last executing test programs: 19.05118715s ago: executing program 2 (id=6534): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x11020, 0x0) r9 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 16.043499743s ago: executing program 0 (id=6540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0x6}, 0x5, 0x9, &(0x7f0000000180)={{0x4, 0xf, 0xbab, 0x8000}}, 0x82, 0x0, 0x2}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.906541665s ago: executing program 2 (id=6541): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) timer_create(0x2, 0x0, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r8 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r8, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000000c0)) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'e', 0x3a, '\x00\x00eh`\x1a\x00+^\x01\xa0\xfdZ\x020\x93-M\x93\xf4\x7fj\x05B\xf5,\xf4\xe8\x18<\xfd{\xe9\xd2\xfb\xf6\xa2COg\x84\xc8\xd7\x1c\x93\x87\xc2y\xe4%\xff\x14\x91\xfc\xbdRDs[\xc0\x03^~\x1d\xda\xd5\xf5\x83B\xc4?\xe9[:\x1d\xf9\x95\x8e\xfe\x10,\\^\x84\x8d\xb39\xfeu\xbd\x05cN ~\xbf:Z\xfd!$\xfc\x01@\xc0\xc2\xe0i+\xd7\xac\xaa\xd2!\b\x1b\xa8\x9f\x9f\xe3\x06\xe3~&\xe0x8\x84\xa9\xc3\xb6\xed\x92\x95\xa5\xbb\xb8\x04dB\xfd', 0x3a, './file1'}, 0xb5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 15.763450314s ago: executing program 3 (id=6542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 13.907688649s ago: executing program 2 (id=6543): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x8802, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x402c5829, 0x0) dup2(r7, r0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.703908341s ago: executing program 1 (id=6544): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket(0x28, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = openat$vimc2(0xffffff9c, &(0x7f0000005cc0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000005e00)={0x5, 0x7, 0x78ba96cc09fd2886, {0xc, @pix_mp={0x3, 0x1, 0x30324c4a, 0x3, 0x4, [{0xfffffffd, 0x5}, {0x2, 0x7fffffff}, {0x400081, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0xe90f}, {0x3ad7, 0x5}], 0x0, 0xf, 0x6, 0x1, 0x4}}, 0x80000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x10b, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 13.695758353s ago: executing program 4 (id=6546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r5, 0x0, 0x3, 0x3, 0x7, 0x10, @mcast2, @empty, 0x8, 0x20, 0x99, 0x3e}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32], 0x48}}, 0x0) 12.231971851s ago: executing program 3 (id=6547): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/186, 0xba) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f00000002c0)={0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xb, 0x17}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20040054) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x3, 0x0, @scatter={0x2, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) 12.071686443s ago: executing program 0 (id=6548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2}) syz_open_dev$media(0x0, 0x0, 0x101d01) socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000800)='\x02\x93\"}qu\x87n\x9e\xf5/\xffp\x95\x00T\xc1]\xf5\xbe\xde0]|\xc9`t{Svh4\x1ee?\v\xf9<5\xf6{\xc4,\xe18\x01\xbf\xbd\xf19\xee\xc3\xee\x85\xf97\xaap\xe2\x99\xe3\xf5\xf4[\xca\xe9j\xfdO4', 0x0) r4 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r3) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000a40)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\x10\xa0Vh\x9c\xf2\xc4^\x93\xd3\xab\x7f69\xd7\xa3\x02\x8aY\xe5\xddX`\xd0\x12\x17\xe4\xe6E<\"s\xcf\x93\xe6<-+B\xe2\x14\xa8\xc5\xd3N\xb6\x0e\bW;\xd0\x98\x87\xc6x\x1e>\x8a\xa6=\x86~\x9a\xce\x9f\xf0b\xea\x85\xb0\x82\xe5I\xd9\xd0\xec3\xb16DO\xa9D\x9e\xd3\n\x19;\xb8\xb1\xa6#\xc7\xd8J\x80\xd3?|\x04=\xfc\xdf\xb5\xc2\x81\xd3', &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x9, 0x3, 0xe, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1, 0xba3, 0x1, 0x5, 0x9ff, 0x8, 0x5, 0x80000000, 0x0, 0x2, 0x4d, 0xffffa52e, 0x3c, 0x8, 0xffff, 0x7f, 0x4e3, 0x5, 0x2, 0x0, 0x7fff, 0x6, 0x7, 0x7, 0x1, 0x4, 0x81, 0xd1a, 0x9, 0x9, 0x8, 0x0, 0x10001, 0x5, 0xfc000000, 0x2, 0x200, 0x5, 0x855e, 0x49, 0x3, 0x5, 0x6, 0xb728, 0x960, 0x8, 0x5, 0x50, 0x6, 0x8001, 0x2a, 0x9, 0x800, 0xfd8, 0xbf29, 0x1d49, 0x1000, 0x1, 0x3, 0x2, 0xffff, 0x3, 0x5, 0x5, 0x6, 0x4e, 0x1, 0x9, 0xffffb9c0, 0x288, 0x1000, 0xca1b, 0x1, 0x8001, 0xfff, 0x3, 0x1e300000, 0x8, 0x80000000, 0x3, 0x40, 0x401, 0x6, 0x6c0c, 0x5, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x8, 0x1, 0x0, 0xc, 0x40, 0x6, 0x8, 0x3, 0x8, 0x101, 0x5, 0xcb3a, 0x80000000, 0x10000, 0x3, 0x7, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x3, 0xfffffff8, 0x2, 0x7dc, 0x4, 0xe6, 0x5, 0x6]}}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0) read(r3, 0x0, 0x0) close(r3) 11.978826827s ago: executing program 1 (id=6549): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(0x0, 0x0) link(0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={r5, 0x7}, 0x8) r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19c46c87537737a0dc91", 