last executing test programs: 15.776683588s ago: executing program 1 (id=2240): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000002010020001280080001006772650014000280060010004e200000060011004e230000"], 0x40}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000500)='8', 0x1, 0x80, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x42000, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000080000000000000014000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000003c000e800c00028005000900000000002c0001801400030000000000000000000000ffffe000000214000400fe88000000000000000000000000010144000f8008000240000000090800034000000004080002400000000408000240000000"], 0x140}}, 0x0) r5 = epoll_create1(0x80000) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0xffffffff, "ffbdbdc772022acd2c000000000800000000000000008000", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r7, 0x6242}], 0x1, 0x7f) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r8, 0x4000000007, 0x1) write$P9_RREADDIR(r8, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0xe, [{{0x2, 0x3, 0x6}, 0x6, 0x8, 0x7, './file0'}, {{0x2, 0x0, 0x8}, 0x27f9bbca, 0x5, 0x7, './file0'}, {{0x2, 0x2, 0x5}, 0x100000001, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x3}, 0x9, 0x40, 0x7, './file0'}, {{0x8, 0x3, 0x2}, 0x98, 0x1, 0x7, './file0'}]}}, 0xa6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x40d2c, 0x0, 0x3, 0xc, 0xfff9, 0xfff9}, 0x20) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}], 0x1}) 14.21822904s ago: executing program 4 (id=2242): syz_emit_ethernet(0x86, &(0x7f00000007c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xd, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x7f0c, 0x0, 0x3, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x5e210003}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2c}}, {@private}, {@multicast2, 0x1}, {@broadcast}]}]}}, "9f2720ca6a4173ca"}}}}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x1, 0x27) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000780)={@remote, @rand_addr=' \x01\x00'}) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x4008af21, &(0x7f0000000380)) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)={0x8, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}}, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}}]}, 0x18c) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0x1, 0x9000, 0x0, 0x0}], 0x1}) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r4, 0x8744}], 0x1, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) unshare(0x22020400) r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x3) r7 = openat(r6, 0x0, 0x0, 0x44) fchown(r7, 0x0, 0x0) poll(&(0x7f0000002100)=[{r4, 0x688}], 0x1, 0x6) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f00000000c0)={0x0, 0x22, 0x62, {0x62, 0xc, "1d3e6e2062b45d4243d44bd2c0afa1f0d6491aff48cdae38d607993d9840b010b2d3f72073439be86cc9740df27fb662651c9066657372a7c866f5f20d8dfd31d82bb197032530dca8c241a6bd44726fc09357cb8820084c991f751910db6d59"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xa3f9a7d2b56afb56}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x64, 0x9, "11bfbaa3", "97939899"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0xe, 0x93, 0x7, 0x3, 0x400}}}, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x40, 0xc, 0x48, "847536991554a3a32a13d879ef5e821f85ac595792aa006b3df09a95c23316feac9a31ea8fc0149252e486009dd8abcb506d757e97bee6f4e363ccbcc2c08c1617a94909bad01bf4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1e}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xdc2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "f3e7"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "3f1a"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xb5}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) 13.969074465s ago: executing program 1 (id=2243): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x69deddea}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000001c0)={r4, r5+60000000}, &(0x7f0000000380)={[0xa66e, 0xfffffffc]}, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x17, 0x9, 0x70bd27, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904000000ff4f9b0009003a3846000904310000ffffff00000000198a93cc818be927be2140a1bfe5761600fb1990bdecf0b731f40dc7e8ad8810f14980eef49c970d0bb8ef32eff269d7396b1d9c4f5db64988ff9ff7df4201a3d1a18e68950820ade9e35227ce40c8b81a6bfbd56684dd180633213f192a4c950a500086615902a2b6e99138440e911a1d2c157a"], 0x0) 13.529593092s ago: executing program 4 (id=2244): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044084) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0x4, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40001, 0x0) recvmmsg(r1, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$kcm(0x29, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 12.392417523s ago: executing program 0 (id=2245): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/8, 0x8}, 0xe}], 0x1, 0x40002080, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r6, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x5, [0xc000000000, 0x8, 0x3, 0x0, 0x0]}}) r7 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{}], 0x1}, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000140), 0x4) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x141}, 0x2) 12.392004497s ago: executing program 3 (id=2246): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x354, 0xffffffff, 0x400}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd616, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fcdbdf2501ce2e00e992fcd44f0356c55b11ae4e85000000f297c49f3ae6914cda0b3c513d0f000141000000180017000000090000010169ada181776df479300000007abb2f4f223c2e68e7ad39c8384fbfb3fa9461147cc380eaf53718e802323bc97a170b071172940be23a34acad35aff13b0042070078b402ae736151c4edb4a4f05051de4a43314e3fb6"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x200000) 10.693080212s ago: executing program 3 (id=2248): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00020000000000000005e0000f00"}}}]}, 0x48}}, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$video4linux(&(0x7f0000000240), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x6, 0x1013, 0x7}}) 10.38584966s ago: executing program 1 (id=2249): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4a}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10000}]}}]}, 0x4c}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) recvmmsg$unix(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3]}}) 10.134138439s ago: executing program 0 (id=2250): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r7, 0xa3d2, 0x0) 9.471290191s ago: executing program 4 (id=2251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x4800) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r9, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000002140)={0x50, 0x0, r11, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r9, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0xff95) write$FUSE_INTERRUPT(r9, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r12}, 0x10) syz_fuse_handle_req(r9, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffffe}, 0x0}) ioctl$FS_IOC_RESVSP(r10, 0x40086602, &(0x7f0000002740)={0xda}) r13 = socket$kcm(0x10, 0x2, 0x0) openat$mice(0xffffff9c, &(0x7f0000000100), 0x101000) sendmsg$kcm(r13, 0x0, 0x0) 8.820988225s ago: executing program 3 (id=2252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private0, 0x56, r2}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r3, 0x84, 0x7f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r4, 0x6d007ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 8.759880468s ago: executing program 2 (id=2253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r7, 0xa3d2, 0x0) 7.691867953s ago: executing program 0 (id=2254): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xffffffe9, "341922de974a270000000000000000000000000400", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r4, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xffffffff) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r10, 0xfffffffc, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r10, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r0, @ANYRES64, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESOCT=0x0], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) close_range(r3, r6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4088800) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0), 0x4) 7.146569776s ago: executing program 2 (id=2255): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000fe8000000000000000000000000000aaac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000002888143b0b47f54d6a0000004000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100060044000500fe80000000000000000000000000002d00"], 0xfc}}, 0x24004005) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902280000e4a17c45c8d260c9", 0x10}], 0x1}, 0x8000) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet_int(r3, 0x0, 0x22, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{0x0}], 0x1) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) r10 = socket$rds(0x15, 0x5, 0x0) r11 = dup2(r10, r10) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) ioctl$sock_SIOCINQ(r11, 0x541b, 0x0) 7.099745594s ago: executing program 1 (id=2256): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044084) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0x4, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40001, 0x0) recvmmsg(r1, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$kcm(0x29, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 6.779915687s ago: executing program 3 (id=2257): syz_emit_ethernet(0x86, &(0x7f00000007c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xd, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x7f0c, 0x0, 0x3, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x5e210003}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2c}}, {@private}, {@multicast2, 0x1}, {@broadcast}]}]}}, "9f2720ca6a4173ca"}}}}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x1, 0x27) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000780)={@remote, @rand_addr=' \x01\x00'}) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x4008af21, &(0x7f0000000380)) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)={0x8, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}}, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}}]}, 0x18c) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0x1, 0x9000, 0x0, 0x0}], 0x1}) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r4, 0x8744}], 0x1, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) unshare(0x22020400) r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x3) r7 = openat(r6, 0x0, 0x0, 0x44) fchown(r7, 0x0, 0x0) poll(&(0x7f0000002100)=[{r4, 0x688}], 0x1, 0x6) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f00000000c0)={0x0, 0x22, 0x62, {0x62, 0xc, "1d3e6e2062b45d4243d44bd2c0afa1f0d6491aff48cdae38d607993d9840b010b2d3f72073439be86cc9740df27fb662651c9066657372a7c866f5f20d8dfd31d82bb197032530dca8c241a6bd44726fc09357cb8820084c991f751910db6d59"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xa3f9a7d2b56afb56}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x64, 0x9, "11bfbaa3", "97939899"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0xe, 0x93, 0x7, 0x3, 0x400}}}, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x40, 0xc, 0x48, "847536991554a3a32a13d879ef5e821f85ac595792aa006b3df09a95c23316feac9a31ea8fc0149252e486009dd8abcb506d757e97bee6f4e363ccbcc2c08c1617a94909bad01bf4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1e}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xdc2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "f3e7"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "3f1a"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xb5}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) 5.731036769s ago: executing program 4 (id=2258): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x354, 0xffffffff, 0x400}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd616, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000fcdbdf2501ce2e00e992fcd44f0356c55b11ae4e85000000f297c49f3ae6914cda0b3c513d0f000141000000180017000000090000010169ada181776df479300000007abb2f4f223c2e68e7ad39c8384fbfb3fa9461147cc380eaf53718e802323bc97a170b071172940be23a34acad35aff13b0042070078b402ae736151c4edb4a4f05051de4a43314e3fb6"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x200000) 5.431824811s ago: executing program 2 (id=2259): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r3, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f00000001c0)={0x8000000, 0x0, 0x2}) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28880, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4000000000005) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000094}]}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, &(0x7f0000000380)=@overlay={0x5, 0x3, 0x4, 0x10, 0x7, {}, {0x5, 0x0, 0x6, 0xb, 0x9, 0x0, "94e1c170"}, 0x4, 0x3, {}, 0x600b}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000005c0), 0x10) recvmmsg(r10, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)=""/97, 0x38}], 0x2}, 0x7f}], 0x1, 0x10103, 0x0) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f76800090501"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$FITRIM(r10, 0xc0185879, &(0x7f0000000200)={0x0, 0x5, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 5.051016262s ago: executing program 0 (id=2260): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r7, 0xa3d2, 0x0) 3.694962472s ago: executing program 4 (id=2261): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65773285b5eb98b12ccb20757365723a73797a2030c7445e4254977fca303030303030303430393300"], 0x2a, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000048000), 0x10000001) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, 0x0, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r8, r6}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 3.499695536s ago: executing program 3 (id=2262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r4, 0x0, 0x4) sendfile(r4, r4, &(0x7f00000001c0), 0x7fa) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000240)=0x82000006, 0x66) r7 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/109, 0x6d}], 0x1}, 0x10000) sendmmsg$alg(r7, &(0x7f0000002a00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="2663c2bca36ef19f403c28496b7af54b8199f40c9071493d25a0bf472745ef9747d489496c3b57ba0f0c87dd4a127d97e1cb1242f10ed958d06e2c727594f702534283bc45632353c3e1254b766eda765922818a92ab728414108ceecf3b3206e50da58ca8c97a9e1847ae3cf6eeca5f68fb1441b757ad0339157c225ff4a00fdf601075ea2845ff8f994c278c", 0x8d}, {&(0x7f0000000480)="07bd1aa10ea2fb7dae1e11f14656a95f2459fe31fb26ad0103471a176f6132a497", 0x21}, {&(0x7f00000004c0)}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000540)="9461c94eb76d5913c8bcd6f7cbe95d14e0a301acd5294b97869f2eb224e460b27c43e2d9d87206b591ebe4b5fea14499ab0f9849bfbcae9a41ede3c3a2f6c6030d021368600a78f3c9a7af0de2ee943980ebd8a260be57e027861615e298bb21bcc77f209804e702f58643c720ea1a4a9e025e8d8c7d1fbd19fe66d7cc27c724abe877859de1c3e9691579fa4594f5343f1b38a4ee64915d942a9da88c6df5264f45d203aa4f07", 0xa7}, {&(0x7f0000002880)="3535e8d697ae8e67342730fabafe931d5d64ea29d9a33adfa52e204f6626d37a14f267a86b9e19e95cb7c0389e14b839d594eb730d6eabcfed8140bb76d7d0fdc7fbc7e651f525a89e086c1c278f76f42c", 0x51}, {&(0x7f0000000500)="cd2ba1768e0ca663", 0x8}, {&(0x7f0000000600)="ea507ebf28b6f545382d71695aa63e3f125ae5468f241c3de348348cf6be5f3cf361c1c9c6232dd639347c7b6deae199744ce84aa29f9d58fa3b9090e19577f193", 0x41}], 0x8, 0x0, 0x0, 0x40c5}], 0x1, 0x40000) 3.350277145s ago: executing program 0 (id=2263): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00020000000000000005e0000f00"}}}]}, 0x48}}, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$video4linux(&(0x7f0000000240), 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x6, 0x1013, 0x7}}) 3.195692776s ago: executing program 2 (id=2264): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r7, 0xa3d2, 0x0) 3.151906753s ago: executing program 1 (id=2265): syz_emit_ethernet(0x86, &(0x7f00000007c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xd, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x7f0c, 0x0, 0x3, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x5e210003}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2c}}, {@private}, {@multicast2, 0x1}, {@broadcast}]}]}}, "9f2720ca6a4173ca"}}}}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x1, 0x27) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000780)={@remote, @rand_addr=' \x01\x00'}) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x4008af21, &(0x7f0000000380)) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)={0x8, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}}, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}}]}, 