last executing test programs: 21m32.452386397s ago: executing program 32 (id=3493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r2, 0x5}) 17m22.303460511s ago: executing program 33 (id=5895): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='ntfs3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) 16m14.295561046s ago: executing program 5 (id=6443): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x449, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x201, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0x6, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xefff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x20007, 0x3, 0x9, 0x48c93690, 0x6, 0xff], [0x7, 0x80, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x202, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3a, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0xfffffffd, 0xa4, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x9, 0x6, 0x9, 0x2, 0x4], [0x9, 0xbb31, 0x3, 0xfffffffa, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x0, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0xffffffff, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x40003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x705, 0x200, 0xfff, 0xfff]}, 0x45c) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) 16m14.190266867s ago: executing program 5 (id=6444): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)="4448fc748b2c81958feb5caa3cfac85342c1e990ab98adf8c250e194", 0xff85, 0xc005, 0x0, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x400000107ffff000, 0x0) 16m13.974176612s ago: executing program 5 (id=6446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16m13.716969329s ago: executing program 5 (id=6449): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 16m13.444693525s ago: executing program 5 (id=6452): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x0, 0x3) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1}, 0x0) 16m12.939240935s ago: executing program 5 (id=6456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) 16m12.26271967s ago: executing program 34 (id=6456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) 16m9.315059957s ago: executing program 1 (id=6484): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 16m9.082219968s ago: executing program 1 (id=6485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 16m8.868056222s ago: executing program 1 (id=6487): r0 = socket$inet6(0xa, 0x3, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) read$FUSE(r1, &(0x7f0000002840)={0x2020}, 0x2020) ppoll(&(0x7f0000000380)=[{r1, 0x200}, {r3, 0x4000}], 0x2, &(0x7f0000000500), 0x0, 0x0) 16m8.440017511s ago: executing program 1 (id=6489): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x252) 16m7.490948706s ago: executing program 1 (id=6495): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)={0x2, 0x0, [{0xeeee0000, 0xf5, &(0x7f0000000380)=""/245}, {0x5000, 0x9, &(0x7f0000000080)=""/9}]}) 16m6.738540422s ago: executing program 1 (id=6502): r0 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xc0d, 0x100, 0x2, 0xfffffff9, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m6.455580611s ago: executing program 35 (id=6502): r0 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xc0d, 0x100, 0x2, 0xfffffff9, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15m56.829361936s ago: executing program 6 (id=6552): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) 15m56.685545069s ago: executing program 6 (id=6554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x105}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 15m56.199421236s ago: executing program 6 (id=6558): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) 15m55.240185658s ago: executing program 6 (id=6563): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 15m54.979415168s ago: executing program 6 (id=6566): openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) 15m54.579435201s ago: executing program 6 (id=6569): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x0, 0x22, 0x70bd25, 0x25dfdbff}, 0x55}, 0x1, 0x0, 0x0, 0x20000011}, 0x40884) 15m53.879584979s ago: executing program 36 (id=6569): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x0, 0x22, 0x70bd25, 0x25dfdbff}, 0x55}, 0x1, 0x0, 0x0, 0x20000011}, 0x40884) 10m46.087268915s ago: executing program 7 (id=8356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 10m45.765654491s ago: executing program 7 (id=8360): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10m42.576734147s ago: executing program 7 (id=8382): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x28, 0x18, &(0x7f00000014c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@binder={0x73682a85, 0xa, 0x4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x2a}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 10m42.404616035s ago: executing program 7 (id=8385): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10m41.420027938s ago: executing program 7 (id=8390): getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r1, &(0x7f0000000000)='\"', 0xfdef) 10m40.703148441s ago: executing program 7 (id=8392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaafbac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 10m40.049005811s ago: executing program 37 (id=8392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaafbac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 8m30.526772543s ago: executing program 8 (id=8783): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m27.947576929s ago: executing program 8 (id=8789): openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x100000000000000, 0x0, 0x0) 8m26.103102991s ago: executing program 8 (id=8791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 8m14.824046681s ago: executing program 8 (id=8822): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8m13.624853111s ago: executing program 8 (id=8828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c054}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 8m12.975388569s ago: executing program 8 (id=8830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r3, 0x796c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0x7, 0x21}, 0x90) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8m12.08110646s ago: executing program 38 (id=8830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r3, 0x796c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0x7, 0x21}, 0x90) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18.78106072s ago: executing program 9 (id=10041): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x88) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000040), 0x0, 0x300}) 15.311060303s ago: executing program 9 (id=10049): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 10.906706562s ago: executing program 9 (id=10057): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0xe4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 10.518877611s ago: executing program 9 (id=10060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0x40, 0x95, [{{0x9, 0x4, 0x0, 0x6d, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xd, 0x9, 0xd}}}}}]}}]}}, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) 9.392830218s ago: executing program 2 (id=10065): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x6c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_CMD={0x0, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) 8.839179182s ago: executing program 4 (id=10066): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380), 0x1, 0x40, 0x1, {0x0, r6}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8.83695622s ago: executing program 2 (id=10067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff580", 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8.345589477s ago: executing program 4 (id=10068): socket$inet(0x2, 0x3, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) unshare(0x2c020400) setrlimit(0xd, &(0x7f0000000400)={0x0, 0x400000000000000}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0xffffffffffffffda, 0x80000000000000, {0x9, 0x0, 0x0, {0x6, 0xffffffffffffffff, 0xfffffffffffffffd, 0x7, 0xffffffffffffff81, 0x0, 0x13, 0xfffffffa, 0xfffffffe, 0x4000, 0x80, r1, r2, 0x1, 0x40000a}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x90400, 0xa4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900"], 0x80}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x183000, 0x12345}) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 7.309638133s ago: executing program 9 (id=10069): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0xc00) syz_open_procfs$pagemap(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_gettime(0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 7.206584071s ago: executing program 4 (id=10070): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) pipe(&(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 6.72201004s ago: executing program 2 (id=10072): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 6.453537408s ago: executing program 3 (id=10073): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, 'W=\x00'}) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) sendmsg$nl_route(r5, 0x0, 0x4) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x400, 0x0, 0x7fffffff, 0xfffffff9}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000280)=[r1, r2, r2], 0x3, 0x400, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r6, 0x10001, '\x00', r7, r8, 0x0, 0x1}, 0x50) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x3, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@rand_addr=0x640100fd, @loopback}, 0x10) 6.116416306s ago: executing program 2 (id=10074): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x8c880, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.049520169s ago: executing program 0 (id=10075): syz_clone(0x8022880, &(0x7f0000000140)="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", 0xfc, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)="5ee48c3e59f699a34f8990e160075a75820ca29aa8cbd5a13af50ee8f70d354da1d19a3b9f9b0d7c11d6ada101929b41d85dd14f062febf60571fd37297f303d966d5177fc615e1ed96c919c4d1374a18d96f9c834067bcc047fe4abeb6b5aca4e8734a9e8b003d881ef2dd34589f0ed2e2a3171b301d4971833f2de952a7a2d217a2b1e9b0d2ce67820f58453f7f020f034e3") r0 = io_uring_setup(0x1fc7, &(0x7f0000000080)={0x0, 0xb403, 0x100, 0xfffffdfe}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0xff, 0x1, 0x0, 0x6a}, 0x20) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r5, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 5.890424586s ago: executing program 3 (id=10076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) 5.575906357s ago: executing program 0 (id=10077): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) r6 = dup2(r5, r3) timer_settime(0x0, 0x1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f00000000c0)="67f20f1e73046564d8fb26660f383719c4e1796e390f09263bfb0f01c40fc7983d0000000f06440f20c03505000000440f22c0", 0x33}], 0x1, 0x10, 0x0, 0x0) 5.432775349s ago: executing program 4 (id=10078): setresuid(0xee01, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0xc, 0x8001, 0x3, 0x0, 0x3, 0xe}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) chown(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={{0x0, 0xea60}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='updGte default&dse:new \x00\x00'], 0x19, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r2, 0x0) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000480)="0cf88f7c0101c720373db186d199569274b2a5913b07ec3dbf066f9e509acac9a69460709ea37490cc58f09d9314dc9d0fe056e41d298b7ac34dc811afd81c64074cd9d65263ff1201513e956c4d5767fe0ec8a494b3741bc24e516f75ae7bc6c4847129d4ad30dbf166d49e0076bf0116519fbd36bff7e51a9e5661f8c24b05766de95cf02d1b372657de7a237d1d8ca70e4600fd104e70710b90f9ca0f0fde5ad10bec64ac668d396d326f5a5735f5713137471cb5687ae728d9040df4c93cd25329717960afa6d99ebcf6d52e6acbc9c5ca784b516467cc646e5922", 0xdd, r1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000680)={0x42040000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5.242556654s ago: executing program 2 (id=10079): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r0], 0x0) 3.820628811s ago: executing program 3 (id=10080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4018}], 0x1, 0x7) r4 = gettid() sched_getattr(r4, &(0x7f0000000180)={0x38}, 0x38, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050329bd70ed458cf61f063900fcdbdf25240000002f540c4f03f67bc22a3a975416c86fc54ade88eac1720f704355533fa4cf6d7016acbf582f9da5463f7a046b7d5a296343608c88c88a15bbde56684b141f476c698a720cf8f80e68fc3a21680d81d2213cbd060e87d2416388641203193ed96485c9857b347c2066dfea2d498aacd1faeedcfa66d91eaa0facdbf6c7"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.165727216s ago: executing program 2 (id=10081): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1370, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b89200000001090290"], 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4800) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.766261734s ago: executing program 4 (id=10082): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) fadvise64(0xffffffffffffffff, 0x3, 0x100, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="f4", 0x1}], 0x1}}], 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x500) 2.578522268s ago: executing program 0 (id=10083): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x0, 0xf7, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xff, 0x10016, 0x3, 0x0}) socket(0xa, 0x3, 0x3a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) write$binfmt_aout(r3, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x7ff, 0x4f424752, 0x3, @stepwise={0x0, 0xfffffff9, 0x10001, 0x0, 0x5, 0xff}}) 1.836140323s ago: executing program 9 (id=10084): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_open_pts(r1, 0x141601) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001c40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="db25380b657cfd5a3861d50ba7f95c01aa4f6b0a7971686882ca68ed646103f5e7e1a7cf89fa2f9593e4de75d7c6f4007e6e796d116edf9868cc0a359c4c5db0d2ad751d2a2537d28161d9adb7d65cbf24b1bd935e1257c8c3466caa0599a1ded7948ca10a65c3219158d234b6803c743c4fa56939b122112ee37a986f0ac6a57f08a2da61e4107f1b4b8d07228147365059291ac403a914c62e5c5f52845fd615d1d0e5524901146953f6a44b07053a35d1ed51af0e87fec0cdda2c4bc4aafe7eeda0079a57ee055597539067a15f3b3d865c151cc5fa67c1ca14", 0xdb}, {&(0x7f0000000340)="6a02bd5f92cba5739a7e0e41d7d84a56a586dd3838b817c0517419e8cb2b00315b73268d89531a6bbe0a89f46142eda7f4f4e209d52b1a58fc3dadb97438848b617e85e5820d424744330714003868165a1d6744b374e3c8be89ab8f26935154d811b537f1192d08165e3d568ccebea031579ee1dfd5781743b99cfc823b7454f790", 0xfffffe68}, {&(0x7f00000000c0)="0c7a23bd76941732786365e8a836a8d04d740c817997b25c8307ea24cb1bfe146a48f7040249350d6b2620e7c48f6e11dce979bea0806b4d2e506796", 0x3c}, {&(0x7f0000000480)="545b41919412e0aacd5837462900644afeb2f556e11650d72c7b45fe55592de9f193136b238231560326b27532d6f4cca2466ab955734571b27bdafe95be10090262989403c9dd874f0a796ebe6bfcf13ca1636b8eb685eb1935510e56e6164e1d8e57abe6a849305386f9d24c913c61e4", 0x71}], 0x4}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.084701944s ago: executing program 0 (id=10085): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc5b58c2", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.059982053s ago: executing program 3 (id=10086): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) 623.291714ms ago: executing program 3 (id=10087): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce07020000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0xe6, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c30246899c933f27eb61a36c978d828f5b691493d08ade579aa4dd705321af6e52887f1952b34e55ded07093432234ba4fbfe9bee9fc7fb0a78c7b852d6d75192a0338e929ed579b39161524e66360b5f1f882436829db4e911f66fe969db8b2c399b45fad8fdb4152dd739bbee9ec9f4d4e764bdeed866cda0daed68ad1afabde09fd11c92f50bbe408bc420a43aa1f1f5de4376ff2c6"}) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r1) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 373.877099ms ago: executing program 0 (id=10088): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) 17.740938ms ago: executing program 4 (id=10089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.37407ms ago: executing program 0 (id=10090): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='~T)v', @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24000054}, 0x80) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 0s ago: executing program 3 (id=10091): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8918, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) epoll_create1(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x1, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): evice initialization failed [ 1502.019975][ T5825] gspca_sn9c20x 5-1:0.21: probe with driver gspca_sn9c20x failed with error -71 [ 1502.030974][T31606] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1502.060899][ T5825] usb 5-1: USB disconnect, device number 15 [ 