274][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 584.231073][T10193] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 584.256079][ T30] audit: type=1326 audit(1765548742.829:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 584.393685][ T30] audit: type=1326 audit(1765548742.829:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 584.463395][ T30] audit: type=1326 audit(1765548742.829:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9223c2005 code=0x7ffc0000 [ 584.801626][ T24] sonixb 2-1:0.0: Error reading register 00: -110 [ 585.932590][ T10] usb 2-1: USB disconnect, device number 23 [ 586.960143][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 587.241087][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 587.683575][ T10] usb 2-1: config 0 has no interfaces? [ 587.842045][T10219] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 587.873543][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 587.890562][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 587.898610][ T10] usb 2-1: Manufacturer: syz [ 587.921708][ T10] usb 2-1: config 0 descriptor?? [ 589.613640][T10236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.782'. [ 589.663533][T10236] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 589.687185][T10236] bridge0: port 3(netdevsim0) entered blocking state [ 589.700358][T10236] bridge0: port 3(netdevsim0) entered disabled state [ 589.707593][T10236] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 589.764363][T10236] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 589.791025][T10236] bridge0: port 3(netdevsim0) entered blocking state [ 589.797952][T10236] bridge0: port 3(netdevsim0) entered forwarding state [ 590.048392][T10248] xt_connbytes: Forcing CT accounting to be enabled [ 590.059147][T10248] SET target dimension over the limit! [ 590.902194][ T9] usb 2-1: USB disconnect, device number 24 [ 591.299499][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.785'. [ 591.583549][T10255] tipc: Enabling of bearer rejected, failed to enable media [ 591.990914][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 592.118558][T10275] netlink: 60 bytes leftover after parsing attributes in process `syz.1.788'. [ 592.128005][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 592.128026][ T30] audit: type=1326 audit(1765548751.419:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 592.161591][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 592.314592][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 592.376307][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.387714][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.418189][ T30] audit: type=1326 audit(1765548751.419:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 592.533174][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 592.544908][ T30] audit: type=1326 audit(1765548751.419:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 592.568070][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.580409][ T9] usb 3-1: config 0 descriptor?? [ 593.209628][ T30] audit: type=1326 audit(1765548751.419:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 593.390221][ T30] audit: type=1326 audit(1765548751.419:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 593.484509][ T30] audit: type=1326 audit(1765548751.419:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 593.743275][ T30] audit: type=1326 audit(1765548751.419:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 593.776327][ T30] audit: type=1326 audit(1765548751.419:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 593.814208][ T30] audit: type=1326 audit(1765548751.419:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 593.867712][ T30] audit: type=1326 audit(1765548751.419:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 594.878716][T10288] QAT: failed to copy from user cfg_data. [ 595.366963][T10294] trusted_key: encrypted_key: keylen parameter is missing [ 595.577883][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 595.584055][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 596.071786][ T9] usb 3-1: USB disconnect, device number 20 [ 601.465311][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 601.465334][ T30] audit: type=1804 audit(1765548760.749:813): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.804" name="/newroot/158/file1" dev="tmpfs" ino=833 res=1 errno=0 [ 602.550243][T10375] netlink: 'syz.2.809': attribute type 13 has an invalid length. [ 603.276639][T10375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.976510][ T30] audit: type=1326 audit(1765548763.259:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 604.040872][ T30] audit: type=1326 audit(1765548763.259:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 604.069733][ T30] audit: type=1326 audit(1765548763.259:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 604.176414][ T30] audit: type=1326 audit(1765548763.259:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 604.276727][ T30] audit: type=1326 audit(1765548763.269:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f562c3c2005 code=0x7ffc0000 [ 604.419712][ T30] audit: type=1326 audit(1765548763.269:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 604.469807][ T5944] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 604.595213][ T30] audit: type=1326 audit(1765548763.309:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562c38f749 code=0x7ffc0000 [ 604.770398][ T5944] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 604.781375][ T30] audit: type=1326 audit(1765548763.339:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f562c391667 code=0x7ffc0000 [ 604.805236][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.825645][ T5944] usb 2-1: Product: syz [ 604.831485][ T5944] usb 2-1: Manufacturer: syz [ 604.901581][ T5944] usb 2-1: SerialNumber: syz [ 604.982104][ T30] audit: type=1326 audit(1765548763.339:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.1.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f562c3915dc code=0x7ffc0000 [ 605.139006][ T5944] usb 2-1: config 0 descriptor?? [ 605.154908][ T5944] ch341 2-1:0.0: ch341-uart converter detected [ 606.200440][ T5944] usb 2-1: failed to receive control message: -110 [ 606.223867][ T5944] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 607.257814][ T10] usb 2-1: USB disconnect, device number 25 [ 607.280809][ T10] ch341 2-1:0.0: device disconnected [ 607.972813][T10419] kAFS: unable to lookup cell '' [ 608.748829][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 608.748853][ T30] audit: type=1326 audit(1765548768.019:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 608.785720][ T30] audit: type=1326 audit(1765548768.019:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 608.897031][ T30] audit: type=1326 audit(1765548768.019:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe92238df90 code=0x7ffc0000 [ 608.971275][T10429] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 608.996991][ T30] audit: type=1326 audit(1765548768.019:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 609.069661][ T30] audit: type=1326 audit(1765548768.019:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 609.099692][ T30] audit: type=1326 audit(1765548768.019:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 609.130409][ T30] audit: type=1326 audit(1765548768.019:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 609.157352][ T30] audit: type=1326 audit(1765548768.019:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 609.182081][ T30] audit: type=1326 audit(1765548768.019:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 609.205899][ T30] audit: type=1326 audit(1765548768.019:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.2.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe92238f749 code=0x7ffc0000 [ 609.272309][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 609.337722][T10431] macvlan2: entered promiscuous mode [ 609.343260][T10431] macvlan2: entered allmulticast mode [ 609.353491][T10431] bond4: entered promiscuous mode [ 609.436121][T10431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 609.584330][T10431] bond4: left promiscuous mode [ 611.184684][T10457] tipc: Started in network mode [ 611.199927][T10457] tipc: Node identity ac14140f, cluster identity 4711 [ 611.211956][T10457] tipc: New replicast peer: 255.255.255.255 [ 611.220854][T10457] tipc: Enabled bearer , priority 10 [ 611.231703][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'. [ 611.240793][T10457] tipc: Disabling bearer [ 613.779636][ T5944] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 614.004122][ T5944] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 614.058816][ T5944] usb 1-1: config 0 has no interface number 0 [ 614.093230][ T5944] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 614.154257][ T5944] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.239787][ T5944] usb 1-1: config 0 interface 113 has no altsetting 0 [ 614.302798][ T5944] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 614.312109][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.325518][ T5944] usb 1-1: Product: syz [ 614.340329][ T5944] usb 1-1: Manufacturer: syz [ 614.349825][ T5944] usb 1-1: SerialNumber: syz [ 614.370941][ T5944] usb 1-1: config 0 descriptor?? [ 614.397001][ C1] usb 1-1: NFC: Urb failure (status -71) [ 614.404699][ T5944] usb 1-1: NFC: Unable to get FW version [ 614.422019][ T5944] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 616.678168][T10504] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 616.688176][T10504] team0: Port device batadv2 added [ 616.876751][ T5944] usb 1-1: USB disconnect, device number 18 [ 616.913830][T10505] hub 9-0:1.0: USB hub found [ 616.920183][T10505] hub 9-0:1.0: 1 port detected [ 617.500492][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'. [ 620.342598][T10543] loop6: detected capacity change from 0 to 524287487 [ 