last executing test programs: 18.193279174s ago: executing program 4 (id=4903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r3 = syz_open_dev$vim2m(0x0, 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r11 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r11, 0x7003) 17.678926818s ago: executing program 3 (id=4904): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000600)={0x2, @win={{0x6, 0x1593, 0xa, 0x1}, 0x3, 0x0, 0x0, 0x2, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0x5], 0x80000000}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'erspan0\x00', 0x2000}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2a8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x274, 0x2, [@TCA_MATCHALL_ACT={0x270, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0xf0, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x101) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000200)="58842596b312", 0x0, 0x0, 0x30, 0x0, 0x0}) 14.90515016s ago: executing program 3 (id=4908): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$dri(0x0, 0x2000007, 0x38142) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86cc", 0x75}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0x57}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) 14.581239507s ago: executing program 4 (id=4909): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 14.557921065s ago: executing program 1 (id=4910): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x6, 0xfe, 0x5, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r2, 0x0, 0x0, 0x20, 0x0) shutdown(r2, 0x1) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=r5, 0x10, 0x1, 0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, &(0x7f0000000500), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map=r3, r7, 0x1, 0x0, 0x0, @void, @value=r3, @void, @void, r9}, 0x20) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) execveat$binfmt(r3, r4, &(0x7f0000000200)={[&(0x7f0000000100)=']}$\x00', 0x0]}, &(0x7f00000003c0)={[&(0x7f0000000280)='\x00', 0x0, &(0x7f0000000340)='.^\\f\x00']}, 0x1000) fspick(r3, &(0x7f00000005c0)='./file1\x00', 0x0) 14.405810155s ago: executing program 0 (id=4911): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x94000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000600)={0x2, @win={{0x6, 0x1593, 0xa, 0x1}, 0x3, 0x0, 0x0, 0x2, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0x5], 0x80000000}}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'erspan0\x00', 0x2000}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2a8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x274, 0x2, [@TCA_MATCHALL_ACT={0x270, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0xf0, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x101) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000200)="58842596b312", 0x0, 0x0, 0x30, 0x0, 0x0}) 13.490716933s ago: executing program 2 (id=4912): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0x485, 0x40000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x4}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x2000000, 0x1, 0x0, 0x1000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x4, 0x8, 0xfff8, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 11.69193295s ago: executing program 4 (id=4913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000400100000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100020000000000000000000000004000"], 0xb8}}, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000005c0)={{0x1, @addr=0x1}, "522ec2c4dfdea0e049be106158e4f5aa2e9a2a24b978bb029b829364f1d8fecd", 0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x0, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) r6 = dup(r4) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0xa, 0x0, "1b0700000000000000fff4dd40073407b95d1faec8f20000000014efff000002", 0x3234564e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) 11.684970192s ago: executing program 1 (id=4923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2000000) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x14, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', r7, 0x4, 0x9, 0x0, 0xf7, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3, 0x3}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000002000)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r13, 0x4b31, &(0x7f0000000180)) 11.684538333s ago: executing program 3 (id=4914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0x2, 0xffffffff}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r6, 0x2, 0x6, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0x2, 0x4, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a65822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5d09cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd2f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92db1fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf3afae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b789c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152cac51a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a88ef70dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c386717037348de10420616f0cd22ae000000000000000015cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089d51e0f59d80070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb37021aa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb000065905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e080030243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81b1c0dc73332b7d71cb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8103e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd40406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766be1e4aad5cfce8255b78af2b9ec65bc83a9c7d12cd63b82cd2b506fd4061d1a16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e02d09c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e485542991d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b56201000000000000544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c9fc0524cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd4cfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 11.421166574s ago: executing program 2 (id=4915): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$dri(0x0, 0x2000007, 0x38142) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aa", 0xaf}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0x57}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) 10.847404694s ago: executing program 0 (id=4916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r3 = syz_open_dev$vim2m(0x0, 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r11 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r11, 0x7003) 9.187503335s ago: executing program 1 (id=4917): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x4000) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 9.18581711s ago: executing program 2 (id=4928): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x6b0, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x640, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x55c, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x58, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x2c, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8.182654435s ago: executing program 0 (id=4918): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0000102, 0x0, 0x7}]}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xbb7, 0x480009, 0x8, 0x7b5, 0xfffffff9}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r7) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2400c085}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r9, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3e, 0x107, 0xdffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.092737743s ago: executing program 2 (id=4919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000001c0)=0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x28) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x5}, 0x10}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setattr(0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000240)=@x86={0x2, 0x2, 0x84, 0x0, 0x407, 0x9, 0x83, 0x4, 0x8, 0x4, 0x3, 0xbe, 0x0, 0x7f, 0x4, 0xf0, 0x0, 0x8, 0x6, '\x00', 0xc, 0x21}) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r10, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x125a8, 0x10, 0x0, 0x5, 0x2, 0x6, 0x2, 0xdd2fcb245114ab72}}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000e40)={0x2, 0x0, @ioapic={0x7000, 0xffffffff, 0x40, 0x4, 0x0, [{0x1, 0x85, 0x8, '\x00', 0x6}, {0xb, 0x0, 0x0, '\x00', 0xa}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x8, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x3, '\x00', 0xb}, {0x2, 0xff, 0x9, '\x00', 0x1}, {0x8, 0x3, 0xf7, '\x00', 0xf3}, {0x0, 0xa, 0x40, '\x00', 0x93}, {0x80, 0x74, 0x3, '\x00', 0xd}, {0x4, 0xfe, 0xfe, '\x00', 0xf}, {0xbe, 0x1, 0x4, '\x00', 0x2}, {0x8, 0x5, 0xf, '\x00', 0x1}, {0xa6, 0x0, 0xd, '\x00', 0xa6}, {0x15, 0xc, 0x0, '\x00', 0x6}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x81, '\x00', 0x3}, {0x7, 0x7, 0x90, '\x00', 0xfe}, {0xfd, 0x0, 0x5, '\x00', 0x7f}, {0xfd, 0x3, 0xe2, '\x00', 0x2}, {0x0, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xfd, '\x00', 0x9}, {0xe, 0x11, 0x2, '\x00', 0xfd}, {0xd, 0x9, 0x8e, '\x00', 0x8}]}}) 7.709970205s ago: executing program 4 (id=4920): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x94000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000600)={0x2, @win={{0x6, 0x1593, 0xa, 0x1}, 0x3, 0x0, 0x0, 0x2, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0x5], 0x80000000}}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffff, 0x7c}}, 0x30) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'erspan0\x00', 0x2000}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2a8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x274, 0x2, [@TCA_MATCHALL_ACT={0x270, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0xf0, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$sg(0x0, 0x0, 0x101) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000200)="58842596b312", 0x0, 0x0, 0x30, 0x0, 0x0}) 7.69371489s ago: executing program 3 (id=4921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$dri(0x0, 0x2000007, 0x38142) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aa", 0xaf}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0x57}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) 5.809644339s ago: executing program 1 (id=4922): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a0069ae26bd7000000000001c"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r4}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r9, 0x1, 0x0, 0x10000, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 5.176464583s ago: executing program 0 (id=4924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$dri(0x0, 0x2000007, 0x38142) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86cc", 0x75}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0x57}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) 4.525615348s ago: executing program 2 (id=4925): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4b63, 0x3) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r7, 0x5450) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x400, 0x40, 0x20, 0x1}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 4.28002203s ago: executing program 3 (id=4926): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$dri(0x0, 0x2000007, 0x38142) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86cc", 0x75}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0x57}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) 3.627412156s ago: executing program 1 (id=4927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket(0x1e, 0x4, 0x0) shutdown(r3, 0x1) r4 = openat$procfs(0xffffff9c, &(0x7f0000003a80)='/proc/partitions\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706010800"/18], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x10000}, [@tmpl={0x104, 0x5, [{{@in=@local, 0xffffffff, 0x3c}, 0x0, @in=@broadcast, 0x20000}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@remote, 0x3501, 0x0, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x1b8}}, 0x0) syz_usb_connect$uac1(0x3, 0x93, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, 0x0, r6, &(0x7f0000000080)='./mnt\x00', 0x214) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) 3.543567552s ago: executing program 4 (id=4929): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x1f, 0x1, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r3 = syz_open_dev$dri(0x0, 0x2000007, 0x38142) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc", 0xcc}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0x57}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000440)={0x5, r8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) 2.777513841s ago: executing program 0 (id=4930): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x688, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x618, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x534, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x30, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x688}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.980503438s ago: executing program 2 (id=4931): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2000000) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x14, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', r7, 0x4, 0x9, 0x0, 0xf7, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3, 0x3}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000002000)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r13, 0x4b31, &(0x7f0000000180)) 1.266769131s ago: executing program 3 (id=4932): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x6b0, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x640, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x55c, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x58, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x2c, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.13929331s ago: executing program 4 (id=4933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0x2, 0xffffffff}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r6, 0x2, 0x6, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0x2, 0x4, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a65822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5d09cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd2f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92db1fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf3afae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b789c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152cac51a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a88ef70dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c386717037348de10420616f0cd22ae000000000000000015cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089d51e0f59d80070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb37021aa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb000065905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e080030243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81b1c0dc73332b7d71cb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8103e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd40406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766be1e4aad5cfce8255b78af2b9ec65bc83a9c7d12cd63b82cd2b506fd4061d1a16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e02d09c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e485542991d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b56201000000000000544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c9fc0524cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd4cfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.910221ms ago: executing program 1 (id=4934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x2, r5, 0x1, 0xffff, 0xa, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r5, r7, 0x9, 0x7, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x3], 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x9], &(0x7f0000000400)}) 0s ago: executing program 0 (id=4944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket(0x1e, 0x4, 0x0) shutdown(r3, 0x1) r4 = openat$procfs(0xffffff9c, &(0x7f0000003a80)='/proc/partitions\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000706010800"/18], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x10000}, [@tmpl={0x104, 0x5, [{{@in=@local, 0xffffffff, 0x3c}, 0x0, @in=@broadcast, 0x20000}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@remote, 0x3501, 0x0, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x1b8}}, 0x0) syz_usb_connect$uac1(0x3, 0x93, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, 0x0, r6, &(0x7f0000000080)='./mnt\x00', 0x214) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) kernel console output (not intermixed with test programs): 0 [ 2266.125830][ T30] audit: type=1326 audit(1765135983.178:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2266.193917][ T30] audit: type=1326 audit(1765135983.178:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2266.273448][ T30] audit: type=1326 audit(1765135983.178:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2266.375559][ T30] audit: type=1326 audit(1765135983.178:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2266.781384][ T30] audit: type=1326 audit(1765135983.178:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2266.897321][ T30] audit: type=1326 audit(1765135983.178:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2266.987628][ T30] audit: type=1326 audit(1765135983.178:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2267.106717][ T30] audit: type=1326 audit(1765135983.188:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2267.187904][ T30] audit: type=1326 audit(1765135983.198:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25706 comm="syz.1.3810" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2267.809505][T25734] xt_bpf: check failed: parse error [ 2268.140561][T25736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3814'. [ 2268.150243][T25736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3814'. [ 2268.738052][T25739] tipc: Enabling of bearer rejected, already enabled [ 2268.752168][T25739] tipc: Enabling of bearer rejected, already enabled [ 2269.811394][T25750] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2271.370053][T25770] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 2272.475909][T25778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3826'. [ 2273.222749][T25788] loop8: detected capacity change from 0 to 7 [ 2273.351170][T25788] Dev loop8: unable to read RDB block 7 [ 2273.357925][T25788] loop8: AHDI p1 p2 p3 [ 2273.362555][T25788] loop8: partition table partially beyond EOD, truncated [ 2273.370199][T25788] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2273.377677][T25788] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2273.532667][T25786] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3829'. [ 2273.754913][T25753] Dev loop8: unable to read RDB block 7 [ 2273.769530][T25753] loop8: AHDI p1 p2 p3 [ 2273.789887][T25753] loop8: partition table partially beyond EOD, truncated [ 2273.857809][T25753] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2273.898256][T25753] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2273.942476][T25790] Dev loop8: unable to read RDB block 7 [ 2273.948665][T25790] loop8: AHDI p1 p2 p3 [ 2274.041147][T25790] loop8: partition table partially beyond EOD, truncated [ 2274.054371][T25790] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2274.061891][T25790] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2274.712025][T25801] sctp: [Deprecated]: syz.3.3831 (pid 25801) Use of int in maxseg socket option. [ 2274.712025][T25801] Use struct sctp_assoc_value instead [ 2275.593403][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 2275.730309][T25818] hub 9-0:1.0: USB hub found [ 2275.736330][T25818] hub 9-0:1.0: 1 port detected [ 2277.354473][T25840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3838'. [ 2277.445704][T25840] hub 9-0:1.0: USB hub found [ 2277.464854][T25840] hub 9-0:1.0: 1 port detected [ 2282.373347][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 2282.383065][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 2284.598327][T25901] tipc: Enabling of bearer rejected, failed to enable media [ 2284.617065][T25901] tipc: Enabling of bearer rejected, already enabled [ 2284.642377][T25900] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2285.715206][T25909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3852'. [ 2285.945525][T25908] hub 9-0:1.0: USB hub found [ 2285.953227][T25908] hub 9-0:1.0: 1 port detected [ 2286.011200][T25915] xt_bpf: check failed: parse error [ 2286.523571][T25915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3853'. [ 2286.542608][T25915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3853'. [ 2288.855916][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.863697][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2291.119533][T25960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3863'. [ 2291.192118][T25958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3863'. [ 2291.462996][T25964] fuse: Bad value for 'group_id' [ 2291.468092][T25964] fuse: Bad value for 'group_id' [ 2293.825620][T25987] IPv6: sit1: Disabled Multicast RS [ 2293.841841][T25987] sit1: entered allmulticast mode [ 2295.358032][T25995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3870'. [ 2295.535660][T25995] hub 9-0:1.0: USB hub found [ 2295.541858][T25995] hub 9-0:1.0: 1 port detected [ 2295.952403][T26004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3872'. [ 2295.983940][T26004] hub 9-0:1.0: USB hub found [ 2295.991373][T26004] hub 9-0:1.0: 1 port detected [ 2296.718286][T26006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 2297.050510][ T30] audit: type=1326 audit(1765136014.288:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2297.140502][ T30] audit: type=1326 audit(1765136014.288:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2297.192646][T26013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3874'. [ 2297.262834][ T30] audit: type=1326 audit(1765136014.288:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2297.347125][ T30] audit: type=1326 audit(1765136014.288:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2297.437880][ T30] audit: type=1326 audit(1765136014.288:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2297.820457][ T30] audit: type=1326 audit(1765136014.288:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2297.861050][ T30] audit: type=1326 audit(1765136014.288:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2298.110697][ T30] audit: type=1326 audit(1765136014.288:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2298.230119][ T30] audit: type=1326 audit(1765136014.288:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2298.330019][ T30] audit: type=1326 audit(1765136014.288:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26007 comm="syz.4.3874" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2299.241339][T26031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3878'. [ 2299.281178][T26031] hub 9-0:1.0: USB hub found [ 2299.287292][T26031] hub 9-0:1.0: 1 port detected [ 2299.771491][T26041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3880'. [ 2299.803618][T26041] hub 9-0:1.0: USB hub found [ 2299.810521][T26041] hub 9-0:1.0: 1 port detected [ 2301.971777][T26061] input: syz0 as /devices/virtual/input/input73 [ 2302.416775][T26067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3885'. [ 2302.580043][T26067] hub 9-0:1.0: USB hub found [ 2302.587389][T26067] hub 9-0:1.0: 1 port detected [ 2303.368019][T26077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3887'. [ 2303.404016][T26077] hub 9-0:1.0: USB hub found [ 2303.410577][T26077] hub 9-0:1.0: 1 port detected [ 2304.167328][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 2304.183448][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 2304.591742][T26090] netlink: 'syz.1.3889': attribute type 13 has an invalid length. [ 2304.791687][T26090] 8021q: adding VLAN 0 to HW filter on device .` [ 2304.818406][T26090] 8021q: adding VLAN 0 to HW filter on device team0 [ 2304.878090][T26090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2306.544261][T17539] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2306.718450][T17539] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 2306.753055][T17539] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2306.814063][T17539] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2306.834729][T17539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.882100][T17539] usb 1-1: config 0 descriptor?? [ 2307.370135][T26104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2307.384485][T26104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2307.415444][T26104] fuse: Unknown parameter 'group_id00000000000000000000' [ 2307.434035][T17539] usb 1-1: string descriptor 0 read error: -71 [ 2307.446143][T17539] usb 1-1: USB disconnect, device number 31 [ 2307.941680][T17539] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2308.098839][T26116] tipc: Enabling of bearer rejected, already enabled [ 2308.191004][T17539] usb 3-1: Using ep0 maxpacket: 32 [ 2308.199795][T17539] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2308.211367][T17539] usb 3-1: config 0 has no interface number 0 [ 2308.233813][T17539] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2308.248806][T17539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.267173][T17539] usb 3-1: Product: syz [ 2308.467496][T17539] usb 3-1: Manufacturer: syz [ 2308.473160][T17539] usb 3-1: SerialNumber: syz [ 2308.481477][T26120] tipc: Enabling of bearer rejected, already enabled [ 2308.541286][T17539] usb 3-1: config 0 descriptor?? [ 2308.578660][T17539] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2308.606711][T17539] usb 3-1: selecting invalid altsetting 1 [ 2308.628164][T17539] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2308.652501][T26122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 2308.672683][T17539] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2308.686685][T17539] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2308.742512][T17539] usb 3-1: media controller created [ 2308.993526][T26121] hub 9-0:1.0: USB hub found [ 2309.001244][T26121] hub 9-0:1.0: 1 port detected [ 2309.108602][T17539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2309.205350][T17539] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2309.217580][T17539] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2309.241665][T17539] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2309.345437][T17539] usb 3-1: USB disconnect, device number 53 [ 2310.078055][T26132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3897'. [ 2310.115421][T26132] hub 9-0:1.0: USB hub found [ 2310.120762][T26132] hub 9-0:1.0: 1 port detected [ 2310.612578][T26138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3898'. [ 2310.631148][T26138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3898'. [ 2311.242113][T26146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3901'. [ 2311.354288][T26148] hub 9-0:1.0: USB hub found [ 2311.361443][T26148] hub 9-0:1.0: 1 port detected [ 2311.595791][T26147] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2312.964742][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 2312.964763][ T30] audit: type=1326 audit(1765136030.208:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2313.045532][ T30] audit: type=1326 audit(1765136030.208:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2313.108915][T26160] netlink: 'syz.2.3904': attribute type 4 has an invalid length. [ 2313.127401][T26160] netlink: 'syz.2.3904': attribute type 4 has an invalid length. [ 2313.232839][ T30] audit: type=1326 audit(1765136030.208:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2313.363706][ T30] audit: type=1326 audit(1765136030.208:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2313.513676][ T30] audit: type=1326 audit(1765136030.208:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2313.633436][ T30] audit: type=1326 audit(1765136030.208:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2313.944801][T26172] loop8: detected capacity change from 0 to 7 [ 2313.990779][T26172] Dev loop8: unable to read RDB block 7 [ 2314.006661][T26161] could not allocate digest TFM handle sha224-generic [ 2314.034665][T26175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3906'. [ 2314.048638][ T30] audit: type=1326 audit(1765136030.218:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2314.161151][T26172] loop8: AHDI p1 p2 p3 [ 2314.173774][ T30] audit: type=1326 audit(1765136030.218:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2314.204492][T26172] loop8: partition table partially beyond EOD, truncated [ 2314.226506][T26172] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2314.268184][ T30] audit: type=1326 audit(1765136030.218:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf701d567 code=0x7ffc0000 [ 2314.293342][T26172] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2314.343248][ T30] audit: type=1326 audit(1765136030.218:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26157 comm="syz.1.3903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2314.625057][T26049] Dev loop8: unable to read RDB block 7 [ 2314.821363][T26049] loop8: AHDI p1 p2 p3 [ 2314.825777][T26049] loop8: partition table partially beyond EOD, truncated [ 2314.833621][T26049] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2314.841510][T26049] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2314.881775][T26174] Dev loop8: unable to read RDB block 7 [ 2314.888130][T26174] loop8: AHDI p1 p2 p3 [ 2314.893760][T26174] loop8: partition table partially beyond EOD, truncated [ 2314.908064][T26174] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2314.916325][T26174] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2315.116065][T26186] tipc: Enabling of bearer rejected, already enabled [ 2315.217334][T26186] tipc: Enabling of bearer rejected, already enabled [ 2317.242663][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 2317.378435][T26205] hub 9-0:1.0: USB hub found [ 2317.378870][T26205] hub 9-0:1.0: 1 port detected [ 2317.786062][T26213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'. [ 2317.786170][T26213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'. [ 2320.259813][T26230] fuse: Bad value for 'group_id' [ 2320.267615][T26230] fuse: Bad value for 'group_id' [ 2320.399262][T26229] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2321.131067][T17539] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2321.323458][T17539] usb 3-1: Using ep0 maxpacket: 16 [ 2321.371560][T17539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2321.566473][T17539] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2321.590839][T17539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.667071][T17539] usb 3-1: config 0 descriptor?? [ 2322.854882][T17539] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2324.824371][T17539] usb 3-1: USB disconnect, device number 54 [ 2325.263607][T26260] loop8: detected capacity change from 0 to 7 [ 2325.369604][T26260] Dev loop8: unable to read RDB block 7 [ 2325.376347][T26260] loop8: AHDI p1 p2 p3 [ 2325.384752][T26260] loop8: partition table partially beyond EOD, truncated [ 2325.475159][T26260] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2325.483119][T26260] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2325.756906][T26049] Dev