0xa}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) 11.296444035s ago: executing program 4 (id=6550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7f6e, 0xa94f, 0xd, &(0x7f00000000c0)={[0x81, 0x81]}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0xfffffecd}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) recvmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000100) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) setns(r5, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x4a, 0x2, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) sendfile(0xffffffffffffffff, r6, 0x0, 0x5) unshare(0x4040400) 10.339463727s ago: executing program 1 (id=6551): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4b63, 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x400, 0x40, 0x20, 0x1}]}) close_range(r8, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 9.954942448s ago: executing program 0 (id=6552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone(0x40000, &(0x7f00000001c0)="38456e15768459fe37f79530a27747d55f6c04ec877260c2223d698bb673c85506784992a7dab9d5ec2c1369bc3c3dcffa0fdeeeca783c1cba44af63d1458260bc50e935b9b15b36068ada0e2527a404c3e0ce4753858522c648e8b3720deeb1a5080216b2a6e23b0c70ead9a2558d2409d4430daed887669134f808d01f8f530f53eec0fe6bf1a29d370ba0e940f8543705f244af4bfed62defbcc460dca156e2e07bdf98810067a0c36687d741521fd23e421ba1683ee82b08cc91e112", 0xbe, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000500)="13789ec17d6bf343e55c826d94ddd8744b0e7b90b7c215e40d6749cf0c469d4015e28ed8e5454ac2faa1399c9d059337a9dfa7eab0343110c9fb9c7bd5101dbbd0daae57353359e9733aea282d90a1389d6301c62a7d7860d62742978b948d7b5252dbd42ca6c6f0dae474e5b512730b07ae6d0344d8ea30738c9a6f67827cfdd0b01b4dabca9411786eb44b61016adc910a216ba085551267bc49d3e48daab6a9e99f7ca6e9c8860620b0ac731fb241121ef091a451c00bc96323b753fa72e0de147f92524b2660310b125598b2506c8dc841b1da82407dce0609ab99f318b9aa5436") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x140, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xae}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 8.653476896s ago: executing program 4 (id=6553): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x11020, 0x0) r9 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8.648587524s ago: executing program 1 (id=6554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x80000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000300)={'ip6gre0\x00', 0x314}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffcc3, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000240), &(0x7f00000002c0)=0x8) syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x1, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="eb010000000000086b1d01014000010203010902780003010000000904000000010300000a2401000000020102082408000000007009040100000102000009040101010102000007246b0cccf1ad912b2601060400002ae30905010900000000000725010100000009"], &(0x7f0000011700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000)) 8.648050635s ago: executing program 2 (id=6555): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) socket$key(0xf, 0x3, 0x2) r5 = getuid() ioprio_set$uid(0x3, r5, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r7, r6, &(0x7f0000002700)=0x1, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, 0x0, 0x0) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000}) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r8, &(0x7f0000000a40)=[{&(0x7f0000000680)='E', 0x1}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getpid() 8.64744058s ago: executing program 3 (id=6556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_enter(0xffffffffffffffff, 0x7f6e, 0xa94f, 0xd, &(0x7f00000000c0)={[0x81, 0x81]}, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) recvmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000100) 8.14646202s ago: executing program 0 (id=6557): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x40c6}, 0x984e45ff733bc95) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) io_cancel(0x0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r8, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_clone(0x84000000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r9, 0x0, 0x0) sched_setattr(r9, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) 5.742399322s ago: executing program 3 (id=6558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 5.167145224s ago: executing program 1 (id=6559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0x6}, 0x5, 0x9, &(0x7f0000000180)={{0x4, 0xf, 0xbab, 0x8000}}, 0x82, 0x0, 0x2}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.166022179s ago: executing program 0 (id=6569): futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x290, 0x0, 0xcd}]}) socket(0x400000000010, 0x3, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r11, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5.164957083s ago: executing program 4 (id=6570): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x20004090) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, &(0x7f0000000040)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) socket$inet(0x2, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000400)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xda5\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xa1\xa8\x0f(\xae\xba\x99U\x9a\xe9\xf3=H\x99\x93j:\xd5\xd1\xf9\xa0\xab\xe1\x06T\xacs\xf0f\x88*\xf9\'\xe5\x8f\xe3\xf0\xa1\x95\xbb\xb4|\x04Hi\xab\xd3\x9d\xa9\xd8\x82\xaf@\xfe\x11\x1b\x98\xb5S\xec\xa0\xa3\xbf\xbc\xb7\xcb\xc23X\xd1h\a1\xccF\x17\x84%\xf8\x17a\xe9\x14\x80r\x1a\xf0.