0x18c) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0x1, 0x9000, 0x0, 0x0}], 0x1}) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r4, 0x8744}], 0x1, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) unshare(0x22020400) r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x3) r7 = openat(r6, 0x0, 0x0, 0x44) fchown(r7, 0x0, 0x0) poll(&(0x7f0000002100)=[{r4, 0x688}], 0x1, 0x6) syz_usb_control_io(r1, &(0x7f0000000200)={0x18, &(0x7f00000000c0)={0x0, 0x22, 0x62, {0x62, 0xc, "1d3e6e2062b45d4243d44bd2c0afa1f0d6491aff48cdae38d607993d9840b010b2d3f72073439be86cc9740df27fb662651c9066657372a7c866f5f20d8dfd31d82bb197032530dca8c241a6bd44726fc09357cb8820084c991f751910db6d59"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xa3f9a7d2b56afb56}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x64, 0x9, "11bfbaa3", "97939899"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0xe, 0x93, 0x7, 0x3, 0x400}}}, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x40, 0xc, 0x48, "847536991554a3a32a13d879ef5e821f85ac595792aa006b3df09a95c23316feac9a31ea8fc0149252e486009dd8abcb506d757e97bee6f4e363ccbcc2c08c1617a94909bad01bf4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1e}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xdc2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "f3e7"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "3f1a"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xb5}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) 1.556973853s ago: executing program 2 (id=2266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r7, 0xa3d2, 0x0) 1.344403458s ago: executing program 4 (id=2267): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x11d5, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc2}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, 0x0, 0x8000) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r8 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50) 1.050219091s ago: executing program 0 (id=2268): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r7, 0xa3d2, 0x0) 70.042268ms ago: executing program 1 (id=2269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x2c}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r5) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) socket$inet(0xa, 0x801, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) mmap(&(0x7f0000246000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x7ef34000) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 69.01032ms ago: executing program 3 (id=2270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(&(0x7f0000000300), 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x800000, 0x1db0, &(0x7f0000173000/0x800000)=nil) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') lseek(r6, 0xa3d2, 0x0) 0s ago: executing program 2 (id=2271): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x69deddea}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000001c0)={r4, r5+60000000}, &(0x7f0000000380)={[0xa66e, 0xfffffffc]}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x17, 0x9, 0x70bd27, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904000000ff4f9b0009003a3846000904310000ffffff00000000198a93cc818be927be2140a1bfe5761600fb1990bdecf0b731f40dc7e8ad8810f14980eef49c970d0bb8ef32eff269d7396b1d9c4f5db64988ff9ff7df4201a3d1a18e68950820ade9e35227ce40c8b81a6bfbd56684dd180633213f192a4c950a500086615902a2b6e99138440e911a1d2c157a65130f3c2a49591b1572"], 0x0) kernel console output (not intermixed with test programs): _o) [ 1143.001135][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1143.006948][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1143.018655][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1143.159883][ T5889] usb 4-1: USB disconnect, device number 118 [ 1143.230037][T11083] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1143.250879][T11083] usb 1-1: device descriptor read/8, error -71 [ 1143.340319][ T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1143.490029][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1143.490037][T11083] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1143.512156][T11083] usb 1-1: device descriptor read/8, error -71 [ 1143.513430][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1143.534172][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.554045][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1143.562417][ T9] pvrusb2: ********** [ 1143.564981][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1143.564998][ T30] audit: type=1326 audit(1775962258.988:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1143.605787][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1143.627720][ T9] pvrusb2: Important functionality might not be entirely working. [ 1143.629337][T11083] usb usb1-port1: unable to enumerate USB device [ 1143.648102][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1143.650015][ T5828] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1143.673005][ T9] pvrusb2: ********** [ 1143.686882][ T30] audit: type=1326 audit(1775962259.108:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1143.720611][ T30] audit: type=1326 audit(1775962259.108:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1143.759489][ T30] audit: type=1326 audit(1775962259.108:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1143.782312][ T2345] pvrusb2: Invalid write control endpoint [ 1143.831874][ T5828] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1143.841008][ T5828] usb 5-1: config 0 has no interface number 0 [ 1143.847324][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1143.865058][ T2345] pvrusb2: Invalid write control endpoint [ 1143.873067][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1143.883188][ T5828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1143.895314][ T30] audit: type=1326 audit(1775962259.298:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1143.918185][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1143.926283][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1143.940035][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1143.951262][ T30] audit: type=1326 audit(1775962259.298:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1143.951261][ T5828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1143.951299][ T5828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1144.006522][ T2345] pvrusb2: Device being rendered inoperable [ 1144.019530][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1144.029600][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_q) [ 1144.045439][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1144.053818][ T30] audit: type=1326 audit(1775962259.358:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1144.076989][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1144.082787][ T30] audit: type=1326 audit(1775962259.358:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1144.087697][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1144.119826][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1144.136774][ T5828] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1144.147017][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.160203][ T5828] usb 5-1: config 0 descriptor?? [ 1144.168635][T16052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1144.168767][ T30] audit: type=1326 audit(1775962259.358:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1144.207674][ T30] audit: type=1326 audit(1775962259.628:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16049 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1144.248108][T16052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1144.264712][ T5828] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1144.813254][T16048] ldusb 5-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1145.108175][ T9] usb 3-1: USB disconnect, device number 86 [ 1145.407770][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 1145.790182][ T5828] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1145.950019][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 1145.960935][ T5828] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1145.977512][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.018168][ T5828] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1146.036103][ T5828] pvrusb2: ********** [ 1146.056100][ T5828] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1146.094750][ T9] usb 2-1: USB disconnect, device number 82 [ 1146.147085][ T5828] pvrusb2: Important functionality might not be entirely working. [ 1146.200340][ T5828] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1146.249006][ T5828] pvrusb2: ********** [ 1146.278547][ T2345] pvrusb2: Invalid write control endpoint [ 1146.518489][ T2345] pvrusb2: Invalid write control endpoint [ 1146.541230][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1146.622592][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1146.644852][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1146.717811][ T2345] pvrusb2: Device being rendered inoperable [ 1146.737005][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1146.754795][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1146.825903][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1146.847112][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1146.882850][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1147.960073][ T5828] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1148.124291][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 1148.141569][ T5828] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1148.156531][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.190038][ T5828] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1148.206515][ T5828] pvrusb2: ********** [ 1148.212406][ T5828] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1148.223624][ T5828] pvrusb2: Important functionality might not be entirely working. [ 1148.236877][ T5828] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1148.249841][ T5828] pvrusb2: ********** [ 1148.258219][T11083] usb 5-1: USB disconnect, device number 88 [ 1148.268035][T11083] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1148.386347][ T2345] pvrusb2: Invalid write control endpoint [ 1148.410745][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1148.439126][ T2345] pvrusb2: Invalid write control endpoint [ 1148.451507][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1148.463904][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1148.472571][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1148.484035][ T2345] pvrusb2: Device being rendered inoperable [ 1148.491263][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1148.498695][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_q) [ 1148.514019][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1148.525898][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1148.535024][T11083] usb 4-1: USB disconnect, device number 119 [ 1148.549354][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1148.580388][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1148.613749][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1148.624304][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.633263][ T9] usb 1-1: Product: syz [ 1148.637649][ T9] usb 1-1: Manufacturer: syz [ 1148.642921][ T9] usb 1-1: SerialNumber: syz [ 1148.651646][ T9] usb 1-1: config 0 descriptor?? [ 1148.999397][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 069 [ 1149.809650][T16085] m920x_read = error: -19 [ 1150.733385][ T5889] usb 2-1: USB disconnect, device number 83 [ 1150.911283][T11083] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1151.080265][T11083] usb 5-1: Using ep0 maxpacket: 32 [ 1151.087489][T11083] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1151.097597][T11083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.109648][T11083] usb 5-1: config 0 has no interface number 0 [ 1151.116810][T11083] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1151.127708][T11083] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1151.140090][T11083] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1151.154127][T11083] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1151.170404][ T5889] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1151.178897][T11083] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1151.198492][T11083] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1151.212117][T11083] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1151.227929][T11083] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1151.240277][T11083] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1151.249681][T11083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.266612][T11083] usb 5-1: Product: syz [ 1151.271235][T11083] usb 5-1: Manufacturer: syz [ 1151.297777][T11083] usb 5-1: SerialNumber: syz [ 1151.310167][T11083] usb 5-1: config 0 descriptor?? [ 1151.323743][T16110] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1151.331675][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 1151.339755][ T5889] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1151.354541][T16110] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1151.362464][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.376263][ T9] usb 1-1: USB disconnect, device number 69 [ 1151.394288][ T5889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1151.412609][ T5889] pvrusb2: ********** [ 1151.417111][ T5889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1151.437962][ T5889] pvrusb2: Important functionality might not be entirely working. [ 1151.448850][ T5889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1151.466887][ T5889] pvrusb2: ********** [ 1151.592723][ T2345] pvrusb2: Invalid write control endpoint [ 1151.636244][ T2345] pvrusb2: Invalid write control endpoint [ 1151.644398][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1151.655273][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1151.664790][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1151.677723][ T2345] pvrusb2: Device being rendered inoperable [ 1151.686492][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1151.694671][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1151.707041][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1151.719551][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1151.737681][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1151.767797][T16122] netlink: 'syz.0.2042': attribute type 10 has an invalid length. [ 1151.907400][ T5889] usb 5-1: USB disconnect, device number 89 [ 1152.078203][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1152.078223][ T30] audit: type=1326 audit(1775962267.498:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.113227][ T30] audit: type=1326 audit(1775962267.538:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.137049][ T30] audit: type=1326 audit(1775962267.558:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.165054][ T30] audit: type=1326 audit(1775962267.588:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.187903][ T30] audit: type=1326 audit(1775962267.588:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.210694][ T30] audit: type=1326 audit(1775962267.588:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.234103][ T30] audit: type=1326 audit(1775962267.598:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.257294][ T30] audit: type=1326 audit(1775962267.598:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.280222][ T30] audit: type=1326 audit(1775962267.598:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.308843][ T30] audit: type=1326 audit(1775962267.728:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16123 comm="syz.2.2043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1152.785545][T16130] netlink: 'syz.4.2044': attribute type 10 has an invalid length. [ 1153.854954][ T5828] usb 2-1: USB disconnect, device number 84 [ 1153.970074][T11083] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1154.045868][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2047'. [ 1154.130042][T11083] usb 5-1: Using ep0 maxpacket: 32 [ 1154.154648][T11083] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1154.171982][T11083] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1154.195032][T11083] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1154.209557][T11083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1154.246447][T11083] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1154.273342][T11083] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1154.300304][T11083] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1154.320520][T11083] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1154.332288][T11083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.385742][T11083] usb 