loop8: unable to read RDB block 7 [ 2325.763800][T26049] loop8: AHDI p1 p2 p3 [ 2325.768407][T26049] loop8: partition table partially beyond EOD, truncated [ 2325.779109][T26049] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2325.834222][T26049] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2325.920661][T26268] Dev loop8: unable to read RDB block 7 [ 2325.990510][T26268] loop8: AHDI p1 p2 p3 [ 2325.994872][T26268] loop8: partition table partially beyond EOD, truncated [ 2326.151437][T26268] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2326.222394][T26268] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2328.726427][T26306] IPv6: sit2: Disabled Multicast RS [ 2328.732027][T26306] sit2: entered allmulticast mode [ 2330.454040][T26307] tipc: Resetting bearer [ 2330.551202][T17539] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2330.710910][T17539] usb 4-1: Using ep0 maxpacket: 32 [ 2330.741118][T22882] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2330.750123][T17539] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2330.783670][T17539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.815925][T17539] usb 4-1: Product: syz [ 2330.833098][T17539] usb 4-1: Manufacturer: syz [ 2330.837800][T17539] usb 4-1: SerialNumber: syz [ 2330.872389][T17539] usb 4-1: config 0 descriptor?? [ 2331.052738][T22882] usb 1-1: config 0 has no interfaces? [ 2331.067734][T22882] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2331.087926][T22882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.111043][T22882] usb 1-1: Product: syz [ 2331.126945][T22882] usb 1-1: Manufacturer: syz [ 2331.141892][T22882] usb 1-1: SerialNumber: syz [ 2331.158406][T22882] usb 1-1: config 0 descriptor?? [ 2331.404260][T26311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2331.432220][T26311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2331.449480][T17539] airspy 4-1:0.0: Board ID: 00 [ 2331.461087][T17539] airspy 4-1:0.0: Firmware version: [ 2331.534735][T26316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3933'. [ 2331.912823][T17539] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 2331.935557][T17539] airspy 4-1:0.0: Registered as swradio24 [ 2331.947902][T17539] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2331.977239][T17539] usb 4-1: USB disconnect, device number 58 [ 2332.492108][T26331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3936'. [ 2333.917665][T17539] usb 1-1: USB disconnect, device number 32 [ 2335.465778][T26360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3941'. [ 2335.494416][T26360] hub 9-0:1.0: USB hub found [ 2335.509726][T26360] hub 9-0:1.0: 1 port detected [ 2336.172203][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 2336.172222][ T30] audit: type=1800 audit(1765136053.418:4274): pid=26364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3949" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 2336.733091][T26363] loop8: detected capacity change from 0 to 7 [ 2336.792279][T26363] Dev loop8: unable to read RDB block 7 [ 2336.842166][T26363] loop8: AHDI p1 p2 p3 [ 2336.847615][T26363] loop8: partition table partially beyond EOD, truncated [ 2336.924898][T26363] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2336.980744][T26363] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2337.144674][T26049] Dev loop8: unable to read RDB block 7 [ 2337.150783][T26049] loop8: AHDI p1 p2 p3 [ 2337.156438][T26049] loop8: partition table partially beyond EOD, truncated [ 2337.185758][T26049] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2337.213793][T26049] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2337.285537][T26366] Dev loop8: unable to read RDB block 7 [ 2337.380465][T26366] loop8: AHDI p1 p2 p3 [ 2337.386605][T26366] loop8: partition table partially beyond EOD, truncated [ 2337.428187][T26366] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2337.444670][T26366] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2338.193822][T26372] sctp: [Deprecated]: syz.4.3943 (pid 26372) Use of int in maxseg socket option. [ 2338.193822][T26372] Use struct sctp_assoc_value instead [ 2339.053002][T26388] nvme_fabrics: missing parameter 'transport=%s' [ 2339.063971][T26388] nvme_fabrics: missing parameter 'nqn=%s' [ 2339.256807][T26392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 2339.332804][T26392] team0: Port device dummy0 removed [ 2344.348370][T26443] IPv6: sit1: Disabled Multicast RS [ 2344.355450][T26443] sit1: entered allmulticast mode [ 2344.552051][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3957'. [ 2346.055529][T26462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3961'. [ 2346.112977][T26462] hub 9-0:1.0: USB hub found [ 2346.124864][T26462] hub 9-0:1.0: 1 port detected [ 2346.408108][T26464] netlink: 'syz.4.3962': attribute type 2 has an invalid length. [ 2348.936064][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3965'. [ 2349.094891][T26479] hub 9-0:1.0: USB hub found [ 2349.101289][T26479] hub 9-0:1.0: 1 port detected [ 2349.433386][T26489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 2349.443598][T26489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 2350.269609][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.276812][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2350.404282][T26498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3970'. [ 2350.899062][T26500] hub 9-0:1.0: USB hub found [ 2350.931378][T26500] hub 9-0:1.0: 1 port detected [ 2351.646755][T26512] IPv6: sit1: Disabled Multicast RS [ 2351.655149][T26512] sit1: entered allmulticast mode [ 2354.012938][T26531] netlink: 'syz.0.3976': attribute type 10 has an invalid length. [ 2354.047455][T26531] netlink: 'syz.0.3976': attribute type 10 has an invalid length. [ 2355.908201][T26548] netlink: 'syz.2.3979': attribute type 10 has an invalid length. [ 2355.918157][T26548] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2355.940451][T26548] bond0: (slave netdevsim0): Releasing backup interface [ 2355.979194][T26548] team0: Port device netdevsim0 added [ 2356.001878][T26550] netlink: 'syz.2.3979': attribute type 10 has an invalid length. [ 2356.081639][T26550] team0: Port device netdevsim0 removed [ 2356.137961][T26550] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2357.578570][T26559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3981'. [ 2357.679703][T26559] hub 9-0:1.0: USB hub found [ 2357.728202][T26559] hub 9-0:1.0: 1 port detected [ 2358.606180][T26568] nvme_fabrics: missing parameter 'transport=%s' [ 2358.620107][T26568] nvme_fabrics: missing parameter 'nqn=%s' [ 2359.384296][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'. [ 2359.394079][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'. [ 2360.785453][T26600] hub 9-0:1.0: USB hub found [ 2360.795559][T26600] hub 9-0:1.0: 1 port detected [ 2360.833265][T26601] fuse: Bad value for 'fd' [ 2361.934264][T26606] IPv6: sit1: Disabled Multicast RS [ 2361.945495][T26606] sit1: entered allmulticast mode [ 2363.504684][T26624] loop2: detected capacity change from 0 to 7 [ 2363.521387][T26624] Dev loop2: unable to read RDB block 7 [ 2363.527598][T26624] loop2: unable to read partition table [ 2363.535096][T26624] loop2: partition table beyond EOD, truncated [ 2363.542427][T26624] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2367.749798][T26658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3998'. [ 2367.764131][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'. [ 2368.777585][T26662] nvme_fabrics: missing parameter 'transport=%s' [ 2368.786574][T26662] nvme_fabrics: missing parameter 'nqn=%s' [ 2370.981718][T26689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4003'. [ 2372.984424][T26715] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4017'. [ 2373.089026][T26715] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4017'. [ 2374.415395][T26723] netlink: 'syz.1.4010': attribute type 4 has an invalid length. [ 2374.424754][T26723] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4010'. [ 2378.411057][T26722] delete_channel: no stack [ 2378.617464][T26750] nvme_fabrics: missing parameter 'transport=%s' [ 2378.617508][T26750] nvme_fabrics: missing parameter 'nqn=%s' [ 2378.951533][T26765] netlink: 'syz.1.4019': attribute type 5 has an invalid length. [ 2379.261722][T26770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4021'. [ 2382.882472][T26797] netlink: 'syz.4.4025': attribute type 10 has an invalid length. [ 2382.891872][T26797] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 2383.028838][T26797] team0: Port device netdevsim0 added [ 2383.041304][T26800] netlink: 'syz.4.4025': attribute type 10 has an invalid length. [ 2383.228340][T26800] team0: Port device netdevsim0 removed [ 2384.800011][T26817] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4028'. [ 2384.848710][T26817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'. [ 2385.235787][T26821] hub 9-0:1.0: USB hub found [ 2385.253751][T26821] hub 9-0:1.0: 1 port detected [ 2386.926909][T26834] hub 9-0:1.0: USB hub found [ 2386.935545][T26834] hub 9-0:1.0: 1 port detected [ 2387.530530][T26840] kAFS: unable to lookup cell '(,' [ 2390.905430][T26863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'. [ 2391.858980][T26874] netlink: 15976 bytes leftover after parsing attributes in process `syz.1.4050'. [ 2392.093377][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4039'. [ 2393.238100][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4042'. [ 2393.248241][T26886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4042'. [ 2394.026923][T26894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4043'. [ 2394.099961][T26895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4043'. [ 2394.252499][T26896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4044'. [ 2394.694821][T26904] hub 9-0:1.0: USB hub found [ 2394.701429][T26904] hub 9-0:1.0: 1 port detected [ 2395.904470][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4047'. [ 2397.503392][T26929] syz.4.4052 (26929): drop_caches: 2 [ 2399.081025][T17539] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2399.337629][T17539] usb 3-1: Using ep0 maxpacket: 32 [ 2399.365553][T17539] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2399.602657][T17539] usb 3-1: config 0 has no interface number 0 [ 2399.716484][T17539] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2399.761228][T17539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.816822][T17539] usb 3-1: Product: syz [ 2399.841494][T17539] usb 3-1: Manufacturer: syz [ 2399.887924][T17539] usb 3-1: SerialNumber: syz [ 2399.964817][T17539] usb 3-1: config 0 descriptor?? [ 2399.993964][T17539] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2400.023596][T17539] usb 3-1: selecting invalid altsetting 1 [ 2400.040076][T17539] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2400.119631][T17539] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2400.191581][T26938] tipc: Enabled bearer , priority 0 [ 2400.211622][T17539] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2400.229390][T17539] usb 3-1: media controller created [ 2400.342187][T26950] syzkaller0: entered promiscuous mode [ 2400.391252][T26950] syzkaller0: entered allmulticast mode [ 2400.415470][T17539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2400.524771][T26938] tipc: Resetting bearer [ 2400.543680][T17539] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2400.557110][T17539] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2400.587310][T17539] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2401.016834][T17539] usb 3-1: USB disconnect, device number 55 [ 2401.631156][T26968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 2401.672874][T26967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'. [ 2401.710008][T26967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'. [ 2401.729103][T26968] hub 9-0:1.0: USB hub found [ 2401.820817][T26968] hub 9-0:1.0: 1 port detected [ 2402.914378][T26978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4064'. [ 2404.371987][T26998] fuse: Unknown parameter '0xffffffffffffffff' [ 2406.749697][T27011] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2406.757511][T27011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2406.776591][T27011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2406.783733][T27011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2407.453974][T27029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4073'. [ 2408.346637][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'. [ 2408.452413][T27035] hub 9-0:1.0: USB hub found [ 2408.458801][T27035] hub 9-0:1.0: 1 port detected [ 2408.810481][T14617] Bluetooth: hci3: command 0x0406 tx timeout [ 2408.816699][T14617] Bluetooth: hci0: command 0x0406 tx timeout [ 2408.823988][T14617] Bluetooth: hci2: command 0x0406 tx timeout [ 2408.919543][T27040] hub 9-0:1.0: USB hub found [ 2408.931385][T27040] hub 9-0:1.0: 1 port detected [ 2408.951190][T22481] Bluetooth: hci4: command 0x0406 tx timeout [ 2410.897458][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4081'. [ 2411.214730][T27066] netlink: 'syz.0.4080': attribute type 1 has an invalid length. [ 2411.224626][T27066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2411.706513][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.719750][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.361702][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4084'. [ 2413.709002][ T30] audit: type=1326 audit(1765136130.908:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2413.908518][ T30] audit: type=1326 audit(1765136130.908:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.012737][T27084] bridge3: port 1(veth3) entered blocking state [ 2414.019404][T27084] bridge3: port 1(veth3) entered disabled state [ 2414.041373][T27084] veth3: entered allmulticast mode [ 2414.051241][T27084] veth3: entered promiscuous mode [ 2414.063734][T27086] bridge3: port 2(veth0_to_bond) entered blocking state [ 2414.073462][ T30] audit: type=1326 audit(1765136130.908:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.121589][T27086] bridge3: port 2(veth0_to_bond) entered disabled state [ 2414.140496][T27086] veth0_to_bond: entered allmulticast mode [ 2414.152819][T27086] veth0_to_bond: entered promiscuous mode [ 2414.184313][ T30] audit: type=1326 audit(1765136130.908:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.235493][ T30] audit: type=1326 audit(1765136130.908:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.426964][ T30] audit: type=1326 audit(1765136130.918:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.531175][ T30] audit: type=1326 audit(1765136130.918:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.641252][ T30] audit: type=1326 audit(1765136130.918:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.665649][ T30] audit: type=1326 audit(1765136130.918:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.701076][ T30] audit: type=1326 audit(1765136130.918:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27080 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2414.761295][T27090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4087'. [ 2414.793680][T27087] bridge3: port 3(veth5) entered blocking state [ 2414.802244][T27087] bridge3: port 3(veth5) entered disabled state [ 2414.809391][T27087] veth5: entered allmulticast mode [ 2414.818700][T27087] veth5: entered promiscuous mode [ 2415.300460][T25110] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2415.457855][T25110] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2415.476789][T25110] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2415.503842][T25110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2415.555182][T25110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2415.584963][T25110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2415.651404][T25110] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2415.661523][T25110] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2415.671997][T25110] usb 