\x12\x19\xbe\xef\x93\xe0\xa72\x01K\x88\r\x0f]LN\xfc\x1db\xa25\r\x1fF\x8d\x87\xc1p\xaep\x13\xc5\xab\xa64\xea\x8b\xb7$%\x96i\x84\xb9\xb5\xf3\x19\xe7\xcf\xab\x19\x8a\xe6\xa3@\x04\x91\xd7p9', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4.563728511s ago: executing program 2 (id=6560): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r3, r2, 0x0, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) preadv(r1, 0x0, 0x0, 0x1, 0x5) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x4000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r5, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x3c}}, 0x40000) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.541373213s ago: executing program 4 (id=6561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x20, &(0x7f0000000040)={'bond_slave_1\x00', @ifru_hwaddr=@local}}) 2.54731076s ago: executing program 2 (id=6562): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) socket(0x21, 0x2, 0x2) epoll_create1(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x77cf, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000840), 0xb40, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5433, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r8, 0x29, 0x2d, 0x0, 0x0) 2.289355043s ago: executing program 0 (id=6563): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(0x0, 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000380)={0x48}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffffa, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000514050000000000000000000400030000000000080003000000000008000100000000000000080001000000000000000100"/80], 0x50}}, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000040)=@keyring={'key_or_keyring:', r6}) setxattr$security_capability(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040), &(0x7f0000000100)=@v2={0x2000000, [{0xfffffffb, 0x2}, {0x4, 0x3}]}, 0x14, 0x2) openat$dir(0xffffff9c, &(0x7f00000001c0)='./file2\x00', 0x400000, 0x11) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x10) 2.172508904s ago: executing program 4 (id=6564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7f6e, 0xa94f, 0xd, &(0x7f00000000c0)={[0x81, 0x81]}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0xfffffecd}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) recvmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000100) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) setns(r5, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000300)={0x4a, 0x2, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) sendfile(0xffffffffffffffff, r6, 0x0, 0x5) unshare(0x4040400) 2.013138878s ago: executing program 3 (id=6565): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)="6ac3", 0x2) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) getsockopt$sock_timeval(r4, 0x1, 0x43, 0x0, &(0x7f0000000380)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4}, 0x101}], 0x4, 0x40010022, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1.23190385s ago: executing program 1 (id=6566): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bdef18fa78bcb9616de723023034"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) write$UHID_INPUT(r1, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 0s ago: executing program 3 (id=6567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x20, &(0x7f0000000040)={'bond_slave_1\x00', @ifru_hwaddr=@local}}) kernel console output (not intermixed with test programs): [T18850] usb 2-1: USB disconnect, device number 20 [ 2347.048220][T16847] usb 3-1: Using ep0 maxpacket: 32 [ 2347.086074][T16847] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 2347.104550][T16847] usb 3-1: config 0 has no interface number 0 [ 2347.334836][T16847] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 2347.345640][T16847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2347.353975][T16847] usb 3-1: Product: syz [ 2347.358399][T16847] usb 3-1: Manufacturer: syz [ 2347.363004][T16847] usb 3-1: SerialNumber: syz [ 2347.377102][T16847] usb 3-1: config 0 descriptor?? [ 2349.089174][T16847] cp210x 3-1:0.79: cp210x converter detected [ 2349.119525][T16847] cp210x 3-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 2349.142991][T16847] cp210x 3-1:0.79: querying part number failed [ 2349.385797][T16847] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2349.433663][T16847] usb 3-1: USB disconnect, device number 16 [ 2349.445551][T16847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2349.637997][T16847] cp210x 3-1:0.79: device disconnected [ 2349.824956][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5852'. [ 