last executing test programs: 33.232256595s ago: executing program 2 (id=3492): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1", 0xef}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859ad07aaea6aa70d32bb13e43d76086fa643a4ab9b76efff69534261326c259b2c88e6fcbca536490258f8ab5a510", 0x62}], 0x3}, 0x4000042) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 32.344685985s ago: executing program 3 (id=3494): socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000b00)=""/186, 0xba, 0x100e0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = userfaultfd(0x80801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8101000, 0x101000, 0x8}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/234, 0xea}], 0x8, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001300)=""/4096, 0x1000}, &(0x7f0000000540), 0x8}}], 0x30, 0x40021}, 0x20004080) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 25.014180101s ago: executing program 2 (id=3506): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x4, &(0x7f00000004c0)={&(0x7f0000000480)=""/21, 0x15}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/vlan0\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r7, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000380)) 23.050462102s ago: executing program 3 (id=3509): socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)) ptrace$poke(0x4, 0x0, &(0x7f00000000c0), 0x7ff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000140)={0x77359400}, 0x10) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 20.468598474s ago: executing program 2 (id=3513): r0 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1687144bc88b8e9168f2c064962af57af9365925640aad2972cdb80b12a24dab71dc1db1f7d8bcc27a58fd1078ad5b428046cd939874efe0ed8355a92cca0074f0444fbc568f56129a739d21bc7e5821cd9331dbed0584485aee4e61b0d2367e94852a7eebd628010ac792ce2ad7897afc9afef1749751289dc2ae64c78ee6458525d291dd9fb66027fe9b060d9d3bc21fab95a5d07e467fb483478355dd6e5eea3562c859608eea1fed7c58f39dc1fdd2d31e1240bbd030aa0127163f059b6059a41dad8998364ef6ebc34a3ebc", @ANYBLOB='\\\x00'], 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c783c6e61c777e0dd6365210bfd0000003e000701feffffff00000000047c00000800428004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5f, 0x7ffc0002}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmmsg(r0, 0x0, 0x0, 0x4000000) r7 = socket$inet(0x2, 0x1, 0x100) getsockopt$MRT(r7, 0x0, 0xd0, 0x0, 0x0) 17.813723013s ago: executing program 3 (id=3518): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x0, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x20, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {}, {}, {}, {0xd4}], '\x00', 0xff}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x2, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x60}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) munmap(&(0x7f00004e7000/0x1000)=nil, 0x1000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000100)=@profile={'changeprofile ', ':\x00\x00\x02'}, 0x12) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.047088958s ago: executing program 3 (id=3530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffff, 0x6, @remote, 0x8b6}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00f726bd7000fedbdf2505000000dd3a9806d96966c06e5c84a4e98bb751b21521f804387203bb809fcd67151c282a30d8eb63dbd79256ccf7571b05d6d3b19c020fffc699dce365297129b8636abfde000d3b9111a0aa603c83d303eba40d0af469f6d57ed6cf97f91c6ca3bcd3395fa9196e7a8add5d092fbe8f63d01ab5e3d8432faa914c4de9c83c4a2f7dcf3daa695d155a7ef78244920c72dd215cf7712d89b68d54d91d1768d91708f27fbba412ac7a146d038e66415bef1755a6687830d569bc3546dc9558400a43a7b422e5a9ba62c025ebf58f626061772bf1cbed2398a07831ee8faf93f853ab3c5077a24bedea4cbefe682dea1d91777248101c5b699cbffe0114693980a2b7485f25a9e01b16424213f7e5c4334324cf662b38bce35aadcfe61b9c887cf59bab133500ab5160bd0e2facd4ce027dfc27242c77"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x943, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe06fe05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x8000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) pipe(&(0x7f0000000040)) 10.459551949s ago: executing program 2 (id=3531): socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r5, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r5, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000"], 0x1c}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) 10.2157785s ago: executing program 4 (id=3532): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000000002000"], 0x40) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4}) r6 = socket(0x40000000015, 0x5, 0x2) close(r6) sendto$inet6(r6, &(0x7f00000000c0)="c0b926743ee1", 0x6, 0x4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = syz_io_uring_setup(0x23d, &(0x7f00000000c0)={0x0, 0x1, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) 8.799925026s ago: executing program 1 (id=3534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="746172676574205043493a31643a613a3135f33c783ad66734f2422e3100e7f7196554dd94853600e20666f88edd06c81953aaf3f8a6a17dfdf0e3688163b2e39eb79f67"], 0x15) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 8.454876543s ago: executing program 0 (id=3535): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x48800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getflags(r2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe12a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usbip_server_init(0xf66eabed157452f) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fanotify_init(0x200, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) r7 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) 7.790113564s ago: executing program 4 (id=3536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = fsopen(&(0x7f00000001c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='source', &(0x7f0000000440)='%6b\xaa\xe3\x8fa\x8e\xdc\xcc\xb5\x05\x83?3\xf1\xd8\xaa\xb4\xaa\x871Ojc\\O\xc1X98\xa33\xd8\xb6\x88p\xb9x\xcc\xa0e\x96\x86\v&[\x9f@\xb9\x92\f\xc8\xdaZ\x94XA7y\xb4\x18g\xec\xe7\xd9h\xf2U\x83e\xba\xfe\x80\xbe\x92\xb5\xe2 !@\v\xe8\xc0\x9f\xaf\xcc\xc6\\\xa3^\n\x00\x00\x00\x00\x00\x00\x00&s\x94\x91\x03\xf6\xd6\x88$\x02\xf8^f\f`\x1f\x80\xdfX`\xc7\xdd~4\xae\xc1\x8c\xe0\xf5\xde\x82\xff(\xc4\x14\xa8\bhkU\xbeo\xc0.I\'\x9c \x9cB\xc3\xfe7V\xb6o\xd3&\x17MV\xd1\x95\xc1\xf4\xee\xbe|1\xcd\xa2\xf6\xf8TX\xa9$\x0f\xa3\xc9\x9a8G\xb0;\x17\xc5\x90\x9f\xd9\xb0\x85\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="66643d028a0781c3bcbeb9f44118c2b7009eedf01292e2980b20abd2d4d7a6331c72960e73ebe050e89e6ad4bba35bf119b082ce5b3367d8163dd01afac8e6d92632e3ba1dea3c42bdab1b890279fe5e", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7.412472847s ago: executing program 1 (id=3537): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d80)={0x18, 0x4, {0x7fffffff, @usage=0x9, 0x0, 0x79, 0xbd4, 0x1911, 0x820, 0xda7, 0xf5, @usage=0x1000, 0x6eab, 0x81, [0xfff, 0x9, 0x0, 0x7fffffff, 0x7, 0x4]}, {0x9, @usage=0x6d5b, 0x0, 0x200, 0xa, 0x10, 0xffffffffffffffff, 0x5, 0x2c13cd0613f0eb18, @usage, 0x1, 0x1, [0x7, 0xb100, 0x8, 0x1000000000000, 0x2, 0x6]}, {0x4, @struct={0x7f, 0x2}, r5, 0x2, 0x5, 0x7fffffff, 0x4, 0x2, 0x4, @usage=0xfffffffffffffe00, 0x5, 0x9, [0x8, 0x1, 0xffffffffffffffff, 0x100000000, 0x954, 0x8]}, {0x6, 0x15, 0xb}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 6.366292247s ago: executing program 0 (id=3538): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f", 0x15) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) 6.280122098s ago: executing program 0 (id=3539): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x101, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r10, r10, 0x0, 0x200000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setreuid(0x0, 0x0) 6.164741251s ago: executing program 4 (id=3540): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) clock_gettime(0x8, &(0x7f0000001ac0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[], 0xfb, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x14) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000480)=0x7) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 5.080397896s ago: executing program 3 (id=3541): r0 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) r5 = socket$kcm(0x2, 0x3, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x82fa}, @val={0x1, 0x3, 0x3, 0x28}, @llc={@snap={0xaa, 0x0, "0002", "ad0326", 0x1, "6c04e83db141cd494dbac168c8b86df026ffb6ecfccc3251e8ce10650b423dcc6ae144ac8d"}}}, 0x3c) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6c}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008090}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0xe0, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0xffffffff, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x4, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x3, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x2, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb3, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xb, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8004, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x9, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x6, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.911535372s ago: executing program 0 (id=3542): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = getpid() syz_open_procfs(r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x3, 0x0) r6 = fsopen(&(0x7f0000000080)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000000c0)='\x02~yT\b=\xc4U\xddmk\x184\x04\x8c\b):\x8b\x1bJ\xa9\xe4\x9e\xbb<\xc3\x9fFw\xc4\x98\xeb\x9f\xf9\xafK\a\xf6\xa9i\x1d\xd40T^\x9b\xe8s\x80\x143\x85\xb7\xa7V#\xeec\x1d\xc1\x83\xfa\x83\xfe\xfc\xd32\xa2#\xf8\x8e7@Xg\x9cam|\x89\xee7\xd1\xe2$\xfa\x12\xff\x8d\xd5[\x9a\xa0\xd4\x9eS\xdb\x04\x8f\xbd\xbd#<\xe8B\xa6\xc8-\xa0\x8c\xaa\xc4R<\xa9cAf\x05\xe6 \xf0e\x02\xc5\x84\xb6\xe1\x97\x9e63\xf3\xc1\xe8\x19\x94\xe7\xbf\xc1k\xee\x94\xf3\xc1s(\x87\xe6\x04.p\x98;\x91\xd8\x99L\x9e\"\x84*a', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x28, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x28}}, 0x0) 4.885769957s ago: executing program 1 (id=3543): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08005500001c000000008002907800000000e000030000009078006400d21058d524256aa3c6269cf80df581bd6f58a097c6c4a736995762c7a6003c61349da002eb90908547c1139305fac906bf98262e3a787080e5918c0130357fec51d18a8107049dd525e877a324d8bf0490d3ff629d42ae116f41987e2222abe96433ba7212688bd9b0c1ebcc973786bc8e354edbbcf07034d01b307453777fa84ba10b98c63965c20ac3c3b198eb805cad93bf810568be3f7e7512ab5f597735bc67e5caefba644ac1645d097bf5331bb3bde50e1aeef99c44244561e7a90858fc"], 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, 0x0, 0x0) shutdown(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 2.746616604s ago: executing program 0 (id=3544): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0x0, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0xf1a) syz_emit_ethernet(0x3f, &(0x7f00000010c0)=ANY=[@ANYRES16=r2], 0x0) sendmmsg$inet(r0, &(0x7f0000006a40), 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.137380648s ago: executing program 2 (id=3545): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040), 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r3) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0xfdef) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643de3dbd6a4f3fe431f0186e6f6356b303091c69957eeb92a6ebfe4d3ee02580e76844fbd67e13c24bd25e0a32e50923d2d530ccc51622c1acd303ec9cbb6c0617537100e41d0ce5d41c861c6d3f04d39c9d7355f52ef88bcb369d110331355", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000006,allow_other,blksize=0x0000000000000c'], 0x1, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f0000000200)=[{0x6}]}) 1.879610391s ago: executing program 4 (id=3546): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac14140008", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xecc, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xea0, 0x2, [@TCA_FW_ACT={0xe9c, 0x4, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x0, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0xe, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x200, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x4}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x2, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xecc}, 0x1, 0x0, 0x0, 0x81}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newchain={0xfffffffffffffeaa, 0x64, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xffe6}}}, 0x24}}, 0x4000) 1.778550019s ago: executing program 1 (id=3547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x80000000004) write(r3, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f02c26ed638eeb738256e06a40e07fff0797ed9fa", 0x29) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) socket(0x8, 0x1, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, {0xa, 0x0, 0x3, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000600) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x2) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0) socket(0x10, 0x803, 0x0) 1.281050355s ago: executing program 0 (id=3548): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r2 = socket(0x22, 0x2, 0x3) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x2c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0_to_hsr\x00', &(0x7f0000000180)=@ethtool_eee={0x44, 0x1, 0x320c, 0x400000, 0x6, 0x8, 0x401, 0x1000, [0x1, 0x1]}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) r8 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r9, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r11, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 1.060450003s ago: executing program 3 (id=3549): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000000080)=ANY=[], 0x78) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000740)={0x2, 0x0, [{0xa, 0x2, 0x5, 0x7f, 0x6}, {0x80000008, 0x8001, 0x2, 0x0, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7, 0x49, 0xfff, 0x3}) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) 903.27763ms ago: executing program 1 (id=3550): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xff, 0x0, 