3-1: Product: syz [ 2415.684093][T25110] usb 3-1: Manufacturer: syz [ 2415.713181][T25110] cdc_wdm 3-1:1.0: skipping garbage [ 2415.828347][T25110] cdc_wdm 3-1:1.0: skipping garbage [ 2415.843274][T25110] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2415.850107][T25110] cdc_wdm 3-1:1.0: Unknown control protocol [ 2417.036046][T25988] usb 3-1: USB disconnect, device number 56 [ 2418.378044][T27130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4094'. [ 2418.794378][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4096'. [ 2422.374063][T27159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 2422.384914][T27159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 2422.618427][T27163] loop2: detected capacity change from 0 to 7 [ 2422.800719][T27163] Dev loop2: unable to read RDB block 7 [ 2422.806980][T27163] loop2: AHDI p1 p2 p3 [ 2422.812101][T27163] loop2: partition table partially beyond EOD, truncated [ 2422.820494][T27163] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2422.827985][T27163] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2425.356193][T27185] tipc: Resetting bearer [ 2425.593262][T27194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4107'. [ 2425.967562][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4106'. [ 2426.210888][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 2426.225782][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4108'. [ 2430.688439][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4114'. [ 2433.007357][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4118'. [ 2433.644889][T27260] netlink: 15976 bytes leftover after parsing attributes in process `syz.4.4120'. [ 2435.684669][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 2435.773844][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 2435.894145][T27278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4124'. [ 2437.486040][T27287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4125'. [ 2438.082636][T27291] syz.1.4126 (27291): drop_caches: 2 [ 2438.121386][T27297] netlink: 'syz.4.4127': attribute type 10 has an invalid length. [ 2438.132541][T27297] team0: Port device netdevsim0 added [ 2438.161787][T27297] netlink: 'syz.4.4127': attribute type 10 has an invalid length. [ 2438.307786][T27297] team0: Port device netdevsim0 removed [ 2439.332183][T27311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4130'. [ 2439.426683][T27313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4128'. [ 2440.016452][T27311] hub 9-0:1.0: USB hub found [ 2440.064797][T27311] hub 9-0:1.0: 1 port detected [ 2441.864159][T27331] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 2441.873853][T27331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2445.108683][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 2446.793435][T27370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4142'. [ 2446.804251][T27370] netlink: 294 bytes leftover after parsing attributes in process `syz.0.4142'. [ 2447.371877][T27370] netlink: 294 bytes leftover after parsing attributes in process `syz.0.4142'. [ 2447.518341][T27376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4143'. [ 2447.555761][T27376] hub 9-0:1.0: USB hub found [ 2447.561141][T27376] hub 9-0:1.0: 1 port detected [ 2448.297044][T27384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4145'. [ 2455.057646][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4160'. [ 2456.292023][T27459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4163'. [ 2456.514019][T27459] .`: (slave dummy0): Releasing backup interface [ 2456.931059][T27463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 2459.075963][T27478] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 2459.084371][T27478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2462.199211][T27510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4175'. [ 2462.564290][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 2465.505221][T27535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4181'. [ 2465.534339][T27535] Cannot find del_set index 0 as target [ 2466.604786][T27551] netlink: 15976 bytes leftover after parsing attributes in process `syz.3.4184'. [ 2468.470663][T27565] could not allocate digest TFM handle sha3-512-generic [ 2470.783396][T27591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4191'. [ 2472.834809][T25110] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 2472.959946][T25544] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2473.052687][T25110] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 2473.062327][T25110] usb 3-1: config 0 has no interface number 0 [ 2473.068727][T25110] usb 3-1: config 0 interface 160 has no altsetting 0 [ 2473.106559][T25110] usb 3-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 2473.121233][T25110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.135468][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2473.135923][T25110] usb 3-1: Product: syz [ 2473.143172][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2473.153766][T25110] usb 3-1: Manufacturer: syz [ 2473.172431][T25110] usb 3-1: SerialNumber: syz [ 2473.224454][T25110] usb 3-1: config 0 descriptor?? [ 2473.256056][T25110] usb-storage 3-1:0.160: USB Mass Storage device detected [ 2473.282436][T25544] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2473.291925][T25544] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2473.362248][T25544] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2473.489318][T25544] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2473.636120][T25544] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2473.672500][T25544] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2473.694499][T25544] usb 4-1: Product: syz [ 2473.713475][T25544] usb 4-1: Manufacturer: syz [ 2473.775345][T25544] cdc_wdm 4-1:1.0: skipping garbage [ 2473.802329][T25544] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2474.084159][T25988] usb 4-1: USB disconnect, device number 59 [ 2474.506071][T27607] netlink: 'syz.3.4193': attribute type 4 has an invalid length. [ 2474.522376][T27607] netlink: 'syz.3.4193': attribute type 4 has an invalid length. [ 2475.884570][T17539] usb 3-1: USB disconnect, device number 57 [ 2479.112306][T27659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'. [ 2479.507208][T27671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4207'. [ 2482.370210][T27698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4212'. [ 2483.412280][T27708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4214'. [ 2483.474275][T27708] hub 9-0:1.0: USB hub found [ 2483.481150][T27708] hub 9-0:1.0: 1 port detected [ 2486.097390][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4219'. [ 2486.962596][T27722] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2489.776433][T27773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4223'. [ 2489.877720][T27773] tipc: Resetting bearer [ 2489.891990][T27773] tipc: Resetting bearer [ 2492.702126][T27802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4229'. [ 2492.826952][T27804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4230'. [ 2495.175712][T27826] gretap1: entered promiscuous mode [ 2495.523650][T27826] random: crng reseeded on system resumption [ 2496.963380][T27840] could not allocate digest TFM handle sha3-512-generic [ 2497.900185][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4240'. [ 2497.910078][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4240'. [ 2500.800464][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4246'. [ 2500.836153][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4245'. [ 2503.045697][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 2503.084298][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 2506.638532][T27932] wg1: entered promiscuous mode [ 2506.751187][T27932] wg1: entered allmulticast mode [ 2507.461232][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'. [ 2507.486695][T27942] hub 9-0:1.0: USB hub found [ 2507.492090][T27942] hub 9-0:1.0: 1 port detected [ 2510.501475][T27965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4261'. [ 2510.626320][T27965] hub 9-0:1.0: USB hub found [ 2510.633378][T27965] hub 9-0:1.0: 1 port detected [ 2513.354400][T27989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4268'. [ 2515.562228][T28009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4272'. [ 2515.588965][T28009] hub 9-0:1.0: USB hub found [ 2515.590015][T28009] hub 9-0:1.0: 1 port detected [ 2517.023414][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4276'. [ 2517.043582][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4276'. [ 2518.232699][T28031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4277'. [ 2519.047664][T28046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 2519.093442][T28046] hub 9-0:1.0: USB hub found [ 2519.101234][T28046] hub 9-0:1.0: 1 port detected [ 2519.761029][T28053] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4281'. [ 2519.885178][T28056] netlink: 'syz.3.4282': attribute type 4 has an invalid length. [ 2519.893805][T28056] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4282'. [ 2519.928019][T28051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2520.097087][T28057] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4282'. [ 2520.116599][T28057] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4282'. [ 2523.731872][T28083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4289'. [ 2523.819216][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4287'. [ 2523.942436][T28087] hub 9-0:1.0: USB hub found [ 2523.981178][T28087] hub 9-0:1.0: 1 port detected [ 2525.848165][T28103] fuse: Bad value for 'fd' [ 2526.637819][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4292'. [ 2526.777941][T28113] tipc: Resetting bearer [ 2527.316892][T28119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4294'. [ 2528.345633][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4298'. [ 2531.248816][T28161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4305'. [ 2531.274416][T28160] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4304'. [ 2531.296633][T28160] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4304'. [ 2531.388955][T28160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2532.507780][T28166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 2532.583129][T28166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 2533.896018][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4309'. [ 2533.935244][T28183] hub 9-0:1.0: USB hub found [ 2533.944493][T28183] hub 9-0:1.0: 1 port detected [ 2534.585629][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.616596][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2535.219612][T28196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4312'. [ 2535.258673][T28196] tipc: Resetting bearer [ 2536.863603][T28207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4314'. [ 2537.335031][T28216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4313'. [ 2537.554621][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4317'. [ 2537.594106][T28221] hub 9-0:1.0: USB hub found [ 2537.640773][T28221] hub 9-0:1.0: 1 port detected [ 2540.321702][T25110] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2540.410755][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 2540.521330][T25110] usb 3-1: Using ep0 maxpacket: 16 [ 2540.532188][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 2540.542472][T25110] usb 3-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 2540.561772][T25110] usb 3-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 2540.656682][T25110] usb 3-1: config 252 has no interface number 0 [ 2540.667445][T25110] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2540.687724][T25110] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2540.705638][T25110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.741349][T25110] usb 3-1: Product: syz [ 2540.752602][T25110] usb 3-1: Manufacturer: syz [ 2540.759078][T25110] usb 3-1: SerialNumber: syz [ 2540.851806][T25110] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2541.263666][T25988] usb 3-1: USB disconnect, device number 58 [ 2541.276068][ T3545] usb 3-1: Failed to submit usb control message: -71 [ 2541.299456][ T3545] usb 3-1: unable to send the bmi data to the device: -71 [ 2541.379344][ T3545] usb 3-1: unable to get target info from device [ 2541.386393][ T3545] usb 3-1: could not get target info (-71) [ 2541.393276][ T3545] usb 3-1: could not probe fw (-71) [ 2543.285740][T28266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'. [ 2543.323560][T28266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'. [ 2544.428426][T28278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4326'. [ 2544.513415][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4328'. [ 2544.533186][T28277] hub 9-0:1.0: USB hub found [ 2544.538591][T28277] hub 9-0:1.0: 1 port detected [ 2545.423684][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4330'. [ 2547.636739][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 2547.669436][T28302] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4334'. [ 2547.683830][T28302] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4334'. [ 2547.992963][T25988] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2548.151223][T25988] usb 3-1: Using ep0 maxpacket: 32 [ 2548.312481][T25988] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2548.331083][T25988] usb 3-1: config 0 has no interface number 0 [ 2548.351202][T25988] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2548.363879][T25988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2548.400091][T25988] usb 3-1: Product: syz [ 2548.409580][T25988] usb 3-1: Manufacturer: syz [ 2548.432413][T25988] usb 3-1: SerialNumber: syz [ 2548.465117][T25988] usb 3-1: config 0 descriptor?? [ 2548.505203][T25988] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2548.772753][T25988] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2548.885647][T25988] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2550.471562][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2550.537541][T25988] usb 3-1: USB disconnect, device number 59 [ 2550.568366][T25988] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2550.661979][T25988] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2550.695259][T25988] quatech2 3-1:0.51: device disconnected [ 2551.237790][T25544] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2551.451264][T25544] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2551.462052][T25544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2551.478530][T25544] usb 4-1: Product: syz [ 2551.502525][T25544] usb 4-1: Manufacturer: syz [ 2551.526125][T25544] usb 4-1: SerialNumber: syz [ 2551.766261][T25544] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2551.844978][T25543] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2552.514549][T25544] usb 4-1: USB disconnect, device number 60 [ 2552.532646][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4342'. [ 2552.624388][T28339] hub 9-0:1.0: USB hub found [ 2552.649108][T28339] hub 9-0:1.0: 1 port detected [ 2552.900618][T25543] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2552.908417][T25543] ath9k_htc: Failed to initialize the device [ 2552.924978][T25544] usb 4-1: ath9k_htc: USB layer deinitialized [ 2553.218786][T28353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4344'. [ 2553.830451][T28353] tipc: Resetting bearer [ 2553.891425][T28353] tipc: Resetting bearer [ 2555.942170][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4358'. [ 