1502.256509][T31606] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1502.315092][T31606] usb 1-1: not running at top speed; connect to a high speed hub [ 1502.366206][ T30] audit: type=1326 audit(1751193077.762:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.386530][T31606] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 1502.444599][T31606] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1502.497631][T31606] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1502.502906][ T30] audit: type=1326 audit(1751193077.762:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.578956][T31606] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1502.580612][ T30] audit: type=1326 audit(1751193077.762:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.665541][T31606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.680461][ T30] audit: type=1326 audit(1751193077.762:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.700499][T31606] usb 1-1: Product: syz [ 1502.737258][T31606] usb 1-1: Manufacturer: syz [ 1502.744071][ T30] audit: type=1326 audit(1751193077.762:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f562e18d290 code=0x7ffc0000 [ 1502.773623][ T30] audit: type=1326 audit(1751193077.762:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.775236][T31606] usb 1-1: SerialNumber: syz [ 1502.801027][ T30] audit: type=1326 audit(1751193077.762:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.834656][ T30] audit: type=1326 audit(1751193077.762:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.864636][ T30] audit: type=1326 audit(1751193077.762:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1502.967367][ T3094] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1503.047417][ T3108] netlink: 'syz.4.9560': attribute type 16 has an invalid length. [ 1503.059806][ T3108] netlink: 'syz.4.9560': attribute type 17 has an invalid length. [ 1503.217614][T31606] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input142 [ 1504.527491][ T5188] bcm5974 1-1:1.0: could not read from device [ 1504.528886][ T5903] usb 1-1: USB disconnect, device number 127 [ 1504.733240][ T30] kauditd_printk_skb: 693 callbacks suppressed [ 1504.733259][ T30] audit: type=1326 audit(1751193080.152:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1504.801545][ T30] audit: type=1326 audit(1751193080.162:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1504.861296][T31606] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1504.890990][ T30] audit: type=1326 audit(1751193080.162:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1504.914291][ T30] audit: type=1326 audit(1751193080.162:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1504.971775][ T30] audit: type=1326 audit(1751193080.192:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1505.012105][ T30] audit: type=1326 audit(1751193080.202:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1505.053486][ T30] audit: type=1326 audit(1751193080.202:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1505.086889][T31606] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1505.107183][T31606] usb 5-1: config 0 has no interface number 0 [ 1505.120853][T31606] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1505.142474][ T30] audit: type=1326 audit(1751193080.202:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1505.176982][T31606] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1505.203527][T31606] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 1505.219787][ T3124] kvm: pic: level sensitive irq not supported [ 1505.221899][ T30] audit: type=1326 audit(1751193080.202:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1505.225069][ T3124] kvm: pic: non byte read [ 1505.256302][ T30] audit: type=1326 audit(1751193080.202:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3098 comm="syz.2.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x7ffc0000 [ 1505.292207][ T3124] kvm: pic: non byte read [ 1505.298868][ T3124] kvm: pic: non byte read [ 1505.303743][T31606] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1505.314010][T31606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.324213][T31606] usb 5-1: Product: syz [ 1505.329632][T31606] usb 5-1: Manufacturer: syz [ 1505.336663][T31606] usb 5-1: SerialNumber: syz [ 1505.348869][T31606] usb 5-1: config 0 descriptor?? [ 1505.358325][ T3118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1505.366161][ T3118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1505.373624][ T3124] kvm: pic: non byte read [ 1505.380541][ T3124] kvm: pic: non byte read [ 1505.385071][ T3124] kvm: pic: non byte read [ 1505.389577][ T3124] kvm: pic: non byte read [ 1505.394330][ T3124] kvm: pic: non byte read [ 1505.398995][ T3124] kvm: pic: non byte read [ 1505.403944][ T3124] kvm: pic: non byte read [ 1505.467431][T31606] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1505.507723][T31606] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1505.782536][ T5825] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1506.036998][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1506.718522][T31606] usb 5-1: USB disconnect, device number 16 [ 1506.749215][T31606] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1506.772849][T31606] cyberjack 5-1:0.69: device disconnected [ 1506.798083][ T5825] usb 1-1: not running at top speed; connect to a high speed hub [ 1506.846634][ T5825] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1506.868309][ T5825] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1506.890786][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.910864][ T5825] usb 1-1: Product: syz [ 1506.926833][ T5825] usb 1-1: Manufacturer: syz [ 1506.933322][ T5825] usb 1-1: SerialNumber: syz [ 1507.215229][ T3131] vlan0: entered promiscuous mode [ 1507.220459][ T3131] bond0: entered promiscuous mode [ 1507.466623][ T5825] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input143 [ 1507.504797][ T5825] usb 1-1: USB disconnect, device number 2 [ 1507.516971][ T5188] bcm5974 1-1:1.0: could not read from device [ 1509.820640][ T3200] tunl0: entered allmulticast mode [ 1509.833818][ T3200] gre0: entered allmulticast mode [ 1510.033095][ T3200] gretap0: entered allmulticast mode [ 1510.043819][ T3200] erspan0: entered allmulticast mode [ 1510.074917][ T3200] ip_vti0: entered allmulticast mode [ 1510.132349][ T3200] ip6_vti0: entered allmulticast mode [ 1510.176045][ T3200] sit0: entered allmulticast mode [ 1510.222281][ T3200] ip6tnl0: entered allmulticast mode [ 1510.265088][ T3200] ip6gre0: entered allmulticast mode [ 1510.338702][ T3200] syz_tun: entered allmulticast mode [ 1510.463439][ T3200] ip6gretap0: entered allmulticast mode [ 1510.560306][ T3200] bridge0: entered allmulticast mode [ 1510.573148][ T3200] bond0: entered allmulticast mode [ 1510.578576][ T3200] bond_slave_0: entered allmulticast mode [ 1510.587877][ T3200] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1510.602032][ T3200] team0: entered allmulticast mode [ 1510.607420][ T3200] team_slave_0: entered allmulticast mode [ 1510.615664][ T3200] team_slave_1: entered allmulticast mode [ 1510.776587][ T3200] dummy0: entered allmulticast mode [ 1510.792144][ T3200] nlmon0: entered allmulticast mode [ 1510.823234][ T3200] caif0: entered allmulticast mode [ 1510.955206][ T3200] wg0: entered allmulticast mode [ 1510.965786][ T3200] wg1: entered allmulticast mode [ 1511.161516][ T3200] wg2: entered allmulticast mode [ 1511.170034][ T3200] veth0_to_bridge: entered allmulticast mode [ 1511.187902][ T3200] veth0_to_bond: entered allmulticast mode [ 1511.207116][ T3200] veth0_to_team: entered allmulticast mode [ 1511.337145][ T3200] veth1_to_team: entered allmulticast mode [ 1511.457093][ T3200] veth0_to_batadv: entered allmulticast mode [ 1511.491646][ T3200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.518090][ T3200] batadv_slave_0: entered allmulticast mode [ 1511.562081][ T3200] xfrm0: entered allmulticast mode [ 1511.614681][ T3200] veth0_to_hsr: entered allmulticast mode [ 1511.661088][ T3200] hsr_slave_0: entered allmulticast mode [ 1511.701758][ T3200] veth1_to_hsr: entered allmulticast mode [ 1511.732472][ T3200] hsr_slave_1: entered allmulticast mode [ 1511.765046][ T3200] hsr0: entered allmulticast mode [ 1511.786509][ T3200] veth1_virt_wifi: entered allmulticast mode [ 1511.813400][ T3200] veth0_virt_wifi: entered allmulticast mode [ 1511.894938][ T3200] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1511.903965][ T3200] veth1_vlan: entered allmulticast mode [ 1511.913338][ T3200] veth0_vlan: entered allmulticast mode [ 1512.186579][ T3200] vlan1: entered allmulticast mode [ 1512.221502][ T3200] macvlan1: entered allmulticast mode [ 1512.304495][ T3200] ipvlan0: entered allmulticast mode [ 1512.363955][ T3200] ipvlan1: entered allmulticast mode [ 1512.417676][ T3200] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.428390][ T3200] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.701914][ T3200] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.735422][ T3200] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.751267][ T3200] geneve1: entered allmulticast mode [ 1512.851044][ T3200] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1512.880989][ T3200] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1512.896581][ T3200] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1512.913540][ T3200] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1512.940041][ T3200] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1513.008387][ T3200] vxlan0: left promiscuous mode [ 1513.038976][ T3200] mac80211_hwsim hwsim8 nicvf0: entered allmulticast mode [ 1513.076754][ T3200] vxlan1: entered allmulticast mode [ 1513.117332][ T3200] vxlan2: entered allmulticast mode [ 1513.150988][ T3200] vti60: entered allmulticast mode [ 1513.156360][ T3200] bond1: entered allmulticast mode [ 1513.188410][ T3200] vxlan3: entered allmulticast mode [ 1513.200925][ T3200] mac80211_hwsim hwsim25 wlan2: entered allmulticast mode [ 1513.334569][ T3200] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.345208][ T3200] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.355019][ T3200] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.364293][ T3200] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1513.447852][ T3200] vxlan4: left promiscuous mode [ 1513.452906][ T3200] vxlan4: entered allmulticast mode [ 1513.483076][ T3200] bond2: left promiscuous mode [ 1513.508379][ T3200] bridge1: left promiscuous mode [ 1513.531840][ T3200] ip6tnl1: entered allmulticast mode [ 1513.573992][ T3200] gtp0: entered allmulticast mode [ 1513.614878][ T3200] bridge2: entered allmulticast mode [ 1513.673031][ T3200] sit1: entered allmulticast mode [ 1513.775926][ T3200] gre1: entered allmulticast mode [ 1513.830015][ T3200] sit2: entered allmulticast mode [ 1513.885248][ T3200] bridge0.257: entered allmulticast mode [ 1513.941784][ T3200] bridge3: entered allmulticast mode [ 1513.951343][ T3200] gre2: entered allmulticast mode [ 1513.957215][ T3200] gre3: entered allmulticast mode [ 1513.977896][ T3200] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1513.993387][ T3200] ip6gretap1: entered allmulticast mode [ 1514.009897][ T3200] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 1514.053802][ T3200] bridge4: entered allmulticast mode [ 1514.076249][ T3200] veth0: entered allmulticast mode [ 1514.261335][ T3200] veth1: entered allmulticast mode [ 1514.627413][ T3200] mac80211_hwsim hwsim36 wlan3: entered allmulticast mode [ 1514.659041][ T3200] gre4: entered allmulticast mode [ 1514.771375][ T3200] bridge5: entered allmulticast mode [ 1514.846918][ T3200] bridge6: entered allmulticast mode [ 1514.882151][ T3200] bond3: entered allmulticast mode [ 1514.901434][ T3200] gretap1: entered allmulticast mode [ 1514.906942][ T3200] : entered allmulticast mode [ 1514.928677][ T3202] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.937086][ T3202] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.945863][ T3202] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.954584][ T3202] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1515.014173][ T3202] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1515.980970][ T3250] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1516.217911][ T3250] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1516.250655][ T3250] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1516.292647][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1516.292667][ T30] audit: type=1800 audit(1751193091.722:4953): pid=3271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9598" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1516.381364][ T3250] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1516.390537][ T3250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.739943][ T3268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1516.764524][ T3250] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1517.247301][ T3250] usb 4-1: USB disconnect, device number 88 [ 1518.110790][ T3220] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1518.312851][ T3220] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.354575][ T3220] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.421118][ T3220] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1518.520013][ T3220] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1518.572953][ T3220] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.645434][ T3220] usb 10-1: config 0 descriptor?? [ 1518.901133][ T3249] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1519.109617][ T3249] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1519.152792][ T3249] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1519.163583][ T3220] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1519.205706][ T3249] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1519.232967][ T3249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1519.246221][ T3249] usb 4-1: SerialNumber: syz [ 1519.285585][ T3249] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1519.329591][ T3249] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1519.373859][ T3249] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1519.412024][ T3293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.430663][ T3249] scsi host1: usb-storage 4-1:1.0 [ 1519.441198][ T3293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.529086][ T3293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.647233][ T3293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.863600][ T3250] usb 10-1: USB disconnect, device number 48 [ 1519.873555][ T3323] netlink: 'syz.3.9605': attribute type 10 has an invalid length. [ 1519.958609][ T3323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9605'. [ 1520.359015][ T3323] team0: Port device geneve0 added [ 1520.785987][ T3209] usb 4-1: USB disconnect, device number 89 [ 1522.571077][ T3250] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1522.773312][ T3250] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.806215][ T3250] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1522.858497][ T3250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.910403][ T3250] usb 10-1: config 0 descriptor?? [ 1522.962185][ T3250] pwc: Askey VC010 type 2 USB webcam detected. [ 1523.006879][ T3342] syz.4.9616 (3342): drop_caches: 2 [ 1523.366624][ T3250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1523.402105][ T3250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1523.451456][ T3250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1523.493638][ T3250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1523.502215][ T3250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1523.511186][ T3250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1523.533068][ T3250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1523.542083][ T3250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1523.549464][ T3250] pwc: recv_control_msg error -32 req 04 val 1500 [ 1523.561769][ T3250] pwc: recv_control_msg error -32 req 02 val 2500 [ 1523.569946][ T3250] pwc: recv_control_msg error -32 req 02 val 2400 [ 1523.779646][ T3250] pwc: recv_control_msg error -71 req 02 val 2900 [ 1523.794887][ T3250] pwc: recv_control_msg error -71 req 02 val 2800 [ 1523.853832][ T3250] pwc: recv_control_msg error -71 req 04 val 1100 [ 1524.120978][ T3250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1524.154384][ T3250] pwc: Registered as video103. [ 1524.191542][ T3250] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input145 [ 1524.263388][ T3250] usb 10-1: USB disconnect, device number 49 [ 1525.679592][ T3378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9625'. [ 1525.799598][ T3376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9625'. [ 1527.352881][ T3406] loop5: detected capacity change from 0 to 3607 [ 1527.731223][ T3407] loop5: detected capacity change from 3607 to 20535 [ 1527.764902][ T3290] buffer_io_error: 10 callbacks suppressed [ 1527.764924][ T3290] Buffer I/O error on dev loop5, logical block 