0xfeff, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfb1, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xf99, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1af62a6b91f24973071a9982df0047f85280f4a5decece67fc02428f830343e910fef6f3467c9d7776a06c133a50752cff4aa72bcbb9e4dbd8489e2e3698aae45a8753071fb6d803943d171adb60e8fcec9865e46df8fa120b939537a05b63daec7e0ecf9713c491646f04435364de697fbabf3c72d08a24f1bf34212bcdb7d5e038ac28ff76d5243b695e7faa1211a940da618930d79acdc6fdc7c9f2f4a5435d3f748ec68429f5ca2548315801cf73d74816f1ece3dfa6fb557ac105ad28d4532e1c8c6b5ab3526fbe73916dbe123acb4ac89c1b5a0664b81e216453db066e3c4318006ba3e25ed6cfe22c80f17619b7372947013749c7d04f13277f81f4461492d9237c5961be4d30965607a4d5db095070df02230cc87d9ab8633e60de83aedf8814e632bac8566bbfcdf159c9a2a7944be1a61792b8af10dd28d0ebadf7e4f231af099450813c5e27f934112e11124b01106615cee48aee88947f31a1839b83ad5c8326e30f318ae57b56becaec7094c4e7d2a377bfcb0c29ce046623e6ec120ea63c53cef94deb3d813d4b1749009084c3ade1675b55490b9d1faa03d7a2fd34921d62c31d7ef1f181883ac312dbb08b2600edce0ba197d1704485e2f155ec659de742a22628270968905324381f203a1ad7ac30b252d4c3ff9915fe32c16cbf4684a7c517b9a2ecec2433685f4741b6f02f8aa2bd0f6bf370962f38214899129012a0d36ba14c0a3e93742d063f09f0c1e838fc1095b065089c91d02a4b2e1d0a49d2294682a38d578424d1e81ff959b33f746114b795319a047d65f5e3b7a347e6cf8b0fad9eaea3db5eca7e953f77bc6c23de8f938bb505013f5c39173cb69312af98d5ff14715794c729f41490297c2b418eef11841a788eaaa7ebdb77880b64701aee50371f542e79831321833dda60213fa741ec197419d83f61c06397a47a75f50b986c53e6fdf8a6e07008e1a29b1774ceb11429a1ecec05bf80da802239c58f226ab5eb34d522ff62bc0528d87e716793e56c48352648291470bb592981acc06c2ba1547e11babf3f1d22f5e01e1f759c05816cdfe0c986c58ebbd08d8449807cd2579d5b7265930f696f8aff73e247cec12c0d1fdbcc4880245b866c2cab8b6bdf0951c2c6beccab7513ba28545036d164b407e1228a831e3b37f9c56721c347d499c1c29b8a972d2d1cfeb47f20975b4eb0b62e25dfa4ef116e62e415cde22bc039d1ccb9e70a5599881bb8b61f680670b787afc8734ac8c39ca50fbed619e54ac1421bc2584d4f7027593e12f738ba0f2d5fe03fcc7168056332477eb0b26c0579d54d8537f941acc183fdca495a7ffa10f0d3189f8c32742d5564c97e26b659969f7060a7c8864445c252c5b1755a3e8473ef9b0909eb74cabb553c3d6ab58f12ed75703d9139a4f57ef71af90815a5273e64282582623c41c51352d12ce48e0712f50ab3dc528619e1e16b52452204b3c7e1e16556e8fbdf0d623216186ff5ca84ad730ff457b06e766e085d5dee40a308fae8b4e19e18245a3ed02967f07441903c149ae9da5fe238194009ded2a3d80a67e1c3abdfb63fad0155529c48a748ef499252d5d3e912304b1d11ee77dc25427e5e9a115583a692558aef65faba0e1f0bc4aa6b6ac21d4fe4741feac17a7c6b5699384e30f7236f400d9df6d658add13b4f0a4b16a77d1f9e6b4d3045f7ba7ee68ce171008e635496ad631f59846b7895aa329390d2ad9980b6586d383a740f1e1b0883a3fddc4126c2d09fd5815dd892692e1c3b7eb2951b766bd4bca19896f75dbfaf51ad4ca9f97d00049082091e3c6cdf16026b1de4603ac7afde08a7a8ffd110636d3d063c2bb6fa84bfd7fff8ad04d0c812fe14a77bd3a9b9fdcc3e0fbaf5ac2475130987f81ac8c9898f95112aa597f40ec11e04684e45b56d81e11180f59b606886306fbc62c076a12a41238ccd74d3154f312f10f3ad215d64a468cb15eae30a3f7f7e5cf6a87dbd813df8093d2b3586693ddee6a5c1b0caaec1ef419657b89692bbd2a7064767cf5b4c3ef6d120557b4df5e7ee6094f935870edc070ae3e96c850a61356c5d79008fc98728dd87470a98aa1c1ab6056990110c0b3108e50b573d77ad4856c03da8098c8fd176685803db471a642dfb9a9ef2d14e186eea96219ea0fa03cc28d7ea2686e61c3f46f15c23213a6432d77ffea182ec26dbf9118a2fc082bdee517e0974982819a7a996b7a30f5901dd3c44b3344bdf93a61ecc4cddb969d3b94e6f4910a9b38ff886d5c96a820092f112ee6eb0ce094940280a2040862157497b3a3374a4d62c34d1fdf6826811db1ea7f28b64f22304e2246dcee44ca361370c0d1727f951dbdb1a329368a5dd76ba4486ce508a28d0ce2eb95daab36caf101dc2351c4efdf3ec70221888dad522b0d51a0b9765a410ca8cf00baaeb074d310cdd908e76586e59d0c7c27eb5557e474ac54525c237d5b2eedccab12b0f96fa2c00239e2017dfeb645fdd748d5c21684181b81464d32909b4995f274a9717f224c1e34cd41c8d12b9f13daeae3f65510c6ecf94956d630db0478fbf87c7d7c75221046a1a1886696f89e427b94139164b99b88d83b633122b5d9483f4261be27d01d6011cee48b1c24a3aff62c4d04f9dfb00e1a7a1013f97e87306147b7da305a36077cf0a7618563a754e34e65c2ee95932eb2da4b73ca83f3afcce93d8d59357ca7b5d9f37e5ba475be39bb8870af109d95527b44777ff8f55ace0adf84f73ce065371a4ce78b22d7a6bbf1bbae4c57b44262ddff39f4ce8b85"}}}}, 0xfbf) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @empty}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400, 0x1000, &(0x7f0000000000)) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200003d0900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001720000180070001007274"], 0xb4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x48, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x100) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 345.626944ms ago: executing program 1 (id=3551): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 4 (id=3552): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280000002d000100000000000000000008000000", @ANYRES32=r2], 0x28}], 0x1}, 0x4000800) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x6, 0x98000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000000)={r5}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x208c, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x3ff, 0xe, "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", 0x40, 0x7f, 0x3, 0x4, 0xdf, 0x2, 0xf9, 0x1}, r9}}, 0x120) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) listen(r6, 0xda90) accept4(r6, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) syz_io_uring_setup(0x37ff, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x2, 0x20b}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) kernel console output (not intermixed with test programs): sing dummy_hcd [ 1587.307609][T20701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.318027][T20701] usb 4-1: config 0 has no interfaces? [ 1587.341339][T20701] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1587.350907][T20701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.359296][T20701] usb 4-1: Product: syz [ 1587.368231][T20701] usb 4-1: Manufacturer: syz [ 1587.383144][T20701] usb 4-1: SerialNumber: syz [ 1587.406232][T20701] usb 4-1: config 0 descriptor?? [ 1587.642771][T23515] vivid-000: reconnect [ 1588.350842][T23554] hub 9-0:1.0: USB hub found [ 1588.388173][T23567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1588.396360][T23554] hub 9-0:1.0: 1 port detected [ 1588.414786][T23556] pim6reg: entered allmulticast mode [ 1589.299947][ T6999] pim6reg (unregistering): left allmulticast mode [ 1589.690602][T23578] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 1589.758922][T23580] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 1589.828785][T23580] bond8: entered promiscuous mode [ 1589.834041][T23580] bond8: entered allmulticast mode [ 1589.840014][T23580] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1590.078304][T23580] bridge1: entered promiscuous mode [ 1590.103527][T23580] bridge1: entered allmulticast mode [ 1590.120029][T23580] bond8: (slave bridge1): Enslaving as a backup interface with an up link [ 1590.177646][ T6999] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1590.328257][ T6999] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1591.232841][T23596] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1591.253047][T23596] openvswitch: netlink: Message has 512 unknown bytes. [ 1594.445438][T23620] input: syz1 as /devices/virtual/input/input113 [ 1594.455933][T23620] program syz.4.3144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1595.178020][T20701] usb 4-1: USB disconnect, device number 72 [ 1595.687177][T23630] program syz.2.3145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1595.808060][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 1597.504442][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'. [ 1597.558068][T23658] @: renamed from syz_tun (while UP) [ 1598.683142][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1601.019037][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1601.019057][ T30] audit: type=1326 audit(1759991227.765:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.078090][ T30] audit: type=1326 audit(1759991227.795:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.126425][ T30] audit: type=1326 audit(1759991227.795:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.182882][ T30] audit: type=1326 audit(1759991227.795:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.257388][ T30] audit: type=1326 audit(1759991227.795:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.337086][ T30] audit: type=1326 audit(1759991227.795:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.359896][ T30] audit: type=1326 audit(1759991227.855:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.385371][ T30] audit: type=1326 audit(1759991227.855:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.408547][ T30] audit: type=1326 audit(1759991227.895:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.446177][ T30] audit: type=1326 audit(1759991227.895:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23689 comm="syz.4.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1601.869514][T23698] input: syz1 as /devices/virtual/input/input114 [ 1601.894670][T23698] program syz.1.3157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1603.437377][T20701] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1603.599752][T20701] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1603.618123][T20701] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1603.643265][T20701] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1603.664376][T20701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.696616][T23715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1603.721962][T20701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1604.485858][T22009] usb 2-1: USB disconnect, device number 10 [ 1605.694493][T23732] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1605.703280][T23732] team0: Port device batadv1 added [ 1605.751208][T23732] hub 9-0:1.0: USB hub found [ 1605.759444][T23732] hub 9-0:1.0: 1 port detected [ 1607.088174][T23741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1607.360743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.367203][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.381324][T22009] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1607.569091][T22009] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1607.579112][T22009] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1607.604961][T22009] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1607.637694][T22009] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1607.656091][T22009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.673774][T22009] usb 2-1: Product: syz [ 1607.703224][T22009] usb 2-1: Manufacturer: syz [ 1607.711387][T22009] usb 2-1: SerialNumber: syz [ 1607.735599][T22009] hub 2-1:1.0: bad descriptor, ignoring hub [ 1607.752859][T22009] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1607.949811][T22009] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1608.278790][T23741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.349705][T23741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.697157][T23752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1608.848981][T23753] fuse: Bad value for 'fd' [ 1609.222991][T23762] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3168'. [ 1609.467162][T22009] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1609.747674][T22009] usb 1-1: Using ep0 maxpacket: 16 [ 1609.753291][T17165] usb 2-1: USB disconnect, device number 11 [ 1609.762229][T17165] usblp0: removed [ 1610.540059][T23777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1611.610693][T23762] syz.2.3168 (23762): drop_caches: 2 [ 1611.667251][ T985] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1611.881701][ T985] usb 5-1: config 0 has no interfaces? [ 1611.940037][ T985] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1611.949545][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.957694][ T985] usb 5-1: Product: syz [ 1611.962284][ T985] usb 5-1: Manufacturer: syz [ 1611.967211][ T985] usb 5-1: SerialNumber: syz [ 1612.039172][ T985] usb 5-1: config 0 descriptor?? [ 1612.660053][T22009] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1612.668877][T22009] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1612.676464][T22009] usb 1-1: can't read configurations, error -71 [ 1613.032829][T23791] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 1614.598783][T17165] usb 5-1: USB disconnect, device number 108 [ 1615.190387][T23816] fuse: Bad value for 'fd' [ 1617.907101][T17165] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1618.068609][T17165] usb 1-1: Using ep0 maxpacket: 16 [ 1618.086881][T17165] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1618.099263][T17165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.111744][T17165] usb 1-1: Product: syz [ 1618.115939][T17165] usb 1-1: Manufacturer: syz [ 1618.122486][T17165] usb 1-1: SerialNumber: syz [ 1618.137910][T17165] usb 1-1: config 0 descriptor?? [ 1619.990945][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1619.990961][ T30] audit: type=1326 audit(1759991246.735:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.034545][ T30] audit: type=1326 audit(1759991246.775:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.059143][ T30] audit: type=1326 audit(1759991246.775:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.084433][ T30] audit: type=1326 audit(1759991246.775:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.108874][ T30] audit: type=1326 audit(1759991246.775:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.133658][ T30] audit: type=1326 audit(1759991246.775:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.202191][ T30] audit: type=1326 audit(1759991246.775:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.225494][ T30] audit: type=1326 audit(1759991246.775:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.258956][ T30] audit: type=1326 audit(1759991246.775:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.292989][ T30] audit: type=1326 audit(1759991246.775:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23838 comm="syz.1.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbf8eec9 code=0x7ffc0000 [ 1620.524560][T17165] usb_8dev 1-1:0.0 can0: sending command message failed [ 1620.532332][T17165] usb_8dev 1-1:0.0 can0: can't get firmware version [ 1620.699413][T17165] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 1620.747321][T17165] usb 1-1: USB disconnect, device number 79 [ 1620.867104][T22009] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1621.044998][T23856] hub 9-0:1.0: USB hub found [ 1621.110963][T23856] hub 9-0:1.0: 1 port detected [ 1621.441129][T22009] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1621.487762][T22009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.507673][T22009] usb 4-1: Product: syz [ 1621.517570][T22009] usb 4-1: Manufacturer: syz [ 1621.527324][T22009] usb 4-1: SerialNumber: syz [ 1621.551111][T22009] usb 4-1: config 0 descriptor?? [ 1621.608498][T22009] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1621.713341][T22009] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1621.736667][T22009] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1621.737147][ T985] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1621.771256][T22009] usb 4-1: media controller created [ 1621.812642][T22009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.874310][T22009] DVB: Unable to find symbol mt352_attach() [ 1621.911282][T22009] DVB: Unable to find symbol nxt6000_attach() [ 1621.917919][T22009] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1621.930348][T22009] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input115 [ 1621.945237][T22009] dvb-usb: schedule remote query interval to 1000 msecs. [ 1621.961221][T22009] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1621.977785][T22009] dvb-usb: bulk message failed: -22 (7/0) [ 1621.987189][T22009] dvb-usb: bulk message failed: -22 (7/0) [ 1622.051498][ T985] usb 2-1: config 0 has no interfaces? [ 1622.069149][ T985] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1622.089703][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.165389][T23867] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1622.172490][ T985] usb 2-1: Product: syz [ 1622.187928][ T985] usb 2-1: Manufacturer: syz [ 1622.192560][ T985] usb 2-1: SerialNumber: syz [ 1622.267815][ T985] usb 2-1: config 0 descriptor?? [ 1623.037088][T22009] dvb-usb: bulk message failed: -22 (7/0) [ 1623.043053][T22009] dvb-usb: error while querying for an remote control event. [ 1623.572982][ T985] usb 4-1: USB disconnect, device number 73 [ 1623.711227][ T985] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1624.084939][T23882] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 1624.839771][T22009] usb 2-1: USB disconnect, device number 12 [ 1625.103991][T23896] netlink: 'syz.4.3195': attribute type 27 has an invalid length. [ 1625.453569][T23895] dns_resolver: Unsupported server list version (0) [ 1625.527107][ T985] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1625.688359][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 1625.695278][ T985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.709490][ T985] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1625.733307][ T985] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1625.768108][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.777472][ T985] usb 5-1: Product: syz [ 1625.781739][ T985] usb 5-1: Manufacturer: syz [ 1625.786433][ T985] usb 5-1: SerialNumber: syz [ 1625.808900][ T985] usb 5-1: config 0 descriptor?? [ 1626.139962][T23896] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 1626.399428][T23896] xfrm2: left allmulticast mode [ 1626.520048][T23897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.555188][T23897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1626.983673][T23913] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 1627.794500][T23915] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1627.806246][T23915] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1628.137185][ T985] usb 5-1: USB disconnect, device number 109 [ 1628.374086][T23926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1628.507159][T20701] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1628.507619][T23916] gretap1: entered promiscuous mode [ 1628.749220][T20701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.765231][T20701] usb 2-1: New USB device found, idVendor=1477, idProduct=1024, bcdDevice= 0.00 [ 1628.897301][T20701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.908233][T20701] usb 2-1: config 0 descriptor?? [ 1628.983962][T23916] bond3: (slave gretap1): making interface the new active one [ 1628.993496][T23916] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1629.016698][T23917] macvlan2: entered promiscuous mode [ 1629.022409][T23917] macvlan2: entered allmulticast mode [ 1629.240465][T23917] bond3: entered promiscuous mode [ 1629.246480][T23917] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1629.268332][T23917] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1629.299694][T23930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1629.328064][T23917] bond3: left promiscuous mode [ 1629.547461][T22009] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1629.738293][T22009] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1629.748554][T22009] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1629.758958][T22009] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1629.775066][T22009] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1629.785026][T22009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.793445][T22009] usb 1-1: Product: syz [ 1629.797939][T22009] usb 1-1: Manufacturer: syz [ 1629.802542][T22009] usb 1-1: SerialNumber: syz [ 1629.837910][T22009] hub 1-1:1.0: bad descriptor, ignoring hub [ 1629.857550][T22009] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1629.881188][T23941] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1630.317672][T22009] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1630.357818][T22009] usb 1-1: USB disconnect, device number 80 [ 1630.366504][T22009] usblp0: removed [ 1631.394785][T20701] usb 2-1: string descriptor 0 read error: -71 [ 1631.412677][T20701] usbhid 2-1:0.0: can't add hid device: -71 [ 1631.418923][T20701] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1631.500286][T20701] usb 2-1: USB disconnect, device number 13 [ 1632.907212][T22009] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1633.058897][T22009] usb 1-1: config 0 has no interfaces? [ 1633.254654][T22009] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1633.277674][T22009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.299104][T22009] usb 1-1: Product: syz [ 1633.307239][T22009] usb 1-1: Manufacturer: syz [ 1633.312134][T22009] usb 1-1: SerialNumber: syz [ 1633.319703][T22009] usb 1-1: config 0 descriptor?? [ 1635.366928][T23985] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3210'. [ 1635.853174][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1635.853195][ T30] audit: type=1326 audit(1759991262.595:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1635.920729][ T30] audit: type=1326 audit(1759991262.665:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1635.946793][ T30] audit: type=1326 audit(1759991262.695:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1635.972386][ T30] audit: type=1326 audit(1759991262.715:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1635.999664][ T30] audit: type=1326 audit(1759991262.745:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1636.023532][ T30] audit: type=1326 audit(1759991262.775:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1636.260972][ T985] usb 1-1: USB disconnect, device number 81 [ 1636.346795][ T30] audit: type=1326 audit(1759991263.085:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1636.370408][ T30] audit: type=1326 audit(1759991263.115:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.3.3211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f4b8eec9 code=0x7ffc0000 [ 1636.638307][T23996] tipc: Enabling of bearer rejected, already enabled [ 1636.654258][T23996] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3212'. [ 1636.664657][T23996] tipc: Enabling of bearer rejected, already enabled [ 1637.199942][ T985] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1637.517144][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 1637.568581][T24000] usb usb8: check_ctrlrecip: process 24000 (syz.4.3213) requesting ep 01 but needs 81 [ 1637.601431][T24000] usb usb8: usbfs: process 24000 (syz.4.3213) did not claim interface 0 before use [ 1637.630878][T24000] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1637.652834][T24004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.907240][T20701] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1638.059265][T20701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1638.130936][T20701] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1638.153982][T20701] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1638.185376][T20701] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1638.195209][T20701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.203703][T20701] usb 2-1: Product: syz [ 1638.208307][T20701] usb 2-1: Manufacturer: syz [ 1638.212915][T20701] usb 2-1: SerialNumber: syz [ 1638.222134][T20701] hub 2-1:1.0: bad descriptor, ignoring hub [ 1638.239968][T20701] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1638.442876][T20701] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1640.217375][T20701] usb 2-1: USB disconnect, device number 14 [ 1640.227471][T20701] usblp0: removed [ 1641.472343][ T985] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1641.481999][ T985] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1641.489648][ T985] usb 5-1: can't read configurations, error -71 [ 1642.588044][T24040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 1642.801944][T24042] tipc: Enabling of bearer rejected, already enabled [ 1642.814851][T24042] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1643.067316][T24042] tipc: Enabling of bearer rejected, already enabled [ 1643.507855][T24046] futex_wake_op: syz.2.3218 tries to shift op by 32; fix this program [ 1645.116698][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1645.125702][ T985] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1645.141248][T24069] netlink: 'syz.4.3226': attribute type 30 has an invalid length. [ 1645.194060][T21606] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.205945][T21606] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.206791][T24070] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1645.250487][T21606] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.268468][T21606] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.295953][T24070] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1645.306957][T24070] CPU: 0 UID: 0 PID: 24070 Comm: syz.4.3226 Not tainted syzkaller #0 PREEMPT(full) [ 1645.306992][T24070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1645.307006][T24070] Call Trace: [ 1645.307015][T24070] [ 1645.307025][T24070] dump_stack_lvl+0x189/0x250 [ 1645.307059][T24070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1645.307085][T24070] ? __pfx__printk+0x10/0x10 [ 1645.307112][T24070] ? __rcu_read_unlock+0x84/0xe0 [ 1645.307146][T24070] ? kernfs_path_from_node+0x2f/0x290 [ 1645.307174][T24070] ? kernfs_path_from_node+0x250/0x290 [ 1645.307197][T24070] ? kernfs_path_from_node+0x2f/0x290 [ 1645.307223][T24070] sysfs_warn_dup+0x8e/0xa0 [ 1645.307244][T24070] sysfs_do_create_link_sd+0xc0/0x110 [ 1645.307270][T24070] device_add_class_symlinks+0x1cf/0x240 [ 1645.307302][T24070] device_add+0x475/0xb50 [ 1645.307331][T24070] wiphy_register+0x1c81/0x2aa0 [ 1645.307369][T24070] ? __pfx_wiphy_register+0x10/0x10 [ 1645.307391][T24070] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1645.307426][T24070] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1645.307458][T24070] ieee80211_register_hw+0x3473/0x40d0 [ 1645.307488][T24070] ? ieee80211_register_hw+0x1411/0x40d0 [ 1645.307519][T24070] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1645.307540][T24070] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1645.307561][T24070] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1645.307588][T24070] ? __hrtimer_setup+0x187/0x210 [ 1645.307606][T24070] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1645.307634][T24070] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 1645.307681][T24070] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1645.307700][T24070] ? trace_kmalloc+0x1f/0xd0 [ 1645.307722][T24070] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 1645.307748][T24070] ? kstrndup+0xbf/0x160 [ 1645.307775][T24070] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1645.307802][T24070] ? __pfx___nla_validate_parse+0x10/0x10 [ 1645.307839][T24070] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1645.307866][T24070] ? rcu_is_watching+0x15/0xb0 [ 1645.307889][T24070] ? __nla_parse+0x40/0x60 [ 1645.307917][T24070] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1645.307951][T24070] genl_family_rcv_msg_doit+0x215/0x300 [ 1645.307982][T24070] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1645.308017][T24070] ? bpf_lsm_capable+0x9/0x20 [ 1645.308039][T24070] ? security_capable+0x7e/0x2e0 [ 1645.308066][T24070] genl_rcv_msg+0x60e/0x790 [ 1645.308096][T24070] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.308119][T24070] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1645.308142][T24070] ? __asan_memcpy+0x40/0x70 [ 1645.308164][T24070] ? __pfx_ref_tracker_free+0x10/0x10 [ 1645.308193][T24070] netlink_rcv_skb+0x208/0x470 [ 1645.308209][T24070] ? __lock_acquire+0xab9/0xd20 [ 1645.308227][T24070] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.308252][T24070] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1645.308288][T24070] ? down_read+0x1ad/0x2e0 [ 1645.308315][T24070] genl_rcv+0x28/0x40 [ 1645.308337][T24070] netlink_unicast+0x82f/0x9e0 [ 1645.308372][T24070] ? __pfx_netlink_unicast+0x10/0x10 [ 1645.308402][T24070] ? netlink_sendmsg+0x642/0xb30 [ 1645.308418][T24070] ? skb_put+0x11b/0x210 [ 1645.308441][T24070] netlink_sendmsg+0x805/0xb30 [ 1645.308467][T24070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.308489][T24070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1645.308520][T24070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1645.308537][T24070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.308556][T24070] __sock_sendmsg+0x219/0x270 [ 1645.308585][T24070] ____sys_sendmsg+0x505/0x830 [ 1645.308611][T24070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.308640][T24070] ? import_iovec+0x74/0xa0 [ 1645.308660][T24070] ___sys_sendmsg+0x21f/0x2a0 [ 1645.308683][T24070] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.308735][T24070] ? __fget_files+0x2a/0x420 [ 1645.308750][T24070] ? __fget_files+0x3a0/0x420 [ 1645.308774][T24070] __x64_sys_sendmsg+0x19b/0x260 [ 1645.308798][T24070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1645.308834][T24070] ? do_syscall_64+0xbe/0xfa0 [ 1645.308859][T24070] do_syscall_64+0xfa/0xfa0 [ 1645.308879][T24070] ? lockdep_hardirqs_on+0x9c/0x150 [ 1645.308900][T24070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.308917][T24070] ? clear_bhb_loop+0x60/0xb0 [ 1645.308938][T24070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.308955][T24070] RIP: 0033:0x7f256298eec9 [ 1645.308973][T24070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.308990][T24070] RSP: 002b:00007f25637d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.309010][T24070] RAX: ffffffffffffffda RBX: 00007f2562be6270 RCX: 00007f256298eec9 [ 1645.309025][T24070] RDX: 0000000000000084 RSI: 0000200000000240 RDI: 0000000000000003 [ 1645.309037][T24070] RBP: 00007f2562a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1645.309048][T24070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1645.309059][T24070] R13: 00007f2562be6308 R14: 00007f2562be6270 R15: 00007f2562d0fa28 [ 1645.309089][T24070] [ 1646.468611][ T985] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.522097][ T985] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1646.630359][ T985] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1646.657425][ T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.797509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.806517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.837174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.847338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.130397][ T985] usb 1-1: USB disconnect, device number 82 [ 1648.200032][T24063] delete_channel: no stack [ 1648.227491][T24080] fuse: Bad value for 'fd' [ 1648.877211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.885816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.781498][ T985] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1649.917163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.925929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.037963][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 1650.058781][ T985] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.099212][ T985] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.118096][ T985] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1650.132141][ T985] usb 2-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1650.150666][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.173063][ T985] usb 2-1: config 0 descriptor?? [ 1650.599756][T24115] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1650.656831][T24115] team0: Port device batadv2 added [ 1650.672882][T24117] hub 9-0:1.0: USB hub found [ 1650.757436][T24117] hub 9-0:1.0: 1 port detected [ 1650.957209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.965754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.055284][T24118] binder: 24113:24118 ioctl c0306201 200000000100 returned -11 [ 1651.948161][T24128] netlink: 'syz.4.3237': attribute type 1 has an invalid length. [ 1651.957290][T24128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3237'. [ 1651.997194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.005863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.422251][ T985] usb 2-1: USB disconnect, device number 15 [ 1652.813279][T24139] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1653.037182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.045787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.716073][ T30] audit: type=1326 audit(1759991280.455:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1653.745533][ T30] audit: type=1326 audit(1759991280.485:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1653.769292][ T30] audit: type=1326 audit(1759991280.485:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1653.793441][ T30] audit: type=1326 audit(1759991280.485:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1653.887110][ T30] audit: type=1326 audit(1759991280.485:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1653.929095][ T30] audit: type=1326 audit(1759991280.485:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1653.972126][ T30] audit: type=1326 audit(1759991280.485:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1654.025479][ T30] audit: type=1326 audit(1759991280.485:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1654.072098][ T30] audit: type=1326 audit(1759991280.485:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1654.077488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.103557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.211251][ T30] audit: type=1326 audit(1759991280.485:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24142 comm="syz.4.