2556.149207][T28373] hub 9-0:1.0: USB hub found [ 2556.155636][T28373] hub 9-0:1.0: 1 port detected [ 2556.960693][T25544] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2557.229952][T25544] usb 3-1: Using ep0 maxpacket: 8 [ 2557.238451][T25544] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2557.382903][T25544] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 2557.407314][T25544] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2557.443849][T25544] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 2557.461377][T25544] usb 3-1: config 8 has no interface number 0 [ 2557.520118][T25544] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 2557.550933][T25544] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2557.582976][T25544] usb 3-1: config 8 interface 24 has no altsetting 0 [ 2557.622438][T25544] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 2557.742270][T25544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2557.751345][T25544] usb 3-1: Product: syz [ 2557.757363][T25544] usb 3-1: Manufacturer: syz [ 2557.762362][T25544] usb 3-1: SerialNumber: syz [ 2557.813783][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4352'. [ 2557.826951][T28391] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4352'. [ 2557.837377][T28391] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4352'. [ 2558.273100][T28377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.289991][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4354'. [ 2558.786691][T28377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2558.838441][T28377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2558.852117][T28377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.715068][T25544] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 2559.763647][T25544] vmk80xx 3-1:8.24: probe with driver vmk80xx failed with error -22 [ 2560.028797][T25544] usb 3-1: USB disconnect, device number 60 [ 2562.487741][T17539] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2562.790869][T17539] usb 3-1: Using ep0 maxpacket: 32 [ 2562.799105][T17539] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 2562.808347][T17539] usb 3-1: config 9 has no interface number 0 [ 2562.832013][T17539] usb 3-1: config 9 interface 37 has no altsetting 0 [ 2562.903874][T17539] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 2562.913599][T17539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.018749][T17539] usb 3-1: Product: syz [ 2563.024670][T17539] usb 3-1: Manufacturer: syz [ 2563.039387][T17539] usb 3-1: SerialNumber: syz [ 2563.397708][T28435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4363'. [ 2563.455131][T28435] tipc: Resetting bearer [ 2565.058215][T17539] usb 3-1: can't set config #9, error -71 [ 2565.103390][T17539] usb 3-1: USB disconnect, device number 61 [ 2565.446110][T28445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4365'. [ 2565.476845][T28445] hub 9-0:1.0: USB hub found [ 2565.483152][T28445] hub 9-0:1.0: 1 port detected [ 2567.208402][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2567.208550][ T30] audit: type=1326 audit(1765136284.278:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2567.524585][ T30] audit: type=1326 audit(1765136284.278:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2567.611143][ T30] audit: type=1326 audit(1765136284.288:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2567.764763][ T30] audit: type=1326 audit(1765136284.288:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2567.952171][ T30] audit: type=1326 audit(1765136284.288:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2568.050815][ T30] audit: type=1326 audit(1765136284.288:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2568.332725][ T30] audit: type=1326 audit(1765136284.288:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2568.380494][ T30] audit: type=1326 audit(1765136284.288:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2568.450371][ T30] audit: type=1326 audit(1765136284.288:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2568.565087][ T30] audit: type=1326 audit(1765136284.288:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28460 comm="syz.0.4369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2571.805557][T28500] fuse: Unknown parameter 'bX' [ 2574.041459][T28516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4375'. [ 2574.995772][T28527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 2575.096295][T28527] hub 9-0:1.0: USB hub found [ 2575.147797][T28530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4381'. [ 2575.210836][T28527] hub 9-0:1.0: 1 port detected [ 2576.063163][T28538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4383'. [ 2579.453350][T28568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 2579.467560][T28568] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4389'. [ 2581.420488][T28580] 8021q: adding VLAN 0 to HW filter on device team0 [ 2581.540428][T28580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2582.758185][T28599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 2582.813265][T28599] hub 9-0:1.0: USB hub found [ 2582.835731][T28599] hub 9-0:1.0: 1 port detected [ 2583.970442][T25543] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2584.170601][T25543] usb 3-1: Using ep0 maxpacket: 32 [ 2584.199268][T25543] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 2584.214222][T25543] usb 3-1: config 9 has no interface number 0 [ 2584.223847][T25543] usb 3-1: config 9 interface 37 has no altsetting 0 [ 2584.246199][T28614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4397'. [ 2584.290899][T28614] hub 9-0:1.0: USB hub found [ 2584.297197][T28614] hub 9-0:1.0: 1 port detected [ 2584.362516][T25543] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 2584.373529][T25543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.422869][T25543] usb 3-1: Product: Ñ… [ 2584.480981][T25543] usb 3-1: Manufacturer: 틙䎞ì–䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费ä…ç¿ç¼³à°»ì‘‰é½®æ¢“ଟ純é æœä·¤â¾£å¤‚å‡ì¯´ï¨¹ëŒ±ì‘€ä«·éŒ¶ï¯½ïƒ¶î¨£éŒ”腮䪖떜怸ᾭ桔䅹闢ë ï‚‰è’몙텞ᒢȉ或篣턄湊诌귇 [ 2584.610127][T25543] usb 3-1: SerialNumber: syz [ 2584.903023][T28617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4398'. [ 2587.145893][T25543] gspca_main: spca506-2.14.0 probing 0734:043b [ 2587.532762][T25543] usb 3-1: USB disconnect, device number 62 [ 2588.479329][T28651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2591.643452][T28678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4408'. [ 2592.255300][T28678] hub 9-0:1.0: USB hub found [ 2592.400520][T28678] hub 9-0:1.0: 1 port detected [ 2593.614629][T28691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4411'. [ 2593.935221][T28697] hub 9-0:1.0: USB hub found [ 2593.985726][T28697] hub 9-0:1.0: 1 port detected [ 2594.093156][T28699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4413'. [ 2594.286044][T28704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4414'. [ 2594.407241][T28699] hub 9-0:1.0: USB hub found [ 2594.413366][T28699] hub 9-0:1.0: 1 port detected [ 2594.902833][T28714] misc userio: Invalid payload size [ 2596.025136][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2596.057901][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2598.603648][T28734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4421'. [ 2598.992390][T28734] hub 9-0:1.0: USB hub found [ 2599.027738][T28745] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 2599.038128][T28745] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 2599.148708][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2599.148729][ T30] audit: type=1800 audit(1765136316.378:4362): pid=28749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4424" name="nullb0" dev="devtmpfs" ino=3847 res=0 errno=0 [ 2599.346073][T28734] hub 9-0:1.0: 1 port detected [ 2599.900976][T28740] could not allocate digest TFM handle sha3-512-generic [ 2602.427968][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4430'. [ 2602.449571][T28783] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4430'. [ 2602.462512][T28783] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4430'. [ 2602.544099][T28788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4429'. [ 2602.594210][T28788] hub 9-0:1.0: USB hub found [ 2602.601526][T28788] hub 9-0:1.0: 1 port detected [ 2602.822929][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4432'. [ 2603.407053][ T30] audit: type=1326 audit(1765136320.648:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2603.712455][ T30] audit: type=1326 audit(1765136320.658:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2603.753589][ T30] audit: type=1326 audit(1765136320.658:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2603.787975][ T30] audit: type=1326 audit(1765136320.658:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2603.814713][ T30] audit: type=1326 audit(1765136320.658:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2603.939812][ T30] audit: type=1326 audit(1765136320.658:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.243841][ T30] audit: type=1326 audit(1765136320.658:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.309796][ T30] audit: type=1326 audit(1765136320.658:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.387927][ T30] audit: type=1326 audit(1765136320.658:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.494955][ T30] audit: type=1326 audit(1765136320.658:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.557713][ T30] audit: type=1326 audit(1765136320.658:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.651175][ T30] audit: type=1326 audit(1765136320.658:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.731346][ T30] audit: type=1326 audit(1765136320.658:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.798834][ T30] audit: type=1326 audit(1765136320.658:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.872565][ T30] audit: type=1326 audit(1765136320.658:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2604.962911][ T30] audit: type=1326 audit(1765136320.658:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28795 comm="syz.1.4433" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2606.162664][T28821] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 2609.750004][T28851] vivid-009: ================= START STATUS ================= [ 2609.770915][T28851] vivid-009: FM Deviation: 75000 [ 2609.820433][T28851] vivid-009: ================== END STATUS ================== [ 2610.452130][T28858] @: renamed from vlan0 [ 2612.503423][T28868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4447'. [ 2612.848211][T28871] ip6erspan0: left promiscuous mode [ 2615.139362][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 2615.153973][T28888] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4452'. [ 2619.200973][T17539] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2619.370660][T17539] usb 4-1: Using ep0 maxpacket: 16 [ 2619.386830][T17539] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 2619.419829][T17539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.488956][T17539] usb 4-1: Product: syz [ 2619.722696][T17539] usb 4-1: Manufacturer: syz [ 2619.727425][T17539] usb 4-1: SerialNumber: syz [ 2619.793967][T17539] usb 4-1: config 0 descriptor?? [ 2619.862155][T17539] usb 4-1: bad CDC descriptors [ 2620.074228][T28921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2620.087686][T28921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2620.103863][T28921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2620.114044][T28921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.554741][T28938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2621.565912][T28938] 8021q: adding VLAN 0 to HW filter on device team0 [ 2621.627301][T28938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2622.185656][T25988] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2622.479667][T25988] usb 3-1: Using ep0 maxpacket: 32 [ 2622.564974][T25988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2622.638238][T25988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2622.675715][T17539] usb 4-1: USB disconnect, device number 61 [ 2622.778005][T25988] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2622.832061][T25988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2622.861520][T25988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2622.912276][T25988] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2622.925751][T25988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.997409][T25988] usb 3-1: Product: syz [ 2623.003179][T25988] usb 3-1: Manufacturer: syz [ 2623.007927][T25988] usb 3-1: SerialNumber: syz [ 2623.073856][T25988] usb 3-1: config 0 descriptor?? [ 2623.090415][T28942] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2623.117632][T25988] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input75 [ 2623.138570][ T5182] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2623.205889][ T5182] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2623.758469][ T5182] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2623.831935][ T5182] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2624.070786][ T5182] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2624.192776][T28653] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2624.372789][ T5182] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2624.432381][ T5182] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2624.695431][T25988] usb 3-1: USB disconnect, device number 63 [ 2625.100039][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2625.100062][ T30] audit: type=1326 audit(1765136342.318:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.148057][ T30] audit: type=1326 audit(1765136342.318:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.233056][ T30] audit: type=1326 audit(1765136342.318:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.268629][ T30] audit: type=1326 audit(1765136342.318:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.321181][ T30] audit: type=1326 audit(1765136342.318:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.367204][ T30] audit: type=1326 audit(1765136342.318:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.424400][ T30] audit: type=1326 audit(1765136342.318:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.536916][ T30] audit: type=1326 audit(1765136342.318:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.600996][ T30] audit: type=1326 audit(1765136342.338:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2625.772985][ T30] audit: type=1326 audit(1765136342.338:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28961 comm="syz.2.4465" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2631.300750][T29019] program syz.1.4478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2632.714674][T29029] netlink: 'syz.2.4476': attribute type 2 has an invalid length. [ 2632.826012][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2632.826034][ T30] audit: type=1326 audit(1765136350.068:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29022 comm="syz.2.4476" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x0 [ 2633.834099][T29033] veth1_to_bond: entered allmulticast mode [ 2633.850411][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4479'. [ 2634.156759][T29041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 2634.253264][T29044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4481'. [ 2637.401516][T29032] veth1_to_bond: left allmulticast mode [ 2642.169483][T29115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 2642.877828][T29112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2644.086836][T29135] netlink: 'syz.1.4499': attribute type 29 has an invalid length. [ 2645.138768][T29143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4500'. [ 2649.191965][T29177] netdevsim