2566, async page read [ 1527.814156][ T3290] Buffer I/O error on dev loop5, logical block 2566, async page read [ 1530.380671][ T3428] xt_hashlimit: size too large, truncated to 1048576 [ 1531.557536][ T3434] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1531.635020][ T3434] picdev_read: 2038 callbacks suppressed [ 1531.635035][ T3434] kvm: pic: non byte read [ 1531.689554][ T3434] kvm: pic: level sensitive irq not supported [ 1531.689683][ T3434] kvm: pic: non byte read [ 1531.749865][ T3434] kvm: pic: level sensitive irq not supported [ 1531.749930][ T3434] kvm: pic: non byte read [ 1531.815761][ T3212] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 1531.826105][ T3434] kvm: pic: level sensitive irq not supported [ 1531.826605][ T3434] kvm: pic: non byte read [ 1531.863536][ T3212] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1531.876145][ T3434] kvm: pic: level sensitive irq not supported [ 1531.876464][ T3434] kvm: pic: non byte read [ 1532.190832][ T3209] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1532.472267][ T3209] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1532.502365][ T3209] usb 3-1: config 0 has no interfaces? [ 1532.511378][ T3209] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 1532.540848][ T3209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.548977][ T3209] usb 3-1: Product: syz [ 1532.610937][ T3209] usb 3-1: Manufacturer: syz [ 1532.615985][ T3209] usb 3-1: SerialNumber: syz [ 1532.637280][ T3209] usb 3-1: config 0 descriptor?? [ 1532.931580][ T3445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9639'. [ 1533.233303][ T3457] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9641'. [ 1533.372427][ T3457] kvm: kvm [3456]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008d) [ 1533.641181][ T3212] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1533.853752][ T3467] netlink: 'syz.3.9644': attribute type 20 has an invalid length. [ 1533.935346][ T3212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.951027][ T3212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1533.987669][ T3212] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1533.998989][ T3212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1534.007288][ T3212] usb 5-1: SerialNumber: syz [ 1534.243540][ T3212] usb 5-1: 0:2 : does not exist [ 1534.273525][ T3212] usb 5-1: unit 5: unexpected type 0x0d [ 1534.510065][ T3212] usb 5-1: USB disconnect, device number 17 [ 1534.769001][ T3290] udevd[3290]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1535.167052][ T3220] usb 3-1: USB disconnect, device number 53 [ 1535.731444][ T3477] vlan0: entered promiscuous mode [ 1536.541183][ T3220] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1536.888026][ T3220] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 1536.917367][ T3220] usb 1-1: config 0 has no interface number 0 [ 1536.933070][ T3220] usb 1-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 1536.962879][ T3220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.139568][ T3220] usb 1-1: config 0 descriptor?? [ 1537.153549][ T3220] gspca_main: spca500-2.14.0 probing 041e:400a [ 1537.373492][ T3220] usb 1-1: USB disconnect, device number 3 [ 1538.500819][ T3209] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1538.710737][ T3209] usb 1-1: Using ep0 maxpacket: 16 [ 1538.732697][ T3209] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1538.775152][ T3209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1538.853287][ T3209] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1538.871032][ T3209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.879074][ T3209] usb 1-1: Product: syz [ 1538.885424][ T3209] usb 1-1: Manufacturer: syz [ 1538.890256][ T3209] usb 1-1: SerialNumber: syz [ 1538.906586][ T3209] usb 1-1: config 0 descriptor?? [ 1538.927573][ T3209] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1538.937152][ T3209] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1539.533676][ T3209] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1539.540419][ T3209] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1540.798644][ T3209] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1540.810835][ T3209] em28xx 1-1:0.0: No AC97 audio processor [ 1540.985371][ T3437] Set syz1 is full, maxelem 65536 reached [ 1541.721131][ T3209] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1541.807530][ T3540] loop6: detected capacity change from 0 to 524287999 [ 1541.897667][ T3209] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.908633][ T3209] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1541.932903][ T3212] usb 1-1: USB disconnect, device number 4 [ 1541.933483][ T3290] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1541.940358][ T3212] em28xx 1-1:0.0: Disconnecting em28xx [ 1541.962525][ T3209] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1542.021520][ T3212] em28xx 1-1:0.0: Freeing device [ 1542.069781][ T3209] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1542.104560][ T3209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.256468][ T3209] usb 10-1: Product: syz [ 1542.263958][ T3209] usb 10-1: Manufacturer: syz [ 1542.373159][ T3209] usb 10-1: SerialNumber: syz [ 1542.540896][ T5825] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1542.766498][ T3209] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1542.781109][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 1542.809190][ T3209] cdc_ncm 10-1:1.0: bind() failure [ 1542.836886][ T5825] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1542.891056][ T3209] usbtest 10-1:1.0: couldn't get endpoints, -22 [ 1542.903861][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.919386][ T3209] usbtest 10-1:1.0: probe with driver usbtest failed with error -22 [ 1543.041405][ T5825] usb 3-1: Product: syz [ 1543.127315][ T5825] usb 3-1: Manufacturer: syz [ 1543.145294][ T3209] usb 10-1: USB disconnect, device number 50 [ 1543.153727][ T5825] usb 3-1: SerialNumber: syz [ 1543.294749][ T5825] usb 3-1: config 0 descriptor?? [ 1543.933327][ T3555] input: syz1 as /devices/virtual/input/input146 [ 1544.064748][ T3283] udevd[3283]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1545.220891][ T3212] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1545.383601][ T3212] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1545.400892][ T3212] usb 10-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1545.411028][ T3212] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.447920][ T3212] usb 10-1: config 0 descriptor?? [ 1545.461080][ T3250] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1545.468852][ T3249] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1545.669612][ T5825] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1545.698742][ T5825] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1545.763484][ T5825] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1545.766344][ T3249] usb 1-1: Using ep0 maxpacket: 8 [ 1545.781213][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1545.787121][ T5825] usb 3-1: USB disconnect, device number 54 [ 1545.819400][ T3579] syz_tun: entered promiscuous mode [ 1545.825567][ T3250] usb 4-1: Using ep0 maxpacket: 32 [ 1545.833419][ T3249] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1545.842138][ T3579] macvtap1: entered promiscuous mode [ 1545.867342][ T3579] macvtap1: entered allmulticast mode [ 1545.870998][ T3250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.894009][ T3249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.894080][ T3580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1545.913840][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.918225][ T3250] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1545.920196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.935258][ T3579] syz_tun: entered allmulticast mode [ 1545.963341][ T3249] usb 1-1: Product: syz [ 1545.969394][ T3249] usb 1-1: Manufacturer: syz [ 1545.977809][ T3250] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1545.996541][ T3580] syz_tun: left allmulticast mode [ 1545.997168][ T3249] usb 1-1: SerialNumber: syz [ 1546.013022][ T3250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.027167][ T3212] elecom 0003:056E:00E6.0071: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.9-1/input0 [ 1546.047038][ T3249] usb 1-1: config 0 descriptor?? [ 1546.049340][ T3580] syz_tun: left promiscuous mode [ 1546.059183][ T3250] usb 4-1: config 0 descriptor?? [ 1546.085027][ T3250] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1546.114711][ T3582] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1546.140156][ T3582] tipc: Resetting bearer [ 1546.234506][ T3212] usb 10-1: USB disconnect, device number 51 [ 1546.278925][ T3249] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1546.976806][ T3605] ptrace attach of "./syz-executor exec"[23728] was attempted by "./syz-executor exec"[3605] [ 1547.950934][ T3249] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1547.973021][ T3249] usb 1-1: USB disconnect, device number 5 [ 1548.186575][ T3226] usb 4-1: USB disconnect, device number 90 [ 1548.930317][ T3624] netlink: 'syz.3.9683': attribute type 1 has an invalid length. [ 1549.030642][ T3624] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1549.039883][ T3624] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1549.049138][ T3624] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1549.064868][ T3626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9683'. [ 1549.065596][ T3624] bond1: (slave geneve2): making interface the new active one [ 1549.082496][ T3624] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1549.134814][ T3626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1551.500184][ T3661] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 1551.507305][ T3661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1551.544415][ T3655] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1551.550997][ T3655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1551.624818][ T3661] vhci_hcd vhci_hcd.0: Device attached [ 1551.637636][ T3655] vhci_hcd vhci_hcd.0: Device attached [ 1551.684038][ T3665] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 1551.690702][ T3665] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1551.730995][ T3212] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1551.780843][ T3665] vhci_hcd vhci_hcd.0: Device attached [ 1551.798053][ T3668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1551.804603][ T3668] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1551.875793][ T3226] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1551.881070][ T3668] vhci_hcd vhci_hcd.0: Device attached [ 1551.891442][ T3658] vhci_hcd: connection closed [ 1551.894345][ T3662] vhci_hcd: connection closed [ 1551.907422][ T3666] vhci_hcd: connection closed [ 1551.914954][ T3212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.950825][ T3545] vhci_hcd: stop threads [ 1552.000750][ T3545] vhci_hcd: release socket [ 1552.011368][ T3212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.033290][ T3545] vhci_hcd: disconnect device [ 1552.070872][ T3212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1552.084007][ T3545] vhci_hcd: stop threads [ 1552.088291][ T3545] vhci_hcd: release socket [ 1552.111075][ T3545] vhci_hcd: disconnect device [ 1552.117425][ T3669] vhci_hcd: connection closed [ 1552.126687][ T3212] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1552.140795][ T3545] vhci_hcd: stop threads [ 1552.154760][ T3545] vhci_hcd: release socket [ 1552.175969][ T3545] vhci_hcd: disconnect device [ 1552.181634][ T3212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.190276][ T3545] vhci_hcd: stop threads [ 1552.206386][ T3545] vhci_hcd: release socket [ 1552.216327][ T3212] usb 5-1: config 0 descriptor?? [ 1552.222145][ T3545] vhci_hcd: disconnect device [ 1552.735204][ T3212] plantronics 0003:047F:FFFF.0072: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1552.952613][ T3660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.975926][ T3660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.069571][ T3249] usb 5-1: USB disconnect, device number 18 [ 1553.279684][ T3684] loop4: detected capacity change from 0 to 7 [ 1553.445847][ T3290] Dev loop4: unable to read RDB block 7 [ 1553.458133][ T3290] loop4: unable to read partition table [ 1553.491708][ T3290] loop4: partition table beyond EOD, truncated [ 1553.526140][ T3684] Dev loop4: unable to read RDB block 7 [ 1553.534830][ T3684] loop4: unable to read partition table [ 1553.544706][ T3684] loop4: partition table beyond EOD, truncated [ 1553.577154][ T3684] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1553.949270][ T3697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9697'. [ 1553.987859][ T3697] bond0: entered promiscuous mode [ 1554.031142][ T3697] bond_slave_0: entered promiscuous mode [ 1554.037187][ T3697] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1554.052411][ T3250] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1554.122963][ T3697] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1554.189666][ T3697] bond0: left promiscuous mode [ 1554.222391][ T3704] netlink: 'syz.3.9698': attribute type 1 has an invalid length. [ 1554.230779][ T3250] usb 3-1: Using ep0 maxpacket: 16 [ 1554.232703][ T3697] bond_slave_0: left promiscuous mode [ 1554.672308][ T3250] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.690799][ T3250] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1554.702267][ T3250] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1554.711546][ T3250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.728412][ T3250] usb 3-1: Product: syz [ 1554.751393][ T3250] usb 3-1: Manufacturer: syz [ 1554.770550][ T3250] usb 3-1: SerialNumber: syz [ 1554.782898][ T3697] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1554.994583][ T3704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1555.036586][ T3707] bond2: (slave gretap1): making interface the new active one [ 1555.048766][ T3250] usb 3-1: 0:2 : does not exist [ 1555.052020][ T3707] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1555.160342][ T3250] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1555.243898][ T3250] usb 3-1: USB disconnect, device number 55 [ 1555.354273][ T3290] udevd[3290]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1556.214847][ T3731] netlink: 'syz.2.9704': attribute type 1 has an invalid length. [ 1556.245583][ T3731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1556.609510][ T3731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1556.642826][ T3731] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1556.696275][ T3731] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1557.150837][ T3226] vhci_hcd: vhci_device speed not set [ 1557.637065][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9706'. [ 1557.971044][ T5889] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1558.131051][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 1558.143082][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1558.197433][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1558.242412][ T3748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9710'. [ 1558.260632][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1558.276614][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.290936][ T3748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.306141][ T5889] usb 4-1: Product: syz [ 1558.312622][ T5889] usb 4-1: Manufacturer: syz [ 1558.317265][ T5889] usb 4-1: SerialNumber: syz [ 1558.371036][ T3753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1558.378729][ T5889] usb 4-1: config 0 descriptor?? [ 1558.393938][ T5889] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1558.412426][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9710'. [ 1558.421768][ T5889] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1558.557714][ T5825] usb usb40-port1: attempt power cycle [ 1558.677668][ T3212] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1558.883314][ T3212] usb 5-1: Using ep0 maxpacket: 8 [ 1558.898307][ T3212] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1558.906929][ T3212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1558.923660][ T3212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1558.944985][ T3212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1558.961927][ T3212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1558.988600][ T3212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1559.021102][ T3212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1559.060375][ T5889] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1559.076469][ T5889] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1559.090750][ T3212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.142107][ T5825] usb usb40-port1: unable to enumerate USB device [ 1559.384518][ T3212] usb 5-1: usb_control_msg returned -71 [ 1559.395529][ T3212] usbtmc 5-1:16.0: can't read capabilities [ 1559.467938][ T3212] usb 5-1: USB