5-1: config 0 descriptor?? [ 1154.771733][ T5889] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1154.931413][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 1154.944088][ T5889] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1154.956272][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.975864][ T5889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1154.984826][ T5889] pvrusb2: ********** [ 1154.992019][ T5889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1155.011122][ T5889] pvrusb2: Important functionality might not be entirely working. [ 1155.028655][ T5889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1155.045317][ T5889] pvrusb2: ********** [ 1155.193514][ T2345] pvrusb2: Invalid write control endpoint [ 1155.275194][ T2345] pvrusb2: Invalid write control endpoint [ 1155.293016][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1155.310562][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1155.327918][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1155.348209][ T2345] pvrusb2: Device being rendered inoperable [ 1155.366023][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1155.387884][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1155.403879][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1155.419639][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1155.443009][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1156.880099][ T5889] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1157.040051][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 1157.049527][ T5889] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1157.059320][ T5889] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1157.072794][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1157.082492][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1157.092855][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1157.104309][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1157.116582][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1157.132785][ T9] usb 5-1: USB disconnect, device number 90 [ 1157.147065][ T5889] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1157.168895][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 1157.168910][ T30] audit: type=1326 audit(1775962272.588:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16160 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1157.175837][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.216816][ T5889] usb 4-1: config 0 descriptor?? [ 1157.634398][T11083] usb 1-1: USB disconnect, device number 70 [ 1157.700048][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1157.860825][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1157.881374][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.909411][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1157.935956][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1157.956103][ T9] usb 2-1: SerialNumber: syz [ 1157.974827][ T9] usb 2-1: config 0 descriptor?? [ 1158.012847][ T9] uvcvideo 2-1:0.0: Found UVC 0.00 device (05ac:8501) [ 1158.030065][ T9] uvcvideo 2-1:0.0: No valid video chain found. [ 1158.583331][T16184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1159.050053][T11083] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1159.255439][T11083] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1159.278505][T11083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.306770][T11083] usb 3-1: config 0 has no interfaces? [ 1159.329992][T11083] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1159.366490][T11083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.407515][T11083] usb 3-1: config 0 descriptor?? [ 1159.645224][ T9] usb 4-1: USB disconnect, device number 120 [ 1160.394020][ T9] usb 2-1: USB disconnect, device number 85 [ 1160.519684][T16193] netlink: 'syz.0.2057': attribute type 10 has an invalid length. [ 1160.907145][T16201] input: syz1 as /devices/virtual/input/input32 [ 1162.141547][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1162.306765][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1162.314158][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1162.326833][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.351291][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1162.358523][ T9] pvrusb2: ********** [ 1162.367689][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1162.387605][ T9] pvrusb2: Important functionality might not be entirely working. [ 1162.396852][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1162.417984][ T9] pvrusb2: ********** [ 1162.548014][ T2345] pvrusb2: Invalid write control endpoint [ 1162.627588][ T2345] pvrusb2: Invalid write control endpoint [ 1162.635254][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1162.655513][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1162.674661][T11083] usb 3-1: USB disconnect, device number 87 [ 1162.681001][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1162.707343][ T2345] pvrusb2: Device being rendered inoperable [ 1162.714066][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1162.722919][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1162.738768][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1162.754580][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1162.765224][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1162.930592][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'. [ 1163.435908][T11083] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1163.642374][T11083] usb 3-1: Using ep0 maxpacket: 8 [ 1163.662305][T11083] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1163.674357][T11083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.758877][T11083] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1163.781754][T11083] pvrusb2: ********** [ 1163.785806][T11083] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1163.819869][T11083] pvrusb2: Important functionality might not be entirely working. [ 1163.846963][T11083] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1163.878397][T11083] pvrusb2: ********** [ 1164.065163][ T2345] pvrusb2: Invalid write control endpoint [ 1164.215180][ T2345] pvrusb2: Invalid write control endpoint [ 1164.222213][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1164.233370][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1164.246317][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1164.263884][ T2345] pvrusb2: Device being rendered inoperable [ 1164.274316][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1164.286619][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 1164.300286][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1164.313327][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1164.335222][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1164.845322][ T9] usb 2-1: USB disconnect, device number 86 [ 1165.103225][T16248] binder: 16245:16248 ioctl c0306201 0 returned -14 [ 1165.202308][T16249] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.209255][T16249] binder: 16245:16249 ioctl 4018620d 800001c0 returned -16 [ 1165.282831][T16248] syz.1.2068 (16248): drop_caches: 2 [ 1166.140759][ T9] usb 3-1: USB disconnect, device number 88 [ 1166.590525][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1166.740504][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1166.747811][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1166.763400][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.780331][ T5897] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1166.792583][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1166.801940][ T9] pvrusb2: ********** [ 1166.809384][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1166.824509][ T9] pvrusb2: Important functionality might not be entirely working. [ 1166.836560][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1166.850984][ T9] pvrusb2: ********** [ 1166.940186][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 1166.947753][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.960926][ T5897] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1166.982653][ T2345] pvrusb2: Invalid write control endpoint [ 1166.995940][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1167.025445][ T5897] usb 4-1: SerialNumber: syz [ 1167.040627][ T5897] usb 4-1: config 0 descriptor?? [ 1167.068057][ T2345] pvrusb2: Invalid write control endpoint [ 1167.081105][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1167.083724][ T5897] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 1167.091422][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1167.091437][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1167.091451][ T2345] pvrusb2: Device being rendered inoperable [ 1167.091528][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1167.091579][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 1167.092588][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1167.157055][T16269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1167.171450][ T5897] uvcvideo 4-1:0.0: No valid video chain found. [ 1167.202876][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1167.218961][ T30] audit: type=1326 audit(1775962282.638:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.249319][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1167.267379][ T30] audit: type=1326 audit(1775962282.668:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.300079][ T30] audit: type=1326 audit(1775962282.718:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.330315][ T30] audit: type=1326 audit(1775962282.718:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.400197][ T30] audit: type=1326 audit(1775962282.758:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.457299][ T30] audit: type=1326 audit(1775962282.798:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.526203][ T30] audit: type=1326 audit(1775962282.798:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.586760][ T30] audit: type=1326 audit(1775962282.928:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.609816][ T30] audit: type=1326 audit(1775962282.988:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1167.651577][ T30] audit: type=1326 audit(1775962283.058:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1168.030509][ T5897] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1168.286552][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1168.296643][ T5897] usb 2-1: not running at top speed; connect to a high speed hub [ 1168.334639][ T5897] usb 2-1: config 3 has an invalid interface number: 166 but max is 0 [ 1168.355374][ T5897] usb 2-1: config 3 has no interface number 0 [ 1168.381135][ T5897] usb 2-1: config 3 interface 166 has no altsetting 0 [ 1168.401895][ T5897] usb 2-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 1168.412663][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.441802][ T5897] usb 2-1: Product: syz [ 1168.451955][ T5897] usb 2-1: Manufacturer: syz [ 1168.463675][ T5897] usb 2-1: SerialNumber: syz [ 1169.101970][ T5897] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 1169.110919][ T5897] gspca_sn9c20x: Write register 1000 failed -71 [ 1169.117199][ T5897] gspca_sn9c20x: Device initialization failed [ 1169.129278][ T5897] gspca_sn9c20x 2-1:3.166: probe with driver gspca_sn9c20x failed with error -71 [ 1169.160789][ T5897] usb 2-1: USB disconnect, device number 87 [ 1169.282012][ T5828] usb 3-1: USB disconnect, device number 89 [ 1169.682470][ T5897] usb 4-1: USB disconnect, device number 121 [ 1170.509060][T16289] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 1170.807249][T16299] netlink: 'syz.2.2077': attribute type 4 has an invalid length. [ 1170.930516][T16302] netlink: 'syz.2.2077': attribute type 4 has an invalid length. [ 1171.260149][ T5889] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1171.430089][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 1171.438514][ T5889] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 1171.460111][ T5889] usb 3-1: config 0 has an invalid interface number: 98 but max is 1 [ 1171.477570][ T5889] usb 3-1: config 0 has no interface number 0 [ 1171.492172][ T5889] usb 3-1: config 0 has no interface number 1 [ 1171.520210][ T5889] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1171.533112][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.549130][ T5889] usb 3-1: Product: syz [ 1171.554231][ T5889] usb 3-1: Manufacturer: syz [ 1171.564903][ T5889] usb 3-1: SerialNumber: syz [ 1171.605222][ T5889] usb 3-1: config 0 descriptor?? [ 1171.700127][ T5828] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1171.732105][ T5889] viperboard 3-1:0.61: version 0.00 found at bus 003 address 090 [ 1171.770654][ T5889] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1171.782884][ T5889] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1171.812318][ T5889] viperboard 3-1:0.98: version 0.00 found at bus 003 address 090 [ 1171.851628][ T5889] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1171.862895][ T5889] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1171.964748][ T5828] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1171.993819][T16313] trusted_key: encrypted_key: keyword 'new2…µë˜±,Ë' not recognized [ 1172.008549][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.068887][ T5828] usb 4-1: config 0 has no interfaces? [ 1172.097071][ T5828] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1172.139606][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.200347][ T5828] usb 4-1: config 0 descriptor?? [ 1175.077885][ T5828] usb 3-1: USB disconnect, device number 90 [ 1175.109197][ T5889] usb 4-1: USB disconnect, device number 122 [ 1175.402375][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1175.402395][ T30] audit: type=1326 audit(1775962290.828:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.447703][ T30] audit: type=1326 audit(1775962290.868:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.480119][ T30] audit: type=1326 audit(1775962290.868:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.577726][ T30] audit: type=1326 audit(1775962290.868:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.607575][ T30] audit: type=1326 audit(1775962290.868:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.656100][ T30] audit: type=1326 audit(1775962290.868:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.673053][T16335] netlink: 'syz.2.2086': attribute type 10 has an invalid length. [ 1175.688016][ T30] audit: type=1326 audit(1775962290.898:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.721560][ T30] audit: type=1326 audit(1775962290.898:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.792393][ T30] audit: type=1326 audit(1775962290.898:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1175.866827][ T30] audit: type=1326 audit(1775962290.898:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16324 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1176.740013][ T5828] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1176.889988][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 1176.927197][ T5828] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1176.940129][ T5828] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1176.960027][T11083] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1176.970257][ T5828] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1177.000153][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1177.010490][ T5828] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1177.026664][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1177.042851][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1177.073148][ T5828] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1177.090092][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.129154][ T5828] usb 1-1: config 0 descriptor?? [ 1177.134330][T11083] usb 3-1: Using ep0 maxpacket: 8 [ 1177.143012][T11083] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.155177][T11083] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1177.165280][T11083] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1177.180194][T11083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.198822][T11083] usb 3-1: config 0 descriptor?? [ 1177.228512][T11083] qmi_wwan 3-1:0.0: skipping garbage [ 1177.258154][T11083] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1177.584203][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.590897][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.712531][ T5889] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1177.880566][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 1177.887854][ T5889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1177.898896][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.927662][ T5889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1177.952262][ T5889] pvrusb2: ********** [ 1177.963619][ T5889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1177.984084][ T5889] pvrusb2: Important functionality might not be entirely working. [ 1177.994000][ T5889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1178.009363][ T5889] pvrusb2: ********** [ 1178.122856][ T2345] pvrusb2: Invalid write control endpoint [ 1178.237873][ T2345] pvrusb2: Invalid write control endpoint [ 1178.253988][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1178.277260][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1178.307155][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1178.317372][ T2345] pvrusb2: Device being rendered inoperable [ 1178.324529][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1178.336823][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 1178.348051][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1178.364145][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1178.379108][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1179.375185][ T5889] usb 1-1: USB disconnect, device number 71 [ 1179.521518][ T5897] usb 3-1: USB disconnect, device number 91 [ 1179.703690][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'. [ 1179.721806][T16371] binder: 16365:16371 ioctl c0306201 0 returned -14 [ 1180.008826][T16373] binder: BINDER_SET_CONTEXT_MGR already set [ 1180.030946][T16373] binder: 16365:16373 ioctl 4018620d 800001c0 returned -16 [ 1180.667872][T16371] syz.0.2092 (16371): drop_caches: 2 [ 1180.833383][T11083] usb 4-1: USB disconnect, device number 123 [ 1181.720467][ T5897] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1181.872755][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 1181.965751][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.002340][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1182.042319][ T5897] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1182.089778][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.135031][ T5897] usb 4-1: config 0 descriptor?? [ 1182.152552][ T5897] qmi_wwan 4-1:0.0: skipping garbage [ 1182.168927][ T5897] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1183.770201][T16408] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 1183.804152][T16408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2101'. [ 1184.770656][T11083] usb 4-1: USB disconnect, device number 124 [ 1185.051570][ T5828] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1185.250401][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 1185.264481][ T5828] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1185.286580][ T5828] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1185.313932][ T5828] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1185.345612][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1185.364085][ T5828] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1185.384950][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1185.415744][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1185.443697][ T5828] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1185.463130][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.490543][ T5828] usb 5-1: config 0 descriptor?? [ 1185.675531][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1185.675552][ T30] audit: type=1326 audit(1775962301.098:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1185.720132][ T30] audit: type=1326 audit(1775962301.098:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1185.758466][ T30] audit: type=1326 audit(1775962301.138:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1185.876608][ T30] audit: type=1326 audit(1775962301.138:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1185.936433][ T30] audit: type=1326 audit(1775962301.138:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1185.973296][ T30] audit: type=1326 audit(1775962301.138:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1186.011546][ T30] audit: type=1326 audit(1775962301.138:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1186.040225][ T5828] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1186.048707][ T30] audit: type=1326 audit(1775962301.138:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1186.117194][ T30] audit: type=1326 audit(1775962301.138:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1186.160688][ T30] audit: type=1326 audit(1775962301.138:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1186.230162][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 1186.255547][ T5828] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1186.278189][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.329314][ T5828] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1186.337011][ T5828] pvrusb2: ********** [ 1186.341996][ T5828] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1186.356700][ T5828] pvrusb2: Important functionality might not be entirely working. [ 1186.387793][ T5828] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1186.429007][ T5828] pvrusb2: ********** [ 1186.440430][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 1186.537568][ T2345] pvrusb2: Invalid write control endpoint [ 1186.709764][ T2345] pvrusb2: Invalid write control endpoint [ 1186.725941][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1186.741982][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1186.749786][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1186.768667][ T2345] pvrusb2: Device being rendered inoperable [ 1186.780410][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1186.800389][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 1186.815441][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1186.827519][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1186.841561][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1187.709669][ T5897] usb 5-1: USB disconnect, device number 91 [ 1188.706296][ T5889] usb 2-1: USB disconnect, device number 88 [ 1189.858673][T16470] trusted_key: encrypted_key: keyword 'new2…µë˜±,Ë' not recognized [ 1190.120045][ T5828] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1190.268646][T16482] fuse: Unknown parameter '0x0000000000000007' [ 1190.280374][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 1190.306775][ T5828] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1190.337605][ T5828] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1190.352476][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1190.370286][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1190.407519][ T5828] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1190.465293][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1190.521974][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1190.535143][ T5889] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1190.602061][ T5828] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1190.614148][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.696390][ T5828] usb 2-1: config 0 descriptor?? [ 1190.750980][ T5889] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1190.779333][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.827123][ T5889] usb 1-1: Product: syz [ 1190.840679][ T5889] usb 1-1: Manufacturer: syz [ 1190.855639][ T5889] usb 1-1: SerialNumber: syz [ 1190.881133][ T5889] usb 1-1: config 0 descriptor?? [ 1190.924741][ T5889] hub 1-1:0.0: bad descriptor, ignoring hub [ 1190.943386][ T5889] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1191.261127][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 1191.261146][ T30] audit: type=1326 audit(1775962306.678:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16475 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1191.399120][ T5889] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1191.452008][ T5889] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1191.485632][ T5889] dib0700: firmware download failed at 7 with -22 [ 1192.694176][ T5889] usb 2-1: USB disconnect, device number 89 [ 1193.479077][ T5889] usb 1-1: USB disconnect, device number 72 [ 1193.899391][T16505] binder: 16503:16505 ioctl c0306201 0 returned -14 [ 1194.066039][T16506] syz.0.2121 (16506): drop_caches: 2 [ 1196.095811][ T30] audit: type=1326 audit(1775962311.518:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.150282][ T30] audit: type=1326 audit(1775962311.538:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.184816][ T30] audit: type=1326 audit(1775962311.548:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.209981][ T30] audit: type=1326 audit(1775962311.548:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.236425][ T30] audit: type=1326 audit(1775962311.548:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.281568][ T30] audit: type=1326 audit(1775962311.548:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.316958][ T30] audit: type=1326 audit(1775962311.548:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.371183][ T30] audit: type=1326 audit(1775962311.548:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.459996][ T30] audit: type=1326 audit(1775962311.548:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.491631][ T30] audit: type=1326 audit(1775962311.548:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.543177][ T30] audit: type=1326 audit(1775962311.548:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.580069][ T30] audit: type=1326 audit(1775962311.548:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.620166][ T30] audit: type=1326 audit(1775962311.548:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.662127][ T30] audit: type=1326 audit(1775962311.548:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1196.693768][ T30] audit: type=1326 audit(1775962311.548:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1197.305320][T16534] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 1197.319737][T16544] trusted_key: encrypted_key: keyword 'new2…µë˜±,Ë' not recognized [ 1197.348540][T16534] CPU: 1 UID: 0 PID: 16534 Comm: syz.0.2128 Tainted: G L syzkaller #0 PREEMPT(full) [ 1197.348571][T16534] Tainted: [L]=SOFTLOCKUP [ 1197.348576][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1197.348583][T16534] Call Trace: [ 1197.348589][T16534] [ 1197.348596][T16534] dump_stack_lvl+0xe8/0x150 [ 1197.348622][T16534] sysfs_warn_dup+0x8e/0xa0 [ 1197.348640][T16534] sysfs_do_create_link_sd+0xc0/0x110 [ 1197.348659][T16534] device_add_class_symlinks+0x1cf/0x240 [ 1197.348679][T16534] device_add+0x475/0xb70 [ 1197.348697][T16534] wiphy_register+0x1d73/0x2d50 [ 1197.348788][T16534] ? __pfx_wiphy_register+0x10/0x10 [ 1197.348803][T16534] ? __pfx_netdev_run_todo+0x10/0x10 [ 1197.348855][T16534] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1197.348907][T16534] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1197.348940][T16534] ieee80211_register_hw+0x3562/0x4200 [ 1197.348988][T16534] ? ieee80211_register_hw+0x1491/0x4200 [ 1197.349011][T16534] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1197.349038][T16534] ? __hrtimer_setup+0x181/0x200 [ 1197.349054][T16534] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1197.349075][T16534] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1197.349109][T16534] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1197.349124][T16534] ? kstrndup+0xbf/0x160 [ 1197.349145][T16534] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1197.349175][T16534] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1197.349196][T16534] ? rcu_is_watching+0x15/0xb0 [ 1197.349213][T16534] ? trace_kmalloc+0x2a/0x110 [ 1197.349231][T16534] ? __nla_parse+0x40/0x60 [ 1197.349247][T16534] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1197.349284][T16534] genl_family_rcv_msg_doit+0x22a/0x330 [ 1197.349308][T16534] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1197.349347][T16534] ? bpf_lsm_capable+0x9/0x20 [ 1197.349381][T16534] ? security_capable+0x7e/0x2c0 [ 1197.349417][T16534] genl_rcv_msg+0x61c/0x7a0 [ 1197.349442][T16534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1197.349457][T16534] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1197.349474][T16534] ? __lock_acquire+0x6b5/0x2cf0 [ 1197.349496][T16534] netlink_rcv_skb+0x232/0x4b0 [ 1197.349510][T16534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1197.349526][T16534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1197.349549][T16534] ? down_read+0x272/0x2e0 [ 1197.349606][T16534] ? genl_rcv+0xd/0x40 [ 1197.349622][T16534] genl_rcv+0x28/0x40 [ 1197.349636][T16534] netlink_unicast+0x80f/0x9b0 [ 1197.349676][T16534] ? __pfx_netlink_unicast+0x10/0x10 [ 1197.349695][T16534] ? netlink_sendmsg+0x650/0xb40 [ 1197.349708][T16534] ? skb_put+0x11b/0x210 [ 1197.349739][T16534] netlink_sendmsg+0x813/0xb40 [ 1197.349759][T16534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.349775][T16534] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1197.349793][T16534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1197.349810][T16534] ____sys_sendmsg+0x972/0x9f0 [ 1197.349874][T16534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.349912][T16534] ___sys_sendmsg+0x2a5/0x360 [ 1197.349943][T16534] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.349976][T16534] ? futex_wait+0x29a/0x380 [ 1197.350037][T16534] ? __fget_files+0x2a/0x420 [ 1197.350056][T16534] ? __fget_files+0x3a0/0x420 [ 1197.350085][T16534] __sys_sendmsg+0x183/0x260 [ 1197.350115][T16534] ? __pfx___sys_sendmsg+0x10/0x10 [ 1197.350167][T16534] __do_fast_syscall_32+0x20d/0x640 [ 1197.350221][T16534] ? do_fast_syscall_32+0x33/0x70 [ 1197.350248][T16534] ? asm_int80_emulation+0x1a/0x20 [ 1197.350268][T16534] ? do_int80_emulation+0x274/0x4d0 [ 1197.350295][T16534] ? trace_irq_disable+0x3b/0x150 [ 1197.350319][T16534] do_fast_syscall_32+0x33/0x70 [ 1197.350358][T16534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1197.350383][T16534] RIP: 0023:0xf7f74f6c [ 1197.350402][T16534] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1197.350420][T16534] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1197.350443][T16534] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100 [ 1197.350467][T16534] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1197.350480][T16534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1197.350492][T16534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1197.350504][T16534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1197.350535][T16534] [ 1198.850042][T11083] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1199.039977][T11083] usb 2-1: Using ep0 maxpacket: 8 [ 1199.047121][T11083] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.088020][T11083] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1199.107473][T11083] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1199.142673][T11083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.216115][T11083] usb 2-1: config 0 descriptor?? [ 1199.251922][T11083] qmi_wwan 2-1:0.0: skipping garbage [ 1199.280979][T11083] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1199.314743][T16558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2133'. [ 1201.060583][ T5889] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1201.226326][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 1201.244836][ T5889] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1201.270077][ T5889] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1201.293444][ T5889] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1201.314089][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1201.341167][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1201.354039][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1201.369557][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1201.393827][ T5889] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1201.415021][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.450413][ T5889] usb 5-1: config 0 descriptor?? [ 1202.026655][T11083] usb 2-1: USB disconnect, device number 90 [ 1202.276479][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1202.276500][ T30] audit: type=1326 audit(1775962317.648:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.330010][ T30] audit: type=1326 audit(1775962317.728:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.331506][ T30] audit: type=1326 audit(1775962317.728:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.356484][ T30] audit: type=1326 audit(1775962317.728:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.357415][ T30] audit: type=1326 audit(1775962317.778:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.358486][ T30] audit: type=1326 audit(1775962317.778:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.363165][ T30] audit: type=1326 