netdevsim0 : renamed from netdevsim0 [ 2649.209160][T29177] netlink: 'syz.0.4507': attribute type 10 has an invalid length. [ 2649.311128][T29163] ip6t_REJECT: ECHOREPLY is not supported [ 2649.691056][T25988] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2649.873938][T25988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2649.886606][T25988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2650.039886][T25988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2650.077438][T25988] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 2650.121847][T25988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.176047][T25988] usb 3-1: config 0 descriptor?? [ 2653.121659][T25988] usbhid 3-1:0.0: can't add hid device: -71 [ 2653.128139][T25988] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2653.213775][T25988] usb 3-1: USB disconnect, device number 64 [ 2653.863885][T29194] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2653.877972][T14617] Bluetooth: hci0: command 0x0406 tx timeout [ 2654.293794][T29194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2654.354625][T29194] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2654.361788][T29194] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2654.508250][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 2656.010441][T14617] Bluetooth: hci2: command 0x0406 tx timeout [ 2656.410719][T14617] Bluetooth: hci3: command 0x0406 tx timeout [ 2656.411421][T22481] Bluetooth: hci4: command 0x0406 tx timeout [ 2656.683911][T29241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4520'. [ 2656.716925][T29241] hub 9-0:1.0: USB hub found [ 2656.724704][T29241] hub 9-0:1.0: 1 port detected [ 2657.465570][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2657.475201][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2662.942463][T29307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4535'. [ 2663.822800][T29315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4536'. [ 2664.123245][T29315] hub 9-0:1.0: USB hub found [ 2664.173148][T29315] hub 9-0:1.0: 1 port detected [ 2664.386431][T29320] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2664.493581][T29320] netlink: 'syz.0.4537': attribute type 6 has an invalid length. [ 2665.014404][T29325] program syz.3.4538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2666.489159][T29345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'. [ 2667.256995][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4542'. [ 2667.946849][T29354] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x31384142, 8, 0, 0, 0) [ 2667.986272][T29354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4543'. [ 2670.558927][T29376] netlink: 'syz.4.4548': attribute type 2 has an invalid length. [ 2670.568839][T29376] openvswitch: : Dropping previously announced user features [ 2672.212406][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4551'. [ 2672.573095][T29398] ip6t_REJECT: ECHOREPLY is not supported [ 2675.732445][T29416] fuse: Unknown parameter 'æÞü0x0000000000000004' [ 2676.831821][T29426] program syz.0.4557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2678.935219][T29442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4569'. [ 2679.107870][T29444] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x31384142, 8, 0, 0, 0) [ 2679.186128][T29444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4558'. [ 2682.151001][T29463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4562'. [ 2682.154067][T29463] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4562'. [ 2682.154141][T29463] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4562'. [ 2686.138336][T29496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4568'. [ 2690.742933][T29536] veth1_to_bond: entered allmulticast mode [ 2691.236952][T29529] veth1_to_bond: left allmulticast mode [ 2693.088382][T29553] 8021q: adding VLAN 0 to HW filter on device .` [ 2693.222565][T29553] 8021q: adding VLAN 0 to HW filter on device team0 [ 2693.278979][T29553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2693.500440][T29563] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4582'. [ 2696.002767][T29585] netdevsim netdevsim1 : renamed from netdevsim0 [ 2696.640035][T29585] netlink: 'syz.1.4586': attribute type 10 has an invalid length. [ 2699.041673][T29612] veth1_to_bond: entered allmulticast mode [ 2700.263801][T29607] veth1_to_bond: left allmulticast mode [ 2700.449264][T29617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'. [ 2701.987772][T29634] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 2702.894611][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4597'. [ 2703.026197][T29643] hub 9-0:1.0: USB hub found [ 2703.033501][T29643] hub 9-0:1.0: 1 port detected [ 2703.949025][T29654] fuse: Bad value for 'fd' [ 2704.253396][T25543] hid_parser_main: 7 callbacks suppressed [ 2704.253416][T25543] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 2704.301644][T25543] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2708.088093][T29688] veth1_to_bond: entered allmulticast mode [ 2708.590050][T29690] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2708.831612][T29685] veth1_to_bond: left allmulticast mode [ 2709.655676][T29707] ip6t_REJECT: ECHOREPLY is not supported [ 2710.743150][T29708] loop8: detected capacity change from 0 to 7 [ 2710.783590][T29516] Dev loop8: unable to read RDB block 7 [ 2710.789320][T29516] loop8: AHDI p1 p2 p3 [ 2710.890878][T29516] loop8: partition table partially beyond EOD, truncated [ 2711.022288][T29516] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2711.109873][T29516] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2711.131843][T29708] Dev loop8: unable to read RDB block 7 [ 2711.158277][T29708] loop8: AHDI p1 p2 p3 [ 2711.260426][T29708] loop8: partition table partially beyond EOD, truncated [ 2711.299523][T29708] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2711.337399][T29708] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2711.396922][T29709] Dev loop8: unable to read RDB block 7 [ 2711.461071][T29709] loop8: AHDI p1 p2 p3 [ 2711.470965][T29709] loop8: partition table partially beyond EOD, truncated [ 2711.481100][T29709] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2711.487996][T29709] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2712.333686][T29725] fuse: Unknown parameter 'æÞü0x0000000000000004' [ 2714.763483][T29751] netlink: 'syz.1.4617': attribute type 10 has an invalid length. [ 2714.800291][T29751] netlink: 'syz.1.4617': attribute type 10 has an invalid length. [ 2714.913050][T29751] team0: Port device  removed [ 2714.996148][T29751] .`: (slave ): Enslaving as an active interface with an up link [ 2715.722633][T29757] ip6t_REJECT: ECHOREPLY is not supported [ 2716.381153][T29765] veth1_to_bond: entered allmulticast mode [ 2716.468163][T29762] veth1_to_bond: left allmulticast mode [ 2716.552821][T29771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4623'. [ 2716.596689][T29771] hub 9-0:1.0: USB hub found [ 2716.602093][T29771] hub 9-0:1.0: 1 port detected [ 2718.895340][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2718.901915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2722.013144][T25988] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2722.171046][T25988] usb 3-1: Using ep0 maxpacket: 8 [ 2722.187196][T25988] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2722.199030][T25988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.361397][T25988] usb 3-1: Product: syz [ 2722.365751][T25988] usb 3-1: Manufacturer: syz [ 2722.380955][T25988] usb 3-1: SerialNumber: syz [ 2722.387750][T25988] usb 3-1: config 0 descriptor?? [ 2722.517813][T25988] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2723.561471][T25988] gspca_sonixj: reg_w1 err -110 [ 2723.569412][T25988] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 2723.631516][T25543] usb 3-1: USB disconnect, device number 65 [ 2724.046883][T29851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4639'. [ 2724.083814][T29851] hub 9-0:1.0: USB hub found [ 2724.095144][T29851] hub 9-0:1.0: 1 port detected [ 2726.237583][T29871] binder: BINDER_SET_CONTEXT_MGR already set [ 2726.360103][T29871] binder: 29868:29871 ioctl 4018620d 80000040 returned -16 [ 2726.599906][T29878] macsec0: entered promiscuous mode [ 2726.610057][T29878] macsec0: left promiscuous mode [ 2726.622505][T29878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4645'. [ 2729.227437][T29902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4651'. [ 2731.937074][T29926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4655'. [ 2731.973344][T29926] hub 9-0:1.0: USB hub found [ 2731.978931][T29926] hub 9-0:1.0: 1 port detected [ 2732.514580][T29937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4657'. [ 2733.378348][T29948] veth1_to_bond: entered allmulticast mode [ 2733.541056][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4659'. [ 2737.167446][T29946] veth1_to_bond: left allmulticast mode [ 2737.346703][T29988] fuse: Unknown parameter 'æÞü0x0000000000000004' [ 2739.517877][T30008] binder: 30004:30008 ioctl c018620c 800002c0 returned -1 [ 2742.001739][T30037] veth1_to_bond: entered allmulticast mode [ 2742.050545][T25544] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 2742.061561][T30039] QAT: failed to copy from user. [ 2742.149965][T30037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4677'. [ 2742.264688][T25544] usb 3-1: config 0 has an invalid interface number: 139 but max is 0 [ 2742.264715][T25544] usb 3-1: config 0 has no interface number 0 [ 2742.264746][T25544] usb 3-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2742.264762][T25544] usb 3-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 2742.264782][T25544] usb 3-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 2742.264804][T25544] usb 3-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2742.269697][T25544] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 2742.269724][T25544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2742.269740][T25544] usb 3-1: Product: syz [ 2742.269753][T25544] usb 3-1: Manufacturer: syz [ 2742.269766][T25544] usb 3-1: SerialNumber: syz [ 2742.288355][T25544] usb 3-1: config 0 descriptor?? [ 2742.303589][T30029] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2742.303677][T30029] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2742.800464][T30042] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2742.807530][T30042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2742.903512][T30042] vhci_hcd vhci_hcd.0: Device attached [ 2743.343448][T30047] vhci_hcd: connection closed [ 2743.343753][T16885] vhci_hcd vhci_hcd.0: stop threads [ 2743.364591][T16885] vhci_hcd vhci_hcd.0: release socket [ 2743.512525][T16885] vhci_hcd vhci_hcd.0: disconnect device [ 2743.798865][T25544] mct_u232 3-1:0.139: MCT U232 converter detected [ 2743.832999][T25544] usb 3-1: MCT U232 converter now attached to ttyUSB0 [ 2744.018105][T25544] usb 3-1: USB disconnect, device number 66 [ 2744.140591][T25544] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 2744.166833][T25544] mct_u232 3-1:0.139: device disconnected [ 2744.804793][T30063] veth1_to_bond: entered allmulticast mode [ 2746.114006][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4680'. [ 2746.868591][T30036] veth1_to_bond: left allmulticast mode [ 2747.741847][T30076] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4684'. [ 2748.362066][T30061] veth1_to_bond: left allmulticast mode [ 2750.711747][T30097] futex_wake_op: syz.3.4687 tries to shift op by 32; fix this program [ 2751.073479][T30095] netlink: 'syz.1.4688': attribute type 20 has an invalid length. [ 2751.512621][T30093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4687'. [ 2751.523882][T30093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4687'. [ 2751.535173][T30093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4687'. [ 2753.149552][T30114] syz.4.4690 (30114): drop_caches: 2 [ 2754.459345][T30125] veth1_to_bond: entered allmulticast mode [ 2754.471033][T30125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4694'. [ 2757.649067][T30124] veth1_to_bond: left allmulticast mode [ 2761.444435][T30186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4705'. [ 2763.327673][T30205] IPVS: stopping backup sync thread 20860 ... [ 2764.964032][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4712'. [ 2766.699780][T30242] ip6t_REJECT: ECHOREPLY is not supported [ 2770.051021][T30269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4721'. [ 2770.764128][T30276] futex_wake_op: syz.4.4719 tries to shift op by 32; fix this program [ 2770.846565][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'. [ 2770.870024][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'. [ 2770.885188][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'. [ 2771.940436][T25544] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2772.127640][T25544] usb 4-1: Using ep0 maxpacket: 32 [ 2772.204260][T25544] usb 4-1: config 42 has an invalid interface number: 199 but max is 0 [ 2772.220280][T25544] usb 4-1: config 42 has an invalid interface number: 1 but max is 0 [ 2772.316083][T25544] usb 4-1: config 42 has 2 interfaces, different from the descriptor's value: 1 [ 2772.493983][T25544] usb 4-1: config 42 has no interface number 0 [ 2772.513037][T25544] usb 4-1: config 42 interface 199 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2772.584904][T25544] usb 4-1: config 42 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2772.640429][T25544] usb 4-1: config 42 interface 199 has no altsetting 0 [ 2772.660293][T25544] usb 4-1: config 42 interface 1 has no altsetting 0 [ 2772.693709][T25544] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=19.cb [ 2772.703939][T25544] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.724004][T25544] usb 4-1: Product: syz [ 2772.774649][T25544] usb 4-1: Manufacturer: syz [ 2772.805048][T25544] usb 4-1: SerialNumber: syz [ 2775.362639][T30316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4730'. [ 2775.433107][T30316] hub 9-0:1.0: USB hub found [ 2775.438870][T30316] hub 9-0:1.0: 1 port detected [ 2776.491330][T30327] random: crng reseeded on system resumption [ 2777.100859][T25544] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2777.259160][T25544] snd-usb-audio 4-1:42.1: probe with driver snd-usb-audio failed with error -2 [ 2777.414274][T30180] udevd[30180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:42.