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1654.707616][T24154] netlink: 'syz.2.3240': attribute type 27 has an invalid length. [ 1655.117143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.127296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.712744][T24154] gretap1: left promiscuous mode [ 1655.893160][T24159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.902116][T24159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.044964][T24159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1656.157133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.197271][ C0] net_ratelimit: 1 callbacks suppressed [ 1657.197297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.211555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.147140][T17165] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1658.237187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.245808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.325358][T24171] hub 9-0:1.0: USB hub found [ 1658.334734][T24171] hub 9-0:1.0: 1 port detected [ 1658.348788][T17165] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.359914][T17165] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1658.374707][T17165] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1658.384268][T17165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1658.392736][T17165] usb 2-1: SerialNumber: syz [ 1658.403067][T17165] usb 2-1: bad CDC descriptors [ 1659.277237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.285854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.327133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.335745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.357293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.365740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.397204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.405701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.581254][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 1662.593699][T24218] input: syz0 as /devices/virtual/input/input116 [ 1662.691138][T20701] usb 2-1: USB disconnect, device number 16 [ 1663.437188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.447873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.544825][T24235] ip6erspan0: entered promiscuous mode [ 1663.978407][T22009] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1664.147136][T22009] usb 2-1: Using ep0 maxpacket: 8 [ 1664.174154][T22009] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1664.193033][T22009] usb 2-1: config 179 has no interface number 0 [ 1664.213214][T22009] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1664.238380][T22009] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1664.266285][T22009] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1664.291241][T22009] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1664.363283][T22009] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1664.477246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.487343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.545027][T22009] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1664.647918][T22009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.202835][T24235] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1665.517201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.527307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.857829][T24245] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1665.903684][T24246] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1665.940298][T24250] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1666.405861][T24255] input: syz1 as /devices/virtual/input/input117 [ 1666.510144][T24255] program syz.4.3259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1666.557157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.565760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.956925][T24259] netlink: 'syz.3.3258': attribute type 27 has an invalid length. [ 1667.510366][T22009] usb 2-1: USB disconnect, device number 17 [ 1667.516462][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1667.516501][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1667.597178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.605801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.154785][T24273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.163808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.392803][T24274] vivid-000: disconnect [ 1668.507164][T17165] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1668.637157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.645912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.697239][T17165] usb 2-1: Using ep0 maxpacket: 16 [ 1668.729189][T24277] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3261'. [ 1668.747661][T17165] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1668.756767][T17165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.767151][ T5935] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1668.804289][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.810848][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.897059][T17165] usb 2-1: Product: syz [ 1668.907232][T17165] usb 2-1: Manufacturer: syz [ 1668.911883][T17165] usb 2-1: SerialNumber: syz [ 1668.997356][T17165] usb 2-1: config 0 descriptor?? [ 1669.525208][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.535881][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1669.677168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.686612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.786099][T24259] bond0: left promiscuous mode [ 1669.791433][T24259] bond3: left promiscuous mode [ 1670.297068][T22009] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1670.319409][T24260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.338265][T24260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1670.427926][T24277] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1670.436379][T24277] 0ªî{X¹¦: entered allmulticast mode [ 1670.442421][T24277] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1670.477441][T22009] usb 1-1: Using ep0 maxpacket: 16 [ 1670.496741][T22009] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.507563][T22009] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1670.536798][T22009] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1670.577392][T22009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.586046][T22009] usb 1-1: Product: syz [ 1670.593589][T22009] usb 1-1: Manufacturer: syz [ 1670.598482][T22009] usb 1-1: SerialNumber: syz [ 1670.639888][T24293] netlink: 'syz.4.3264': attribute type 27 has an invalid length. [ 1670.741817][T24293] 0ªî{X¹¦: left allmulticast mode [ 1671.007152][ T985] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1671.157095][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 1671.164315][ T985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.176203][ T985] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1671.190736][ T985] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1671.201400][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.213046][ T985] usb 5-1: Product: syz [ 1671.217603][ T985] usb 5-1: Manufacturer: syz [ 1671.222575][ T985] usb 5-1: SerialNumber: syz [ 1671.230362][ T985] usb 5-1: config 0 descriptor?? [ 1671.588519][T24294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1671.611778][T17165] usb_8dev 2-1:0.0 can0: sending command message failed [ 1671.624445][T21606] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1671.627011][T17165] usb_8dev 2-1:0.0 can0: can't get firmware version [ 1671.634428][T21606] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1671.686200][T21606] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1671.704032][T21606] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1671.759017][T17165] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 1671.778292][T17165] usb 2-1: USB disconnect, device number 18 [ 1672.097232][T17165] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1672.277592][T17165] usb 2-1: Using ep0 maxpacket: 16 [ 1672.287706][T17165] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1672.297020][T17165] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1672.305318][T17165] usb 2-1: Product: syz [ 1672.310257][T17165] usb 2-1: Manufacturer: syz [ 1672.314947][T17165] usb 2-1: SerialNumber: syz [ 1672.322840][T17165] usb 2-1: config 0 descriptor?? [ 1672.443054][T24265] vivid-000: reconnect [ 1672.452397][T22009] usb 1-1: 0:2 : does not exist [ 1672.497550][T22009] usb 1-1: USB disconnect, device number 83 [ 1672.556446][T23486] udevd[23486]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1672.623734][ T985] usb 2-1: USB disconnect, device number 19 [ 1672.807361][ C0] net_ratelimit: 5 callbacks suppressed [ 1672.807384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.822098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.985142][T24321] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1672.991759][T24321] syzkaller1: linktype set to 774 [ 1673.089952][T24320] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1673.096546][T24320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1673.104515][T24320] vhci_hcd vhci_hcd.0: Device attached [ 1673.120546][T24320] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 1673.127195][T24320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1673.136356][T24320] vhci_hcd vhci_hcd.0: Device attached [ 1673.159486][T24320] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 1673.166151][T24320] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1673.174367][T24320] vhci_hcd vhci_hcd.0: Device attached [ 1673.195921][T24320] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 1673.202586][T24320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1673.213723][T24320] vhci_hcd vhci_hcd.0: Device attached [ 1673.257748][T24316] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 1673.264436][T24316] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1673.310058][T24320] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1673.327114][ T985] vhci_hcd: vhci_device speed not set [ 1673.333304][T24316] vhci_hcd vhci_hcd.0: Device attached [ 1673.343996][T24320] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(22) [ 1673.350603][T24320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1673.387107][ T985] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1673.398819][T24320] vhci_hcd vhci_hcd.0: Device attached [ 1673.441230][T24316] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(19) [ 1673.447970][T24316] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1673.468257][T24316] vhci_hcd vhci_hcd.0: Device attached [ 1673.520045][T24332] vhci_hcd: connection closed [ 1673.520729][T24330] vhci_hcd: connection closed [ 1673.522923][ T1334] vhci_hcd: stop threads [ 1673.535873][T24328] vhci_hcd: connection closed [ 1673.536451][T24326] vhci_hcd: connection closed [ 1673.541343][T24334] vhci_hcd: connection closed [ 1673.546446][T24324] vhci_hcd: connection closed [ 1673.551444][T24322] vhci_hcd: connection reset by peer [ 1673.562662][ T1334] vhci_hcd: release socket [ 1673.569788][ T1334] vhci_hcd: disconnect device [ 1673.574988][ T1334] vhci_hcd: stop threads [ 1673.582367][ T1334] vhci_hcd: release socket [ 1673.610644][ T1334] vhci_hcd: disconnect device [ 1673.620981][ T1334] vhci_hcd: stop threads [ 1673.625349][ T1334] vhci_hcd: release socket [ 1673.630312][ T1334] vhci_hcd: disconnect device [ 1673.635307][ T1334] vhci_hcd: stop threads [ 1673.640359][ T1334] vhci_hcd: release socket [ 1673.644927][ T1334] vhci_hcd: disconnect device [ 1673.650235][ T1334] vhci_hcd: stop threads [ 1673.654576][ T1334] vhci_hcd: release socket [ 1673.659816][ T1334] vhci_hcd: disconnect device [ 1673.664823][ T1334] vhci_hcd: stop threads [ 1673.669848][ T1334] vhci_hcd: release socket [ 1673.674745][ T1334] vhci_hcd: disconnect device [ 1673.680164][ T1334] vhci_hcd: stop threads [ 1673.684491][ T1334] vhci_hcd: release socket [ 1673.690031][ T1334] vhci_hcd: disconnect device [ 1673.696375][T20701] usb 5-1: USB disconnect, device number 112 [ 1673.837243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.846411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.090049][T24346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.098918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.107691][ T5935] usb 4-1: string descriptor 0 read error: -71 [ 1674.114010][ T5935] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1674.197625][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.306367][ T5935] usb 4-1: config 0 descriptor?? [ 1674.317411][ T5935] usb 4-1: can't set config #0, error -71 [ 1674.337173][ T5935] usb 4-1: USB disconnect, device number 74 [ 1674.877160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.887071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.041893][T24354] overlayfs: missing 'lowerdir' [ 1675.917184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.925886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.176223][T24360] netlink: 'syz.3.3270': attribute type 12 has an invalid length. [ 1676.406224][T24364] input: syz1 as /devices/virtual/input/input118 [ 1676.435161][T24364] program syz.0.3272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1676.775175][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3273'. [ 1677.997200][ C0] net_ratelimit: 2050 callbacks suppressed [ 1677.997225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.012146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.439347][T24383] kvm: user requested TSC rate below hardware speed [ 1678.557265][ T985] vhci_hcd: vhci_device speed not set [ 1678.941835][T24377] atomic_op ffff8880318ab198 conn xmit_atomic 0000000000000000 [ 1679.038856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.047436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.142048][T24383] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1679.857354][T24395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.866146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.879954][T24395] program syz.1.3278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1680.077281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.086761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.521680][T24402] netlink: 'syz.2.3279': attribute type 27 has an invalid length. [ 1680.737251][ T5915] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1680.991957][T24406] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1681.002504][ T5915] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1681.014234][ T5915] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1681.028018][ T5915] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1681.094034][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.127161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.136948][ T5915] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1681.150994][ T5915] usb 1-1: invalid MIDI out EP 0 [ 1681.197995][T24406] usb 5-1: Using ep0 maxpacket: 8 [ 1681.255713][ T5915] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1681.289370][T24404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.301523][T24404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.363792][T24406] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1681.374022][T24406] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1681.384715][T24406] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1681.445433][T24406] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1681.474084][T24406] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1681.492961][T24406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.862281][T24406] usb 5-1: GET_CAPABILITIES returned 0 [ 1681.958656][T24406] usbtmc 5-1:16.0: can't read capabilities [ 1682.823709][T24416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1682.840521][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1682.856916][T24416] libceph: resolve '0..' (ret=-3): failed [ 1683.197147][ C0] net_ratelimit: 4 callbacks suppressed [ 1683.197169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.211176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.707427][T20701] usb 1-1: USB disconnect, device number 84 [ 1683.883267][T24426] input: syz1 as /devices/virtual/input/input119 [ 1683.909174][T24426] program syz.0.3284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1683.930608][T20701] usb 5-1: USB disconnect, device number 113 [ 1684.237226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.245909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.277219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.285934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.407163][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1685.407185][ T30] audit: type=1326 audit(1759991312.105:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1685.438531][ T30] audit: type=1326 audit(1759991312.105:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1685.471351][ T30] audit: type=1326 audit(1759991312.115:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1685.497146][ T30] audit: type=1326 audit(1759991312.115:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1685.520352][ T30] audit: type=1326 audit(1759991312.115:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1685.543552][ T30] audit: type=1326 audit(1759991312.115:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1686.007250][ T30] audit: type=1326 audit(1759991312.735:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1686.061545][ T30] audit: type=1326 audit(1759991312.735:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1686.277093][ T30] audit: type=1326 audit(1759991312.995:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1686.317246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.327363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.381033][ T30] audit: type=1326 audit(1759991312.995:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24427 comm="syz.4.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256298eec9 code=0x7ffc0000 [ 1687.367132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.375748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.397178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.406250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.447145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.456166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.633074][T24484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1689.775835][T24486] netlink: 'syz.4.3296': attribute type 27 has an invalid length. [ 1690.221200][T17164] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1690.397471][T17164] usb 5-1: Using ep0 maxpacket: 16 [ 1690.405327][T17164] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.434757][T17164] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1690.456643][T17164] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1690.473620][T17164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.481976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.490537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.499383][T17164] usb 5-1: Product: syz [ 1690.504153][T17164] usb 5-1: Manufacturer: syz [ 1690.508901][T17164] usb 5-1: SerialNumber: syz [ 1690.515844][T17164] usb 5-1: config 0 descriptor?? [ 1690.539668][T24492] netlink: 'syz.0.3297': attribute type 21 has an invalid length. [ 1690.548224][T24492] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3297'. [ 1690.676183][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1690.676201][ T30] audit: type=1326 audit(1759991317.415:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.705975][ T30] audit: type=1326 audit(1759991317.415:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.730271][ T30] audit: type=1326 audit(1759991317.475:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.753609][ T30] audit: type=1326 audit(1759991317.475:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.776576][ T30] audit: type=1326 audit(1759991317.475:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.800307][ T30] audit: type=1326 audit(1759991317.545:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.823480][ T30] audit: type=1326 audit(1759991317.545:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.846871][ T30] audit: type=1326 audit(1759991317.545:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.875043][ T30] audit: type=1326 audit(1759991317.615:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.901317][ T30] audit: type=1326 audit(1759991317.615:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24490 comm="syz.0.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1690.997644][T24487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1691.104753][T24487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1691.121605][T24492] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3297'. [ 1691.517157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.525555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.560025][T24507] fuse: Unknown parameter 'mGN‡8o«ad' [ 1691.617985][T24506] input: syz1 as /devices/virtual/input/input120 [ 1692.557178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.575600][T24506] program syz.3.3298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1692.986838][T24519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1693.247251][ T5935] usb 5-1: USB disconnect, device number 114 [ 1693.287188][T24406] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1693.460159][T24406] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1693.474771][T24406] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1693.498294][T24406] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1693.517583][T24406] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1693.570030][T24406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.579633][T24406] usb 1-1: Product: syz [ 1693.592028][T24406] usb 1-1: Manufacturer: syz [ 1693.596671][T24406] usb 1-1: SerialNumber: syz [ 1693.597223][ C0] net_ratelimit: 1 callbacks suppressed [ 1693.597241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.615317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.738068][T24406] hub 1-1:1.0: bad descriptor, ignoring hub [ 1693.744728][T24406] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1693.826860][T24528] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1693.836492][T24528] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1693.846437][T24528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1693.991899][T24406] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1694.307448][ T5935] usb 1-1: USB disconnect, device number 85 [ 1694.315494][ T5935] usblp0: removed [ 1694.637159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.645718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.677189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.685669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.323550][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 1696.366202][T24545] netlink: 'syz.0.3307': attribute type 1 has an invalid length. [ 1696.717158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.725784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.645631][T24564] syzkaller1: entered promiscuous mode [ 1697.653571][T24564] syzkaller1: entered allmulticast mode [ 1697.757227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.765685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.200017][T24564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3313'. [ 1698.209629][T24564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3313'. [ 1698.764353][T24579] macvtap0: entered allmulticast mode [ 1698.772675][T24579] veth0_macvtap: entered allmulticast mode [ 1698.797314][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.806200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.297175][T22009] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1699.457137][T22009] usb 5-1: device descriptor read/64, error -71 [ 1699.697110][T22009] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1699.837297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.845863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.928578][T22009] usb 5-1: device descriptor read/64, error -71 [ 1699.949789][T24592] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1699.956013][T24592] syzkaller1: linktype set to 774 [ 1700.143348][T22009] usb usb5-port1: attempt power cycle [ 1700.164282][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1700.497048][T22009] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1700.538734][T22009] usb 5-1: device descriptor read/8, error -71 [ 1700.813186][T22009] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1700.838141][T22009] usb 5-1: device descriptor read/8, error -71 [ 1700.877212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.886483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.947440][T22009] usb usb5-port1: unable to enumerate USB device [ 1701.927405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.935837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.080009][T24610] input: syz1 as /devices/virtual/input/input121 [ 1702.092159][T24610] program syz.4.3319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1702.764902][T24611] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1702.957283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.967197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.997797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.006329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.857850][T24635] syzkaller1: entered promiscuous mode [ 1704.863629][T24635] syzkaller1: entered allmulticast mode [ 1705.047239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.056218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.103993][T24635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1705.118430][T24635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1705.256663][T24632] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1706.077240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.085789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.808972][T24654] vivid-003: ================= START STATUS ================= [ 1706.816804][T24654] vivid-003: Radio HW Seek Mode: Bounded [ 1706.825982][T24654] vivid-003: Radio Programmable HW Seek: false [ 1706.832583][T24654] vivid-003: RDS Rx I/O Mode: Block I/O [ 1706.838748][T24654] vivid-003: Generate RBDS Instead of RDS: false [ 1706.845243][T24654] vivid-003: RDS Reception: true [ 1706.850836][T24654] vivid-003: RDS Program Type: 0 inactive [ 1706.856672][T24654] vivid-003: RDS PS Name: inactive [ 1706.862419][T24654] vivid-003: RDS Radio Text: inactive [ 1706.868429][T24654] vivid-003: RDS Traffic Announcement: false inactive [ 1706.875367][T24654] vivid-003: RDS Traffic Program: false inactive [ 1706.884956][T24654] vivid-003: RDS Music: false inactive [ 1706.890819][T24654] vivid-003: ================== END STATUS ================== [ 1707.117263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.125836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.157129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.165768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.197215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.205702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.617088][T22009] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1709.630094][T24682] input: syz1 as /devices/virtual/input/input122 [ 1709.793905][T22009] usb 2-1: config 0 has no interfaces? [ 1709.815383][T22009] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1709.828976][T22009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.846363][T22009] usb 2-1: Product: syz [ 1709.855139][T22009] usb 2-1: Manufacturer: syz [ 1709.864440][T22009] usb 2-1: SerialNumber: syz [ 1709.886468][T22009] usb 2-1: config 0 descriptor?? [ 1710.003433][T24684] trusted_key: encrypted_key: key user:syz not found [ 1710.237242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.247286][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.531411][T24682] program syz.2.3333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1711.277167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.285609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.840564][T24698] syzkaller1: entered promiscuous mode [ 1711.846177][T24698] syzkaller1: entered allmulticast mode [ 1712.124167][T24698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1712.133657][T24698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1712.316428][T20701] usb 2-1: USB disconnect, device number 20 [ 1712.327790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.336315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.357233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.365789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.397189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.405649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.437149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.445722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.817075][T17165] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1716.967552][T17165] usb 5-1: Using ep0 maxpacket: 16 [ 1716.974845][T17165] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.988707][T17165] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.028619][T17165] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1717.044450][T17165] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1717.066048][T17165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.097538][T17165] usb 5-1: config 0 descriptor?? [ 1717.931392][T24762] erspan0: entered promiscuous mode [ 1718.802174][T24764] random: crng reseeded on system resumption [ 1719.822487][T24406] usb 5-1: USB disconnect, device number 119 [ 1721.518978][T24792] netlink: 'syz.1.3354': attribute type 27 has an invalid length. [ 1721.977215][ T5935] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1722.074216][T24792] veth0_macvtap: left allmulticast mode [ 1722.082042][T24792] macvtap0: left allmulticast mode [ 1722.088315][T24792] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 1722.096365][T24792] ip6erspan0: left promiscuous mode [ 1722.114640][T24793] erspan0: left promiscuous mode [ 