620.351088][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.359912][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.367940][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.376443][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.384467][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.400108][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.409859][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.417932][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.456468][T10543] ldm_validate_partition_table(): Disk read failed. [ 620.496727][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.534034][T10543] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.542117][T10543] Dev loop6: unable to read RDB block 0 [ 620.550822][T10543] loop6: unable to read partition table [ 620.557058][T10543] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 622.259777][T10562] netlink: 148 bytes leftover after parsing attributes in process `syz.3.848'. [ 623.468762][T10562] syz.3.848 (10562): drop_caches: 2 [ 624.228916][T10575] xt_hashlimit: max too large, truncated to 1048576 [ 624.305520][T10575] fuse: Unknown parameter '000000000000000000030x0000000000000009' [ 624.450614][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 624.460600][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.467061][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.925512][ T5944] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 625.315041][ T5944] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 625.326746][ T5944] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 625.367221][ T5944] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 625.407871][ T5944] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.459669][ T5944] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.492057][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.533319][ T5944] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.543281][ T5944] usb 4-1: invalid MIDI out EP 0 [ 625.746878][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 625.849207][ T5944] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 626.459328][T10589] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 626.530067][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 626.541089][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 626.613414][T10597] macvlan0: entered promiscuous mode [ 626.619921][T10597] macvlan0: entered allmulticast mode [ 626.763185][T10597] bond5: entered promiscuous mode [ 626.777047][T10597] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 626.916660][T10597] bond5: left promiscuous mode [ 628.400767][ T9] usb 4-1: USB disconnect, device number 25 [ 628.537266][T10615] syzkaller0: entered promiscuous mode [ 628.542951][T10615] syzkaller0: entered allmulticast mode [ 629.294496][T10625] netlink: 'syz.3.862': attribute type 4 has an invalid length. [ 630.399677][ T5944] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 630.559639][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 630.573539][ T5944] usb 3-1: config 0 has no interfaces? [ 630.587888][ T5944] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.614588][ T5944] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 630.682640][ T5944] usb 3-1: Manufacturer: syz [ 630.745689][ T5944] usb 3-1: config 0 descriptor?? [ 630.982293][T10638] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.865' sets config #1 [ 631.155499][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 631.239820][ T5819] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 631.453867][ T5819] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 631.462668][ T5819] usb 2-1: config 0 has no interface number 0 [ 631.654342][ T5819] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 631.668377][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.684482][ T5819] usb 2-1: Product: syz [ 631.693974][ T5819] usb 2-1: Manufacturer: syz [ 631.702797][ T5819] usb 2-1: SerialNumber: syz [ 631.717898][ T5819] usb 2-1: config 0 descriptor?? [ 631.731592][ T5819] usbtest 2-1:0.85: Linux gadget zero [ 631.739452][ T5819] usbtest 2-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 632.138551][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.866'. [ 632.155146][T10646] netlink: 64 bytes leftover after parsing attributes in process `syz.3.866'. [ 632.239480][ T5819] usb 2-1: USB disconnect, device number 26 [ 632.962119][ T9] usb 3-1: USB disconnect, device number 21 [ 634.414300][T10663] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 636.412528][T10692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'. [ 636.508857][T10692] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 636.591750][T10692] bond0: (slave netdevsim0): Releasing backup interface [ 636.750077][T10692] bridge0: port 3(netdevsim0) entered blocking state [ 636.757116][T10692] bridge0: port 3(netdevsim0) entered disabled state [ 636.764255][T10692] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 636.776628][T10692] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 