audit(1775962317.788:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.447645][ T30] audit: type=1326 audit(1775962317.868:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.490116][ T30] audit: type=1326 audit(1775962317.908:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1202.507841][ T30] audit: type=1326 audit(1775962317.908:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1203.196620][T16588] wireguard0: left allmulticast mode [ 1203.212299][T16588] wireguard1: left allmulticast mode [ 1203.232743][T16588] wireguard2: left allmulticast mode [ 1203.241144][T16588] wireguard3: left allmulticast mode [ 1203.273215][T16588] syzkaller0: left promiscuous mode [ 1203.278589][T16588] syzkaller0: left allmulticast mode [ 1203.286655][T16588] wireguard4: left allmulticast mode [ 1203.295855][T16588] wireguard5: left allmulticast mode [ 1203.307864][T16588] wireguard6: left allmulticast mode [ 1203.320874][T16588] wireguard7: left allmulticast mode [ 1203.385564][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.395392][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.413100][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.434308][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1203.827753][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'. [ 1204.035129][T16595] usb 5-1: USB disconnect, device number 92 [ 1205.340306][T11083] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1205.524580][T11083] usb 5-1: Using ep0 maxpacket: 8 [ 1205.552821][T11083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.563618][T11083] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1205.596886][T11083] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1205.619737][T11083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.646830][T11083] usb 5-1: config 0 descriptor?? [ 1205.683361][T11083] qmi_wwan 5-1:0.0: skipping garbage [ 1205.701391][T11083] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1206.957379][T16636] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1207.056006][T16636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2146'. [ 1207.280139][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1207.280158][ T30] audit: type=1326 audit(1775962322.708:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1207.340446][ T30] audit: type=1326 audit(1775962322.738:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1207.368418][ T30] audit: type=1326 audit(1775962322.738:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1207.402391][T16593] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1207.419543][T16649] bridge0: Caught tx_queue_len zero misconfig [ 1207.469771][ T30] audit: type=1326 audit(1775962322.738:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1207.542610][ T30] audit: type=1326 audit(1775962322.738:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7145cab code=0x7ffc0000 [ 1207.567985][ T30] audit: type=1326 audit(1775962322.738:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7145cab code=0x7ffc0000 [ 1207.595029][ T30] audit: type=1326 audit(1775962322.758:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1207.821682][ T30] audit: type=1326 audit(1775962322.758:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1207.962376][ T30] audit: type=1326 audit(1775962322.758:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1208.030070][ T30] audit: type=1326 audit(1775962322.758:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16631 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1208.281348][ T5897] usb 5-1: USB disconnect, device number 93 [ 1208.807994][T16657] libceph: resolve '0.4' (ret=-3): failed [ 1208.880251][T16593] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1208.909965][T16593] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.961434][T16593] usb 3-1: config 0 has no interface number 0 [ 1208.979470][T16593] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1209.059956][T16593] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1209.136993][T16593] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1209.146256][T16593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.204273][T16593] usb 3-1: Product: syz [ 1209.213404][T16593] usb 3-1: Manufacturer: syz [ 1209.255301][T16593] usb 3-1: SerialNumber: syz [ 1209.320494][T16593] usb 3-1: config 0 descriptor?? [ 1210.372735][T16676] fuse: Unknown parameter '0x0000000000000007' [ 1210.391013][T16668] input: syz1 as /devices/virtual/input/input35 [ 1210.730572][T16593] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1210.906119][T16593] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1210.915339][T16593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.925263][T16593] usb 5-1: Product: syz [ 1210.929565][T16593] usb 5-1: Manufacturer: syz [ 1210.936355][T16593] usb 5-1: SerialNumber: syz [ 1210.947810][T16593] usb 5-1: config 0 descriptor?? [ 1210.957262][T16593] hub 5-1:0.0: bad descriptor, ignoring hub [ 1210.965419][T16593] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1211.180084][T16593] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1211.202606][T16593] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1211.214092][T16593] dib0700: firmware download failed at 7 with -22 [ 1212.026547][ T5897] usb 3-1: USB disconnect, device number 92 [ 1212.966793][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'. [ 1213.748740][T16707] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2159'. [ 1214.032680][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1214.032702][ T30] audit: type=1326 audit(1775962329.458:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16683 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1214.126174][ T5897] usb 5-1: USB disconnect, device number 94 [ 1214.550621][ T5897] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1214.709996][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 1214.729008][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1214.753837][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.812671][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1214.848095][ T5897] pvrusb2: ********** [ 1214.855887][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1214.871839][ T5897] pvrusb2: Important functionality might not be entirely working. [ 1214.898175][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1214.924616][ T5897] pvrusb2: ********** [ 1215.027265][ T2345] pvrusb2: Invalid write control endpoint [ 1215.145349][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'. [ 1215.181833][ T2345] pvrusb2: Invalid write control endpoint [ 1215.196252][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1215.222233][T16714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2161'. [ 1215.250181][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1215.271574][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1215.344954][ T2345] pvrusb2: Device being rendered inoperable [ 1215.364545][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1215.392904][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 1215.454295][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1215.459803][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1215.512541][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1215.737830][ T30] audit: type=1326 audit(1775962331.158:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1215.813771][ T30] audit: type=1326 audit(1775962331.158:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1215.900858][ T30] audit: type=1326 audit(1775962331.198:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1215.971005][ T30] audit: type=1326 audit(1775962331.198:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1216.036980][ T30] audit: type=1326 audit(1775962331.198:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1216.098852][ T30] audit: type=1326 audit(1775962331.198:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1216.188898][ T30] audit: type=1326 audit(1775962331.198:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1216.212467][T16593] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1216.250059][ T30] audit: type=1326 audit(1775962331.208:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1216.280093][ T30] audit: type=1326 audit(1775962331.208:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1216.390733][T16593] usb 2-1: Using ep0 maxpacket: 8 [ 1216.397477][T16593] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1216.407436][T16593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.433582][T16593] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1216.441058][T16593] pvrusb2: ********** [ 1216.445106][T16593] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1216.456838][T16593] pvrusb2: Important functionality might not be entirely working. [ 1216.484615][T16593] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1216.513180][T16593] pvrusb2: ********** [ 1216.640725][ T2345] pvrusb2: Invalid write control endpoint [ 1216.687034][ T2345] pvrusb2: Invalid write control endpoint [ 1216.697400][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1216.709069][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1216.720586][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1216.738854][ T2345] pvrusb2: Device being rendered inoperable [ 1216.753241][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1216.761832][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_s) [ 1216.771439][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1216.780689][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1216.793294][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1217.286500][T16593] usb 5-1: USB disconnect, device number 95 [ 1217.668458][T16734] input: syz1 as /devices/virtual/input/input36 [ 1218.927983][T16593] usb 2-1: USB disconnect, device number 91 [ 1219.065832][T16763] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1219.260420][T11083] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1219.303887][T16768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2169'. [ 1219.471437][T11083] usb 4-1: Using ep0 maxpacket: 32 [ 1219.493155][T11083] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1219.528418][T11083] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1219.598059][T11083] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1219.656663][T11083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1219.660407][T16595] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1219.678266][T11083] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1219.728470][T11083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1219.766423][T11083] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1219.808759][T11083] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1219.845420][T11083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.888550][T16595] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1219.902987][T11083] usb 4-1: config 0 descriptor?? [ 1219.928268][T16595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.997778][T16595] usb 1-1: config 0 has no interface number 0 [ 1220.060677][T16595] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1220.075979][T16595] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1220.139497][T16595] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1220.178473][T16595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.208481][T16595] usb 1-1: Product: syz [ 1220.230871][T16595] usb 1-1: Manufacturer: syz [ 1220.252195][T16595] usb 1-1: SerialNumber: syz [ 1220.272731][T16595] usb 1-1: config 0 descriptor?? [ 1220.770866][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1220.770886][ T30] audit: type=1326 audit(1775962336.188:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1220.850327][ T30] audit: type=1326 audit(1775962336.188:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1220.949852][ T30] audit: type=1326 audit(1775962336.198:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.027917][ T30] audit: type=1326 audit(1775962336.198:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.098454][ T30] audit: type=1326 audit(1775962336.198:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.176865][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 1221.195626][ T30] audit: type=1326 audit(1775962336.198:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.250548][ T30] audit: type=1326 audit(1775962336.198:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.312086][ T30] audit: type=1326 audit(1775962336.198:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.375001][ T30] audit: type=1326 audit(1775962336.198:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.439028][ T30] audit: type=1326 audit(1775962336.198:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf700ef6c code=0x7ffc0000 [ 1221.973402][T11084] usb 4-1: USB disconnect, device number 125 [ 1222.310480][T16784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2174'. [ 1222.363618][T11084] usb 1-1: USB disconnect, device number 73 [ 1222.880782][T16799] netlink: 'syz.0.2177': attribute type 21 has an invalid length. [ 1222.918636][T16799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2177'. [ 1222.980025][T11084] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1223.190598][T11084] usb 2-1: Using ep0 maxpacket: 8 [ 1223.213391][T11084] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1223.226972][T11084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.266840][T11084] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1223.299255][T11084] pvrusb2: ********** [ 1223.319680][T11084] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1223.351944][T11084] pvrusb2: Important functionality might not be entirely working. [ 1223.363222][T11084] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1223.393358][T11084] pvrusb2: ********** [ 1223.563824][ T2345] pvrusb2: Invalid write control endpoint [ 1223.760281][ T2345] pvrusb2: Invalid write control endpoint [ 1223.766269][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1223.780981][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1223.796551][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1223.838245][ T2345] pvrusb2: Device being rendered inoperable [ 1223.851913][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1223.865794][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 1223.880634][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1223.888448][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1223.909987][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1224.220383][T16595] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1224.380074][T16595] usb 4-1: Using ep0 maxpacket: 32 [ 1224.394857][T16595] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1224.404682][T16595] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1224.414126][T16595] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1224.425287][T16595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1224.438728][T16595] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1224.454353][T16595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1224.466188][T16595] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1224.485989][T16595] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1224.495612][T16595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.509764][T16595] usb 4-1: config 0 descriptor?? [ 1224.555482][T16821] fuse: Bad value for 'fd' [ 1224.706253][T16826] fuse: Bad value for 'fd' [ 1224.902052][T16816] macsec0: entered promiscuous mode [ 1224.908372][T16816] macsec0: entered allmulticast mode [ 1225.716185][T16595] usb 2-1: USB disconnect, device number 92 [ 1226.079449][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 1226.079468][ T30] audit: type=1326 audit(1775962341.498:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.176018][ T30] audit: type=1326 audit(1775962341.498:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.201157][ T30] audit: type=1326 audit(1775962341.528:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.277999][ T30] audit: type=1326 audit(1775962341.528:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.310136][ T30] audit: type=1326 audit(1775962341.528:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.354260][ T30] audit: type=1326 audit(1775962341.538:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.397775][ T30] audit: type=1326 audit(1775962341.538:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.442633][ T30] audit: type=1326 audit(1775962341.538:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.507469][ T30] audit: type=1326 audit(1775962341.538:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1226.540370][ T30] audit: type=1326 audit(1775962341.538:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16828 