1722.140557][T24793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1722.159343][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 1722.179622][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.277326][ T5935] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1722.437317][T24805] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1722.509200][ T5935] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1722.518759][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.526802][ T5935] usb 2-1: Product: syz [ 1722.536458][ T5935] usb 2-1: Manufacturer: syz [ 1722.556770][ T5935] usb 2-1: SerialNumber: syz [ 1722.563965][ T5935] usb 2-1: config 0 descriptor?? [ 1722.639456][T24805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1722.657167][T24805] usb 5-1: not running at top speed; connect to a high speed hub [ 1722.675250][T24805] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 1722.700769][T24805] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1722.710478][T24805] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 1722.720311][T24805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.728953][T24805] usb 5-1: Product: syz [ 1722.733509][T24805] usb 5-1: Manufacturer: syz [ 1722.738398][T24805] usb 5-1: SerialNumber: syz [ 1722.754215][T24798] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1722.899283][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1722.913231][ T30] audit: type=1326 audit(1759991349.635:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24814 comm="syz.0.3357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63bd98eec9 code=0x0 [ 1723.229873][T24805] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input124 [ 1723.250559][ T5184] bcm5974 5-1:1.0: could not read from device [ 1723.258094][ T5184] bcm5974 5-1:1.0: could not read from device [ 1723.279302][ T5184] bcm5974 5-1:1.0: could not read from device [ 1723.287893][T24805] usb 5-1: USB disconnect, device number 120 [ 1723.347618][T24680] udevd[24680]: Error opening device "/dev/input/event4": No such file or directory [ 1723.357854][T24680] udevd[24680]: Unable to EVIOCGABS device "/dev/input/event4" [ 1723.387537][T24680] udevd[24680]: Unable to EVIOCGABS device "/dev/input/event4" [ 1723.408154][T24680] udevd[24680]: Unable to EVIOCGABS device "/dev/input/event4" [ 1723.415889][T24680] udevd[24680]: Unable to EVIOCGABS device "/dev/input/event4" [ 1723.888850][T24805] usb 2-1: USB disconnect, device number 21 [ 1724.590430][T24840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1725.827061][T17164] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1726.042634][T17164] usb 5-1: Using ep0 maxpacket: 16 [ 1726.051779][T17164] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.063437][T17164] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.074182][T17164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1726.082632][T17164] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1726.097104][T17164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.107814][T17164] usb 5-1: config 0 descriptor?? [ 1727.718396][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3365'. [ 1727.776190][T24875] netlink: 'syz.0.3366': attribute type 1 has an invalid length. [ 1728.564882][T17164] usb 5-1: USB disconnect, device number 121 [ 1728.780727][T24885] netlink: 'syz.4.3368': attribute type 4 has an invalid length. [ 1728.855854][T24887] netlink: 'syz.4.3368': attribute type 4 has an invalid length. [ 1729.439962][T24883] kvm: user requested TSC rate below hardware speed [ 1730.252750][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.259182][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.595149][T24901] netlink: 'syz.3.3371': attribute type 27 has an invalid length. [ 1730.673734][T24908] netlink: 'syz.0.3372': attribute type 21 has an invalid length. [ 1730.967110][T24809] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1731.059140][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 1731.117243][T24809] usb 4-1: Using ep0 maxpacket: 16 [ 1731.126763][T24809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.137641][T24809] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1731.151213][T24809] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1731.161755][T24809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.170265][T24809] usb 4-1: Product: syz [ 1731.174809][T24809] usb 4-1: Manufacturer: syz [ 1731.180015][T24809] usb 4-1: SerialNumber: syz [ 1731.218391][T24809] usb 4-1: config 0 descriptor?? [ 1731.294902][T24907] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.308696][T24907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1731.425911][T24908] netlink: 'syz.0.3372': attribute type 6 has an invalid length. [ 1731.473782][T24908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3372'. [ 1732.090202][ T30] audit: type=1326 audit(1759991358.835:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.150969][ T30] audit: type=1326 audit(1759991358.865:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.174441][ T30] audit: type=1326 audit(1759991358.885:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.209353][ T30] audit: type=1326 audit(1759991358.885:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.233082][ T30] audit: type=1326 audit(1759991358.885:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.288054][ T30] audit: type=1326 audit(1759991358.885:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.327046][ T30] audit: type=1326 audit(1759991358.895:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.407786][ T30] audit: type=1326 audit(1759991358.895:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.431419][ T30] audit: type=1326 audit(1759991358.895:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63bd98d710 code=0x7ffc0000 [ 1732.465090][ T30] audit: type=1326 audit(1759991358.895:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1732.898098][T24805] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1733.157072][T24805] usb 2-1: device descriptor read/64, error -71 [ 1733.397038][T24805] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1733.537195][T24805] usb 2-1: device descriptor read/64, error -71 [ 1733.657429][T24805] usb usb2-port1: attempt power cycle [ 1733.815539][T24809] usb 4-1: USB disconnect, device number 75 [ 1733.997415][T24805] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1734.028639][T24805] usb 2-1: device descriptor read/8, error -71 [ 1734.277094][T24805] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1734.299054][T24805] usb 2-1: device descriptor read/8, error -71 [ 1734.437633][T24805] usb usb2-port1: unable to enumerate USB device [ 1734.865175][T24943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3379'. [ 1735.707567][T24948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1736.417218][T24956] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3382'. [ 1736.586397][T24957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1736.691209][T17164] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1737.000124][T17164] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1737.017110][T17164] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1737.042196][T17164] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1737.063654][T17164] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1737.089717][T17164] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1737.108881][T17164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.557336][T17164] ath6kl: Failed to submit usb control message: -71 [ 1737.564129][T17164] ath6kl: unable to send the bmi data to the device: -71 [ 1737.586267][T17164] ath6kl: Unable to send get target info: -71 [ 1737.679191][T17164] ath6kl: Failed to init ath6kl core: -71 [ 1737.686383][T17164] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1737.780652][T17164] usb 2-1: USB disconnect, device number 26 [ 1738.121016][T24968] kvm: user requested TSC rate below hardware speed [ 1738.255637][T24977] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 1738.404656][T24977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.984518][T24979] bond0: (slave veth7): Enslaving as an active interface with a down link [ 1739.007801][T24980] vlan1: entered allmulticast mode [ 1739.013320][T24980] veth1: entered allmulticast mode [ 1739.028081][T24980] bond0: (slave vlan1): Opening slave failed [ 1739.050971][T24977] mac80211_hwsim hwsim10 è: renamed from wlan1 [ 1739.068813][T24988] netlink: 'syz.0.3388': attribute type 27 has an invalid length. [ 1739.417078][T24809] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1739.567317][T24809] usb 1-1: Using ep0 maxpacket: 16 [ 1739.575017][T24809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.630350][T24988] veth0_to_team: left promiscuous mode [ 1739.659337][T24988] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 1739.667255][T24809] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1739.680855][T24809] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1739.690641][T24809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.698844][T24809] usb 1-1: Product: syz [ 1739.703216][T24809] usb 1-1: Manufacturer: syz [ 1739.708870][T24992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3385'. [ 1739.718012][T24809] usb 1-1: SerialNumber: syz [ 1739.724895][T24809] usb 1-1: config 0 descriptor?? [ 1739.948455][T24988] bond8: left promiscuous mode [ 1739.953337][T24988] bridge1: left promiscuous mode [ 1739.958942][T24988] bond8: left allmulticast mode [ 1739.964630][T24988] bridge1: left allmulticast mode [ 1740.343666][T24991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.354035][T24991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1740.488968][T24991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1740.896146][T25000] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 1742.032213][T17164] usb 1-1: USB disconnect, device number 86 [ 1742.227072][T24805] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1742.499643][T24805] usb 2-1: device descriptor read/64, error -71 [ 1742.550425][T25019] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 1742.790196][T25021] netlink: 'syz.2.3391': attribute type 27 has an invalid length. [ 1742.858220][T24805] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1743.567065][T24805] usb 2-1: device descriptor read/64, error -71 [ 1743.678410][T24805] usb usb2-port1: attempt power cycle [ 1743.936203][T25008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.952003][T25008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.975879][T25008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1744.042675][T24805] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1744.083735][T24805] usb 2-1: device descriptor read/8, error -71 [ 1744.134552][T25022] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3393'. [ 1744.366248][T24805] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1744.407795][T24805] usb 2-1: device descriptor read/8, error -71 [ 1744.517562][T24805] usb usb2-port1: unable to enumerate USB device [ 1746.265171][T25046] fuse: Unknown parameter 'mGN‡8o«ad' [ 1747.117066][T24805] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1747.284405][T24805] usb 2-1: Using ep0 maxpacket: 8 [ 1747.382618][T24805] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1747.396197][T24805] usb 2-1: config 179 has no interface number 0 [ 1747.417134][T24805] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1747.492380][T24805] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1747.518676][T24805] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1747.559159][T24805] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1747.648487][T24805] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1747.667167][T24805] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1747.678811][T24805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.766082][T25065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1747.792048][T25076] netlink: 'syz.0.3403': attribute type 1 has an invalid length. [ 1747.915341][T25075] macvlan0: entered promiscuous mode [ 1747.961943][T25075] macvlan0: entered allmulticast mode [ 1748.027662][T24805] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input125 [ 1748.309716][T25075] bond9: entered promiscuous mode [ 1748.322954][T25075] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1748.348209][T25075] bond9: left promiscuous mode [ 1749.823524][T17164] usb 2-1: USB disconnect, device number 31 [ 1749.823566][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1749.838639][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1750.148906][T25092] fuse: Unknown parameter '000000000000000000000150000000000000000000000300000000000000000000' [ 1750.163314][T25092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1750.707073][T24805] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1750.837043][T24805] usb 5-1: device descriptor read/64, error -71 [ 1751.045627][T25090] overlayfs: missing 'lowerdir' [ 1751.091207][T24805] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1751.112426][T25090] fuse: Bad value for 'user_id' [ 1751.131884][T25090] fuse: Bad value for 'user_id' [ 1751.247787][T24805] usb 5-1: device descriptor read/64, error -71 [ 1751.360043][T24805] usb usb5-port1: attempt power cycle [ 1751.439858][T25102] input: syz0 as /devices/virtual/input/input126 [ 1751.727202][T24805] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1751.747687][T24805] usb 5-1: device descriptor read/8, error -71 [ 1751.987044][T24805] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1752.007903][T24805] usb 5-1: device descriptor read/8, error -71 [ 1752.127051][T24805] usb usb5-port1: unable to enumerate USB device [ 1752.694656][T25113] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1752.747174][T24805] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1753.386773][T24805] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1753.399078][T24805] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1753.410550][T24805] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1753.419748][T24805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.458910][T25110] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1753.499813][T24805] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1753.748703][T25110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.827445][T25110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.249238][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1754.249257][ T30] audit: type=1326 audit(1759991380.995:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1754.283165][T25109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.440384][T25109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.467347][ T30] audit: type=1326 audit(1759991380.995:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63bd98d710 code=0x7ffc0000 [ 1754.517126][ T30] audit: type=1326 audit(1759991380.995:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63bd98eacb code=0x7ffc0000 [ 1754.547390][ T30] audit: type=1326 audit(1759991380.995:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63bd98eacb code=0x7ffc0000 [ 1754.594067][T24805] usb 1-1: USB disconnect, device number 87 [ 1754.620801][ T30] audit: type=1326 audit(1759991381.195:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1754.660488][ T30] audit: type=1326 audit(1759991381.195:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1754.698406][ T30] audit: type=1326 audit(1759991381.315:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1754.726839][ T30] audit: type=1326 audit(1759991381.315:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1754.756333][ T30] audit: type=1326 