disconnect, device number 19 [ 1559.760896][ T5889] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1559.787813][ T3760] kvm: pic: non byte read [ 1559.790776][ T5889] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1559.798743][ T3760] kvm: pic: non byte read [ 1559.820306][ T3760] kvm: pic: non byte read [ 1559.827388][ T3760] kvm: pic: non byte read [ 1559.835022][ T3760] kvm: pic: non byte read [ 1559.839612][ T3760] kvm: pic: level sensitive irq not supported [ 1559.839667][ T3760] kvm: pic: non byte read [ 1559.850638][ T3760] kvm: pic: single mode not supported [ 1559.850726][ T3760] kvm: pic: level sensitive irq not supported [ 1559.869009][ T3760] kvm: pic: non byte read [ 1559.893933][ T3760] kvm: pic: non byte read [ 1559.898544][ T3760] kvm: pic: single mode not supported [ 1559.898618][ T3760] kvm: pic: non byte read [ 1559.949809][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1559.960634][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1560.401204][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1560.408106][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1560.410749][ T3226] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1560.415544][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1560.460302][ T5889] usb 4-1: USB disconnect, device number 91 [ 1560.590931][ T3226] usb 3-1: Using ep0 maxpacket: 8 [ 1560.597885][ T3226] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1560.620126][ T3226] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1560.630156][ T3226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.650308][ T3226] usb 3-1: Product: syz [ 1560.663915][ T3226] usb 3-1: Manufacturer: syz [ 1560.675116][ T3226] usb 3-1: SerialNumber: syz [ 1560.711093][ T5825] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1560.714632][ T3226] usb 3-1: config 0 descriptor?? [ 1560.740182][ T3226] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1560.886578][ T5825] usb 1-1: config 0 has no interfaces? [ 1560.897585][ T5825] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1560.950373][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1561.039205][ T5825] usb 1-1: Product: syz [ 1561.074284][ T5825] usb 1-1: Manufacturer: syz [ 1561.086349][ T5825] usb 1-1: SerialNumber: syz [ 1561.113823][ T5825] usb 1-1: config 0 descriptor?? [ 1561.903516][ T3226] gspca_zc3xx: reg_w_i err -110 [ 1562.090289][ T3220] usb 1-1: USB disconnect, device number 6 [ 1562.601033][ T3226] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1562.611523][ T3226] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1562.961189][ T3226] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1563.154308][ T3226] usb 5-1: Using ep0 maxpacket: 32 [ 1563.171869][ T3226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.184655][ T3226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.252085][ T3226] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1563.293958][ T3226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.378198][ T3226] usb 5-1: config 0 descriptor?? [ 1563.407511][ T3226] hub 5-1:0.0: USB hub found [ 1563.456728][T31634] usb 3-1: USB disconnect, device number 56 [ 1563.619561][ T3226] hub 5-1:0.0: 1 port detected [ 1564.288708][ T3226] hub 5-1:0.0: activate --> -90 [ 1564.935732][ T3220] usb 5-1: USB disconnect, device number 20 [ 1565.163710][ T3810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9726'. [ 1565.177702][ T3810] vlan2: entered promiscuous mode [ 1565.182880][ T3810] bridge0: entered promiscuous mode [ 1565.496666][ T3816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1566.382959][ T3220] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1566.633663][ T3220] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.650770][ T3220] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1566.707311][ T3220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.781625][ T3220] usb 5-1: config 0 descriptor?? [ 1566.831711][ T3220] pwc: Askey VC010 type 2 USB webcam detected. [ 1567.244562][ T3220] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1567.283526][ T3220] pwc: recv_control_msg error -32 req 02 val 2700 [ 1567.324032][ T3220] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1567.341585][ T3220] pwc: recv_control_msg error -32 req 04 val 1000 [ 1567.353520][ T3220] pwc: recv_control_msg error -32 req 04 val 1300 [ 1567.372290][ T3220] pwc: recv_control_msg error -32 req 04 val 1400 [ 1567.691620][ T3220] pwc: recv_control_msg error -32 req 02 val 2000 [ 1567.698810][ T3220] pwc: recv_control_msg error -32 req 02 val 2100 [ 1567.706109][ T3220] pwc: recv_control_msg error -32 req 04 val 1500 [ 1567.713238][ T3220] pwc: recv_control_msg error -32 req 02 val 2500 [ 1567.928796][ T3220] pwc: recv_control_msg error -71 req 02 val 2600 [ 1567.944376][ T3220] pwc: recv_control_msg error -71 req 02 val 2900 [ 1567.979832][ T3220] pwc: recv_control_msg error -71 req 02 val 2800 [ 1568.006069][ T3220] pwc: recv_control_msg error -71 req 04 val 1100 [ 1568.041115][ T3220] pwc: recv_control_msg error -71 req 04 val 1200 [ 1568.078380][ T3220] pwc: Registered as video103. [ 1568.135925][ T3220] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input148 [ 1568.275233][ T3220] usb 5-1: USB disconnect, device number 21 [ 1572.880567][ T3887] kvm: pic: level sensitive irq not supported [ 1572.882605][ T3887] kvm: pic: non byte read [ 1572.963396][ T3887] kvm: pic: non byte read [ 1572.965354][ T3892] vlan3: entered promiscuous mode [ 1572.967787][ T3887] kvm: pic: non byte read [ 1572.983066][ T3892] bond0: entered promiscuous mode [ 1573.172974][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9744'. [ 1573.182009][ T3895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9744'. [ 1573.291942][ T3887] kvm: pic: non byte read [ 1573.301265][ T3887] kvm: pic: non byte read [ 1573.306975][ T3887] kvm: pic: non byte read [ 1573.311868][ T3887] kvm: pic: non byte read [ 1573.316364][ T3887] kvm: pic: non byte read [ 1573.321348][ T3887] kvm: pic: non byte read [ 1573.325933][ T3887] kvm: pic: non byte read [ 1574.596465][ T3900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1574.687366][ T3900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1576.001727][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 1576.711480][ T5153] Bluetooth: hci0: command 0x0405 tx timeout [ 1576.857215][ T3937] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1576.924689][ T3937] kvm: pic: level sensitive irq not supported [ 1576.926693][ T3937] kvm: pic: level sensitive irq not supported [ 1576.967780][ T3937] kvm: pic: level sensitive irq not supported [ 1577.546756][ T3951] netlink: 'syz.9.9756': attribute type 2 has an invalid length. [ 1577.627371][ T3951] $Hÿ: renamed from bond0 [ 1577.923796][ T3958] netlink: 'syz.3.9769': attribute type 12 has an invalid length. [ 1578.631641][ T3962] kvm: pic: level sensitive irq not supported [ 1578.631854][ T3962] picdev_read: 2042 callbacks suppressed [ 1578.631868][ T3962] kvm: pic: non byte read [ 1578.800993][ T3962] kvm: pic: non byte read [ 1578.805497][ T3962] kvm: pic: non byte read [ 1578.809953][ T3962] kvm: pic: non byte read [ 1578.825405][ T3962] kvm: pic: non byte read [ 1578.836819][ T3962] kvm: pic: non byte read [ 1578.850479][ T3962] kvm: pic: non byte read [ 1578.860644][ T3962] kvm: pic: non byte read [ 1578.879444][ T3962] kvm: pic: non byte read [ 1578.888885][ T3962] kvm: pic: non byte read [ 1582.206109][ T30] audit: type=1326 audit(1751193157.622:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4000 comm="syz.9.9770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ba118e929 code=0x0 [ 1582.917771][ T3995] blktrace: Concurrent blktraces are not allowed on sg0 [ 1583.176055][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9773'. [ 1583.213082][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.425938][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.643746][ T4033] picdev_read: 2038 callbacks suppressed [ 1585.643764][ T4033] kvm: pic: non byte read [ 1585.661761][ T4033] kvm: pic: non byte read [ 1585.691119][ T4033] kvm: pic: non byte read [ 1585.731377][ T4033] kvm: pic: non byte read [ 1585.753846][ T4033] kvm: pic: non byte read [ 1585.775173][ T4033] kvm: pic: level sensitive irq not supported [ 1585.775227][ T4033] kvm: pic: non byte read [ 1585.822233][ T4033] kvm: pic: single mode not supported [ 1585.822257][ T4033] kvm: pic: level sensitive irq not supported [ 1585.827741][ T4033] kvm: pic: non byte read [ 1585.912964][ T4033] kvm: pic: non byte read [ 1585.917627][ T4033] kvm: pic: single mode not supported [ 1585.917697][ T4033] kvm: pic: non byte read [ 1586.675694][ T4038] fanotify_encode_fh: 864 callbacks suppressed [ 1586.675735][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.689159][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.696442][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.704041][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.711610][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.718840][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.726340][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.733883][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.741113][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1586.758869][ T4038] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1587.378122][ T30] audit: type=1326 audit(1751193162.802:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4039 comm="syz.9.9780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ba118e929 code=0x0 [ 1588.896909][ T3976] syz.4.9762 (3976): drop_caches: 1 [ 1588.916005][ T3975] syz.4.9762 (3975): drop_caches: 1 [ 1591.130954][ T5825] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1591.330835][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 1591.897424][ T5825] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1592.175850][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1592.207553][ T5825] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1592.230861][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.266786][ T5825] usb 1-1: Product: syz [ 1592.272580][ T5825] usb 1-1: Manufacturer: syz [ 1592.281023][ T5825] usb 1-1: SerialNumber: syz [ 1592.372223][ T4072] netlink: 'syz.3.9789': attribute type 10 has an invalid length. [ 1592.390457][ T4072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9789'. [ 1592.410997][ T4072] dummy0: entered promiscuous mode [ 1592.434051][ T4072] bridge0: port 3(dummy0) entered blocking state [ 1592.481800][ T4072] bridge0: port 3(dummy0) entered disabled state [ 1592.520117][ T5825] usb 1-1: 0:2 : does not exist [ 1592.540051][ T5825] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1592.558393][ T4072] dummy0: entered allmulticast mode [ 1592.638139][ T5825] usb 1-1: USB disconnect, device number 7 [ 1592.729631][ T4065] udevd[4065]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1592.747966][ T4072] bridge0: port 3(dummy0) entered blocking state [ 1592.754511][ T4072] bridge0: port 3(dummy0) entered forwarding state [ 1592.867924][ T4079] bridge0: port 3(gretap0) entered blocking state [ 1592.877512][ T4079] bridge0: port 3(gretap0) entered disabled state [ 1592.887171][ T4079] gretap0: entered promiscuous mode [ 1592.918427][ T4079] gretap0: left promiscuous mode [ 1592.925746][ T4079] bridge0: port 3(gretap0) entered disabled state [ 1594.682655][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1594.692004][ T4095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1596.170890][ T5825] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1596.414004][ T5825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1596.487930][ T5825] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1596.534417][ T5825] usb 4-1: config 1 has no interface number 1 [ 1596.540576][ T5825] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1596.592501][ T3220] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1596.673193][ T5825] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1596.708532][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.712810][ T4116] netlink: 'syz.4.9799': attribute type 1 has an invalid length. [ 1596.781250][ T5825] usb 4-1: Product: syz [ 1596.783900][ T4116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1596.785565][ T5825] usb 4-1: Manufacturer: syz [ 1596.785587][ T5825] usb 4-1: SerialNumber: syz [ 1596.802238][ T3220] usb 10-1: Using ep0 maxpacket: 16 [ 1596.820126][ T3220] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1596.829442][ T3220] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1596.837720][ T3220] usb 10-1: Product: syz [ 1596.842153][ T3220] usb 10-1: Manufacturer: syz [ 1596.846834][ T3220] usb 10-1: SerialNumber: syz [ 1596.859301][ T3220] usb 10-1: config 0 descriptor?? [ 1596.881498][ T4116] veth0_to_bond: left allmulticast mode [ 1596.894480][ T4116] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1597.040622][ T4118] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1597.220625][ T4105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=7 (14 ns) > initial count (10 ns). Using initial count to start timer. [ 1597.257099][ T4116] vlan0: entered allmulticast mode [ 1597.275517][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9800'. [ 1597.293185][ T4116] bond4: (slave vlan0): Opening slave failed [ 1597.330165][ T4122] kvm: pic: non byte write [ 1597.737768][ T5825] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 1597.768089][ T5825] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 1597.789313][ T5825] usb 4-1: failed to enable PITCH for EP 0x82 [ 1597.855598][ T3250] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1597.948333][ T5825] usb 4-1: USB disconnect, device number 92 [ 1598.051078][ T3250] usb 1-1: Using ep0 maxpacket: 16 [ 1598.084369][ T3250] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.114126][ T3250] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1598.655498][ T4133] udevd[4133]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1598.657710][ T3250] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1599.130775][ T3250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.131787][ T4140] netlink: 'syz.4.9804': attribute type 2 has an invalid length. [ 1599.156273][ T3250] usb 1-1: Product: syz [ 1599.211317][ T4140] $Hÿ: renamed from bond0 [ 1599.225327][ T3250] usb 1-1: Manufacturer: syz [ 1599.255701][ T4140] $Hÿ: entered promiscuous mode [ 1599.260981][ T4140] bond_slave_0: entered promiscuous mode [ 1599.267651][ T4140] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1599.275189][ T4140] $Hÿ: left allmulticast mode [ 1599.329277][ T3250] usb 1-1: SerialNumber: syz [ 1599.619907][ T3250] usb 1-1: 0:2 : does not exist [ 1599.635513][ T3250] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1599.731145][ T3250] usb 1-1: USB disconnect, device number 8 [ 1599.870395][ T4129] udevd[4129]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1599.897628][ T5889] usb 10-1: USB disconnect, device number 52 [ 1601.512786][ T4164] netlink: 'syz.0.9811': attribute type 10 has an invalid length. [ 1601.583652][ T4164] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1601.791355][ T4164] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1602.001516][ T30] audit: type=1326 audit(1751193177.422:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4171 comm="syz.4.9813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd18fb8e929 code=0x0 [ 1602.023371][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.560889][ T3226] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1603.792409][ T3226] usb 10-1: Using ep0 maxpacket: 16 [ 1603.810932][ T5889] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1603.907195][ T3226] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.995418][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 1604.023363][ T3226] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1604.042678][ T3226] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.074088][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1604.105138][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1604.124042][ T3226] usb 10-1: config 0 descriptor?? [ 1604.149119][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1604.159942][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.213868][ T5889] usb 5-1: Product: syz [ 1604.227964][ T5889] usb 5-1: Manufacturer: syz [ 1604.248690][ T5889] usb 5-1: SerialNumber: syz [ 1604.275442][ T5889] usb 5-1: config 0 descriptor?? [ 1604.293964][ T5889] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1604.408740][ T5889] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1604.441625][ T4184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.452469][ T4184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.917054][ T5889] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1604.927018][ T5889] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1605.264192][ T4199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9816'. [ 1605.744524][ T3250] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1606.016470][ T5889] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1606.116466][ T5889] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1606.190908][ T3250] usb 1-1: Using ep0 maxpacket: 32 [ 1606.232897][ T3250] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1606.269887][ T3250] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1606.331516][ T3250] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.457847][ T3250] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1606.514741][ T3250] usb 1-1: config 1 has no interface number 0 [ 1606.560389][ T3250] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1606.630741][ T3250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.726811][ T3250] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1606.771010][ T5889] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 1606.799793][ T3226] usbhid 10-1:0.0: can't add hid device: -71 [ 1606.807667][ T5889] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1606.819497][ T3226] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1606.888486][ T3250] snd_usb_pod 1-1:1.1: set_interface failed [ 1606.915244][ T3226] usb 10-1: USB disconnect, device number 53 [ 1606.929432][ T3250] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1606.956849][ T5889] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1606.978539][ T5889] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1606.980930][ T3250] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1607.031490][ T3250] usb 1-1: USB disconnect, device number 9 [ 1607.091229][ T5889] usb 5-1: USB disconnect, device number 22 [ 1607.347509][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.354823][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.648486][ T4216] netlink: 'syz.3.9823': attribute type 2 has an invalid length. [ 1607.745552][ T4216] $Hÿ: renamed from bond0 (while UP) [ 1607.849493][ T4216] $Hÿ: entered promiscuous mode [ 1607.854882][ T4216] bond_slave_0: entered promiscuous mode [ 1607.866554][ T4216] bond_slave_1: entered promiscuous mode [ 1608.106498][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'. [ 1608.117877][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'. [ 1608.180031][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'. [ 1608.291310][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'. [ 1608.406888][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'. [ 1608.518417][ T4233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1608.525001][ T4233] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1608.706651][ T4233] vhci_hcd vhci_hcd.0: Device attached [ 1608.802799][ T4236] vhci_hcd vhci_hcd.0: port 0 already used [ 1608.825651][ T4234] vhci_hcd: connection closed [ 1608.827499][ T36] vhci_hcd: stop threads [ 1608.844757][ T36] vhci_hcd: release socket [ 1608.850767][ T5889] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1608.862916][ T36] vhci_hcd: disconnect device [ 1609.234226][ T5889] usb 10-1: config 0 has no interfaces? [ 1609.249048][ T5889] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1609.258882][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.273538][ T5889] usb 10-1: Product: syz [ 1609.277887][ T5889] usb 10-1: Manufacturer: syz [ 1609.297018][ T5889] usb 10-1: SerialNumber: syz [ 1609.343645][ T5889] usb 10-1: config 0 descriptor?? [ 1610.370804][ T3226] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1610.710801][ T3226] usb 1-1: Using ep0 maxpacket: 32 [ 1610.827512][ T3226] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1610.925980][ T3226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.940620][ T3226] usb 1-1: Product: syz [ 1610.945105][ T3226] usb 1-1: Manufacturer: syz [ 1610.950158][ T3226] usb 1-1: SerialNumber: syz [ 1610.988433][ T3226] usb 1-1: config 0 descriptor?? [ 1612.284415][ T4286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.333473][ T3250] usb 10-1: USB disconnect, device number 54 [ 1614.302050][ T3226] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1614.378572][ T4306] netlink: 'syz.2.9838': attribute type 20 has an invalid length. [ 1614.416931][ T3226] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1614.742485][ T3226] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1614.774752][ T3226] usb 1-1: USB disconnect, device number 10 [ 1618.749806][ T4340] binder: 4339:4340 unknown command 0 [ 1618.765715][ T4340] binder: 4339:4340 ioctl c0306201 2000000003c0 returned -22 [ 1619.900074][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9850'. [ 1620.000709][ T30] audit: type=1326 audit(1751193195.412:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.079126][ T30] audit: type=1326 audit(1751193195.452:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.134511][ T30] audit: type=1326 audit(1751193195.452:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb830f8d290 code=0x7ffc0000 [ 1620.180558][ T30] audit: type=1326 audit(1751193195.452:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.216678][ T30] audit: type=1326 audit(1751193195.452:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.337241][ T4366] netlink: 'syz.2.9851': attribute type 10 has an invalid length. [ 1620.404670][ T4366] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1620.410059][ T30] audit: type=1326 audit(1751193195.452:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.458830][ T30] audit: type=1326 audit(1751193195.452:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.483167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.544403][ T30] audit: type=1326 audit(1751193195.452:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.566770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.595284][ T30] audit: type=1326 audit(1751193195.502:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1620.655328][ T30] audit: type=1326 audit(1751193195.502:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.0.9861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb830f8e929 code=0x7ffc0000 [ 1621.283414][ T4376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9854'. [ 1621.323439][ T4376] bond0: entered promiscuous mode [ 1621.337018][ T4376] bond_slave_0: entered promiscuous mode [ 1621.351052][ T4376] bond_slave_1: entered promiscuous mode [ 1621.370039][ T4376] bridge0: entered promiscuous mode [ 1621.383974][ T4376] vxlan0: entered promiscuous mode [ 1621.410257][ T4376] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 1621.460105][ T4376] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1621.473323][ T4376] bond0: left promiscuous mode [ 1621.478226][ T4376] bond_slave_0: left promiscuous mode [ 1621.570984][ T4376] bond_slave_1: left promiscuous mode [ 1621.577443][ T4376] bridge0: left promiscuous mode [ 1621.583600][ T4376] vxlan0: left promiscuous mode [ 1621.592837][ T4376] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 1622.330758][ T5889] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1622.644455][ T5889] usb 4-1: config 0 has no interfaces? [ 1622.762413][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1623.034922][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.251241][ T5889] usb 4-1: Product: syz [ 1623.316379][ T5889] usb 4-1: Manufacturer: syz [ 1623.560904][ T5889] usb 4-1: SerialNumber: syz [ 1623.580913][ T5889] usb 4-1: config 0 descriptor?? [ 1624.540871][ T3226] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1624.750865][ T3226] usb 5-1: Using ep0 maxpacket: 8 [ 1624.774403][ T3226] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1624.783859][ T3226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.798162][ T3226] usb 5-1: Product: syz [ 1624.802629][ T3226] usb 5-1: Manufacturer: syz [ 1624.814329][ T3226] usb 5-1: SerialNumber: syz [ 1624.833506][ T3226] usb 5-1: config 0 descriptor?? [ 1624.860303][ T3226] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1624.995440][ T3226] usb 5-1: setting power ON [ 1625.193833][ T3226] dvb-usb: bulk message failed: -22 (2/0) [ 1625.554364][ T3226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1625.664046][ T3226] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1625.719900][ T3226] usb 5-1: media controller created [ 1625.733181][T31634] usb 4-1: USB disconnect, device number 93 [ 1625.808814][ T3226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1625.983699][ T3226] usb 5-1: selecting invalid altsetting 6 [ 1625.999848][ T3226] usb 5-1: digital interface selection failed (-22) [ 1626.014494][ T3226] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1626.049395][ T3226] usb 5-1: setting power OFF [ 1626.084080][ T3226] dvb-usb: bulk message failed: -22 (2/0) [ 1626.097297][ T3226] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1626.125891][ T3226] (NULL device *): no alternate interface [ 1626.196371][ T3226] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1626.200897][T31634] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1626.305892][ T3226] usb 5-1: USB disconnect, device number 23 [ 1626.452660][T31634] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.487318][T31634] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1626.516662][ T4426] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9868'. [ 1626.527661][T31634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.593395][T31634] usb 4-1: config 0 descriptor?? [ 1626.639439][T31634] pwc: Askey VC010 type 2 USB webcam detected. [ 1627.035878][T31634] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1627.046561][T31634] pwc: recv_control_msg error -32 req 02 val 2700 [ 1627.091016][T31634] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1627.184071][T31634] pwc: recv_control_msg error -32 req 04 val 1000 [ 1627.205347][T31634] pwc: recv_control_msg error -32 req 04 val 1300 [ 1627.235953][T31634] pwc: recv_control_msg error -32 req 04 val 1400 [ 1627.250062][ T4434] bond0: entered promiscuous mode [ 1627.250122][T31634] pwc: recv_control_msg error -32 req 02 val 2000 [ 1627.255516][ T4434] bond0: entered allmulticast mode [ 1627.291862][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.377828][T31634] pwc: recv_control_msg error -32 req 02 val 2100 [ 1627.387674][T31634] pwc: recv_control_msg error -32 req 04 val 1500 [ 1627.414274][T31634] pwc: recv_control_msg error -32 req 02 val 2500 [ 1627.434583][T31634] pwc: recv_control_msg error -32 req 02 val 2400 [ 1627.645612][T31634] pwc: recv_control_msg error -71 req 02 val 2900 [ 1627.671523][T31634] pwc: recv_control_msg error -71 req 02 val 2800 [ 1627.687126][T31634] pwc: recv_control_msg error -71 req 04 val 1100 [ 1627.700192][T31634] pwc: recv_control_msg error -71 req 04 val 1200 [ 1627.754660][T31634] pwc: Registered as video103. [ 1627.910807][ T5889] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1627.964084][T31634] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input149 [ 1628.011062][T31634] usb 4-1: USB disconnect, device number 94 [ 1628.065072][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 1628.088376][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1628.213928][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1628.250126][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1628.274355][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.349454][ T5889] usb 1-1: Product: syz [ 1628.356363][ T5889] usb 1-1: Manufacturer: syz [ 1628.372203][ T5889] usb 1-1: SerialNumber: syz [ 1628.394983][ T5889] usb 1-1: config 0 descriptor?? [ 1628.449715][ T5889] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1628.460408][ T5889] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1628.728025][ T4451] input: syz1 as /devices/virtual/input/input150 [ 1629.234849][ T5889] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1629.245539][ T5889] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1629.611009][ T3226] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1629.790813][ T3226] usb 3-1: Using ep0 maxpacket: 8 [ 1629.876766][ T5889] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1629.911692][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1629.960228][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1630.019502][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1630.026928][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1630.034819][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1630.779317][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1630.791705][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1630.798117][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1630.910786][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1630.924502][ T5889] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1631.133855][ T5889] usb 1-1: USB disconnect, device number 11 [ 1632.781750][ T3226] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1632.830596][ T3226] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1632.838916][ T3226] usb 3-1: can't read configurations, error -71 [ 1633.869481][ T4499] netlink: 'syz.4.9885': attribute type 20 has an invalid length. [ 1634.192557][ T4505] netlink: 'syz.3.9887': attribute type 10 has an invalid length. [ 1634.722317][ T4505] team0: Port device wlan1 added [ 1635.861736][ T4524] netlink: 'syz.2.9892': attribute type 23 has an invalid length. [ 1637.089446][ T4541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9893'. [ 1637.180355][ T4547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.534454][ T4552] netlink: 'syz.3.9899': attribute type 10 has an invalid length. [ 1637.573778][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9900'. [ 1637.584240][ T4552] team0: Port device wlan1 removed [ 1637.603683][ T4552] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 1637.628280][ T4552] $Hÿ: (slave wlan1): Enslaving as an active interface with an up link [ 1637.770759][T31634] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1638.004776][T31634] usb 3-1: Using ep0 maxpacket: 16 [ 1638.022782][T31634] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1638.067376][T31634] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1638.188557][T31634] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1638.208058][T31634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.270303][T31634] usb 3-1: Product: syz [ 1638.320801][T31634] usb 3-1: Manufacturer: syz [ 1638.368134][T31634] usb 3-1: SerialNumber: syz [ 1638.602595][T31634] usb 3-1: 0:2 : does not exist [ 1638.632225][T31634] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1638.820877][T31634] usb 3-1: USB disconnect, device number 59 [ 1638.885953][ T4129] udevd[4129]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1640.918648][ T4591] netlink: 'syz.9.9904': attribute type 20 has an invalid length. [ 1641.057384][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9907'. [ 1642.375860][T31634] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1642.870906][T31634] usb 5-1: Using ep0 maxpacket: 16 [ 1642.887357][T31634] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1643.050746][T31634] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1643.070791][T31634] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1643.082736][T31634] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1643.096099][T31634] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1643.169480][T31634] usb 5-1: config 0 has no interface number 0 [ 1643.186017][T31634] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1643.218745][T31634] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1643.264736][T31634] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1643.290027][T31634] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1643.313943][T31634] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1643.367886][T31634] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1643.508003][T31634] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1643.517709][T31634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.580589][T31634] usb 5-1: Product: syz [ 1643.608622][T31634] usb 5-1: Manufacturer: syz [ 1643.670109][T31634] usb 5-1: SerialNumber: syz [ 1643.725861][T31634] usb 5-1: config 0 descriptor?? [ 1643.750037][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9915'. [ 1643.807282][T31634] usb 5-1: selecting invalid altsetting 2 [ 1644.061327][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1644.661635][ T5889] usb 1-1: config 0 has no interfaces? [ 1644.674121][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1644.701029][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.709171][ T5889] usb 1-1: Product: syz [ 1644.729381][ T5889] usb 1-1: Manufacturer: syz [ 1644.741290][ T5889] usb 1-1: SerialNumber: syz [ 1644.769645][ T5889] usb 1-1: config 0 descriptor?? [ 1644.870309][ C1] usb 5-1: async_complete: urb error -71 [ 1644.879083][T31634] get_1284_register: usb error -71 [ 1644.884357][T31634] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 1644.897068][T31634] usb 5-1: USB disconnect, device number 24 [ 1646.996905][ T3226] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1647.096815][ T3249] usb 1-1: USB disconnect, device number 12 [ 1647.172631][ T3226] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.184290][ T3226] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1647.227219][ T3226] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.250073][ T3226] usb 10-1: config 0 descriptor?? [ 1647.276226][ T3226] pwc: Askey VC010 type 2 USB webcam detected. [ 1647.530917][ T3220] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1647.678605][ T3226] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1647.706262][ T3226] pwc: recv_control_msg error -32 req 02 val 2700 [ 1647.729312][ T3220] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1647.749023][ T3220] usb 1-1: config 0 has no interface number 1 [ 1647.755969][ T3226] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1647.771567][ T3226] pwc: recv_control_msg error -32 req 04 val 1000 [ 1647.779741][ T3220] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1647.793120][ T3226] pwc: recv_control_msg error -32 req 04 val 1300 [ 1647.806591][ T3226] pwc: recv_control_msg error -32 req 04 val 1400 [ 1647.816187][ T3220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.826610][ T3226] pwc: recv_control_msg error -32 req 02 val 2000 [ 1647.845501][ T3226] pwc: recv_control_msg error -32 req 02 val 2100 [ 1647.987614][ T3226] pwc: recv_control_msg error -32 req 04 val 1500 [ 1648.000560][ T3220] usb 1-1: config 0 descriptor?? [ 1648.011644][ T3226] pwc: recv_control_msg error -32 req 02 val 2500 [ 1648.056139][ T3220] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1648.085618][ T3220] usb 1-1: MIDIStreaming interface descriptor not found [ 1648.386552][ T3226] pwc: recv_control_msg error -71 req 02 val 2600 [ 1648.425821][ T3226] pwc: recv_control_msg error -71 req 02 val 2900 [ 1648.477946][ T3226] pwc: recv_control_msg error -71 req 02 val 2800 [ 1648.516804][ T3226] pwc: recv_control_msg error -71 req 04 val 1100 [ 1648.750823][ T4662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9923'. [ 1648.775860][ T3226] pwc: recv_control_msg error -71 req 04 val 1200 [ 1648.799713][ T3220] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1648.807647][ T3226] pwc: Registered as video103. [ 1648.824820][ T3226] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input151 [ 1648.856822][ T3220] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 1649.402350][ T3226] usb 10-1: USB disconnect, device number 55 [ 1649.420962][ T3220] usb 1-1: USB disconnect, device number 13 [ 1649.497322][ T4664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9923'. [ 1650.397655][ T30] kauditd_printk_skb: 357 callbacks suppressed [ 1650.397668][ T30] audit: type=1326 audit(1751193225.822:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1650.494635][ T30] audit: type=1326 audit(1751193225.852:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1650.612933][ T30] audit: type=1326 audit(1751193225.872:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f089ed8d290 code=0x7ffc0000 [ 1650.647610][ T30] audit: type=1326 audit(1751193225.872:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1650.676755][ T30] audit: type=1326 audit(1751193225.872:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1650.681016][ T3220] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1650.769455][ T30] audit: type=1326 audit(1751193225.882:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1650.796396][ T30] audit: type=1326 audit(1751193225.882:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1650.833980][ T30] audit: type=1326 audit(1751193225.882:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1650.968666][ T30] audit: type=1326 audit(1751193225.882:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1651.030290][ T30] audit: type=1326 audit(1751193225.882:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.9925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f089ed8e929 code=0x7ffc0000 [ 1651.031179][ T3220] usb 3-1: Using ep0 maxpacket: 16 [ 1651.110364][ T3220] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1651.119657][ T3220] usb 3-1: config 0 has no interface number 0 [ 1651.126244][ T3220] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.168046][ T3220] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.190817][ T3220] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1651.213428][ T3220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.244224][ T3220] usb 3-1: config 0 descriptor?? [ 1651.861193][ T3220] uclogic 0003:28BD:0071.0073: pen parameters not found [ 1651.868224][ T3220] uclogic 0003:28BD:0071.0073: interface is invalid, ignoring [ 1653.410720][ T3220] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1653.456024][T31634] usb 3-1: USB disconnect, device number 60 [ 1653.652021][ T3220] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.690791][ T3220] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1653.764787][ T3220] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.798436][ T3220] usb 10-1: config 0 descriptor?? [ 1653.813640][ T3220] pwc: Askey VC010 type 2 USB webcam detected. [ 1654.373879][ T3220] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1654.394484][ T3220] pwc: recv_control_msg error -32 req 02 val 2700 [ 1654.405299][ T3220] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1654.419527][ T3220] pwc: recv_control_msg error -32 req 04 val 1000 [ 1654.432732][ T3220] pwc: recv_control_msg error -32 req 04 val 1300 [ 1654.450450][ T3220] pwc: recv_control_msg error -32 req 04 val 1400 [ 1654.458229][ T3220] pwc: recv_control_msg error -32 req 02 val 2000 [ 1654.466068][ T3220] pwc: recv_control_msg error -32 req 02 val 2100 [ 1654.473989][ T3220] pwc: recv_control_msg error -32 req 04 val 1500 [ 1654.492175][ T3220] pwc: recv_control_msg error -32 req 02 val 2500 [ 1654.499893][ T3220] pwc: recv_control_msg error -32 req 02 val 2400 [ 1654.507905][ T3220] pwc: recv_control_msg error -32 req 02 val 2600 [ 1654.537733][ T3220] pwc: recv_control_msg error -32 req 02 val 2900 [ 1654.718855][ T3250] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1654.764629][ T3220] pwc: recv_control_msg error -71 req 04 val 1100 [ 1654.800455][ T3220] pwc: recv_control_msg error -71 req 04 val 1200 [ 1654.863174][ T3220] pwc: Registered as video103. [ 1654.884095][ T3220] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input152 [ 1654.899424][ T4719] netlink: 'syz.4.9937': attribute type 1 has an invalid length. [ 1654.927342][ T3250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.000548][ T3220] usb 10-1: USB disconnect, device number 56 [ 1655.007217][ T3250] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1655.026883][ T3250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.050083][ T3250] usb 4-1: config 0 descriptor?? [ 1655.065580][ T3250] pwc: Askey VC010 type 2 USB webcam detected. [ 1655.279131][ T4722] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1655.335789][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.352815][ T36] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1655.380790][T31634] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1655.480864][ T3250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1655.498415][ T3250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1655.531362][ T3250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1655.538767][ T3250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1655.559118][ T3250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1655.589265][ T3250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1655.589819][T31634] usb 3-1: Using ep0 maxpacket: 32 [ 1655.597586][ T3250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1655.613453][T31634] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1655.623829][ T3250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1655.628413][T31634] usb 3-1: config 0 has no interface number 0 [ 1655.631813][ T3250] pwc: recv_control_msg error -32 req 04 val 1500 [ 1655.647500][T31634] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1655.657067][T31634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.659268][ T3250] pwc: recv_control_msg error -32 req 02 val 2500 [ 1655.680225][T31634] usb 3-1: Product: syz [ 1655.687075][T31634] usb 3-1: Manufacturer: syz [ 1655.704671][T31634] usb 3-1: SerialNumber: syz [ 1655.716582][T31634] usb 3-1: config 0 descriptor?? [ 1655.735988][T31634] smsc95xx v2.0.0 [ 1655.812833][ T4726] bond0 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 1655.831662][ T4726] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 1655.856489][ T4726] bond0 (unregistering): Released all slaves [ 1655.875340][ T3250] pwc: recv_control_msg error -71 req 02 val 2600 [ 1655.883897][ T3250] pwc: recv_control_msg error -71 req 02 val 2900 [ 1655.899979][ T3250] pwc: recv_control_msg error -71 req 02 val 2800 [ 1655.908607][ T3250] pwc: recv_control_msg error -71 req 04 val 1100 [ 1655.915797][ T3250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1655.947395][ T3220] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1655.981881][ T3250] pwc: Registered as video103. [ 1655.996698][ T3250] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input153 [ 1656.048739][ T3250] usb 4-1: USB disconnect, device number 95 [ 1656.128223][ T3220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.144625][ T3220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.163477][T31634] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1656.169097][ T3220] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1656.182485][T31634] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1656.196779][ T3220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.232341][ T3220] usb 1-1: config 0 descriptor?? [ 1660.031593][T31634] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1660.071417][T31634] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1660.183293][T31634] usb 3-1: USB disconnect, device number 61 [ 1660.369768][ T3220] usbhid 1-1:0.0: can't add hid device: -71 [ 1660.413112][ T3220] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1660.431051][ T3220] usb 1-1: USB disconnect, device number 14 [ 1660.644987][ T4769] tipc: Started in network mode [ 1660.650297][ T4769] tipc: Node identity a6f340c1278c, cluster identity 4711 [ 1660.688841][ T4769] tipc: Enabled bearer , priority 0 [ 1660.750563][ T4772] syzkaller0: entered promiscuous mode [ 1660.775026][ T4775] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9947'. [ 1660.840950][ T4775] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9947'. [ 1660.851417][ T4775] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9947'. [ 1660.879871][ T4775] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9947'. [ 1660.889520][ T4772] syzkaller0: entered allmulticast mode [ 1661.076964][ T4769] tipc: Resetting bearer [ 1661.117542][ T4768] tipc: Resetting bearer [ 1661.200836][T31634] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1661.359767][ T4768] tipc: Disabling bearer [ 1661.481486][T31634] usb 1-1: Using ep0 maxpacket: 16 [ 1661.488886][T31634] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.524023][T31634] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1661.542549][T31634] usb 1-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 1661.570451][T31634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.584331][T31634] usb 1-1: config 0 descriptor?? [ 1661.942654][ T4793] gretap0: entered promiscuous mode [ 1661.948706][ T4793] vlan1: entered promiscuous mode [ 1662.425885][T31634] hid_mf 0003:0079:1844.0074: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.0-1/input0 [ 1662.593525][T31634] hid_mf 0003:0079:1844.0074: Invalid report, this should never happen! [ 1662.751472][T31634] hid_mf 0003:0079:1844.0074: Force feedback init failed. [ 1664.480704][ T3250] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1664.512658][T31634] usb 1-1: USB disconnect, device number 15 [ 1664.701156][ T3250] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.730869][ T3250] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1664.766042][ T3250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.907382][ T3250] usb 10-1: config 0 descriptor?? [ 1664.931597][ T3250] pwc: Askey VC010 type 2 USB webcam detected. [ 1665.348424][ T3250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1665.371684][ T3250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1665.391630][ T3250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1665.419429][ T3250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1665.579185][ T3250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1665.591663][ T3250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1665.626625][ T3250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1665.643715][ T3250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1665.661748][ T3250] pwc: recv_control_msg error -32 req 04 val 1500 [ 1665.668991][ T3250] pwc: recv_control_msg error -32 req 02 val 2500 [ 1665.891783][ T3250] pwc: recv_control_msg error -71 req 02 val 2600 [ 1665.910102][ T3250] pwc: recv_control_msg error -71 req 02 val 2900 [ 1666.156735][ T3250] pwc: recv_control_msg error -71 req 02 val 2800 [ 1666.164860][ T3250] pwc: recv_control_msg error -71 req 04 val 1100 [ 1666.210870][ T3250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1666.226207][ T3250] pwc: Registered as video103. [ 1666.246877][ T3250] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input154 [ 1666.296609][ T3250] usb 10-1: USB disconnect, device number 57 [ 1666.480443][ T4813] syz.4.9958 (4813): drop_caches: 2 [ 1666.489024][ T4813] syz.4.9958 (4813): drop_caches: 2 [ 1666.828388][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9960'. [ 1668.099285][ T4839] netlink: 'syz.4.9963': attribute type 23 has an invalid length. [ 1668.411588][ T4842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9965'. [ 1668.420871][ T4842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9965'. [ 1668.432128][ T4842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9965'. [ 1668.441159][ T4842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9965'. [ 1668.787752][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.794242][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.540238][ T4862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1669.571777][ T3250] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1669.817000][ T3250] usb 5-1: Using ep0 maxpacket: 8 [ 1669.913307][ T3250] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1669.922227][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1669.933884][ T3250] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1669.946204][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1669.958103][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1670.021876][ T3250] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1670.029410][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1670.151312][ T3250] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1670.210709][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1670.270937][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1670.318351][ T3250] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1670.330407][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1670.355576][ T3250] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1670.388609][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1670.440773][ T3250] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1670.466463][ T3250] usb 5-1: string descriptor 0 read error: -22 [ 1670.479970][ T3250] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1670.490920][ T3250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.574852][ T3250] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1670.928270][T31634] usb 5-1: USB disconnect, device number 25 [ 1670.992295][ T3250] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1671.162442][ T3250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.180433][ T3250] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1671.217066][ T3250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.243924][ T3250] usb 4-1: config 0 descriptor?? [ 1671.267755][ T3250] pwc: Askey VC010 type 2 USB webcam detected. [ 1671.710390][ T3250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1671.720369][ T3250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1671.758129][ T3250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1671.782393][ T3250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1671.845094][ T3250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1671.864905][ T3250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1671.872381][ T3250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1671.879574][ T3250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1671.886912][ T3250] pwc: recv_control_msg error -32 req 04 val 1500 [ 1671.895930][ T3250] pwc: recv_control_msg error -32 req 02 val 2500 [ 1671.961254][ T4883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9974'. [ 