comm="syz.1.2183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1227.455457][T16595] usb 4-1: USB disconnect, device number 126 [ 1227.630824][T16845] fuse: Bad value for 'fd' [ 1227.792929][T16850] fuse: Bad value for 'fd' [ 1228.013175][T16857] fuse: Unknown parameter '0x0000000000000007' [ 1228.270921][T11084] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1228.464230][T11084] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1228.473729][T11084] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.511026][T11084] usb 4-1: Product: syz [ 1228.520861][T11084] usb 4-1: Manufacturer: syz [ 1228.525634][T11084] usb 4-1: SerialNumber: syz [ 1228.547726][T11084] usb 4-1: config 0 descriptor?? [ 1228.580933][T11084] hub 4-1:0.0: bad descriptor, ignoring hub [ 1228.588170][T11084] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1228.609614][T16865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2190'. [ 1228.639625][T16864] nvme_fabrics: missing parameter 'transport=%s' [ 1228.648483][T16864] nvme_fabrics: missing parameter 'nqn=%s' [ 1228.894379][T11084] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1228.938210][T11084] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1228.958250][T11084] dib0700: firmware download failed at 7 with -22 [ 1229.369997][T11084] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1229.606361][T11084] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1229.655665][T11084] usb 2-1: not running at top speed; connect to a high speed hub [ 1229.696177][T11084] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.822863][T11084] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 1229.832513][T11084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.843932][T11084] usb 2-1: Product: syz [ 1229.849607][T11084] usb 2-1: Manufacturer: syz [ 1229.860004][T11084] usb 2-1: SerialNumber: syz [ 1230.119431][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'. [ 1230.175243][T11084] qmi_wwan 2-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1230.208338][T11084] usb 2-1: USB disconnect, device number 93 [ 1230.209987][ T5897] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1230.380154][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 1230.417960][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1230.470011][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.508279][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1230.531227][ T5897] pvrusb2: ********** [ 1230.541284][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1230.554293][ T5897] pvrusb2: Important functionality might not be entirely working. [ 1230.574837][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1230.597150][ T5897] pvrusb2: ********** [ 1230.753882][ T2345] pvrusb2: Invalid write control endpoint [ 1230.875805][ T2345] pvrusb2: Invalid write control endpoint [ 1230.893205][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1230.921740][T16880] netlink: 'syz.1.2195': attribute type 5 has an invalid length. [ 1230.931992][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1230.952215][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1230.983074][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2195'. [ 1230.985369][ T2345] pvrusb2: Device being rendered inoperable [ 1231.023147][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2195'. [ 1231.042647][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1231.062893][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 1231.078881][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1231.090117][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1231.109937][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1231.350345][T11084] usb 4-1: USB disconnect, device number 127 [ 1231.447710][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 1231.447739][ T30] audit: type=1326 audit(1775962346.868:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16882 comm="syz.0.2196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1231.512770][ T30] audit: type=1326 audit(1775962346.928:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.580909][ T30] audit: type=1326 audit(1775962346.928:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.617383][ T30] audit: type=1326 audit(1775962346.928:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.648285][ T30] audit: type=1326 audit(1775962346.938:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.679687][ T30] audit: type=1326 audit(1775962346.938:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.708202][ T30] audit: type=1326 audit(1775962346.958:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.744662][ T30] audit: type=1326 audit(1775962346.958:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.775357][ T30] audit: type=1326 audit(1775962346.958:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1231.808237][ T30] audit: type=1326 audit(1775962346.958:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16886 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1233.340221][T11084] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1233.500031][T11084] usb 2-1: Using ep0 maxpacket: 8 [ 1233.545283][T11084] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.570038][T11084] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1233.580846][T11084] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1233.620110][T11084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.645995][T11084] usb 2-1: config 0 descriptor?? [ 1233.697861][T11084] qmi_wwan 2-1:0.0: skipping garbage [ 1233.720452][T11084] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1233.829524][T11084] usb 5-1: USB disconnect, device number 96 [ 1234.013219][T16904] input: syz1 as /devices/virtual/input/input37 [ 1235.909680][ T5897] usb 2-1: USB disconnect, device number 94 [ 1236.460305][T11084] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1236.696489][T16939] fuse: Bad value for 'fd' [ 1236.739978][T11084] usb 2-1: Using ep0 maxpacket: 32 [ 1236.777152][T11084] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1236.793454][T11084] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1236.829788][T11084] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1236.862061][T11084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1236.895211][T11084] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1236.936607][T11084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1236.967290][T11084] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1237.012530][T11084] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1237.046606][T11084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.063875][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1237.063896][ T30] audit: type=1326 audit(1775962352.488:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.143627][T11084] usb 2-1: config 0 descriptor?? [ 1237.214331][ T30] audit: type=1326 audit(1775962352.518:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.324699][ T30] audit: type=1326 audit(1775962352.618:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.437321][ T30] audit: type=1326 audit(1775962352.618:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.549416][ T30] audit: type=1326 audit(1775962352.618:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.649373][ T30] audit: type=1326 audit(1775962352.678:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.740109][ T30] audit: type=1326 audit(1775962352.798:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.856692][ T30] audit: type=1326 audit(1775962352.798:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.958926][ T30] audit: type=1326 audit(1775962352.858:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1237.999563][ T30] audit: type=1326 audit(1775962352.858:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16935 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 1239.024566][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.032045][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.273637][T16595] usb 2-1: USB disconnect, device number 95 [ 1240.100032][T16595] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1240.179621][T11083] IPVS: starting estimator thread 0... [ 1240.279985][T16595] usb 2-1: Using ep0 maxpacket: 32 [ 1240.307008][T16595] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1240.320005][T16979] IPVS: using max 30 ests per chain, 72000 per kthread [ 1240.339829][T16595] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1240.419039][T16595] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1240.450542][T16595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1240.471440][T16595] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1240.481812][ T5897] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1240.541194][T16595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1240.591540][T16595] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1240.664398][T16595] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1240.720465][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 1240.823478][T16595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.866257][ T5897] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1240.893391][T16595] usb 2-1: config 0 descriptor?? [ 1240.903177][ T5897] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1240.933287][ T5897] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1240.971993][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1241.020475][ T5897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1241.060170][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1241.090467][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1241.151182][ T5897] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1241.172388][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.228636][ T5897] usb 1-1: config 0 descriptor?? [ 1241.480180][T16595] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1241.640217][T16595] usb 3-1: Using ep0 maxpacket: 8 [ 1241.648583][T16595] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1241.659636][T16595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.697951][T16595] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1241.709715][T16595] pvrusb2: ********** [ 1241.717844][T16595] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1241.736906][T16595] pvrusb2: Important functionality might not be entirely working. [ 1241.747762][T16595] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1241.766905][T16595] pvrusb2: ********** [ 1241.897997][ T2345] pvrusb2: Invalid write control endpoint [ 1241.989441][ T2345] pvrusb2: Invalid write control endpoint [ 1242.001405][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1242.018312][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1242.029624][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1242.050499][ T2345] pvrusb2: Device being rendered inoperable [ 1242.059857][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1242.067947][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_r) [ 1242.078508][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1242.088513][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1242.114624][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1242.641179][T11083] usb 2-1: USB disconnect, device number 96 [ 1242.748697][T16595] usb 1-1: USB disconnect, device number 74 [ 1243.045634][T16999] fuse: Bad value for 'fd' [ 1243.119836][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1243.119856][ T30] audit: type=1326 audit(1775962358.538:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.214396][ T30] audit: type=1326 audit(1775962358.598:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.266441][ T30] audit: type=1326 audit(1775962358.598:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.290760][ T30] audit: type=1326 audit(1775962358.598:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.347349][ T30] audit: type=1326 audit(1775962358.598:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.385710][ T30] audit: type=1326 audit(1775962358.608:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.415993][ T30] audit: type=1326 audit(1775962358.608:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.452669][ T30] audit: type=1326 audit(1775962358.608:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.479795][ T30] audit: type=1326 audit(1775962358.608:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.504200][ T30] audit: type=1326 audit(1775962358.608:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16993 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1243.785077][T17006] ======================================================= [ 1243.785077][T17006] WARNING: The mand mount option has been deprecated and [ 1243.785077][T17006] and is ignored by this kernel. Remove the mand [ 1243.785077][T17006] option from the mount to silence this warning. [ 1243.785077][T17006] ======================================================= [ 1244.298735][T11083] usb 3-1: USB disconnect, device number 93 [ 1246.165877][T17033] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1246.704376][T17036] macsec1: entered promiscuous mode [ 1246.805505][T17036] macsec1: entered allmulticast mode [ 1247.211271][T11083] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1247.421695][T11083] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1247.430987][T11083] usb 2-1: config 0 has no interface number 0 [ 1247.488476][T11083] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1247.498405][T11083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.509190][T11083] usb 2-1: Product: syz [ 1247.513745][T11083] usb 2-1: Manufacturer: syz [ 1247.530008][T11083] usb 2-1: SerialNumber: syz [ 1247.593988][T11083] usb 2-1: config 0 descriptor?? [ 1249.440010][T11084] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1249.595074][T17061] fuse: root generation should be zero [ 1249.622157][T11084] usb 1-1: Using ep0 maxpacket: 32 [ 1249.675882][T11084] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1249.675907][T11084] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1249.675921][T11084] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1249.675987][T11084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1249.676002][T11084] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1249.676016][T11084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1249.676029][T11084] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1249.676069][T11084] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1249.676146][T11084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.684555][T11084] usb 1-1: config 0 descriptor?? [ 1252.200605][ T5897] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1252.365619][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 1252.393526][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 1252.447963][ T5897] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1252.460616][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.468889][ T5897] usb 5-1: Product: syz [ 1252.469367][T11084] usb 1-1: USB disconnect, device number 75 [ 1252.474251][ T5897] usb 5-1: Manufacturer: syz [ 1252.534968][ T5897] usb 5-1: SerialNumber: syz [ 1252.564091][ T5897] usb 5-1: config 0 descriptor?? [ 1252.585414][ T5897] hub 5-1:0.0: bad descriptor, ignoring hub [ 1252.606370][ T5897] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1252.640332][ T5897] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 1252.722545][T11083] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1252.746632][T11083] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1252.807283][T11083] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1252.827774][T11083] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1252.852090][T11083] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1253.164317][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1253.164337][ T30] audit: type=1326 audit(1775962368.588:7534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.223316][ T30] audit: type=1326 audit(1775962368.618:7535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.272007][ T30] audit: type=1326 audit(1775962368.628:7536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.346286][ T30] audit: type=1326 audit(1775962368.628:7537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.402037][ T30] audit: type=1326 audit(1775962368.628:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.440088][ T30] audit: type=1326 audit(1775962368.628:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.488294][ T30] audit: type=1326 audit(1775962368.628:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.536717][ T30] audit: type=1326 audit(1775962368.628:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.567554][T11084] usb 2-1: USB disconnect, device number 97 [ 