audit(1759991381.315:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1754.789739][ T30] audit: type=1326 audit(1759991381.325:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1754.939753][T25134] netlink: 'syz.4.3415': attribute type 27 has an invalid length. [ 1755.317735][ T5935] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1755.470965][T25136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.478834][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 1755.487005][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.497980][ T5935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1755.513846][T25136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1755.549770][ T5935] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1755.560616][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.579370][ T5935] usb 5-1: Product: syz [ 1755.583739][ T5935] usb 5-1: Manufacturer: syz [ 1755.599209][ T5935] usb 5-1: SerialNumber: syz [ 1755.621813][ T5935] usb 5-1: config 0 descriptor?? [ 1756.319850][T25145] input: syz1 as /devices/virtual/input/input127 [ 1756.437095][T24805] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1756.587053][T24805] usb 1-1: Using ep0 maxpacket: 8 [ 1756.594519][T24805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.613880][T24805] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1756.664091][T24805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.716353][T24805] usb 1-1: config 0 descriptor?? [ 1756.749791][T24805] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1757.398304][T24805] gspca_vc032x: reg_r err -32 [ 1757.403163][T24805] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 1757.533824][T25150] syzkaller0: entered promiscuous mode [ 1757.545061][T25150] syzkaller0: entered allmulticast mode [ 1757.871350][T24805] usb 5-1: USB disconnect, device number 126 [ 1759.473662][T25167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1760.219595][T24805] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1760.405083][T24805] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.416055][T24805] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1760.425207][T24805] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1760.434701][T24805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.311627][ T5935] usb 1-1: USB disconnect, device number 88 [ 1761.429309][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1761.429326][ T30] audit: type=1800 audit(1759991388.175:1535): pid=25181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3424" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1763.208369][ T5935] usb 4-1: USB disconnect, device number 76 [ 1763.354331][T25204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1763.449371][T25175] delete_channel: no stack [ 1764.048601][T25197] overlayfs: missing 'lowerdir' [ 1764.255505][T25214] netlink: 'syz.1.3431': attribute type 27 has an invalid length. [ 1764.661596][T24809] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1764.855257][T24809] usb 2-1: Using ep0 maxpacket: 16 [ 1764.921612][T24809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.932027][T24809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1764.952995][T24809] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1764.977174][T24809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.005622][T24809] usb 2-1: Product: syz [ 1765.010160][T24809] usb 2-1: Manufacturer: syz [ 1765.014786][T24809] usb 2-1: SerialNumber: syz [ 1765.040218][T24809] usb 2-1: config 0 descriptor?? [ 1765.252808][T25215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1765.284541][T25225] tipc: Enabled bearer , priority 10 [ 1765.393556][T25231] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1766.397347][T24809] tipc: Node number set to 3004055850 [ 1767.105764][T24809] usb 2-1: USB disconnect, device number 32 [ 1768.512182][T25260] fuse: Bad value for 'user_id' [ 1768.577491][T25260] fuse: Bad value for 'user_id' [ 1770.877476][ T5935] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1771.027090][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 1771.034641][ T5935] usb 2-1: config 0 has no interfaces? [ 1771.042675][ T5935] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1771.052276][ T5935] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1771.060749][ T5935] usb 2-1: Manufacturer: syz [ 1771.067396][ T5935] usb 2-1: config 0 descriptor?? [ 1771.343251][T25272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1771.375629][T25272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1773.140629][T25294] syzkaller1: entered promiscuous mode [ 1773.146182][T25294] syzkaller1: entered allmulticast mode [ 1773.224212][T24809] usb 2-1: USB disconnect, device number 33 [ 1773.632461][T25294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1773.642201][T25294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3447'. [ 1774.839982][T24809] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1775.047299][T24809] usb 5-1: Using ep0 maxpacket: 16 [ 1775.058818][T24809] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.070062][T24809] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.079995][T24809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1775.086645][T24809] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1775.096182][T24809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.118477][T24809] usb 5-1: config 0 descriptor?? [ 1776.530409][ T5935] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1776.689259][ T5935] usb 1-1: config 0 has no interfaces? [ 1776.697460][ T5935] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1776.713180][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.735496][ T5935] usb 1-1: Product: syz [ 1776.741979][ T5935] usb 1-1: Manufacturer: syz [ 1776.752151][ T5935] usb 1-1: SerialNumber: syz [ 1776.765766][ T5935] usb 1-1: config 0 descriptor?? [ 1777.682707][T24809] usb 5-1: USB disconnect, device number 127 [ 1777.848066][T25343] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1777.972044][T25340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1779.335767][T24809] usb 1-1: USB disconnect, device number 89 [ 1779.479683][T25359] syzkaller1: entered promiscuous mode [ 1779.485267][T25359] syzkaller1: entered allmulticast mode [ 1779.813653][T25359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1779.865602][T25359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1779.960733][T25365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1781.137057][T24805] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1781.317093][T24805] usb 1-1: Using ep0 maxpacket: 16 [ 1781.338130][T24805] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.407096][T24805] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.430241][T25378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1781.477133][T24805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1781.487272][T24805] usb 1-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1781.497016][T24805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.521204][T24805] usb 1-1: config 0 descriptor?? [ 1782.638210][T24805] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1782.807433][T24805] usb 5-1: Using ep0 maxpacket: 16 [ 1782.829288][T24805] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.847488][T24805] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.870089][T24805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1782.899377][T24805] usb 5-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1782.928473][T24805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.949882][T24805] usb 5-1: config 0 descriptor?? [ 1783.779892][ T5935] usb 1-1: USB disconnect, device number 90 [ 1784.519466][T25403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1784.530444][T25403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1785.707590][ T5935] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1785.895338][ T5935] usb 1-1: config 0 has no interfaces? [ 1785.947155][ T5935] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1785.967059][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.975634][ T5935] usb 1-1: Product: syz [ 1785.980122][ T5935] usb 1-1: Manufacturer: syz [ 1785.989112][ T5935] usb 1-1: SerialNumber: syz [ 1785.995892][ T5935] usb 1-1: config 0 descriptor?? [ 1786.043732][T17164] usb 5-1: USB disconnect, device number 2 [ 1786.347985][T25426] netlink: 'syz.4.3474': attribute type 1 has an invalid length. [ 1786.734593][T25428] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1786.751821][T25428] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 1787.961158][T25426] macvlan0: entered promiscuous mode [ 1787.968220][T25426] macvlan0: entered allmulticast mode [ 1787.983114][T25426] bond7: entered promiscuous mode [ 1787.997978][T25426] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1788.416212][T17164] usb 1-1: USB disconnect, device number 91 [ 1788.441313][T25426] bond7: left promiscuous mode [ 1788.725045][T25444] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1789.662917][T25452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 1789.723190][T25452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 1791.129808][T25469] kvm: user requested TSC rate below hardware speed [ 1791.681771][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.688194][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.040383][T25469] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1793.061436][T25496] syzkaller1: entered promiscuous mode [ 1793.072638][T25496] syzkaller1: entered allmulticast mode [ 1793.492916][T25492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1793.834261][T25496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1793.851246][T25496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1794.054919][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1794.409747][ T30] audit: type=1326 audit(1759991421.135:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.432819][ T30] audit: type=1326 audit(1759991421.135:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.457181][ T30] audit: type=1326 audit(1759991421.145:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.482614][ T30] audit: type=1326 audit(1759991421.145:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.505633][ T30] audit: type=1326 audit(1759991421.145:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.530778][ T30] audit: type=1326 audit(1759991421.145:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.557326][ T30] audit: type=1326 audit(1759991421.145:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.579947][ T30] audit: type=1326 audit(1759991421.145:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.603141][ T30] audit: type=1326 audit(1759991421.145:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.626136][ T30] audit: type=1326 audit(1759991421.145:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25509 comm="syz.0.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1794.997415][T24805] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1795.070155][T25515] pim6reg: entered allmulticast mode [ 1795.173870][T24805] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1795.196775][T24805] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1795.208676][T24805] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1795.228683][T24805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.290575][T25519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1795.311325][T24805] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1796.798162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.182110][T25535] netlink: 'syz.0.3495': attribute type 13 has an invalid length. [ 1797.656577][T25535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1798.377987][T17164] usb 5-1: USB disconnect, device number 3 [ 1798.590464][T25550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1798.753281][T25554] syzkaller1: entered promiscuous mode [ 1798.807101][T25554] syzkaller1: entered allmulticast mode [ 1798.897350][T25554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 1798.916224][T25554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 1800.080922][T25561] syzkaller1: entered promiscuous mode [ 1800.086429][T25561] syzkaller1: entered allmulticast mode [ 1800.417711][T25561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1800.447482][T25561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1801.457110][ T5935] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1801.471620][T25580] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1801.637184][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 1801.647288][ T5935] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1801.656646][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.667574][ T5935] usb 5-1: Product: syz [ 1801.671751][ T5935] usb 5-1: Manufacturer: syz [ 1801.676343][ T5935] usb 5-1: SerialNumber: syz [ 1801.788474][ T5935] usb 5-1: config 0 descriptor?? [ 1801.799958][T25578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1802.452498][T25587] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1802.530615][T25588] sit1: entered promiscuous mode [ 1802.624770][ T5935] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1803.848488][ T5935] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1803.987146][T24805] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1804.153788][T24805] usb 2-1: config 0 has no interfaces? [ 1804.164558][T24805] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=d7.3b [ 1804.174135][T24805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.182546][T24805] usb 2-1: Product: syz [ 1804.186851][T24805] usb 2-1: Manufacturer: syz [ 1804.192752][T24805] usb 2-1: SerialNumber: syz [ 1804.199987][T24805] usb 2-1: config 0 descriptor?? [ 1804.294336][T24805] usb 5-1: USB disconnect, device number 4 [ 1804.443237][T25600] program syz.0.3507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1804.554240][T25607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1804.593710][T25607] netlink: 'syz.4.3508': attribute type 33 has an invalid length. [ 1804.621044][T25607] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1804.892714][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1804.957952][T25600] syz.0.3507 (25600): drop_caches: 2 [ 1806.779781][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1807.445785][ T5935] usb 2-1: USB disconnect, device number 34 [ 1808.061760][T25632] syzkaller1: entered promiscuous mode [ 1808.067578][T25632] syzkaller1: entered allmulticast mode [ 1808.286592][T25632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1808.295828][T25632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1809.990046][T25656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1810.224206][T25650] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3516'. [ 1810.331620][T25650] fuse: Bad value for 'fd' [ 1810.357672][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1810.357690][ T30] audit: type=1326 audit(1759991437.105:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1810.537177][ T30] audit: type=1326 audit(1759991437.135:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1810.570866][T25660] binder: 25654:25660 ioctl c0306201 200000000100 returned -11 [ 1810.687990][ T30] audit: type=1326 audit(1759991437.185:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1810.749562][ T30] audit: type=1326 audit(1759991437.185:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1810.807021][ T30] audit: type=1326 audit(1759991437.185:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1810.884062][ T30] audit: type=1326 audit(1759991437.185:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1810.938845][ T30] audit: type=1326 audit(1759991437.185:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1811.079466][ T30] audit: type=1326 audit(1759991437.245:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1811.102210][ T30] audit: type=1326 audit(1759991437.245:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25637 comm="syz.2.