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2777.435598][T25544] usb 4-1: USB disconnect, device number 62 [ 2777.953643][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4733'. [ 2778.735014][T30344] batadv_slave_0: entered promiscuous mode [ 2778.759997][T30344] batadv_slave_0: entered allmulticast mode [ 2778.772187][T30344] netlink: 'syz.0.4736': attribute type 8 has an invalid length. [ 2780.393242][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2780.399757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2781.860873][T30372] ksmbd: Unknown IPC event: 0, ignore. [ 2783.306333][T30386] IPVS: set_ctl: invalid protocol: 308 172.20.20.187:27 [ 2783.655626][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'. [ 2783.735160][T30391] hub 9-0:1.0: USB hub found [ 2783.742249][T30391] hub 9-0:1.0: 1 port detected [ 2784.552004][T30405] QAT: failed to copy from user. [ 2784.719234][ T30] audit: type=1326 audit(1765136501.868:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2784.925463][ T30] audit: type=1326 audit(1765136501.868:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687612][ T30] audit: type=1326 audit(1765136501.868:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687685][ T30] audit: type=1326 audit(1765136501.878:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687738][ T30] audit: type=1326 audit(1765136501.878:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687792][ T30] audit: type=1326 audit(1765136501.898:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687845][ T30] audit: type=1326 audit(1765136501.908:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687896][ T30] audit: type=1326 audit(1765136501.928:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687948][ T30] audit: type=1326 audit(1765136501.928:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2785.687999][ T30] audit: type=1326 audit(1765136501.928:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30396 comm="syz.4.4747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2786.918334][T30395] tipc: Resetting bearer [ 2789.673984][T30448] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4753'. [ 2791.098613][T30456] input: syz1 as /devices/virtual/input/input76 [ 2791.984872][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4758'. [ 2792.023274][T30471] hub 9-0:1.0: USB hub found [ 2792.031016][T30471] hub 9-0:1.0: 1 port detected [ 2793.503669][T30483] xt_hashlimit: max too large, truncated to 1048576 [ 2793.710487][T25544] psmouse serio5: Failed to reset mouse on : -5 [ 2794.147806][T30496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4764'. [ 2794.218971][T30493] hub 9-0:1.0: USB hub found [ 2794.225776][T30493] hub 9-0:1.0: 1 port detected [ 2795.587781][T30500] block device autoloading is deprecated and will be removed. [ 2796.703892][T30519] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4768'. [ 2796.747637][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4768'. [ 2797.621876][T25544] misc userio: Buffer overflowed, userio client isn't keeping up [ 2798.232965][T30525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4770'. [ 2798.415010][T30526] bond5: option arp_interval: invalid value (18446744073709551615) [ 2798.430938][T30526] bond5: option arp_interval: allowed values 0 - 2147483647 [ 2798.483127][T30526] bond5 (unregistering): Released all slaves [ 2798.771197][T25544] input: PS/2 Generic Mouse as /devices/serio5/input/input77 [ 2799.164522][T25544] psmouse serio5: Failed to enable mouse on [ 2801.131586][T30560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'. [ 2801.215666][T30560] hub 9-0:1.0: USB hub found [ 2801.220870][T30560] hub 9-0:1.0: 1 port detected [ 2801.592169][T30569] sg_write: data in/out 13915/42 bytes for SCSI command 0x0-- guessing data in; [ 2801.592169][T30569] program syz.1.4777 not setting count and/or reply_len properly [ 2801.616132][T30569] sg_write: data in/out 92/154 bytes for SCSI command 0x0-- guessing data in; [ 2801.616132][T30569] program syz.1.4777 not setting count and/or reply_len properly [ 2802.441158][T30576] netlink: 'syz.2.4778': attribute type 2 has an invalid length. [ 2802.498537][T30576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4778'. [ 2803.045642][T30591] binder: 30580:30591 ioctl c018620c 80000380 returned -22 [ 2804.813805][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2804.813948][ T30] audit: type=1326 audit(1765136521.938:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.019018][ T30] audit: type=1326 audit(1765136521.938:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.113558][ T30] audit: type=1326 audit(1765136521.938:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.315379][ T30] audit: type=1326 audit(1765136521.938:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.346351][ T30] audit: type=1326 audit(1765136521.938:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.548266][ T30] audit: type=1326 audit(1765136521.948:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.602561][ T30] audit: type=1326 audit(1765136521.948:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.731030][ T30] audit: type=1326 audit(1765136521.948:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.786968][ T30] audit: type=1326 audit(1765136521.948:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2805.985821][T30615] netlink: 'syz.3.4786': attribute type 10 has an invalid length. [ 2806.210355][ T30] audit: type=1326 audit(1765136521.948:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30600 comm="syz.1.4784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 2806.606081][T28334] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2807.120321][T28334] usb 4-1: device descriptor read/64, error -71 [ 2807.313534][T30627] netlink: 'syz.0.4788': attribute type 2 has an invalid length. [ 2807.322757][T30627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4788'. [ 2807.400331][T28334] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2807.571028][T28334] usb 4-1: device descriptor read/64, error -71 [ 2807.820513][T28334] usb usb4-port1: attempt power cycle [ 2808.153594][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'. [ 2808.169648][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'. [ 2808.284570][T28334] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2808.336962][T28334] usb 4-1: device descriptor read/8, error -71 [ 2808.610228][T28334] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2808.885189][T28334] usb 4-1: device descriptor read/8, error -71 [ 2809.010548][T28334] usb usb4-port1: unable to enumerate USB device [ 2809.109794][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'. [ 2809.271959][T30647] hub 9-0:1.0: USB hub found [ 2809.278606][T30647] hub 9-0:1.0: 1 port detected [ 2809.363017][T30649] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4792'. [ 2809.375224][T30649] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4792'. [ 2809.690952][T30657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4794'. [ 2809.795965][T30660] vivid-006: disconnect [ 2810.610892][T30660] vivid-006: reconnect [ 2812.000780][T30675] netlink: 'syz.2.4797': attribute type 10 has an invalid length. [ 2812.083455][T30675] bond0: (slave netdevsim0): Releasing backup interface [ 2812.118124][T30679] netlink: 'syz.2.4797': attribute type 10 has an invalid length. [ 2812.212704][T30675] team0: Port device netdevsim0 added [ 2812.666691][T30679] team0: Port device netdevsim0 removed [ 2812.940494][T30679] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2816.334312][T30719] QAT: failed to copy from user. [ 2817.396948][T30728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4805'. [ 2817.433497][T30728] hub 9-0:1.0: USB hub found [ 2817.440316][T30728] hub 9-0:1.0: 1 port detected [ 2819.012588][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2819.012611][ T30] audit: type=1326 audit(1765136536.218:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2819.106619][ T30] audit: type=1326 audit(1765136536.218:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2819.281085][ T30] audit: type=1326 audit(1765136536.218:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2819.334630][ T30] audit: type=1326 audit(1765136536.218:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2819.492681][ T30] audit: type=1326 audit(1765136536.218:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2819.671083][ T30] audit: type=1326 audit(1765136536.218:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2819.750971][ T30] audit: type=1326 audit(1765136536.218:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2819.803737][ T30] audit: type=1326 audit(1765136536.218:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2820.012196][ T30] audit: type=1326 audit(1765136536.218:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2820.074743][ T30] audit: type=1326 audit(1765136536.218:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.2.4808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 2821.217415][T30769] fuse: Bad value for 'fd' [ 2822.381287][T30788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4816'. [ 2822.626266][T30792] netlink: 'syz.3.4817': attribute type 10 has an invalid length. [ 2822.686101][T30793] netlink: 'syz.3.4817': attribute type 10 has an invalid length. [ 2825.350407][T30792] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 2825.375902][T30793] team0: Port device netdevsim0 removed [ 2825.427800][T30793] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2825.941595][T30822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4821'. [ 2826.003170][T30822] hub 9-0:1.0: USB hub found [ 2826.024838][T30822] hub 9-0:1.0: 1 port detected [ 2826.820260][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2826.820284][ T30] audit: type=1326 audit(1765136544.028:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30815 comm="syz.3.4822" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7fc00000 [ 2826.938263][T30831] netlink: 'syz.2.4820': attribute type 30 has an invalid length. [ 2827.188748][T30839] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2827.220975][ T30] audit: type=1326 audit(1765136544.388:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2827.361663][T30839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4825'. [ 2827.443167][ T30] audit: type=1326 audit(1765136544.388:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2827.598171][ T30] audit: type=1326 audit(1765136544.388:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2827.670805][ T30] audit: type=1326 audit(1765136544.398:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2827.936021][ T30] audit: type=1326 audit(1765136544.398:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2828.114902][ T30] audit: type=1326 audit(1765136544.398:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2828.241013][ T30] audit: type=1326 audit(1765136544.398:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2828.401050][ T30] audit: type=1326 audit(1765136544.398:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2828.504011][ T30] audit: type=1326 audit(1765136544.398:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30833 comm="syz.3.4825" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 2830.129125][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4829'. [ 2830.138573][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4829'. [ 2833.843814][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4836'. [ 2833.893706][T30895] hub 9-0:1.0: USB hub found [ 2833.900985][T30895] hub 9-0:1.0: 1 port detected [ 2834.101117][T28334] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 2834.305821][T28334] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2834.315863][T28334] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 2834.336530][T28334] usb 4-1: config 0 has no interface number 0 [ 2834.357143][T28334] usb 4-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2834.438323][T28334] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2834.520219][T28334] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2834.530491][T28334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2834.539297][T28334] usb 4-1: Product: syz [ 2834.544272][T28334] usb 4-1: Manufacturer: syz [ 2834.608629][T28334] usb 4-1: SerialNumber: syz [ 2834.649274][T28334] usb 4-1: config 0 descriptor?? [ 2834.665886][T28334] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2834.722798][T30899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4837'. [ 2834.977647][T30901] tipc: Enabling of bearer rejected, already enabled [ 2835.076173][T30901] tipc: Enabling of bearer rejected, already enabled [ 2836.251139][T28334] usb 4-1: USB disconnect, device number 67 [ 2838.632585][T30933] tipc: New replicast peer: 255.255.255.255 [ 2838.641522][T30933] tipc: Enabled bearer , priority 10 [ 2838.940092][T30934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4843'. [ 2838.950331][T30934] tipc: Disabling bearer [ 2839.813768][T30939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4854'. [ 2839.823955][T30939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4854'. [ 2840.137241][T30950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4845'. [ 2840.163291][T30950] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4845'. [ 2840.174103][T30950] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4845'. [ 2840.584798][T30956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4844'. [ 2840.625654][T28334] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2840.842786][T28334] usb 4-1: Using ep0 maxpacket: 32 [ 2840.909234][T28334] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2840.918652][T28334] usb 4-1: config 0 has no interface number 0 [ 2840.938224][T28334] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2840.948610][T28334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2840.968183][T28334] usb 4-1: Product: syz [ 2840.972769][T28334] usb 4-1: Manufacturer: syz [ 2840.990444][T28334] usb 4-1: SerialNumber: syz [ 2841.031932][T28334] usb 4-1: config 0 descriptor?? [ 2841.042451][T28334] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2841.263623][T28334] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2841.311227][T28334] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2841.775914][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.782434][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2843.728375][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2843.738121][T28334] usb 4-1: USB disconnect, device number 68 [ 2843.762340][T28334] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2843.861926][T28334] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2844.153573][T28334] quatech2 4-1:0.51: device disconnected [ 2844.701448][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 2844.701470][ T30] audit: type=1326 audit(1765136561.948:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.2.4851" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd5539 code=0x0 [ 2844.795567][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 2844.842155][T30983] hub 9-0:1.0: USB hub found [ 2844.849604][T30983] hub 9-0:1.0: 1 port detected [ 2847.483889][T31003] kAFS: unable to lookup cell '(/c¾ûL' [ 2847.668665][T31010] netlink: 'syz.1.4855': attribute type 4 has an invalid length. [ 2847.694533][T31010] netlink: 'syz.1.4855': attribute type 17 has an invalid length. [ 2848.151462][ T30] audit: type=1326 audit(1765136565.378:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30996 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7fc00000 [ 2848.959506][T31025] netlink: 'syz.2.4860': attribute type 10 has an invalid length. [ 2849.093785][T31026] netlink: 'syz.2.4860': attribute type 10 has an invalid length. [ 2849.125398][T31025] bond0: (slave netdevsim0): Releasing backup interface [ 2849.183260][T31025] team0: Port device netdevsim0 added [ 2849.310720][T31026] team0: Port device netdevsim0 removed [ 2849.347205][T31026] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2850.555829][T31035] netlink: 'syz.1.4861': attribute type 10 has an invalid length. [ 2851.370361][ T1988] wlan0: Trigger new scan to find an IBSS to join [ 2851.561218][T31045] netlink: 'syz.3.4858': attribute type 30 has an invalid length. [ 2855.380964][T27751] wlan0: Trigger new scan to find an IBSS to join [ 2856.122065][ T30] audit: type=1326 audit(1765136573.368:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31080 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7fc00000 [ 2856.239653][ T30] audit: type=1326 audit(1765136573.368:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31080 comm="syz.4.4870" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7fc00000 [ 2856.336529][T16885] wlan0: Trigger new scan to find an IBSS to join [ 2856.497509][T27751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2856.741281][T31103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 2856.752162][T31103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 2858.539488][T31118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4875'. [ 2859.546638][T31124] netlink: 'syz.3.4877': attribute type 10 has an invalid