637.696301][T10706] Cannot find del_set index 1 as target [ 640.615423][T10736] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 640.677922][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 640.742039][T10726] kvm: pic: non byte read [ 640.747679][T10726] kvm: pic: non byte read [ 640.927850][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 640.946727][T10726] kvm: pic: non byte read [ 640.953492][T10726] kvm: pic: non byte read [ 640.958843][T10726] kvm: pic: non byte read [ 640.965285][T10726] kvm: pic: non byte read [ 641.008870][T10743] macvlan0: entered promiscuous mode [ 641.014785][T10743] macvlan0: entered allmulticast mode [ 641.027663][T10743] bond6: entered promiscuous mode [ 641.070716][T10743] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 641.292825][T10726] kvm: pic: non byte read [ 641.300132][T10726] kvm: pic: non byte read [ 641.308398][T10726] kvm: pic: non byte read [ 641.314256][T10726] kvm: pic: non byte read [ 641.354644][T10743] bond6: left promiscuous mode [ 642.713823][T10761] netlink: 64 bytes leftover after parsing attributes in process `syz.4.885'. [ 642.829647][ T909] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 643.013611][ T909] usb 1-1: Using ep0 maxpacket: 8 [ 643.179138][ T909] usb 1-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 643.231553][ T909] usb 1-1: config 1 interface 0 has no altsetting 0 [ 643.307672][ T909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 643.519978][ T909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.528140][ T909] usb 1-1: Product: syz [ 643.601979][ T909] usb 1-1: Manufacturer: syz [ 643.639945][ T909] usb 1-1: SerialNumber: syz [ 643.680351][T10758] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 644.359941][ T5922] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 644.879743][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 644.890271][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.900202][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.936109][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 644.976008][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.013176][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.441712][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 645.481022][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.779679][ T909] usb 1-1: USB disconnect, device number 19 [ 645.803670][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 646.000085][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.271820][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.572627][ T5922] usb 4-1: GET_CAPABILITIES returned 0 [ 646.582648][ T5922] usbtmc 4-1:16.0: can't read capabilities [ 646.834121][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.846684][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.855797][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.865034][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.874131][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.883228][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.892285][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.904692][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.913818][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.922902][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.955945][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.965163][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.974239][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 646.987318][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 647.002891][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 647.018440][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 647.031869][ T5819] usb 4-1: USB disconnect, device number 26 [ 648.473053][T10811] input: syz0 as /devices/virtual/input/input20 [ 648.491498][T10811] program syz.4.893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.664354][T10816] netlink: 104 bytes leftover after parsing attributes in process `syz.0.894'. [ 649.875007][T10820] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 649.941267][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 650.012930][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 650.030192][T10820] macvlan2: entered promiscuous mode [ 650.036287][T10820] macvlan2: entered allmulticast mode [ 650.071145][T10820] bond7: entered promiscuous mode [ 650.089187][T10820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 650.362912][T10820] bond7: left promiscuous mode [ 651.087329][ T5819] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 651.154724][T10840] pim6reg: entered allmulticast mode [ 651.396238][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.426041][ T5819] usb 5-1: config 0 has no interfaces? [ 651.590222][ T5819] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 651.614678][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.652410][ T5819] usb 5-1: config 0 descriptor?? [ 651.987004][T10835] kAFS: unable to lookup cell '(,cL' [ 