1253.582077][T11084] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1253.607547][ T30] audit: type=1326 audit(1775962368.628:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.643651][T11084] keyspan 2-1:0.133: device disconnected [ 1253.682834][ T30] audit: type=1326 audit(1775962368.638:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1253.962401][T17100] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2240'. [ 1253.985079][T17100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2240'. [ 1254.350219][T11084] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1254.549985][T11084] usb 2-1: Using ep0 maxpacket: 8 [ 1254.562521][T11084] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1254.570837][T11084] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1254.588985][T11084] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1254.604720][T11084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.641938][T11084] usb 2-1: Product: syz [ 1254.659254][T11084] usb 2-1: Manufacturer: syz [ 1254.701980][T11084] usb 2-1: SerialNumber: syz [ 1254.729008][T11084] usb 2-1: config 0 descriptor?? [ 1254.750625][T11084] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1254.768036][T11084] usb 2-1: setting power ON [ 1254.779425][T11084] dvb-usb: bulk message failed: -22 (2/0) [ 1254.827171][T11084] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1254.923091][T11084] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1254.968282][T11084] usb 2-1: media controller created [ 1255.017552][T11084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1255.060717][T11084] usb 2-1: selecting invalid altsetting 6 [ 1255.066712][T11084] usb 2-1: digital interface selection failed (-22) [ 1255.102184][T11084] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1255.160276][T11084] usb 2-1: setting power OFF [ 1255.165186][T11084] dvb-usb: bulk message failed: -22 (2/0) [ 1255.178827][T11084] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1255.188630][T11083] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1255.202297][T11084] (NULL device *): no alternate interface [ 1255.263374][T11084] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1255.283966][T11084] usb 2-1: USB disconnect, device number 98 [ 1255.340069][T11083] usb 3-1: device descriptor read/64, error -71 [ 1255.471277][ T5897] usb 5-1: USB disconnect, device number 97 [ 1255.584014][T11083] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1255.730017][T11083] usb 3-1: device descriptor read/64, error -71 [ 1255.840267][T11083] usb usb3-port1: attempt power cycle [ 1256.110815][ T5897] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1256.200977][T11083] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1256.264312][T11083] usb 3-1: device descriptor read/8, error -71 [ 1256.284528][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 1256.304057][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.322788][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1256.343060][ T5897] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1256.357924][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.380673][ T5897] usb 2-1: config 0 descriptor?? [ 1256.408062][ T5897] qmi_wwan 2-1:0.0: skipping garbage [ 1256.417470][ T5897] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1256.530038][T11083] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1256.550740][T11083] usb 3-1: device descriptor read/8, error -71 [ 1256.685146][T11083] usb usb3-port1: unable to enumerate USB device [ 1259.191104][T16595] usb 2-1: USB disconnect, device number 99 [ 1259.749049][T17148] fuse: Bad value for 'fd' [ 1259.929057][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1259.929079][ T30] audit: type=1326 audit(1775962375.328:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1259.965891][ T30] audit: type=1326 audit(1775962375.328:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1259.997318][ T30] audit: type=1326 audit(1775962375.328:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1260.024956][ T30] audit: type=1326 audit(1775962375.338:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1260.054217][ T30] audit: type=1326 audit(1775962375.338:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1260.082290][ T30] audit: type=1326 audit(1775962375.348:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1260.161699][ T30] audit: type=1326 audit(1775962375.348:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1260.251449][ T30] audit: type=1326 audit(1775962375.348:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1260.309634][ T30] audit: type=1326 audit(1775962375.348:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1260.379573][ T30] audit: type=1326 audit(1775962375.378:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17144 comm="syz.0.2250" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1261.606373][T17163] bridge0: left allmulticast mode [ 1262.428803][T17163] wireguard0: left allmulticast mode [ 1262.473115][T17163] wireguard1: left allmulticast mode [ 1262.484660][T17163] wireguard2: left allmulticast mode [ 1262.520259][T17163] wireguard3: left allmulticast mode [ 1262.526248][T17163] @: left allmulticast mode [ 1262.531363][T17163] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1262.542471][T17163] wireguard4: left allmulticast mode [ 1262.560908][T17163] wireguard5: left allmulticast mode [ 1262.566947][T17163] wireguard6: left allmulticast mode [ 1262.572885][T17163] wireguard7: left allmulticast mode [ 1262.579174][T17163] wireguard8: left allmulticast mode [ 1262.631479][T17163] wireguard9: left allmulticast mode [ 1263.060161][T11766] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.099037][T11766] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.132575][T11766] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.163131][T11766] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.389966][T11083] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1263.540050][T11083] usb 4-1: device descriptor read/64, error -71 [ 1263.820072][T11083] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1263.960032][T11083] usb 4-1: device descriptor read/64, error -71 [ 1264.070338][T11083] usb usb4-port1: attempt power cycle [ 1264.439979][T11083] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1264.472084][T11083] usb 4-1: device descriptor read/8, error -71 [ 1264.700054][T11084] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1264.721211][T11083] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1264.779457][T11083] usb 4-1: device descriptor read/8, error -71 [ 1264.862280][T11084] usb 3-1: Using ep0 maxpacket: 8 [ 1264.871032][T11084] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.883261][T11084] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1264.902907][T11083] usb usb4-port1: unable to enumerate USB device [ 1264.920032][T11084] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.941508][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1264.941529][ T30] audit: type=1326 audit(1775962380.358:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1264.997727][T11084] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1265.004770][ T30] audit: type=1326 audit(1775962380.358:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.045114][T11084] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1265.060855][T11084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.069532][T11084] usb 3-1: Product: syz [ 1265.075260][T11084] usb 3-1: Manufacturer: syz [ 1265.086053][T11084] usb 3-1: SerialNumber: syz [ 1265.107863][T11084] usb 3-1: config 0 descriptor?? [ 1265.121846][ T30] audit: type=1326 audit(1775962380.408:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.151792][T11084] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1265.180724][ T30] audit: type=1326 audit(1775962380.408:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.211219][ T30] audit: type=1326 audit(1775962380.408:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.244018][ T30] audit: type=1326 audit(1775962380.418:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.267576][ T30] audit: type=1326 audit(1775962380.418:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.291965][ T30] audit: type=1326 audit(1775962380.418:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.316200][ T30] audit: type=1326 audit(1775962380.418:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.341989][ T30] audit: type=1326 audit(1775962380.418:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17190 comm="syz.0.2260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1265.382097][T11084] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1265.390874][T11084] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1265.407692][T11084] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1265.624149][T17188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.636051][T17188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.701789][T11083] usb 3-1: USB disconnect, device number 98 [ 1266.120645][T17199] trusted_key: encrypted_key: keyword 'new2…µë˜±,Ë' not recognized [ 1266.148472][T17199] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1266.598605][T17219] fuse: Bad value for 'fd' [ 1266.720432][T16595] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1266.869983][T16595] usb 2-1: device descriptor read/64, error -71 [ 1267.109990][T16595] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1267.255921][T16595] usb 2-1: device descriptor read/64, error -71 [ 1267.402821][T16595] usb usb2-port1: attempt power cycle [ 1267.740366][T16595] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1267.772555][T16595] usb 2-1: device descriptor read/8, error -71 [ 1268.010073][T16595] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1268.030848][T16595] usb 2-1: device descriptor read/8, error -71 [ 1268.140422][T16595] usb usb2-port1: unable to enumerate USB device [ 1268.643083][T17231] netlink: 'syz.4.2267': attribute type 5 has an invalid length. [ 1269.738010][T17246] bridge0: entered promiscuous mode [ 1269.743681][T17246] team0: entered promiscuous mode [ 1269.748789][T17246] bond0: entered promiscuous mode [ 1269.753957][T17246] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1269.763507][T17246] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17246, name: syz.1.2269 [ 1269.772923][T17246] preempt_count: 201, expected: 0 [ 1269.778303][T17246] RCU nest depth: 0, expected: 0 [ 1269.783268][T17246] 3 locks held by syz.1.2269/17246: [ 1269.788481][T17246] #0: ffffffff90121cc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1269.798159][T17246] #1: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1269.807437][T17246] #2: ffff88807df9c370 (&dev_addr_list_lock_key#7/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1269.817860][T17246] Preemption disabled at: [ 1269.817872][T17246] [] dev_uc_add+0x56/0x120 [ 1269.828486][T17246] CPU: 1 UID: 0 PID: 17246 Comm: syz.1.2269 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.828508][T17246] Tainted: [L]=SOFTLOCKUP [ 1269.828513][T17246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1269.828520][T17246] Call Trace: [ 1269.828529][T17246] [ 1269.828535][T17246] dump_stack_lvl+0xe8/0x150 [ 1269.828557][T17246] __might_resched+0x378/0x4d0 [ 1269.828575][T17246] ? dev_uc_add+0x56/0x120 [ 1269.828592][T17246] __mutex_lock+0x119/0x1300 [ 1269.828611][T17246] ? __pfx_vprintk_emit+0x10/0x10 [ 1269.828628][T17246] ? prb_read_valid+0x3c/0x60 [ 1269.828646][T17246] ? dev_set_promiscuity+0x10e/0x260 [ 1269.828662][T17246] ? _printk+0xdd/0x130 [ 1269.828673][T17246] ? __pfx___mutex_lock+0x10/0x10 [ 1269.828692][T17246] ? vprintk_emit+0x4eb/0x560 [ 1269.828724][T17246] ? __netdev_printk+0x36f/0x480 [ 1269.828744][T17246] dev_set_promiscuity+0x10e/0x260 [ 1269.828762][T17246] bond_change_rx_flags+0x21a/0x690 [ 1269.828777][T17246] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1269.828791][T17246] ? vprintk_emit+0x4eb/0x560 [ 1269.828809][T17246] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1269.828820][T17246] __dev_set_promiscuity+0x515/0x710 [ 1269.828836][T17246] ? netdev_info+0x11e/0x180 [ 1269.828850][T17246] netif_set_promiscuity+0x50/0xe0 [ 1269.828866][T17246] dev_set_promiscuity+0x126/0x260 [ 1269.828882][T17246] team_change_rx_flags+0x124/0x240 [ 1269.828899][T17246] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1269.828913][T17246] __dev_set_promiscuity+0x515/0x710 [ 1269.828928][T17246] ? netdev_info+0x11e/0x180 [ 1269.828950][T17246] netif_set_promiscuity+0x50/0xe0 [ 1269.828965][T17246] dev_set_promiscuity+0x126/0x260 [ 1269.828982][T17246] br_manage_promisc+0x180/0x560 [ 1269.829065][T17246] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1269.829078][T17246] __dev_set_promiscuity+0x515/0x710 [ 1269.829093][T17246] ? __hw_addr_add_ex+0x361/0x650 [ 1269.829110][T17246] __dev_set_rx_mode+0x17c/0x260 [ 1269.829125][T17246] dev_uc_add+0xc8/0x120 [ 1269.829142][T17246] macvlan_open+0x446/0x8e0 [ 1269.829161][T17246] __dev_open+0x44d/0x830 [ 1269.829196][T17246] ? __pfx___dev_open+0x10/0x10 [ 1269.829207][T17246] ? __dev_change_flags+0x1b0/0x690 [ 1269.829227][T17246] __dev_change_flags+0x1f7/0x690 [ 1269.829245][T17246] ? __pfx___dev_change_flags+0x10/0x10 [ 1269.829259][T17246] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1269.829276][T17246] ? __pfx_tap_handle_frame+0x10/0x10 [ 1269.829294][T17246] ? macvtap_newlink+0x166/0x1b0 [ 1269.829311][T17246] rtnl_newlink_create+0x587/0xb70 [ 1269.829326][T17246] ? __pfx___nla_validate_parse+0x10/0x10 [ 1269.829345][T17246] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1269.829362][T17246] ? __pfx___mutex_lock+0x10/0x10 [ 1269.829383][T17246] ? ns_capable+0x89/0xe0 [ 1269.829399][T17246] rtnl_newlink+0x166a/0x1bb0 [ 1269.829421][T17246] ? __pfx_rtnl_newlink+0x10/0x10 [ 1269.829432][T17246] ? do_fast_syscall_32+0x33/0x70 [ 1269.829446][T17246] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.829479][T17246] ? kasan_quarantine_put+0xbb/0x1f0 [ 1269.829492][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.829509][T17246] ? kmem_cache_free+0x187/0x630 [ 1269.829522][T17246] ? nlmon_xmit+0xb0/0x100 [ 1269.829542][T17246] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.829559][T17246] ? __local_bh_enable_ip+0xd0/0x130 [ 1269.829574][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.829588][T17246] ? __dev_queue_xmit+0x277/0x3890 [ 1269.829603][T17246] ? __local_bh_enable_ip+0xd0/0x130 [ 1269.829616][T17246] ? __dev_queue_xmit+0x277/0x3890 [ 1269.829644][T17246] ? __pfx_rtnl_newlink+0x10/0x10 [ 1269.829656][T17246] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1269.829671][T17246] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1269.829684][T17246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1269.829696][T17246] ? ref_tracker_free+0x693/0x840 [ 1269.829707][T17246] ? __copy_skb_header+0xa3/0x4a0 [ 1269.829729][T17246] ? __pfx_ref_tracker_free+0x10/0x10 [ 1269.829740][T17246] ? __skb_clone+0x63/0x7a0 [ 1269.829759][T17246] netlink_rcv_skb+0x232/0x4b0 [ 1269.829773][T17246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1269.829787][T17246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1269.829805][T17246] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.829827][T17246] netlink_unicast+0x80f/0x9b0 [ 1269.829852][T17246] ? __pfx_netlink_unicast+0x10/0x10 [ 1269.829889][T17246] ? netlink_sendmsg+0x650/0xb40 [ 1269.829905][T17246] ? skb_put+0x11b/0x210 [ 1269.829931][T17246] netlink_sendmsg+0x813/0xb40 [ 1269.829961][T17246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.829982][T17246] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1269.830011][T17246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1269.830040][T17246] ____sys_sendmsg+0x972/0x9f0 [ 1269.830077][T17246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.830111][T17246] ? preempt_schedule_common+0x82/0xd0 [ 1269.830142][T17246] ___sys_sendmsg+0x2a5/0x360 [ 1269.830175][T17246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.830203][T17246] ? futex_private_hash_put+0x13b/0x170 [ 1269.830229][T17246] ? futex_wake+0x4ac/0x580 [ 1269.830282][T17246] ? __fget_files+0x2a/0x420 [ 1269.830300][T17246] ? __fget_files+0x3a0/0x420 [ 1269.830329][T17246] __sys_sendmsg+0x183/0x260 [ 1269.830358][T17246] ? __pfx___sys_sendmsg+0x10/0x10 [ 1269.830407][T17246] __do_fast_syscall_32+0x20d/0x640 [ 1269.830437][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1269.830463][T17246] ? do_fast_syscall_32+0x33/0x70 [ 1269.830489][T17246] ? irqentry_exit+0x10e/0x620 [ 1269.830512][T17246] ? trace_irq_disable+0x3b/0x150 [ 1269.830532][T17246] do_fast_syscall_32+0x33/0x70 [ 1269.830549][T17246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.830564][T17246] RIP: 