length. [ 2860.015412][T31131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4878'. [ 2860.059951][T31131] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4878'. [ 2860.083701][T31131] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4878'. [ 2860.410275][ T5989] wlan0: Trigger new scan to find an IBSS to join [ 2861.048694][T25544] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2861.250247][T25544] usb 3-1: Using ep0 maxpacket: 32 [ 2861.268634][T25544] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2861.283087][T25544] usb 3-1: config 0 has no interface number 0 [ 2861.301085][T25544] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2861.310974][T25544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2861.332909][T25544] usb 3-1: Product: syz [ 2861.340962][T25544] usb 3-1: Manufacturer: syz [ 2861.356120][T25544] usb 3-1: SerialNumber: syz [ 2861.409780][T25544] usb 3-1: config 0 descriptor?? [ 2861.574926][T25544] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2861.762689][T27758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.808966][T25544] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2861.961955][T25544] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2863.425462][T31145] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2863.442722][ T30] audit: type=1326 audit(1765136580.628:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2863.472834][T31145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4881'. [ 2863.503610][ T30] audit: type=1326 audit(1765136580.628:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.146506][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2864.165884][T25544] usb 3-1: USB disconnect, device number 67 [ 2864.206106][T25544] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2864.219448][ T30] audit: type=1326 audit(1765136580.628:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.246447][T25544] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2864.331896][T25544] quatech2 3-1:0.51: device disconnected [ 2864.337868][ T30] audit: type=1326 audit(1765136580.628:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.451812][ T30] audit: type=1326 audit(1765136580.628:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.541916][ T30] audit: type=1326 audit(1765136580.628:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.709034][ T30] audit: type=1326 audit(1765136580.628:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.709079][ T30] audit: type=1326 audit(1765136580.638:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.709113][ T30] audit: type=1326 audit(1765136580.638:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2864.709148][ T30] audit: type=1326 audit(1765136580.638:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31141 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2865.377596][T31165] veth1_to_bond: entered allmulticast mode [ 2865.587236][T31165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4884'. [ 2867.264568][T31179] QAT: failed to copy from user. [ 2868.595019][T31188] netlink: 'syz.2.4890': attribute type 4 has an invalid length. [ 2868.624351][T31188] netlink: 'syz.2.4890': attribute type 17 has an invalid length. [ 2869.455263][T31162] veth1_to_bond: left allmulticast mode [ 2870.059424][T31200] netlink: 'syz.4.4891': attribute type 10 has an invalid length. [ 2870.083365][T31200] team0: Port device netdevsim0 added [ 2870.101448][T31200] netlink: 'syz.4.4891': attribute type 10 has an invalid length. [ 2870.295077][T31200] team0: Port device netdevsim0 removed [ 2870.300925][T25544] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2870.520270][T25544] usb 4-1: Using ep0 maxpacket: 16 [ 2870.541145][T25544] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 2870.585161][T31211] netlink: 'syz.2.4894': attribute type 10 has an invalid length. [ 2870.773795][T25544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.990895][T25544] usb 4-1: config 0 descriptor?? [ 2871.173920][T25544] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2873.242363][T31219] veth1_to_bond: entered allmulticast mode [ 2873.253930][T31219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4896'. [ 2873.888709][T25544] usb 4-1: Detected FT232A [ 2873.917542][T25544] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2874.226861][T25544] usb 4-1: USB disconnect, device number 69 [ 2874.301881][T25544] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2874.460837][T25544] ftdi_sio 4-1:0.0: device disconnected [ 2875.995639][T31245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4902'. [ 2876.011096][T31245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4902'. [ 2876.238841][T31250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4900'. [ 2877.098995][T31218] veth1_to_bond: left allmulticast mode [ 2878.455827][T31266] veth1_to_bond: entered allmulticast mode [ 2878.481557][T31266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'. [ 2881.790919][T31265] veth1_to_bond: left allmulticast mode [ 2883.768893][T31307] macsec0: entered promiscuous mode [ 2883.779016][T31307] macsec0: left promiscuous mode [ 2883.792666][T31307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4923'. [ 2883.956563][T31311] veth1_to_bond: entered allmulticast mode [ 2884.220350][T31316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4913'. [ 2884.252942][T31316] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4913'. [ 2884.271706][T31316] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4913'. [ 2886.803900][T31330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 2886.831308][T31330] hub 9-0:1.0: USB hub found [ 2886.854074][T31330] hub 9-0:1.0: 1 port detected [ 2887.561569][T31309] veth1_to_bond: left allmulticast mode [ 2888.498245][ T1988] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2889.641870][T31357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4922'. [ 2889.839406][T31359] tipc: Enabling of bearer rejected, already enabled [ 2889.881793][T31359] tipc: Enabling of bearer rejected, already enabled [ 2892.955670][T31393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4930'. [ 2893.005760][T31393] hub 9-0:1.0: USB hub found [ 2893.011747][T31393] hub 9-0:1.0: 1 port detected [ 2893.752191][T31397] macsec0: entered promiscuous mode [ 2893.762557][T31397] macsec0: left promiscuous mode [ 2893.788834][T31397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4931'. [ 2894.509413][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 2894.600526][T31403] hub 9-0:1.0: USB hub found [ 2894.605710][T31403] hub 9-0:1.0: 1 port detected [ 2894.720313][T31406] veth1_to_bond: entered allmulticast mode [ 2894.890894][T24079] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2897.534576][T31405] veth1_to_bond: left allmulticast mode [ 2898.090928][ T31] INFO: task kworker/1:0:25988 blocked for more than 143 seconds. [ 2898.099020][ T31] Tainted: G L syzkaller #0 [ 2898.105744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2898.115134][ T31] task:kworker/1:0 state:D stack:22200 pid:25988 tgid:25988 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2898.128818][ T31] Workqueue: usb_hub_wq hub_event [ 2898.134934][ T31] Call Trace: [ 2898.138443][ T31] [ 2898.141834][ T31] __schedule+0x14bc/0x5000 [ 2898.147150][ T31] ? __pfx___schedule+0x10/0x10 [ 2898.152298][ T31] ? schedule+0x91/0x360 [ 2898.156609][ T31] schedule+0x165/0x360 [ 2898.161031][ T31] schedule_preempt_disabled+0x13/0x30 [ 2898.166681][ T31] __mutex_lock+0x7e6/0x1350 [ 2898.171518][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2898.176554][ T31] ? hub_event+0x2182/0x4ef0 [ 2898.181519][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2898.186820][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2898.193495][ T31] hub_event+0x2182/0x4ef0 [ 2898.198122][ T31] ? __pfx_hub_event+0x10/0x10 [ 2898.203094][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2898.208901][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2898.215034][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2898.221030][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2898.226990][ T31] process_scheduled_works+0xad1/0x1770 [ 2898.232915][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2898.239477][ T31] worker_thread+0x8a0/0xda0 [ 2898.244224][ T31] ? __kthread_parkme+0x7b/0x200 [ 2898.249222][ T31] kthread+0x711/0x8a0 [ 2898.253655][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2898.259059][ T31] ? __pfx_kthread+0x10/0x10 [ 2898.263961][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2898.269551][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2898.275261][ T31] ? __pfx_kthread+0x10/0x10 [ 2898.280004][ T31] ret_from_fork+0x599/0xb30 [ 2898.285368][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2898.290972][ T31] ? __switch_to_asm+0x39/0x70 [ 2898.295958][ T31] ? __switch_to_asm+0x33/0x70 [ 2898.300924][ T31] ? __pfx_kthread+0x10/0x10 [ 2898.305671][ T31] ret_from_fork_asm+0x1a/0x30 [ 2898.311020][ T31] [ 2898.314481][ T31] [ 2898.314481][ T31] Showing all locks held in the system: [ 2898.322612][ T31] 1 lock held by khungtaskd/31: [ 2898.327513][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2898.337807][ T31] 3 locks held by syslogd/5179: [ 2898.343482][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2898.354079][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2898.364073][ T31] #2: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2898.374116][ T31] 1 lock held by klogd/5186: [ 2898.378954][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2898.389697][ T31] 2 locks held by getty/5584: [ 2898.394584][ T31] #0: ffff8880347c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2898.404571][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2898.414950][ T31] 5 locks held by kworker/1:8/17535: [ 2898.421476][ T31] #0: ffff888020698948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2898.432942][ T31] #1: ffffc9000e38fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2898.445032][ T31] #2: ffff888144bb5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2898.454801][ T31] #3: ffff888144bc9518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2898.465433][ T31] #4: ffff888144385868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2898.475636][ T31] 5 locks held by kworker/1:0/25988: [ 2898.509315][ T31] #0: ffff888020698948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2898.530408][ T31] #1: ffffc90019fc7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2898.543302][ T31] #2: ffff888029284198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2898.552890][ T31] #3: ffff888029287518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2898.564697][ T31] #4: ffff888144385868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2898.575393][ T31] [ 2898.577788][ T31] ============================================= [ 2898.577788][ T31] [ 2898.591910][ T31] NMI backtrace for cpu 0 [ 2898.591952][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2898.591982][ T31] Tainted: [L]=SOFTLOCKUP [ 2898.591991][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2898.592005][ T31] Call Trace: [ 2898.592014][ T31] [ 2898.592025][ T31] dump_stack_lvl+0x189/0x250 [ 2898.592061][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2898.592089][ T31] ? __pfx__printk+0x10/0x10 [ 2898.592134][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2898.592161][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2898.592199][ T31] ? __pfx__printk+0x10/0x10 [ 2898.592238][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2898.592278][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2898.592306][ T31] sys_info+0x135/0x170 [ 2898.592340][ T31] watchdog+0xf95/0xfe0 [ 2898.592379][ T31] ? watchdog+0x20a/0xfe0 [ 2898.592419][ T31] kthread+0x711/0x8a0 [ 2898.592453][ T31] ? __pfx_watchdog+0x10/0x10 [ 2898.592484][ T31] ? __pfx_kthread+0x10/0x10 [ 2898.592515][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2898.592543][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2898.592571][ T31] ? __pfx_kthread+0x10/0x10 [ 2898.592602][ T31] ret_from_fork+0x599/0xb30 [ 2898.592627][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2898.592661][ T31] ? __switch_to_asm+0x39/0x70 [ 2898.592690][ T31] ? __switch_to_asm+0x33/0x70 [ 2898.592719][ T31] ? __pfx_kthread+0x10/0x10 [ 2898.592750][ T31] ret_from_fork_asm+0x1a/0x30 [ 2898.592806][ T31] [ 2898.592815][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2898.762579][ C1] NMI backtrace for cpu 1 [ 2898.762603][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2898.762629][ C1] Tainted: [L]=SOFTLOCKUP [ 2898.762636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2898.762648][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2898.762679][ C1] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 90 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2898.762696][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2898.762714][ C1] RAX: eeb1d347456bed00 RBX: ffffffff81978eba RCX: eeb1d347456bed00 [ 2898.762728][ C1] RDX: 0000000000000001 RSI: ffffffff8d786736 RDI: ffffffff8bc01ce0 [ 2898.762742][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 2898.762757][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f817970 [ 2898.762771][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 2898.762783][ C1] FS: 0000000000000000(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000 [ 2898.762798][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2898.762812][ C1] CR2: 000055ff0af61a38 CR3: 0000000076bd6000 CR4: 00000000003526f0 [ 2898.762829][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2898.762840][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2898.762852][ C1] Call Trace: [ 2898.762861][ C1] [ 2898.762869][ C1] default_idle+0x13/0x20 [ 2898.762897][ C1] default_idle_call+0x73/0xb0 [ 2898.762927][ C1] do_idle+0x1ea/0x520 [ 2898.762948][ C1] ? irqentry_exit+0x5ba/0x660 [ 2898.762974][ C1] ? __pfx_do_idle+0x10/0x10 [ 2898.763012][ C1] cpu_startup_entry+0x44/0x60 [ 2898.763032][ C1] start_secondary+0x101/0x110 [ 2898.763060][ C1] common_startup_64+0x13e/0x147 [ 2898.763094][ C1] [ 2898.965569][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2898.972994][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2898.984072][ T31] Tainted: [L]=SOFTLOCKUP [ 2898.988499][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2898.999272][ T31] Call Trace: [ 2899.002926][ T31] [ 2899.005916][ T31] dump_stack_lvl+0x99/0x250 [ 2899.010535][ T31] ? __asan_memcpy+0x40/0x70 [ 2899.015249][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2899.020646][ T31] ? __pfx__printk+0x10/0x10 [ 2899.025664][ T31] vpanic+0x237/0x6d0 [ 2899.029784][ T31] ? __pfx_vpanic+0x10/0x10 [ 2899.034454][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2899.039971][ T31] panic+0xb9/0xc0 [ 2899.044389][ T31] ? __pfx_panic+0x10/0x10 [ 2899.048832][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2899.054485][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2899.061478][ T31] watchdog+0xfdf/0xfe0 [ 2899.065912][ T31] ? watchdog+0x20a/0xfe0 [ 2899.070729][ T31] kthread+0x711/0x8a0 [ 2899.075070][ T31] ? __pfx_watchdog+0x10/0x10 [ 2899.079953][ T31] ? __pfx_kthread+0x10/0x10 [ 2899.084688][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2899.090123][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2899.095433][ T31] ? __pfx_kthread+0x10/0x10 [ 2899.100233][ T31] ret_from_fork+0x599/0xb30 [ 2899.105207][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2899.110350][ T31] ? __switch_to_asm+0x39/0x70 [ 2899.115144][ T31] ? __switch_to_asm+0x33/0x70 [ 2899.119933][ T31] ? __pfx_kthread+0x10/0x10 [ 2899.124935][ T31] ret_from_fork_asm+0x1a/0x30 [ 2899.130059][ T31] [ 2899.133590][ T31] Kernel Offset: disabled [ 2899.138053][ T31] Rebooting in 86400 seconds..