652.203333][T10849] vlan2: entered promiscuous mode [ 652.208910][T10849] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 654.266466][ T10] usb 5-1: USB disconnect, device number 24 [ 654.313754][T10864] bridge0: port 3(netdevsim0) entered disabled state [ 654.322887][T10864] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.332468][T10864] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.693670][ T5944] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 654.777804][T10873] netlink: 'syz.1.904': attribute type 4 has an invalid length. [ 655.119635][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 655.217165][ T5944] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 655.254059][ T5944] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 655.303351][T10879] binder: 10868:10879 ioctl c0306201 200000000040 returned -14 [ 655.333849][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 655.659664][ T5944] usb 3-1: config 127 has no interface number 1 [ 655.869713][ T5944] usb 3-1: config 127 interface 171 has no altsetting 0 [ 655.880412][ T5944] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 655.889743][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.897908][ T5944] usb 3-1: Product: syz [ 655.902318][ T5944] usb 3-1: Manufacturer: syz [ 655.906911][ T5944] usb 3-1: SerialNumber: syz [ 657.918266][ T5944] xr_serial 3-1:127.171: xr_serial converter detected [ 657.973131][ T5944] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 658.009645][ T5944] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 658.079805][ T5944] usb 3-1: USB disconnect, device number 22 [ 658.113411][ T5944] xr_serial 3-1:127.171: device disconnected [ 658.248666][T10896] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 658.256130][T10896] PKCS7: Only support pkcs7_signedData type [ 659.099428][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.106809][T10906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.114460][T10906] bridge0: port 1() entered blocking state [ 659.120575][T10906] bridge0: port 1() entered forwarding state [ 659.241575][T10906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.329641][T10907] vim2m vim2m.0: vidioc_s_fmt queue busy [ 659.965811][T10914] Cannot find del_set index 1 as target [ 660.994543][T10926] netlink: 'syz.1.913': attribute type 39 has an invalid length. [ 661.833996][ T10] IPVS: starting estimator thread 0... [ 661.930816][T10929] IPVS: using max 23 ests per chain, 55200 per kthread [ 662.561036][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 662.594877][T10941] netlink: 'syz.2.915': attribute type 2 has an invalid length. [ 662.627664][T10941] : entered promiscuous mode [ 663.630632][T10947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.918'. [ 663.973028][T10947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.063212][T10947] vim2m vim2m.0: vidioc_s_fmt queue busy [ 664.761786][T10957] Cannot find del_set index 1 as target [ 665.108262][T10960] Cannot find del_set index 1 as target [ 666.580467][T10974] netlink: 'syz.1.923': attribute type 4 has an invalid length. [ 669.922955][T11005] hub 1-0:1.0: USB hub found [ 669.928548][T11005] hub 1-0:1.0: 1 port detected [ 670.039113][T11007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 670.045943][T11007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 670.076562][T11007] vhci_hcd vhci_hcd.0: Device attached [ 670.331481][T11008] vhci_hcd: connection closed [ 670.331708][ T5996] vhci_hcd vhci_hcd.0: stop threads [ 670.353633][ T5996] vhci_hcd vhci_hcd.0: release socket [ 670.362699][ T10] usb 34-1: SetAddress Request (2) to port 0 [ 670.370501][ T10] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 670.452594][ T5996] vhci_hcd vhci_hcd.0: disconnect device [ 670.994007][T11020] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 671.093408][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'. [ 672.023771][T11029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 673.145094][ T5944] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 673.180165][T11049] trusted_key: encrypted_key: insufficient parameters specified [ 673.208677][T11049] binder: 11044:11049 ioctl c018620c 200000000000 returned -1 [ 673.510965][ T5944] usb 2-1: device descriptor read/64, error -71 [ 673.794688][ T5944] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 674.029621][ T5944] usb 2-1: device descriptor read/64, error -71 [ 674.142088][ T5944] usb usb2-port1: attempt power cycle [ 674.167485][T11059] netlink: 'syz.4.938': attribute type 29 has an invalid length. [ 674.669593][ T5944] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 674.751863][ T5944] usb 2-1: device descriptor read/8, error -71 [ 674.949656][ T5819] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 675.059706][ T5944] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 675.198966][ T5944] usb 2-1: device descriptor read/8, error -71 [ 675.231260][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.296566][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.357653][ T5819] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 675.358009][ T5944] usb usb2-port1: unable to enumerate USB device [ 675.491412][ T10] usb 34-1: device descriptor read/8, error -110 [ 675.527833][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.584815][ T5819] usb 4-1: config 0 descriptor?? [ 675.991354][ T10] usb usb34-port1: attempt power cycle [ 676.550758][ T10] usb usb34-port1: unable to enumerate USB device [ 678.201027][T11085] program syz.1.