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018918eec9 code=0x7ffc0000 [ 1811.755569][T25668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1811.952285][T25670] hub 9-0:1.0: USB hub found [ 1811.957425][T25670] hub 9-0:1.0: 1 port detected [ 1813.114412][T25679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3518'. [ 1813.679401][T24809] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1813.878643][T24809] usb 2-1: config 0 has no interfaces? [ 1813.889129][T24809] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1813.905341][T24809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.916954][T24809] usb 2-1: Product: syz [ 1813.921154][T24809] usb 2-1: Manufacturer: syz [ 1813.925861][T24809] usb 2-1: SerialNumber: syz [ 1814.007973][T24809] usb 2-1: config 0 descriptor?? [ 1814.032851][T25691] vivid-000: disconnect [ 1815.185729][T25691] vivid-000: reconnect [ 1815.839850][T25705] syzkaller1: entered promiscuous mode [ 1815.858592][T25705] syzkaller1: entered allmulticast mode [ 1815.889985][T25704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3524'. [ 1815.910073][T25704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3524'. [ 1816.114584][T24809] usb 2-1: USB disconnect, device number 35 [ 1816.361389][T25715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'. [ 1816.474564][ T30] audit: type=1326 audit(1759991443.215:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.536338][ T30] audit: type=1326 audit(1759991443.215:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.627078][ T30] audit: type=1326 audit(1759991443.215:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.649864][ T30] audit: type=1326 audit(1759991443.245:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.672493][ T30] audit: type=1326 audit(1759991443.245:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.700627][ T30] audit: type=1326 audit(1759991443.245:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.727045][ T30] audit: type=1326 audit(1759991443.255:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.749496][ T30] audit: type=1326 audit(1759991443.255:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.772062][ T30] audit: type=1326 audit(1759991443.255:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1816.806280][ T30] audit: type=1326 audit(1759991443.255:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25713 comm="syz.0.3527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f63bd98eec9 code=0x7ffc0000 [ 1817.087442][T25721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1817.792931][T25728] random: crng reseeded on system resumption [ 1818.646090][T25743] netlink: 'syz.3.3530': attribute type 5 has an invalid length. [ 1818.927145][ T5935] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1819.089411][ T5935] usb 4-1: config 0 has no interfaces? [ 1819.098210][ T5935] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1819.117123][ T5935] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1819.126109][ T5935] usb 4-1: Manufacturer: syz [ 1819.140068][ T5935] usb 4-1: config 0 descriptor?? [ 1819.258338][T25756] netlink: 'syz.1.3533': attribute type 27 has an invalid length. [ 1819.266377][T25756] netlink: 'syz.1.3533': attribute type 3 has an invalid length. [ 1819.274335][T25756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3533'. [ 1820.891185][T25762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1821.211191][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1821.449396][T25774] fuse: Bad value for 'fd' [ 1822.118364][T25780] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1822.812632][T25789] @: renamed from vlan0 (while UP) [ 1823.216998][ T5935] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1823.423433][ T5935] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1823.434493][ T5935] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1823.449591][ T5935] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1823.465135][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.677191][T25794] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1823.690977][ T5935] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1823.778162][T24805] usb 4-1: USB disconnect, device number 77 [ 1824.245550][T25806] netlink: 'syz.1.3543': attribute type 27 has an invalid length. [ 1824.647069][T24809] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1824.807139][T24809] usb 2-1: Using ep0 maxpacket: 16 [ 1824.815687][T24809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.833105][T24809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1824.862171][T24809] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1824.877756][T24809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.897359][T24809] usb 2-1: Product: syz [ 1824.903595][T24809] usb 2-1: Manufacturer: syz [ 1824.913690][T24809] usb 2-1: SerialNumber: syz [ 1824.949077][T24809] usb 2-1: config 0 descriptor?? [ 1825.587758][T25806] sit1: left promiscuous mode [ 1825.743923][T25808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1826.601011][T25818] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1826.885891][T24805] usb 5-1: USB disconnect, device number 5 [ 1827.151136][ T5935] usb 2-1: USB disconnect, device number 36 [ 1827.393110][T25830] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1827.407904][T25823] fuse: Bad value for 'fd' [ 1827.796866][T25834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1828.067561][T24805] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1828.138177][T25839] syzkaller1: entered promiscuous mode [ 1828.143835][T25839] syzkaller1: entered allmulticast mode [ 1828.257317][T24805] usb 1-1: Using ep0 maxpacket: 16 [ 1828.367258][T24809] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1828.441499][T25839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1828.450913][T25839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1828.509617][T24805] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1828.518935][T24805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.527601][T24805] usb 1-1: Product: syz [ 1828.531828][T24805] usb 1-1: Manufacturer: syz [ 1828.536409][T24805] usb 1-1: SerialNumber: syz [ 1828.545092][T24805] usb 1-1: config 0 descriptor?? [ 1828.733258][T24809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.743668][T24809] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1828.758419][T24809] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1828.777893][T24809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.807640][T24809] usb 4-1: config 0 descriptor?? [ 1828.823566][T25845] netlink: 'syz.1.3551': attribute type 4 has an invalid length. [ 1828.931159][T25846] netlink: 'syz.1.3551': attribute type 4 has an invalid length. [ 1828.961801][T24805] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1828.990917][T24805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1829.047681][T24805] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1829.068018][T24805] usb 1-1: media controller created [ 1829.100464][T24805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1829.266038][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'. [ 1829.290077][T25840] ------------[ cut here ]------------ [ 1829.295632][T25840] usb 1-1: BOGUS control dir, pipe 80005c80 doesn't match bRequestType c0 [ 1829.308203][T25840] WARNING: CPU: 0 PID: 25840 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 1829.318458][T25840] Modules linked in: [ 1829.322763][T25840] CPU: 0 UID: 0 PID: 25840 Comm: syz.3.3549 Not tainted syzkaller #0 PREEMPT(full) [ 1829.332318][T25840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1829.342676][T25840] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1829.348442][T25840] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 72 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 6b 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1829.368172][T25840] RSP: 0018:ffffc90004007800 EFLAGS: 00010246 [ 1829.374258][T25840] RAX: ea8d177c2e0c8c00 RBX: ffff88807ee45800 RCX: 0000000000080000 [ 1829.382339][T25840] RDX: ffffc9000e8b4000 RSI: 0000000000003e48 RDI: 0000000000003e49 [ 1829.390425][T25840] RBP: 1ffff11028952998 R08: 0000000000000003 R09: 0000000000000004 [ 1829.398439][T25840] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffff888078f1f100 [ 1829.406415][T25840] R13: ffff888144a94cc0 R14: 0000000080005c80 R15: ffff888144f0fca0 [ 1829.414585][T25840] FS: 00007fc0f2db46c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 1829.423573][T25840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1829.430202][T25840] CR2: 0000001b30ffeff8 CR3: 0000000078b58000 CR4: 00000000003526f0 [ 1829.438280][T25840] Call Trace: [ 1829.441562][T25840] [ 1829.444503][T25840] usb_start_wait_urb+0x114/0x4c0 [ 1829.449582][T25840] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1829.455154][T25840] usb_control_msg+0x232/0x3e0 [ 1829.459960][T25840] dtv5100_i2c_msg+0x250/0x330 [ 1829.464740][T25840] dtv5100_i2c_xfer+0x269/0x3c0 [ 1829.469670][T25840] __i2c_transfer+0x874/0x2170 [ 1829.474449][T25840] ? lockdep_hardirqs_on+0x9c/0x150 [ 1829.479730][T25840] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1829.485450][T25840] ? __might_fault+0xb0/0x130 [ 1829.490172][T25840] ? __pfx___i2c_transfer+0x10/0x10 [ 1829.495383][T25840] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1829.500809][T25840] ? i2c_transfer+0x11d/0x3a0 [ 1829.505495][T25840] i2c_transfer+0x25b/0x3a0 [ 1829.510044][T25840] ? __pfx_i2c_transfer+0x10/0x10 [ 1829.515080][T25840] ? _copy_from_user+0x94/0xb0 [ 1829.519962][T25840] i2cdev_ioctl_rdwr+0x460/0x740 [ 1829.524915][T25840] i2cdev_ioctl+0x64b/0x7f0 [ 1829.529475][T25840] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1829.534530][T25840] ? __fget_files+0x3a0/0x420 [ 1829.539261][T25840] ? __fget_files+0x2a/0x420 [ 1829.543862][T25840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1829.548843][T25840] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1829.553878][T25840] __se_sys_ioctl+0xf9/0x170 [ 1829.558496][T25840] do_syscall_64+0xfa/0xfa0 [ 1829.563009][T25840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.569123][T25840] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1829.574761][T25840] ? clear_bhb_loop+0x60/0xb0 [ 1829.579486][T25840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.585382][T25840] RIP: 0033:0x7fc0f4b8eec9 [ 1829.589837][T25840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1829.609476][T25840] RSP: 002b:00007fc0f2db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1829.617951][T25840] RAX: ffffffffffffffda RBX: 00007fc0f4de6180 RCX: 00007fc0f4b8eec9 [ 1829.625938][T25840] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 1829.633970][T25840] RBP: 00007fc0f4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1829.641991][T25840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.650006][T25840] R13: 00007fc0f4de6218 R14: 00007fc0f4de6180 R15: 00007fc0f4f0fa28 [ 1829.658038][T25840] [ 1829.661064][T25840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1829.668362][T25840] CPU: 0 UID: 0 PID: 25840 Comm: syz.3.3549 Not tainted syzkaller #0 PREEMPT(full) [ 1829.677727][T25840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1829.687782][T25840] Call Trace: [ 1829.691057][T25840] [ 1829.693992][T25840] dump_stack_lvl+0x99/0x250 [ 1829.698594][T25840] ? __asan_memcpy+0x40/0x70 [ 1829.703185][T25840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1829.708381][T25840] ? __pfx__printk+0x10/0x10 [ 1829.712978][T25840] vpanic+0x237/0x6d0 [ 1829.716979][T25840] ? __pfx_vpanic+0x10/0x10 [ 1829.721515][T25840] panic+0xb9/0xc0 [ 1829.725245][T25840] ? __pfx_panic+0x10/0x10 [ 1829.729680][T25840] __warn+0x31b/0x4b0 [ 1829.733671][T25840] ? usb_submit_urb+0x114d/0x18b0 [ 1829.738719][T25840] ? usb_submit_urb+0x114d/0x18b0 [ 1829.743758][T25840] report_bug+0x2be/0x4f0 [ 1829.748094][T25840] ? usb_submit_urb+0x114d/0x18b0 [ 1829.753132][T25840] ? usb_submit_urb+0x114d/0x18b0 [ 1829.758155][T25840] ? usb_submit_urb+0x114f/0x18b0 [ 1829.763175][T25840] handle_bug+0x84/0x160 [ 1829.767426][T25840] exc_invalid_op+0x1a/0x50 [ 1829.771964][T25840] asm_exc_invalid_op+0x1a/0x20 [ 1829.776816][T25840] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1829.782499][T25840] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 72 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 6b 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1829.802104][T25840] RSP: 0018:ffffc90004007800 EFLAGS: 00010246 [ 1829.808170][T25840] RAX: ea8d177c2e0c8c00 RBX: ffff88807ee45800 RCX: 0000000000080000 [ 1829.816156][T25840] RDX: ffffc9000e8b4000 RSI: 0000000000003e48 RDI: 0000000000003e49 [ 1829.824120][T25840] RBP: 1ffff11028952998 R08: 0000000000000003 R09: 0000000000000004 [ 1829.832089][T25840] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffff888078f1f100 [ 1829.840115][T25840] R13: ffff888144a94cc0 R14: 0000000080005c80 R15: ffff888144f0fca0 [ 1829.848114][T25840] usb_start_wait_urb+0x114/0x4c0 [ 1829.853145][T25840] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1829.858815][T25840] usb_control_msg+0x232/0x3e0 [ 1829.863596][T25840] dtv5100_i2c_msg+0x250/0x330 [ 1829.868382][T25840] dtv5100_i2c_xfer+0x269/0x3c0 [ 1829.873256][T25840] __i2c_transfer+0x874/0x2170 [ 1829.878032][T25840] ? lockdep_hardirqs_on+0x9c/0x150 [ 1829.883247][T25840] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1829.888964][T25840] ? __might_fault+0xb0/0x130 [ 1829.893644][T25840] ? __pfx___i2c_transfer+0x10/0x10 [ 1829.898846][T25840] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1829.904224][T25840] ? i2c_transfer+0x11d/0x3a0 [ 1829.908943][T25840] i2c_transfer+0x25b/0x3a0 [ 1829.913454][T25840] ? __pfx_i2c_transfer+0x10/0x10 [ 1829.918487][T25840] ? _copy_from_user+0x94/0xb0 [ 1829.923255][T25840] i2cdev_ioctl_rdwr+0x460/0x740 [ 1829.928222][T25840] i2cdev_ioctl+0x64b/0x7f0 [ 1829.932730][T25840] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1829.937761][T25840] ? __fget_files+0x3a0/0x420 [ 1829.942433][T25840] ? __fget_files+0x2a/0x420 [ 1829.947023][T25840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1829.951959][T25840] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1829.956986][T25840] __se_sys_ioctl+0xf9/0x170 [ 1829.961577][T25840] do_syscall_64+0xfa/0xfa0 [ 1829.966080][T25840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.972399][T25840] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1829.978041][T25840] ? clear_bhb_loop+0x60/0xb0 [ 1829.982729][T25840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.988623][T25840] RIP: 0033:0x7fc0f4b8eec9 [ 1829.993040][T25840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1830.012648][T25840] RSP: 002b:00007fc0f2db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1830.021072][T25840] RAX: ffffffffffffffda RBX: 00007fc0f4de6180 RCX: 00007fc0f4b8eec9 [ 1830.029047][T25840] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 1830.037010][T25840] RBP: 00007fc0f4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1830.044989][T25840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1830.052958][T25840] R13: 00007fc0f4de6218 R14: 00007fc0f4de6180 R15: 00007fc0f4f0fa28 [ 1830.060970][T25840] [ 1830.064373][T25840] Kernel Offset: disabled [ 1830.068701][T25840] Rebooting in 86400 seconds..