0023:0xf707ef6c [ 1269.830577][T17246] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1269.830588][T17246] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1269.830602][T17246] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 1269.830610][T17246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.830617][T17246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.830624][T17246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.830631][T17246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.830647][T17246] [ 1270.438076][T17246] [ 1270.440400][T17246] ============================= [ 1270.445240][T17246] [ BUG: Invalid wait context ] [ 1270.450258][T17246] syzkaller #0 Tainted: G W L [ 1270.456239][T17246] ----------------------------- [ 1270.461081][T17246] syz.1.2269/17246 is trying to lock: [ 1270.466447][T17246] ffff88807aa04d88 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1270.476933][T17246] other info that might help us debug this: [ 1270.482811][T17246] context-{5:5} [ 1270.486263][T17246] 3 locks held by syz.1.2269/17246: [ 1270.491475][T17246] #0: ffffffff90121cc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1270.501123][T17246] #1: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1270.510255][T17246] #2: ffff88807df9c370 (&dev_addr_list_lock_key#7/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1270.520654][T17246] stack backtrace: [ 1270.524376][T17246] CPU: 1 UID: 0 PID: 17246 Comm: syz.1.2269 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1270.524397][T17246] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1270.524402][T17246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1270.524410][T17246] Call Trace: [ 1270.524416][T17246] [ 1270.524422][T17246] dump_stack_lvl+0xe8/0x150 [ 1270.524440][T17246] __lock_acquire+0xec1/0x2cf0 [ 1270.524456][T17246] ? irqentry_exit+0x59e/0x620 [ 1270.524472][T17246] ? trace_irq_disable+0x3b/0x150 [ 1270.524486][T17246] lock_acquire+0xf0/0x2e0 [ 1270.524500][T17246] ? dev_set_promiscuity+0x10e/0x260 [ 1270.524514][T17246] ? __might_resched+0x378/0x4d0 [ 1270.524531][T17246] __mutex_lock+0x19f/0x1300 [ 1270.524546][T17246] ? dev_set_promiscuity+0x10e/0x260 [ 1270.524560][T17246] ? __pfx_vprintk_emit+0x10/0x10 [ 1270.524576][T17246] ? prb_read_valid+0x3c/0x60 [ 1270.524592][T17246] ? dev_set_promiscuity+0x10e/0x260 [ 1270.524606][T17246] ? __pfx___mutex_lock+0x10/0x10 [ 1270.524623][T17246] ? vprintk_emit+0x4eb/0x560 [ 1270.524639][T17246] ? __netdev_printk+0x36f/0x480 [ 1270.524656][T17246] dev_set_promiscuity+0x10e/0x260 [ 1270.524670][T17246] bond_change_rx_flags+0x21a/0x690 [ 1270.524683][T17246] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1270.524695][T17246] ? vprintk_emit+0x4eb/0x560 [ 1270.524712][T17246] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1270.524722][T17246] __dev_set_promiscuity+0x515/0x710 [ 1270.524744][T17246] ? netdev_info+0x11e/0x180 [ 1270.524755][T17246] netif_set_promiscuity+0x50/0xe0 [ 1270.524769][T17246] dev_set_promiscuity+0x126/0x260 [ 1270.524783][T17246] team_change_rx_flags+0x124/0x240 [ 1270.524797][T17246] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1270.524810][T17246] __dev_set_promiscuity+0x515/0x710 [ 1270.524823][T17246] ? netdev_info+0x11e/0x180 [ 1270.524834][T17246] netif_set_promiscuity+0x50/0xe0 [ 1270.524849][T17246] dev_set_promiscuity+0x126/0x260 [ 1270.524863][T17246] br_manage_promisc+0x180/0x560 [ 1270.524881][T17246] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1270.524894][T17246] __dev_set_promiscuity+0x515/0x710 [ 1270.524908][T17246] ? __hw_addr_add_ex+0x361/0x650 [ 1270.524922][T17246] __dev_set_rx_mode+0x17c/0x260 [ 1270.524936][T17246] dev_uc_add+0xc8/0x120 [ 1270.524950][T17246] macvlan_open+0x446/0x8e0 [ 1270.524965][T17246] __dev_open+0x44d/0x830 [ 1270.524977][T17246] ? __pfx___dev_open+0x10/0x10 [ 1270.524987][T17246] ? __dev_change_flags+0x1b0/0x690 [ 1270.525002][T17246] __dev_change_flags+0x1f7/0x690 [ 1270.525016][T17246] ? __pfx___dev_change_flags+0x10/0x10 [ 1270.525029][T17246] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1270.525044][T17246] ? __pfx_tap_handle_frame+0x10/0x10 [ 1270.525060][T17246] ? macvtap_newlink+0x166/0x1b0 [ 1270.525075][T17246] rtnl_newlink_create+0x587/0xb70 [ 1270.525088][T17246] ? __pfx___nla_validate_parse+0x10/0x10 [ 1270.525103][T17246] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1270.525117][T17246] ? __pfx___mutex_lock+0x10/0x10 [ 1270.525133][T17246] ? ns_capable+0x89/0xe0 [ 1270.525148][T17246] rtnl_newlink+0x166a/0x1bb0 [ 1270.525163][T17246] ? __pfx_rtnl_newlink+0x10/0x10 [ 1270.525174][T17246] ? do_fast_syscall_32+0x33/0x70 [ 1270.525189][T17246] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1270.525209][T17246] ? kasan_quarantine_put+0xbb/0x1f0 [ 1270.525221][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1270.525236][T17246] ? kmem_cache_free+0x187/0x630 [ 1270.525249][T17246] ? nlmon_xmit+0xb0/0x100 [ 1270.525263][T17246] ? __lock_acquire+0x6b5/0x2cf0 [ 1270.525278][T17246] ? __local_bh_enable_ip+0xd0/0x130 [ 1270.525292][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1270.525306][T17246] ? __dev_queue_xmit+0x277/0x3890 [ 1270.525320][T17246] ? __local_bh_enable_ip+0xd0/0x130 [ 1270.525334][T17246] ? __dev_queue_xmit+0x277/0x3890 [ 1270.525353][T17246] ? __pfx_rtnl_newlink+0x10/0x10 [ 1270.525364][T17246] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1270.525377][T17246] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1270.525388][T17246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1270.525400][T17246] ? ref_tracker_free+0x693/0x840 [ 1270.525411][T17246] ? __copy_skb_header+0xa3/0x4a0 [ 1270.525425][T17246] ? __pfx_ref_tracker_free+0x10/0x10 [ 1270.525436][T17246] ? __skb_clone+0x63/0x7a0 [ 1270.525451][T17246] netlink_rcv_skb+0x232/0x4b0 [ 1270.525463][T17246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1270.525475][T17246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1270.525488][T17246] ? netlink_deliver_tap+0x2e/0x1b0 [ 1270.525501][T17246] netlink_unicast+0x80f/0x9b0 [ 1270.525519][T17246] ? __pfx_netlink_unicast+0x10/0x10 [ 1270.525536][T17246] ? netlink_sendmsg+0x650/0xb40 [ 1270.525546][T17246] ? skb_put+0x11b/0x210 [ 1270.525559][T17246] netlink_sendmsg+0x813/0xb40 [ 1270.525573][T17246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.525585][T17246] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1270.525602][T17246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1270.525616][T17246] ____sys_sendmsg+0x972/0x9f0 [ 1270.525632][T17246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.525647][T17246] ? preempt_schedule_common+0x82/0xd0 [ 1270.525662][T17246] ___sys_sendmsg+0x2a5/0x360 [ 1270.525677][T17246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.525690][T17246] ? futex_private_hash_put+0x13b/0x170 [ 1270.525703][T17246] ? futex_wake+0x4ac/0x580 [ 1270.525729][T17246] ? __fget_files+0x2a/0x420 [ 1270.525740][T17246] ? __fget_files+0x3a0/0x420 [ 1270.525751][T17246] __sys_sendmsg+0x183/0x260 [ 1270.525765][T17246] ? __pfx___sys_sendmsg+0x10/0x10 [ 1270.525783][T17246] __do_fast_syscall_32+0x20d/0x640 [ 1270.525799][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1270.525812][T17246] ? do_fast_syscall_32+0x33/0x70 [ 1270.525827][T17246] ? irqentry_exit+0x10e/0x620 [ 1270.525841][T17246] ? trace_irq_disable+0x3b/0x150 [ 1270.525852][T17246] do_fast_syscall_32+0x33/0x70 [ 1270.525868][T17246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1270.525882][T17246] RIP: 0023:0xf707ef6c [ 1270.525894][T17246] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1270.525904][T17246] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1270.525917][T17246] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 1270.525926][T17246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1270.525933][T17246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1270.525939][T17246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1270.525946][T17246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1270.525957][T17246] [ 1271.372776][T17246] bridge0: port 2(macvtap0) entered blocking state [ 1271.379451][T17246] bridge0: port 2(macvtap0) entered disabled state [ 1271.417650][T17246] macvtap0: entered allmulticast mode [ 1271.451079][T17246] bridge0: entered allmulticast mode [ 1271.457729][T17246] macvtap0: left allmulticast mode [ 1271.465156][T17246] bridge0: left allmulticast mode [ 1271.472971][T17246] bridge0: left promiscuous mode [ 1271.478288][T17246] team0: left promiscuous mode [ 1271.483139][T17246] bond0: left promiscuous mode [ 1271.487917][T17246] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1271.497265][T17246] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17246, name: syz.1.2269 [ 1271.506479][T17246] preempt_count: 201, expected: 0 [ 1271.511536][T17246] RCU nest depth: 0, expected: 0 [ 1271.516886][T17246] INFO: lockdep is turned off. [ 1271.521710][T17246] Preemption disabled at: [ 1271.521719][T17246] [] dev_uc_del+0x56/0x110 [ 1271.532143][T17246] CPU: 0 UID: 0 PID: 17246 Comm: syz.1.2269 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1271.532165][T17246] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1271.532171][T17246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1271.532178][T17246] Call Trace: [ 1271.532185][T17246] [ 1271.532191][T17246] dump_stack_lvl+0xe8/0x150 [ 1271.532209][T17246] __might_resched+0x378/0x4d0 [ 1271.532226][T17246] ? dev_uc_del+0x56/0x110 [ 1271.532241][T17246] __mutex_lock+0x119/0x1300 [ 1271.532258][T17246] ? __pfx_vprintk_emit+0x10/0x10 [ 1271.532275][T17246] ? prb_read_valid+0x3c/0x60 [ 1271.532291][T17246] ? dev_set_promiscuity+0x10e/0x260 [ 1271.532304][T17246] ? _printk+0xdd/0x130 [ 1271.532314][T17246] ? __pfx___mutex_lock+0x10/0x10 [ 1271.532331][T17246] ? vprintk_emit+0x4eb/0x560 [ 1271.532346][T17246] ? __netdev_printk+0x36f/0x480 [ 1271.532364][T17246] dev_set_promiscuity+0x10e/0x260 [ 1271.532376][T17246] ? netdev_info+0x11e/0x180 [ 1271.532388][T17246] bond_change_rx_flags+0x21a/0x690 [ 1271.532400][T17246] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1271.532414][T17246] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1271.532424][T17246] __dev_set_promiscuity+0x515/0x710 [ 1271.532438][T17246] ? bond_set_rx_mode+0x84/0x4b0 [ 1271.532449][T17246] netif_set_promiscuity+0x50/0xe0 [ 1271.532464][T17246] dev_set_promiscuity+0x126/0x260 [ 1271.532478][T17246] team_change_rx_flags+0x124/0x240 [ 1271.532492][T17246] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1271.532505][T17246] __dev_set_promiscuity+0x515/0x710 [ 1271.532518][T17246] ? lock_release+0x4b/0x3d0 [ 1271.532532][T17246] netif_set_promiscuity+0x50/0xe0 [ 1271.532546][T17246] dev_set_promiscuity+0x126/0x260 [ 1271.532560][T17246] br_manage_promisc+0x4db/0x560 [ 1271.532578][T17246] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1271.532591][T17246] __dev_set_promiscuity+0x515/0x710 [ 1271.532604][T17246] ? __hw_addr_del_ex+0x73/0x4e0 [ 1271.532620][T17246] __dev_set_rx_mode+0x17c/0x260 [ 1271.532634][T17246] dev_uc_del+0xc0/0x110 [ 1271.532648][T17246] macvlan_stop+0x259/0x3e0 [ 1271.532661][T17246] ? __pfx_macvlan_stop+0x10/0x10 [ 1271.532682][T17246] __dev_close_many+0x368/0x6d0 [ 1271.532696][T17246] ? __pfx___dev_close_many+0x10/0x10 [ 1271.532709][T17246] netif_close_many+0x225/0x420 [ 1271.532722][T17246] ? __pfx_netif_close_many+0x10/0x10 [ 1271.532733][T17246] ? unregister_netdevice_many_notify+0x1d9/0x2370 [ 1271.532751][T17246] unregister_netdevice_many_notify+0xb47/0x2370 [ 1271.532769][T17246] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 1271.532783][T17246] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1271.532805][T17246] ? netdev_upper_dev_unlink+0x99/0xe0 [ 1271.532817][T17246] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 1271.532830][T17246] ? macvlan_dellink+0x3e2/0x470 [ 1271.532843][T17246] rtnl_newlink_create+0x84b/0xb70 [ 1271.532857][T17246] ? __pfx___nla_validate_parse+0x10/0x10 [ 1271.532872][T17246] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1271.532885][T17246] ? __pfx___mutex_lock+0x10/0x10 [ 1271.532902][T17246] ? ns_capable+0x89/0xe0 [ 1271.532917][T17246] rtnl_newlink+0x166a/0x1bb0 [ 1271.532932][T17246] ? __pfx_rtnl_newlink+0x10/0x10 [ 1271.532943][T17246] ? do_fast_syscall_32+0x33/0x70 [ 1271.532958][T17246] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1271.532978][T17246] ? kasan_quarantine_put+0xbb/0x1f0 [ 1271.532991][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1271.533006][T17246] ? kmem_cache_free+0x187/0x630 [ 1271.533018][T17246] ? nlmon_xmit+0xb0/0x100 [ 1271.533033][T17246] ? __lock_acquire+0x6b5/0x2cf0 [ 1271.533048][T17246] ? __local_bh_enable_ip+0xd0/0x130 [ 1271.533062][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1271.533076][T17246] ? __dev_queue_xmit+0x277/0x3890 [ 1271.533091][T17246] ? __local_bh_enable_ip+0xd0/0x130 [ 1271.533104][T17246] ? __dev_queue_xmit+0x277/0x3890 [ 1271.533123][T17246] ? __pfx_rtnl_newlink+0x10/0x10 [ 1271.533134][T17246] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1271.533147][T17246] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1271.533158][T17246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1271.533170][T17246] ? ref_tracker_free+0x693/0x840 [ 1271.533180][T17246] ? __copy_skb_header+0xa3/0x4a0 [ 1271.533195][T17246] ? __pfx_ref_tracker_free+0x10/0x10 [ 1271.533205][T17246] ? __skb_clone+0x63/0x7a0 [ 1271.533221][T17246] netlink_rcv_skb+0x232/0x4b0 [ 1271.533233][T17246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1271.533245][T17246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1271.533258][T17246] ? netlink_deliver_tap+0x2e/0x1b0 [ 1271.533271][T17246] netlink_unicast+0x80f/0x9b0 [ 1271.533289][T17246] ? __pfx_netlink_unicast+0x10/0x10 [ 1271.533305][T17246] ? netlink_sendmsg+0x650/0xb40 [ 1271.533316][T17246] ? skb_put+0x11b/0x210 [ 1271.533329][T17246] netlink_sendmsg+0x813/0xb40 [ 1271.533343][T17246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1271.533355][T17246] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1271.533372][T17246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1271.533386][T17246] ____sys_sendmsg+0x972/0x9f0 [ 1271.533402][T17246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1271.533417][T17246] ? preempt_schedule_common+0x82/0xd0 [ 1271.533432][T17246] ___sys_sendmsg+0x2a5/0x360 [ 1271.533447][T17246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1271.533461][T17246] ? futex_private_hash_put+0x13b/0x170 [ 1271.533474][T17246] ? futex_wake+0x4ac/0x580 [ 1271.533495][T17246] ? __fget_files+0x2a/0x420 [ 1271.533504][T17246] ? __fget_files+0x3a0/0x420 [ 1271.533516][T17246] __sys_sendmsg+0x183/0x260 [ 1271.533530][T17246] ? __pfx___sys_sendmsg+0x10/0x10 [ 1271.533548][T17246] __do_fast_syscall_32+0x20d/0x640 [ 1271.533564][T17246] ? lockdep_hardirqs_on+0x7a/0x110 [ 1271.533578][T17246] ? do_fast_syscall_32+0x33/0x70 [ 1271.533592][T17246] ? irqentry_exit+0x10e/0x620 [ 1271.533606][T17246] ? trace_irq_disable+0x3b/0x150 [ 1271.533617][T17246] do_fast_syscall_32+0x33/0x70 [ 1271.533632][T17246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1271.533646][T17246] RIP: 0023:0xf707ef6c [ 1271.533658][T17246] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1271.533668][T17246] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1271.533687][T17246] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 1271.533696][T17246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.533703][T17246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.533710][T17246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1271.533717][T17246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.533727][T17246] [ 1272.380546][ T5927] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1272.382321][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 1272.382338][ T30] audit: type=1326 audit(1775962387.598:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17232 comm="syz.0.2268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 1272.500376][ T30] audit: type=1326 audit(1775962387.848:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1272.565933][ T30] audit: type=1326 audit(1775962387.848:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1272.620555][ T30] audit: type=1326 audit(1775962387.958:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1272.720178][ T30] audit: type=1326 audit(1775962387.958:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000 [ 1272.780905][T11083] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1272.810881][ T30] audit: type=1326 audit(1775962387.958:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17242 comm="syz.3.2270" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44f6c code=0x7ffc0000