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.608893][ T5819] usbhid 4-1:0.0: can't add hid device: -71 [ 678.638265][ T5819] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 678.799848][ T5819] usb 4-1: USB disconnect, device number 27 [ 679.091923][T11090] fuse: Bad value for 'fd' [ 679.350412][T11096] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.946'. [ 679.535934][T11094] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.946'. [ 680.710655][T11108] @: renamed from syz_tun (while UP) [ 681.389673][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 681.570239][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 681.579113][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 681.589937][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 681.604557][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 681.614792][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 681.650567][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 681.671908][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.785528][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 681.807255][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.872194][ T24] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 682.855252][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 682.855269][ T30] audit: type=1326 audit(1765548841.919:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 682.892583][ T30] audit: type=1326 audit(1765548841.919:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 683.094251][ T30] audit: type=1326 audit(1765548841.919:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 683.725680][ T30] audit: type=1326 audit(1765548841.919:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 683.770359][ T30] audit: type=1326 audit(1765548841.919:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 684.089711][ T30] audit: type=1326 audit(1765548841.919:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 684.203427][ T30] audit: type=1326 audit(1765548841.919:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 684.282633][ T30] audit: type=1326 audit(1765548841.919:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 684.346457][ T30] audit: type=1326 audit(1765548841.919:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 684.419453][ T30] audit: type=1326 audit(1765548841.929:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f0dd8f749 code=0x7ffc0000 [ 684.761378][ T10] usb 2-1: USB disconnect, device number 31 [ 685.910253][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.916756][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.438822][T11157] fuse: Unknown parameter 'group_i00000000000000000000' [ 688.331228][T11163] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 688.608428][T11166] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 688.758168][T11166] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 688.935170][T11183] kvm: user requested TSC rate below hardware speed [ 689.139272][T11163] macvlan2: entered promiscuous mode [ 689.192464][T11163] macvlan2: entered allmulticast mode [ 689.203897][T11163] bond5: entered promiscuous mode [ 689.255608][T11163] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 689.269584][ T909] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 689.334188][T11163] bond5: left promiscuous mode [ 689.479904][ T909] usb 4-1: Using ep0 maxpacket: 8 [ 689.660557][ T909] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 689.691735][ T909] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 689.736987][ T909] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 689.806494][ T909] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.867749][ T909] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 689.940123][ T909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.259068][ T909] usb 4-1: GET_CAPABILITIES returned 0 [ 690.309198][ T909] usbtmc 4-1:16.0: can't read capabilities [ 690.518279][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.531396][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.547553][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 690.675079][T11200] netlink: 76 bytes leftover after parsing attributes in process `syz.1.964'. [ 690.688416][T11200] netlink: 'syz.1.964': attribute type 4 has an invalid length. [ 690.732248][T11202] netlink: 'syz.2.965': attribute type 4 has an invalid length. [ 692.512893][ T909] usb 4-1: USB disconnect, device number 28 [ 692.660069][ T5819] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 692.929578][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 692.929600][ T30] audit: type=1800 audit(1765548852.209:984): pid=11220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.969" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=32865 res=0 errno=0 [ 693.048626][ T5819] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 693.057889][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.066367][ T5819] usb 5-1: Product: syz [ 693.070734][ T5819] usb 5-1: Manufacturer: syz [ 693.075352][ T5819] usb 5-1: SerialNumber: syz [ 693.090427][ T5819] usb 5-1: config 0 descriptor?? [ 693.097820][T11223] netlink: 'syz.2.968': attribute type 3 has an invalid length. [ 693.107724][ T5819] hub 5-1:0.0: bad descriptor, ignoring hub [ 693.118118][ T5819] hub 5-1:0.0: probe with driver hub failed with error -5 [ 693.429735][ T5819] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 693.462053][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 693.505568][ T5819] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 693.549833][ T5897] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 693.573407][ T5819] usb 5-1: media controller created [ 693.604933][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.764288][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.888242][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 693.913030][ T5819] DVB: Unable to find symbol dib7000p_attach() [ 693.930170][ T5897] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 693.946373][ T5819] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 693.965172][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.022067][ T5897] usb 3-1: config 0 descriptor?? [ 694.062226][ T5897] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 694.082268][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 694.113263][ T5897] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 694.147931][ T5819] rc_core: IR keymap rc-dib0700-rc5 not found [ 694.161884][ T5897] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 694.191099][T11236] binder: 11230:11236 ioctl 4018620d 0 returned -22 [ 694.200745][T11236] binder: 11230:11236 ioctl c018620c 200000000380 returned -1 [ 694.221897][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 694.288007][T11223] ------------[ cut here ]------------ [ 694.293577][T11223] usb 5-1: BOGUS control dir, pipe 80001980 doesn't match bRequestType c0 [ 694.302258][T11223] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#0: syz.2.968/11223 [ 694.310399][T11223] Modules linked in: [ 694.314856][T11223] CPU: 0 UID: 0 PID: 11223 Comm: syz.2.968 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.326063][T11223] Tainted: [L]=SOFTLOCKUP [ 694.330525][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.341287][T11223] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 694.347160][T11223] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 694.367339][T11223] RSP: 0018:ffffc9001c307820 EFLAGS: 00010246 [ 694.373505][T11223] RAX: 0000000000000000 RBX: ffff88805479c300 RCX: 0000000080001980 [ 694.381583][T11223] RDX: ffff8880495e5d60 RSI: ffffffff8c140140 RDI: ffffffff8f8ebab0 [ 694.389784][T11223] RBP: 1ffff1100a206eac R08: 00000000000000c0 R09: 0000000000000000 [ 694.397824][T11223] R10: ffffc9001c307920 R11: fffff52003860f30 R12: ffff8880555c8100 [ 694.406113][T11223] R13: ffff888051037560 R14: 0000000080001980 R15: ffff8880495e5d60 [ 694.414135][T11223] FS: 00007fe9232746c0(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 694.423390][T11223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.430121][T11223] CR2: 0000200000035030 CR3: 00000000606b4000 CR4: 00000000003526f0 [ 694.438098][T11223] Call Trace: [ 694.441515][T11223] [ 694.444461][T11223] ? __init_swait_queue_head+0xa9/0x150 [ 694.450112][T11223] usb_start_wait_urb+0x115/0x4f0 [ 694.455146][T11223] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 694.460815][T11223] usb_control_msg+0x232/0x3e0 [ 694.465709][T11223] dib0700_i2c_xfer+0xba7/0xf70 [ 694.470640][T11223] __i2c_transfer+0x871/0x2110 [ 694.475508][T11223] ? lockdep_hardirqs_on+0x98/0x140 [ 694.480743][T11223] ? __pfx___i2c_transfer+0x10/0x10 [ 694.485961][T11223] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 694.491362][T11223] ? i2c_transfer+0x120/0x3a0 [ 694.496036][T11223] i2c_transfer+0x25b/0x3a0 [ 694.500560][T11223] ? __pfx_i2c_transfer+0x10/0x10 [ 694.505582][T11223] ? _copy_from_user+0x94/0xb0 [ 694.510381][T11223] i2cdev_ioctl_rdwr+0x460/0x740 [ 694.515318][T11223] i2cdev_ioctl+0x64b/0x820 [ 694.519879][T11223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 694.524921][T11223] ? __fget_files+0x3a0/0x420 [ 694.529671][T11223] ? __fget_files+0x2a/0x420 [ 694.534379][T11223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 694.539322][T11223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 694.544463][T11223] __se_sys_ioctl+0xfc/0x170 [ 694.549051][T11223] do_syscall_64+0xfa/0xf80 [ 694.553592][T11223] ? rcu_is_watching+0x15/0xb0 [ 694.558364][T11223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.564473][T11223] ? clear_bhb_loop+0x60/0xb0 [ 694.569249][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.575206][T11223] RIP: 0033:0x7fe92238f749 [ 694.579696][T11223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.599676][T11223] RSP: 002b:00007fe923274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.608637][T11223] RAX: ffffffffffffffda RBX: 00007fe9225e6180 RCX: 00007fe92238f749 [ 694.616773][T11223] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000007 [ 694.624894][T11223] RBP: 00007fe922413f91 R08: 0000000000000000 R09: 0000000000000000 [ 694.633000][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.641097][T11223] R13: 00007fe9225e6218 R14: 00007fe9225e6180 R15: 00007fe92270fa28 [ 694.649082][T11223] [ 694.652149][T11223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 694.659570][T11223] CPU: 0 UID: 0 PID: 11223 Comm: syz.2.968 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.670530][T11223] Tainted: [L]=SOFTLOCKUP [ 694.674972][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.685121][T11223] Call Trace: [ 694.688419][T11223] [ 694.691359][T11223] dump_stack_lvl+0x99/0x250 [ 694.695967][T11223] ? __asan_memcpy+0x40/0x70 [ 694.700568][T11223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.705869][T11223] ? __pfx__printk+0x10/0x10 [ 694.710744][T11223] vpanic+0x237/0x6d0 [ 694.714737][T11223] ? __pfx_vpanic+0x10/0x10 [ 694.719248][T11223] ? is_bpf_text_address+0x292/0x2b0 [ 694.724628][T11223] ? is_bpf_text_address+0x26/0x2b0 [ 694.729836][T11223] panic+0xb9/0xc0 [ 694.733570][T11223] ? __pfx_panic+0x10/0x10 [ 694.738015][T11223] __warn+0x317/0x4b0 [ 694.742026][T11223] __report_bug+0x288/0x500 [ 694.746557][T11223] ? __pfx___report_bug+0x10/0x10 [ 694.751611][T11223] ? stack_depot_save_flags+0x422/0x850 [ 694.757193][T11223] report_bug_entry+0x16a/0x220 [ 694.762061][T11223] ? usb_submit_urb+0x111c/0x18d0 [ 694.767101][T11223] ? usb_submit_urb+0x1121/0x18d0 [ 694.772134][T11223] handle_bug+0xca/0x200 [ 694.776381][T11223] exc_invalid_op+0x1a/0x50 [ 694.780901][T11223] asm_exc_invalid_op+0x1a/0x20 [ 694.785770][T11223] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 694.791440][T11223] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 694.811072][T11223] RSP: 0018:ffffc9001c307820 EFLAGS: 00010246 [ 694.817162][T11223] RAX: 0000000000000000 RBX: ffff88805479c300 RCX: 0000000080001980 [ 694.825310][T11223] RDX: ffff8880495e5d60 RSI: ffffffff8c140140 RDI: ffffffff8f8ebab0 [ 694.833302][T11223] RBP: 1ffff1100a206eac R08: 00000000000000c0 R09: 0000000000000000 [ 694.841368][T11223] R10: ffffc9001c307920 R11: fffff52003860f30 R12: ffff8880555c8100 [ 694.849345][T11223] R13: ffff888051037560 R14: 0000000080001980 R15: ffff8880495e5d60 [ 694.857445][T11223] ? __init_swait_queue_head+0xa9/0x150 [ 694.863016][T11223] usb_start_wait_urb+0x115/0x4f0 [ 694.868845][T11223] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 694.874417][T11223] usb_control_msg+0x232/0x3e0 [ 694.879298][T11223] dib0700_i2c_xfer+0xba7/0xf70 [ 694.884262][T11223] __i2c_transfer+0x871/0x2110 [ 694.889114][T11223] ? lockdep_hardirqs_on+0x98/0x140 [ 694.894352][T11223] ? __pfx___i2c_transfer+0x10/0x10 [ 694.899569][T11223] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 694.905181][T11223] ? i2c_transfer+0x120/0x3a0 [ 694.909898][T11223] i2c_transfer+0x25b/0x3a0 [ 694.914410][T11223] ? __pfx_i2c_transfer+0x10/0x10 [ 694.919439][T11223] ? _copy_from_user+0x94/0xb0 [ 694.924228][T11223] i2cdev_ioctl_rdwr+0x460/0x740 [ 694.929183][T11223] i2cdev_ioctl+0x64b/0x820 [ 694.933690][T11223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 694.938728][T11223] ? __fget_files+0x3a0/0x420 [ 694.943597][T11223] ? __fget_files+0x2a/0x420 [ 694.948225][T11223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 694.953269][T11223] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 694.958314][T11223] __se_sys_ioctl+0xfc/0x170 [ 694.962918][T11223] do_syscall_64+0xfa/0xf80 [ 694.967442][T11223] ? rcu_is_watching+0x15/0xb0 [ 694.972216][T11223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.978301][T11223] ? clear_bhb_loop+0x60/0xb0 [ 694.983080][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.989013][T11223] RIP: 0033:0x7fe92238f749 [ 694.993808][T11223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.013776][T11223] RSP: 002b:00007fe923274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.022206][T11223] RAX: ffffffffffffffda RBX: 00007fe9225e6180 RCX: 00007fe92238f749 [ 695.030188][T11223] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000007 [ 695.038178][T11223] RBP: 00007fe922413f91 R08: 0000000000000000 R09: 0000000000000000 [ 695.046159][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.054146][T11223] R13: 00007fe9225e6218 R14: 00007fe9225e6180 R15: 00007fe92270fa28 [ 695.062211][T11223] [ 695.065565][T11223] Kernel Offset: disabled [ 695.069890][T11223] Rebooting in 86400 seconds..