1672.104120][ T3250] pwc: recv_control_msg error -71 req 02 val 2600 [ 1672.118909][ T3250] pwc: recv_control_msg error -71 req 02 val 2900 [ 1672.128268][ T3250] pwc: recv_control_msg error -71 req 02 val 2800 [ 1672.148039][ T3250] pwc: recv_control_msg error -71 req 04 val 1100 [ 1672.165864][ T3250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1672.178256][ T3250] pwc: Registered as video103. [ 1672.186955][ T3250] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input155 [ 1672.214520][ T4883] batadv0: left promiscuous mode [ 1672.232382][ T4883] bridge0: port 2(batadv0) entered disabled state [ 1672.289288][ T3250] usb 4-1: USB disconnect, device number 96 [ 1672.332741][ T4883] bridge_slave_0: left promiscuous mode [ 1672.350340][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.913287][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1673.372797][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1675.968019][ T4928] tipc: Enabled bearer , priority 10 [ 1676.028739][ T4928] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9982'. [ 1676.279766][ T4928] tipc: Disabling bearer [ 1676.756711][ T4941] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9986'. [ 1677.110923][ T3220] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1677.419456][ T3220] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x1 has invalid maxpacket 64 [ 1677.435558][ T3220] usb 1-1: config 1 interface 0 altsetting 93 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1677.458601][ T3220] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1677.468548][ T3220] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1677.481545][ T3220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.493549][ T3220] usb 1-1: Product: syz [ 1677.513799][ T3220] usb 1-1: Manufacturer: syz [ 1677.567113][ T3220] usb 1-1: SerialNumber: syz [ 1677.581666][ T4943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1677.620932][ T3250] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1677.770899][ T3250] usb 5-1: Using ep0 maxpacket: 8 [ 1677.785971][ T3250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.090821][ T3250] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1678.117063][ T3250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1678.145965][ T3250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1678.176282][ T3250] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1678.220730][ T3250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.276138][ T3250] hub 5-1:1.0: bad descriptor, ignoring hub [ 1678.316266][ T3250] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1678.630080][ T3250] cdc_wdm 5-1:1.0: skipping garbage [ 1678.688112][ T3220] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 93 proto 1 vid 0x0525 pid 0xA4A8 [ 1678.710295][ T3250] cdc_wdm 5-1:1.0: skipping garbage [ 1678.760417][ T3250] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1678.931505][ T3250] cdc_wdm 5-1:1.0: Unknown control protocol [ 1678.938144][ T3220] usb 1-1: USB disconnect, device number 16 [ 1679.005045][ T3220] usblp0: removed [ 1679.231717][ T3250] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 1679.810981][ T3250] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1679.843100][ T3220] usb 5-1: USB disconnect, device number 26 [ 1680.069001][ T3250] usb 3-1: Using ep0 maxpacket: 32 [ 1680.182688][ T3250] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1680.207573][ T3250] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1680.234550][ T3250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.263204][ T3250] usb 3-1: Product: syz [ 1680.267605][ T3250] usb 3-1: Manufacturer: syz [ 1680.272445][ T3250] usb 3-1: SerialNumber: syz [ 1680.384424][ T3250] usb 3-1: config 0 descriptor?? [ 1680.531113][T31634] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1680.719270][T31634] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1680.732642][ T5889] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1680.754448][T31634] usb 1-1: config 0 has no interface number 0 [ 1680.962225][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 1680.980531][T31634] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1681.055468][T31634] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1681.073349][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1681.085885][T31634] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1681.095956][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1681.109689][T31634] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1681.117131][ T3250] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 1681.119282][T31634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.138450][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1681.156155][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.184300][ T5889] usb 4-1: Product: syz [ 1681.188539][ T5889] usb 4-1: Manufacturer: syz [ 1681.196874][T31634] usb 1-1: config 0 descriptor?? [ 1681.202605][ T5889] usb 4-1: SerialNumber: syz [ 1681.209529][ T3250] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1681.451444][ T5889] usb 4-1: config 0 descriptor?? [ 1681.458514][ T3250] usb 3-1: USB disconnect, device number 62 [ 1681.525091][T31634] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input156 [ 1681.538478][ T5889] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1681.555678][ T5889] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1681.733545][ T3250] usb 1-1: USB disconnect, device number 17 [ 1682.108464][ T5889] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1682.115283][ T5889] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1682.758938][ T5889] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1682.767037][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1682.794430][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1682.817436][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1683.152380][ T5003] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1683.500931][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10005'. [ 1683.808130][ T5889] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1683.890965][ T5889] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1683.916832][ T5889] usb 4-1: USB disconnect, device number 97 [ 1685.344503][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10007'. [ 1685.463945][ T3220] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1685.615633][ T5035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1685.620798][ T3220] usb 4-1: Using ep0 maxpacket: 32 [ 1685.622928][ T5035] IPv6: NLM_F_CREATE should be set when creating new route [ 1685.623058][ T5035] IPv6: NLM_F_CREATE should be set when creating new route [ 1685.642726][ T5035] IPv6: NLM_F_CREATE should be set when creating new route [ 1685.656886][ T3220] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1685.741196][ T3220] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1685.800675][ T3220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.834146][ T3220] usb 4-1: config 0 descriptor?? [ 1686.075982][ T3220] usb 4-1: USB disconnect, device number 98 [ 1686.110769][ T3250] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1686.275595][ T3250] usb 3-1: Using ep0 maxpacket: 32 [ 1686.287532][ T3250] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1686.329584][ T3250] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1686.373278][ T3250] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1686.516779][ T3250] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1686.550695][ T3250] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1686.654062][ T3250] usb 3-1: Product: syz [ 1686.800671][ T3250] usb 3-1: Manufacturer: syz [ 1686.805321][ T3250] usb 3-1: SerialNumber: syz [ 1686.835770][ T3250] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input157 [ 1687.040789][ T3220] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1687.272257][ T5035] blktrace: Concurrent blktraces are not allowed on loop6 [ 1687.299807][T31634] usb 3-1: USB disconnect, device number 63 [ 1687.310913][ T3220] usb 5-1: Using ep0 maxpacket: 16 [ 1687.435246][ T3220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.472556][T31634] appletouch 3-1:1.0: input: appletouch disconnected [ 1687.539173][ T3220] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1687.576940][ T3220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.667776][ T3220] usb 5-1: config 0 descriptor?? [ 1690.311199][ T30] kauditd_printk_skb: 543 callbacks suppressed [ 1690.311220][ T30] audit: type=1804 audit(1751193265.622:5877): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.10017" name="file0" dev="ramfs" ino=167497 res=1 errno=0 [ 1691.361960][ T3220] usbhid 5-1:0.0: can't add hid device: -71 [ 1691.478729][ T3220] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1691.532895][ T3220] usb 5-1: USB disconnect, device number 27 [ 1694.537858][ T5114] xt_hashlimit: max too large, truncated to 1048576 [ 1694.914638][ T5117] tipc: Enabled bearer , priority 0 [ 1694.957325][ T5117] syzkaller0: entered promiscuous mode [ 1695.007158][ T5117] syzkaller0: entered allmulticast mode [ 1695.182502][ T5109] syz.3.10025 (5109): drop_caches: 2 [ 1695.207445][ T5121] tipc: Resetting bearer [ 1695.286700][ T5116] tipc: Resetting bearer [ 1695.462391][ T5116] tipc: Disabling bearer [ 1695.681225][ T5889] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1695.845335][ T5889] usb 10-1: Using ep0 maxpacket: 8 [ 1695.873015][ T5889] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1695.990826][T31634] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1696.009354][ T5889] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1696.111206][ T5889] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1696.540777][ T5889] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1696.554355][T31634] usb 1-1: config 0 has no interfaces? [ 1696.790784][ T5889] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1696.849203][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.858002][T31634] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1696.893219][T31634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.948260][T31634] usb 1-1: Product: syz [ 1696.958294][T31634] usb 1-1: Manufacturer: syz [ 1696.970744][T31634] usb 1-1: SerialNumber: syz [ 1697.009269][T31634] usb 1-1: config 0 descriptor?? [ 1697.111903][ T5889] usb 10-1: GET_CAPABILITIES returned 0 [ 1697.117641][ T5889] usbtmc 10-1:16.0: can't read capabilities [ 1697.367474][ T5127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.412077][ T5127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.457275][ T5147] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1697.533718][ T5127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.542827][ T5127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.585066][ T5129] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1697.593107][ T5129] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1697.986735][ T3249] usb 1-1: USB disconnect, device number 18 [ 1699.213803][ T3250] usb 10-1: USB disconnect, device number 58 [ 1700.038228][ T30] audit: type=1326 audit(1751193275.462:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.2.10036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f562e18e929 code=0x0 [ 1700.535010][ T5180] ALSA: mixer_oss: invalid index 40000 [ 1701.961591][ T30] audit: type=1804 audit(1751193277.262:5879): pid=5207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10039" name="file0" dev="ramfs" ino=168815 res=1 errno=0 [ 1706.761314][ T5251] kvm: user requested TSC rate below hardware speed [ 1707.082959][ T3249] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1707.103811][ T5265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10047'. [ 1707.294381][ T3249] usb 3-1: Using ep0 maxpacket: 32 [ 1707.311776][ T3249] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1707.320438][ T3249] usb 3-1: config 0 has no interface number 0 [ 1707.332821][ T3249] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1707.351039][ T3249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.391866][ T3249] usb 3-1: Product: syz [ 1707.396088][ T3249] usb 3-1: Manufacturer: syz [ 1707.406507][ T3249] usb 3-1: SerialNumber: syz [ 1707.423530][ T3249] usb 3-1: config 0 descriptor?? [ 1707.563946][ T3249] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1707.767036][T31634] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1707.983373][ T3249] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1708.011025][ T3249] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1708.069928][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064976000: rx timeout, send abort [ 1708.162917][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.187139][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.262726][T31634] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.301569][T31634] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1708.363565][T31634] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.444332][T31634] usb 10-1: config 0 descriptor?? [ 1708.511661][T31634] pwc: Askey VC010 type 2 USB webcam detected. [ 1708.558525][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1708.567295][ T3220] usb 3-1: USB disconnect, device number 64 [ 1708.578714][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064976000: abort rx timeout. Force session deactivation [ 1708.605855][ T3220] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1708.657968][T31634] pwc: send_video_command error -71 [ 1708.664484][ T3220] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1708.704879][ T3220] quatech2 3-1:0.51: device disconnected [ 1708.717481][T31634] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1708.760910][T31634] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1708.821168][T31634] usb 10-1: USB disconnect, device number 59 [ 1709.211191][T31634] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1709.404946][T31634] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.450545][T31634] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1709.469033][T31634] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.504990][T31634] usb 10-1: config 0 descriptor?? [ 1709.603444][T31634] pwc: Askey VC010 type 2 USB webcam detected. [ 1709.986640][T31634] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1710.034204][T31634] pwc: recv_control_msg error -32 req 02 val 2700 [ 1710.120997][T31634] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1710.151557][T31634] pwc: recv_control_msg error -32 req 04 val 1000 [ 1710.176194][T31634] pwc: recv_control_msg error -32 req 04 val 1300 [ 1710.195508][T31634] pwc: recv_control_msg error -32 req 04 val 1400 [ 1710.231019][ T3220] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1710.319215][T31634] pwc: recv_control_msg error -32 req 02 val 2000 [ 1710.326579][T31634] pwc: recv_control_msg error -32 req 02 val 2100 [ 1710.334725][T31634] pwc: recv_control_msg error -32 req 04 val 1500 [ 1710.365124][T31634] pwc: recv_control_msg error -32 req 02 val 2500 [ 1710.409124][T31634] pwc: recv_control_msg error -32 req 02 val 2400 [ 1710.630830][ T3220] usb 4-1: Using ep0 maxpacket: 16 [ 1710.645887][ T3220] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1710.662708][ T3220] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1710.691393][T31634] pwc: recv_control_msg error -71 req 02 val 2900 [ 1710.698476][T31634] pwc: recv_control_msg error -71 req 02 val 2800 [ 1710.710927][T31634] pwc: recv_control_msg error -71 req 04 val 1100 [ 1710.719843][ T3220] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1710.749998][ T3220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.760172][T31634] pwc: recv_control_msg error -71 req 04 val 1200 [ 1710.786929][ T3220] usb 4-1: Product: syz [ 1710.798511][ T3220] usb 4-1: Manufacturer: syz [ 1710.824269][ T3220] usb 4-1: SerialNumber: syz [ 1710.824407][T31634] pwc: Registered as video103. [ 1710.942038][T31634] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input158 [ 1710.991015][T31634] usb 10-1: USB disconnect, device number 60 [ 1711.199717][ T3220] usb 4-1: 0:2 : does not exist [ 1711.215965][ T3220] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1711.327712][ T3220] usb 4-1: USB disconnect, device number 99 [ 1711.471556][ T4671] udevd[4671]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1711.671079][ T3250] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1711.834263][ T3250] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.855071][ T3250] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1711.886209][ T3250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.926962][ T3250] usb 5-1: config 0 descriptor?? [ 1711.939689][ T3250] pwc: Askey VC010 type 2 USB webcam detected. [ 1712.403807][ T3250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1712.420530][ T3220] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1712.451641][ T3250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1712.499570][ T3250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1712.507241][ T3250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1712.507849][ T3250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1712.525846][ T3250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1712.539642][ T3250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1712.540250][ T3250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1712.541588][ T3250] pwc: recv_control_msg error -32 req 04 val 1500 [ 1712.545663][ T3250] pwc: recv_control_msg error -32 req 02 val 2500 [ 1712.546294][ T3250] pwc: recv_control_msg error -32 req 02 val 2400 [ 1712.546918][ T3250] pwc: recv_control_msg error -32 req 02 val 2600 [ 1712.547549][ T3250] pwc: recv_control_msg error -32 req 02 val 2900 [ 1712.548179][ T3250] pwc: recv_control_msg error -32 req 02 val 2800 [ 1712.622229][ T5331] tipc: New replicast peer: 255.255.255.255 [ 1712.622968][ T5331] tipc: Enabled bearer , priority 10 [ 1712.637593][ T3220] usb 10-1: Using ep0 maxpacket: 16 [ 1712.788786][ T3250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1712.805150][ T3250] pwc: Registered as video103. [ 1712.806871][ T3250] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input159 [ 1712.834585][ T3250] usb 5-1: USB disconnect, device number 28 [ 1712.910729][ T3212] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1713.273506][ T5334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10065'. [ 1713.390886][ T3212] usb 1-1: Using ep0 maxpacket: 8 [ 1713.413972][ T3212] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1713.467184][ T3212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.542166][ T3212] usb 1-1: Product: syz [ 1713.557812][ T3212] usb 1-1: Manufacturer: syz [ 1713.592048][ T3212] usb 1-1: SerialNumber: syz [ 1713.626623][ T3212] usb 1-1: config 0 descriptor?? [ 1713.667749][ T3212] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1713.753658][T31634] tipc: Node number set to 2172600513 [ 1713.863584][ T5326] netlink: 'syz.0.10063': attribute type 16 has an invalid length. [ 1713.872761][ T3212] usb 1-1: setting power ON [ 1713.902061][ T5326] netlink: 'syz.0.10063': attribute type 17 has an invalid length. [ 1713.916705][ T3212] dvb-usb: bulk message failed: -22 (2/0) [ 1713.963448][ T3212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1714.060565][ T3212] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1714.081193][ T3212] usb 1-1: media controller created [ 1714.260237][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.272990][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.461065][ T5326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1714.534850][ T3212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1714.576045][ T3212] usb 1-1: selecting invalid altsetting 6 [ 1714.584703][ T3212] usb 1-1: digital interface selection failed (-22) [ 1714.787997][ T3212] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1714.970735][ T3220] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1714.988174][ T3212] usb 1-1: setting power OFF [ 1715.002017][ T3212] dvb-usb: bulk message failed: -22 (2/0) [ 1715.011778][ T3220] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1715.015879][ T3212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1715.019469][ T3220] usb 10-1: can't read configurations, error -71 [ 1715.097518][ T3212] (NULL device *): no alternate interface [ 1715.238597][ T3212] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1715.318654][ T3212] usb 1-1: USB disconnect, device number 19 [ 1715.610790][T31634] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1715.683212][ T5354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10072'. [ 1715.780695][T31634] usb 5-1: Using ep0 maxpacket: 16 [ 1715.808115][T31634] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1715.836525][T31634] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1715.891955][T31634] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1715.915660][T31634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.940341][T31634] usb 5-1: Product: syz [ 1715.950712][T31634] usb 5-1: Manufacturer: syz [ 1715.955362][T31634] usb 5-1: SerialNumber: syz [ 1716.209010][T31634] usb 5-1: 0:2 : does not exist [ 1716.238264][T31634] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1716.260094][ T5359] dvmrp3: entered allmulticast mode [ 1716.322367][T31634] usb 5-1: USB disconnect, device number 29 [ 1716.453575][ T5364] input: syz0 as /devices/virtual/input/input160 [ 1716.541649][ T4671] udevd[4671]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1716.976461][ T5375] trusted_key: encrypted_key: insufficient parameters specified [ 1717.071514][ T5378] trusted_key: encrypted_key: master key parameter 'default&dse:new' is invalid [ 1717.581380][T31634] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1717.869749][T31634] usb 3-1: Using ep0 maxpacket: 16 [ 1717.906560][T31634] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1717.936256][T31634] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1717.960020][T31634] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1717.969609][T31634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.052039][T31634] usb 3-1: Product: syz [ 1718.077944][T31634] usb 3-1: Manufacturer: syz [ 1718.112705][T31634] usb 3-1: SerialNumber: syz [ 1718.349998][T31634] usb 3-1: 0:2 : does not exist [ 1718.405580][T31634] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1718.601035][T31634] usb 3-1: USB disconnect, device number 65 [ 1718.760593][ T4671] udevd[4671]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1719.720719][ T3249] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1720.004725][ T3249] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.310991][ T3249] usb 3-1: config 0 has no interfaces? [ 1720.346128][ T3249] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1720.395101][ T3249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.448958][ T3249] usb 3-1: config 0 descriptor?? [ 1722.512547][ T5437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1722.519814][ T5437] IPv6: NLM_F_CREATE should be set when creating new route [ 1722.527132][ T5437] IPv6: NLM_F_CREATE should be set when creating new route [ 1722.549841][ T5437] ------------[ cut here ]------------ [ 1722.555470][ T5437] WARNING: CPU: 1 PID: 5437 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 1722.565847][ T5437] Modules linked in: [ 1722.569804][ T5437] CPU: 1 UID: 0 PID: 5437 Comm: syz.3.10091 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1722.582178][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1722.592752][ T5437] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 1722.598611][ T5437] Code: fa be 02 00 00 00 eb 0a e8 05 6c b3 fa be 01 00 00 00 4c 89 f7 e8 88 d0 b4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 e9 6b b3 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 1722.618830][ T5437] RSP: 0018:ffffc9000a9cef68 EFLAGS: 00010287 [ 1722.625343][ T5437] RAX: ffffffff870ce287 RBX: 0000000000000002 RCX: 0000000000080000 [ 1722.633516][ T5437] RDX: ffffc90015fce000 RSI: 0000000000005962 RDI: 0000000000005963 [ 1722.641584][ T5437] RBP: dffffc0000000000 R08: ffff88808d9a9c2f R09: 1ffff11011b35385 [ 1722.649568][ T5437] R10: dffffc0000000000 R11: ffffed1011b35386 R12: ffff888066838000 [ 1722.657896][ T5437] R13: ffffc9000a9cf0e0 R14: 0000000000000001 R15: ffffc9000a9cf0f8 [ 1722.665941][ T5437] FS: 00007f089fb246c0(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 1722.674939][ T5437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1722.681577][ T5437] CR2: 0000001b3001cff8 CR3: 0000000061700000 CR4: 00000000003526f0 [ 1722.689555][ T5437] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1722.697574][ T5437] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1722.706025][ T5437] Call Trace: [ 1722.709324][ T5437] [ 1722.712376][ T5437] notifier_call_chain+0x1b3/0x3e0 [ 1722.717513][ T5437] ? atomic_notifier_call_chain+0x26/0x180 [ 1722.723369][ T5437] atomic_notifier_call_chain+0xda/0x180 [ 1722.729014][ T5437] call_fib_notifiers+0x31/0x60 [ 1722.733926][ T5437] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 1722.740346][ T5437] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 1722.747439][ T5437] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 1722.752855][ T5437] inet6_rtm_newroute+0x12f5/0x18c0 [ 1722.758097][ T5437] ? nlmon_xmit+0xb0/0x100 [ 1722.762586][ T5437] ? kmem_cache_free+0x18f/0x400 [ 1722.767540][ T5437] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1722.773134][ T5437] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1722.778558][ T5437] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1722.784207][ T5437] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1722.789162][ T5437] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1722.794396][ T5437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1722.799872][ T5437] ? ref_tracker_free+0x63a/0x7d0 [ 1722.805014][ T5437] ? __copy_skb_header+0xa7/0x550 [ 1722.810062][ T5437] ? __pfx_ref_tracker_free+0x10/0x10 [ 1722.815605][ T5437] netlink_rcv_skb+0x208/0x470 [ 1722.820389][ T5437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1722.825934][ T5437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1722.831306][ T5437] ? netlink_deliver_tap+0x2e/0x1b0 [ 1722.836522][ T5437] ? netlink_deliver_tap+0x2e/0x1b0 [ 1722.841825][ T5437] netlink_unicast+0x75b/0x8d0 [ 1722.846610][ T5437] netlink_sendmsg+0x805/0xb30 [ 1722.851445][ T5437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1722.856750][ T5437] ? aa_sock_msg_perm+0x94/0x160 [ 1722.861787][ T5437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1722.867085][ T5437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1722.872433][ T5437] __sock_sendmsg+0x219/0x270 [ 1722.877158][ T5437] ____sys_sendmsg+0x52d/0x830 [ 1722.882007][ T5437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1722.887356][ T5437] ? import_iovec+0x74/0xa0 [ 1722.891971][ T5437] ___sys_sendmsg+0x21f/0x2a0 [ 1722.896702][ T5437] ? __pfx____sys_sendmsg+0x10/0x10 [ 1722.902021][ T5437] ? __fget_files+0x2a/0x420 [ 1722.906633][ T5437] ? __fget_files+0x3a0/0x420 [ 1722.911396][ T5437] __sys_sendmmsg+0x227/0x430 [ 1722.916113][ T5437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1722.921370][ T5437] ? do_futex+0x333/0x420 [ 1722.925735][ T5437] ? rcu_is_watching+0x15/0xb0 [ 1722.930527][ T5437] __x64_sys_sendmmsg+0xa0/0xc0 [ 1722.935468][ T5437] do_syscall_64+0xfa/0x3b0 [ 1722.940004][ T5437] ? lockdep_hardirqs_on+0x9c/0x150 [ 1722.945313][ T5437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.951466][ T5437] ? clear_bhb_loop+0x60/0xb0 [ 1722.956171][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.962137][ T5437] RIP: 0033:0x7f089ed8e929 [ 1722.966564][ T5437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.986363][ T5437] RSP: 002b:00007f089fb24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1722.994861][ T5437] RAX: ffffffffffffffda RBX: 00007f089efb5fa0 RCX: 00007f089ed8e929 [ 1723.002935][ T5437] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 1723.010957][ T5437] RBP: 00007f089ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1723.018967][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1723.027314][ T5437] R13: 0000000000000000 R14: 00007f089efb5fa0 R15: 00007f089f0dfa28 [ 1723.035497][ T5437] [ 1723.038549][ T5437] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1723.045836][ T5437] CPU: 1 UID: 0 PID: 5437 Comm: syz.3.10091 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1723.057910][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1723.067971][ T5437] Call Trace: [ 1723.071253][ T5437] [ 1723.074184][ T5437] dump_stack_lvl+0x99/0x250 [ 1723.078788][ T5437] ? __asan_memcpy+0x40/0x70 [ 1723.083383][ T5437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1723.088588][ T5437] ? __pfx__printk+0x10/0x10 [ 1723.093195][ T5437] panic+0x2db/0x790 [ 1723.097112][ T5437] ? __pfx_panic+0x10/0x10 [ 1723.101547][ T5437] ? show_trace_log_lvl+0x4fb/0x550 [ 1723.106778][ T5437] __warn+0x31b/0x4b0 [ 1723.110781][ T5437] ? nsim_fib_event_nb+0xed8/0x1080 [ 1723.115998][ T5437] ? nsim_fib_event_nb+0xed8/0x1080 [ 1723.121209][ T5437] report_bug+0x2be/0x4f0 [ 1723.125554][ T5437] ? nsim_fib_event_nb+0xed8/0x1080 [ 1723.130767][ T5437] ? nsim_fib_event_nb+0xed8/0x1080 [ 1723.135973][ T5437] ? nsim_fib_event_nb+0xeda/0x1080 [ 1723.141190][ T5437] handle_bug+0x84/0x160 [ 1723.145474][ T5437] exc_invalid_op+0x1a/0x50 [ 1723.149982][ T5437] asm_exc_invalid_op+0x1a/0x20 [ 1723.154834][ T5437] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 1723.161085][ T5437] Code: fa be 02 00 00 00 eb 0a e8 05 6c b3 fa be 01 00 00 00 4c 89 f7 e8 88 d0 b4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 e9 6b b3 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 1723.180714][ T5437] RSP: 0018:ffffc9000a9cef68 EFLAGS: 00010287 [ 1723.186802][ T5437] RAX: ffffffff870ce287 RBX: 0000000000000002 RCX: 0000000000080000 [ 1723.194788][ T5437] RDX: ffffc90015fce000 RSI: 0000000000005962 RDI: 0000000000005963 [ 1723.202776][ T5437] RBP: dffffc0000000000 R08: ffff88808d9a9c2f R09: 1ffff11011b35385 [ 1723.210864][ T5437] R10: dffffc0000000000 R11: ffffed1011b35386 R12: ffff888066838000 [ 1723.218846][ T5437] R13: ffffc9000a9cf0e0 R14: 0000000000000001 R15: ffffc9000a9cf0f8 [ 1723.226833][ T5437] ? nsim_fib_event_nb+0xed7/0x1080 [ 1723.232056][ T5437] ? nsim_fib_event_nb+0xed7/0x1080 [ 1723.237268][ T5437] notifier_call_chain+0x1b3/0x3e0 [ 1723.242404][ T5437] ? atomic_notifier_call_chain+0x26/0x180 [ 1723.248223][ T5437] atomic_notifier_call_chain+0xda/0x180 [ 1723.253866][ T5437] call_fib_notifiers+0x31/0x60 [ 1723.258747][ T5437] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 1723.265182][ T5437] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 1723.272227][ T5437] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 1723.277520][ T5437] inet6_rtm_newroute+0x12f5/0x18c0 [ 1723.282727][ T5437] ? nlmon_xmit+0xb0/0x100 [ 1723.287161][ T5437] ? kmem_cache_free+0x18f/0x400 [ 1723.292150][ T5437] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1723.297708][ T5437] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1723.303573][ T5437] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1723.309226][ T5437] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1723.314180][ T5437] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1723.319291][ T5437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1723.324927][ T5437] ? ref_tracker_free+0x63a/0x7d0 [ 1723.329960][ T5437] ? __copy_skb_header+0xa7/0x550 [ 1723.334998][ T5437] ? __pfx_ref_tracker_free+0x10/0x10 [ 1723.340387][ T5437] netlink_rcv_skb+0x208/0x470 [ 1723.345169][ T5437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1723.350646][ T5437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1723.356050][ T5437] ? netlink_deliver_tap+0x2e/0x1b0 [ 1723.361254][ T5437] ? netlink_deliver_tap+0x2e/0x1b0 [ 1723.366468][ T5437] netlink_unicast+0x75b/0x8d0 [ 1723.371261][ T5437] netlink_sendmsg+0x805/0xb30 [ 1723.376125][ T5437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1723.381428][ T5437] ? aa_sock_msg_perm+0x94/0x160 [ 1723.386387][ T5437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1723.391687][ T5437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1723.396993][ T5437] __sock_sendmsg+0x219/0x270 [ 1723.401687][ T5437] ____sys_sendmsg+0x52d/0x830 [ 1723.406470][ T5437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1723.411772][ T5437] ? import_iovec+0x74/0xa0 [ 1723.416283][ T5437] ___sys_sendmsg+0x21f/0x2a0 [ 1723.420968][ T5437] ? __pfx____sys_sendmsg+0x10/0x10 [ 1723.426198][ T5437] ? __fget_files+0x2a/0x420 [ 1723.430790][ T5437] ? __fget_files+0x3a0/0x420 [ 1723.435473][ T5437] __sys_sendmmsg+0x227/0x430 [ 1723.440154][ T5437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1723.445380][ T5437] ? do_futex+0x333/0x420 [ 1723.449743][ T5437] ? rcu_is_watching+0x15/0xb0 [ 1723.454531][ T5437] __x64_sys_sendmmsg+0xa0/0xc0 [ 1723.459402][ T5437] do_syscall_64+0xfa/0x3b0 [ 1723.463943][ T5437] ? lockdep_hardirqs_on+0x9c/0x150 [ 1723.469165][ T5437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.475245][ T5437] ? clear_bhb_loop+0x60/0xb0 [ 1723.479974][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.485878][ T5437] RIP: 0033:0x7f089ed8e929 [ 1723.490302][ T5437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1723.509915][ T5437] RSP: 002b:00007f089fb24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1723.518334][ T5437] RAX: ffffffffffffffda RBX: 00007f089efb5fa0 RCX: 00007f089ed8e929 [ 1723.526319][ T5437] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 1723.534391][ T5437] RBP: 00007f089ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1723.542370][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1723.550356][ T5437] R13: 0000000000000000 R14: 00007f089efb5fa0 R15: 00007f089f0dfa28 [ 1723.558358][ T5437] [ 1723.561745][ T5437] Kernel Offset: disabled [ 1723.566081][ T5437] Rebooting in 86400 seconds..