2350.987557][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'. [ 2350.996766][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'. [ 2351.006336][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'. [ 2351.368744][T16842] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2351.539207][T16842] usb 1-1: Using ep0 maxpacket: 16 [ 2352.344004][ T2077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5858'. [ 2353.442054][ T2082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5860'. [ 2353.453426][ T2082] pimreg: left allmulticast mode [ 2354.267195][T16842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2354.277256][T16842] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2354.487891][T16842] usb 1-1: can't read configurations, error -71 [ 2354.955592][ T2107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 2355.167875][ T2107] pimreg: entered allmulticast mode [ 2355.270331][ T2108] pimreg: left allmulticast mode [ 2356.057299][ T2115] netlink: 320 bytes leftover after parsing attributes in process `syz.1.5867'. [ 2357.979926][ T2134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5873'. [ 2357.994419][ T2134] pimreg: entered allmulticast mode [ 2358.024466][ T2134] pimreg: left allmulticast mode [ 2359.559495][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2359.560666][ T30] audit: type=1326 audit(1764414316.444:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.634700][ T30] audit: type=1326 audit(1764414316.504:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.663678][ T30] audit: type=1326 audit(1764414316.504:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.692043][ T30] audit: type=1326 audit(1764414316.504:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.749581][ T30] audit: type=1326 audit(1764414316.504:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.776500][ T30] audit: type=1326 audit(1764414316.504:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.802872][ T30] audit: type=1326 audit(1764414316.514:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.829988][ T30] audit: type=1326 audit(1764414316.514:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.855444][ T30] audit: type=1326 audit(1764414316.514:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2359.983302][ T2154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5875'. [ 2360.006801][ T30] audit: type=1326 audit(1764414316.514:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2360.725247][ T2158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5878'. [ 2360.800088][ T2158] pimreg: entered allmulticast mode [ 2360.807113][ T2158] pimreg: left allmulticast mode [ 2362.611111][ T2189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5883'. [ 2363.066169][ T2180] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2364.842489][ T2216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5889'. [ 2364.867011][ T2216] : entered promiscuous mode [ 2367.729845][ T2238] input: syz0 as /devices/virtual/input/input97 [ 2368.230496][ T2244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5894'. [ 2369.048257][ T1067] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 2369.866804][ T2254] 8021q: adding VLAN 0 to HW filter on device team0 [ 2369.925543][ T2254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2370.124914][ T2254] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2370.133203][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.142618][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.151238][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.165721][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.174149][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.182692][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.191118][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.199498][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.207838][ T2254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2371.102434][ T2272] delete_channel: no stack [ 2371.273629][ T2274] trusted_key: encrypted_key: insufficient parameters specified [ 2371.438676][T16842] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2371.692806][T16842] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2371.709117][T16842] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2371.736709][T16842] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2371.752848][T16842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2371.782906][ T2272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2371.793955][T16842] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2372.068443][ T2287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5901'. [ 2372.296353][ T2289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2372.347973][ T2283] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2372.449149][ T2289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.109088][ T2303] tipc: New replicast peer: 255.255.255.255 [ 2374.117413][ T2303] tipc: Enabled bearer , priority 10 [ 2374.459394][ T1067] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 2374.818887][ T1067] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 2374.954730][ T1067] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2374.966939][ T1067] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2374.979726][ T1067] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2374.990181][ T1067] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2374.999330][ T1067] usb 1-1: Product: syz [ 2375.003891][ T1067] usb 1-1: Manufacturer: syz [ 2375.009199][ T1067] usb 1-1: SerialNumber: syz [ 2375.061058][ T1067] usb 1-1: config 0 descriptor?? [ 2375.080390][ T2311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5906'. [ 2375.109685][ T2311] pimreg: entered allmulticast mode [ 2375.120076][ T2311] pimreg: left allmulticast mode [ 2375.133995][ T1067] usb 1-1: selecting invalid altsetting 0 [ 2375.149089][T16847] usb 2-1: USB disconnect, device number 21 [ 2375.427237][ T2304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2375.698382][ T2316] fuse: Bad value for 'fd' [ 2375.743019][ T2304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2375.781607][ T2319] usb 1-1: USB disconnect, device number 86 [ 2376.645050][ T2284] udevd[2284]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2377.093342][ T2328] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5908'. [ 2377.119700][ T2321] hub 1-0:1.0: USB hub found [ 2377.129598][ T2321] hub 1-0:1.0: 1 port detected [ 2377.462955][T16842] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2377.485000][ T2338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5909'. [ 2377.881837][T16842] usb 4-1: Using ep0 maxpacket: 32 [ 2377.932328][T16842] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 2377.947408][T16842] usb 4-1: config 0 has no interface number 0 [ 2378.000644][T16842] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 2378.032035][T16842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.063684][T16842] usb 4-1: Product: syz [ 2378.072544][T16842] usb 4-1: Manufacturer: syz [ 2378.082564][T16842] usb 4-1: SerialNumber: syz [ 2378.283954][ T2344] binder: 2339:2344 ioctl c0306201 0 returned -14 [ 2378.300764][ T2344] binder: 2339:2344 ioctl c0306201 0 returned -14 [ 2378.429761][T16842] usb 4-1: config 0 descriptor?? [ 2380.228606][T16842] cp210x 4-1:0.79: cp210x converter detected [ 2380.235220][T16842] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 2380.246198][T16842] cp210x 4-1:0.79: querying part number failed [ 2380.403027][T16842] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2380.438490][ C1] net_ratelimit: 594 callbacks suppressed [ 2380.438507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2380.446950][T16842] usb 4-1: USB disconnect, device number 38 [ 2380.453516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2380.511041][T16842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2380.597091][ T2365] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2380.645118][T16842] cp210x 4-1:0.79: device disconnected [ 2380.681520][ T2362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5916'. [ 2383.547688][ T2392] pim6reg: entered allmulticast mode [ 2383.563189][ T2392] pim6reg: left allmulticast mode [ 2383.719701][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2383.719720][ T30] audit: type=1326 audit(1764414340.444:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.778761][ T30] audit: type=1326 audit(1764414340.444:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.804916][ T30] audit: type=1326 audit(1764414340.444:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.835335][ T2400] hub 1-0:1.0: USB hub found [ 2383.840166][ T30] audit: type=1326 audit(1764414340.444:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.840214][ T30] audit: type=1326 audit(1764414340.444:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.840254][ T30] audit: type=1326 audit(1764414340.444:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.840294][ T30] audit: type=1326 audit(1764414340.444:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.840334][ T30] audit: type=1326 audit(1764414340.444:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.840375][ T30] audit: type=1326 audit(1764414340.444:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2383.840419][ T30] audit: type=1326 audit(1764414340.444:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2385 comm="syz.4.5922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2384.038784][ T2400] hub 1-0:1.0: 1 port detected [ 2385.715687][ T2420] input: syz1 as /devices/virtual/input/input98 [ 2386.218133][ T2437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5930'. [ 2386.291990][ T2437] pimreg: entered allmulticast mode [ 2386.301831][ T2437] pimreg: left allmulticast mode [ 2386.430502][ T2443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2386.479235][ T2443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2389.382384][ T2443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2389.393202][ T2443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2389.610679][ T2470] fuse: Bad value for 'fd' [ 2389.723623][ T2473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5938'. [ 2391.454939][T16847] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2392.058739][T16847] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 2392.142062][T16847] usb 1-1: config 0 has no interface number 0 [ 2392.302388][T16847] usb 1-1: config 0 interface 122 has no altsetting 0 [ 2392.349356][T16847] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 2392.365475][T16847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.808816][T16847] usb 1-1: Product: syz [ 2392.814883][T16847] usb 1-1: Manufacturer: syz [ 2392.820170][T16847] usb 1-1: SerialNumber: syz [ 2392.832437][ T2517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5945'. [ 2392.839695][T16847] usb 1-1: config 0 descriptor?? [ 2392.913803][ T2517] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2393.035324][ T2522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.058796][ T2522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.106503][ T2522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.119113][ T2522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.129729][ T2522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.876330][ T2532] fuse: Bad value for 'group_id' [ 2393.881899][ T2532] fuse: Bad value for 'group_id' [ 2393.943813][ T2522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2395.372828][T16847] usb 1-1: USB disconnect, device number 87 [ 2395.394948][T16847] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 2396.098444][ T483] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2396.398512][ T483] usb 1-1: Using ep0 maxpacket: 16 [ 2396.411001][ T483] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2396.420975][ T483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.469485][ T483] usb 1-1: Product: syz [ 2396.488126][ T483] usb 1-1: Manufacturer: syz [ 2396.502996][ T483] usb 1-1: SerialNumber: syz [ 2396.533242][ T483] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2396.541364][ T483] r8152-cfgselector 1-1: config 0 descriptor?? [ 2397.094985][ T2576] netlink: 'syz.1.5954': attribute type 10 has an invalid length. [ 2397.107993][ T2576] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2398.501677][ T483] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2398.515149][ T483] r8152-cfgselector 1-1: bad CDC descriptors [ 2398.542028][ T483] r8152-cfgselector 1-1: USB disconnect, device number 88 [ 2399.702596][ T2611] netlink: 'syz.3.5959': attribute type 13 has an invalid length. [ 2399.851853][ T2608] binder: 2596:2608 ioctl c0306201 80000100 returned -11 [ 2399.861678][ T2608] fuse: Bad value for 'fd' [ 2399.942632][ T2599] bond19 (unregistering): Released all slaves [ 2400.190313][ T2611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2401.274885][ T1067] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2401.486535][ T1067] usb 3-1: Using ep0 maxpacket: 8 [ 2401.548688][ T1067] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2401.574226][ T1067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.584348][ T1067] usb 3-1: Product: syz [ 2401.590413][ T1067] usb 3-1: Manufacturer: syz [ 2401.607178][ T1067] usb 3-1: SerialNumber: syz [ 2401.637197][ T1067] usb 3-1: config 0 descriptor?? [ 2401.743692][ T1067] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 2401.961886][ T2623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.978620][ T2623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2403.078594][ T1067] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2403.329418][ T483] usb 3-1: USB disconnect, device number 17 [ 2403.503972][ T1067] usb 1-1: config 0 has no interfaces? [ 2403.539614][ T1067] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2403.559767][ T1067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.578381][ T1067] usb 1-1: Product: syz [ 2403.863568][ T1067] usb 1-1: Manufacturer: syz [ 2403.875134][ T1067] usb 1-1: SerialNumber: syz [ 2403.933404][ T1067] usb 1-1: config 0 descriptor?? [ 2404.281883][ T2642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2404.294536][ T2642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2404.574126][ T2662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'. [ 2404.725392][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2404.725409][ T30] audit: type=1326 audit(1764414361.634:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2405.089131][ T30] audit: type=1326 audit(1764414361.664:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2405.140298][ T30] audit: type=1326 audit(1764414361.664:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2405.593253][ T30] audit: type=1326 audit(1764414361.664:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2405.726514][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2405.834463][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2405.858542][ T30] audit: type=1326 audit(1764414361.664:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2405.874257][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2405.902605][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.052254][ T30] audit: type=1326 audit(1764414361.664:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2406.074302][ C1] vkms_vblank_simulate: vblank timer overrun [ 2406.083482][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.169033][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.301990][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.309799][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.338285][ T30] audit: type=1326 audit(1764414361.664:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2406.360302][ C1] vkms_vblank_simulate: vblank timer overrun [ 2406.375765][ T30] audit: type=1326 audit(1764414361.664:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2406.418720][ T483] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2406.426724][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.521654][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.540121][ T30] audit: type=1326 audit(1764414361.664:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2406.603427][ T2694] input: syz0 as /devices/virtual/input/input99 [ 2406.628646][ T483] usb 4-1: Using ep0 maxpacket: 8 [ 2406.679318][T16842] usb 1-1: USB disconnect, device number 89 [ 2406.686057][ T483] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 2406.741822][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.752625][ T2675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2406.764583][ T30] audit: type=1326 audit(1764414361.664:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2657 comm="syz.1.5967" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2406.787264][ T483] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65024, setting to 64 [ 2406.824625][ T483] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2407.290858][ T483] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2407.309427][ T483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.335793][ T483] usb 4-1: Product: syz [ 2407.379069][ T483] usb 4-1: Manufacturer: syz [ 2407.549072][ T483] usb 4-1: SerialNumber: syz [ 2407.601927][ T483] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2407.699333][ T483] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 2407.711382][ T483] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 2407.798248][ T1067] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2408.002934][ T483] usb 4-1: USB disconnect, device number 39 [ 2408.083576][ T1067] usb 1-1: config index 0 descriptor too short (expected 12592, got 77) [ 2408.093753][ T1067] usb 1-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 2408.109994][ T1067] usb 1-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.120826][ T1067] usb 1-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 2408.162246][ T1067] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2408.171872][ T1067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.180735][ T1067] usb 1-1: Product: syz [ 2408.203272][ T1067] usb 1-1: Manufacturer: syz [ 2408.213903][ T1067] usb 1-1: SerialNumber: syz [ 2409.066683][ T2715] syzkaller0: entered promiscuous mode [ 2409.073259][ T2715] tipc: Resetting bearer [ 2410.226261][ T2724] netlink: 'syz.2.5977': attribute type 1 has an invalid length. [ 2410.353865][ T2724] 8021q: adding VLAN 0 to HW filter on device bond27 [ 2410.377240][ T2727] gretap2: entered promiscuous mode [ 2410.628490][ T1067] usb 1-1: USB disconnect, device number 90 [ 2410.664291][ T2726] 8021q: adding VLAN 0 to HW filter on device bond27 [ 2410.698188][ T1069] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2410.699237][ T2726] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address [ 2410.743641][ T2726] bond27: (slave vxcan1): Error -95 calling set_mac_address [ 2411.157624][ T1069] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2411.452254][ T1069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.491705][ T1069] usb 3-1: Product: syz [ 2411.579298][ T1069] usb 3-1: Manufacturer: syz [ 2411.605715][ T1069] usb 3-1: SerialNumber: syz [ 2411.643682][ T1069] usb 3-1: config 0 descriptor?? [ 2412.526359][ T1069] usb 3-1: USB disconnect, device number 18 [ 2413.087646][ T2776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5982'. [ 2415.134382][ T2788] random: crng reseeded on system resumption [ 2415.337981][ T2801] program syz.4.5986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2415.351633][ T2801] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5986'. [ 2416.008250][ T1069] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2416.199088][ T1069] usb 3-1: Using ep0 maxpacket: 32 [ 2416.267865][ T1069] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2416.286421][ T1069] usb 3-1: config 0 has no interface number 0 [ 2416.305794][ T1069] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2416.333906][ T1069] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2416.430422][ T1069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.490315][ T1069] usb 3-1: Product: syz [ 2416.548400][ T1069] usb 3-1: Manufacturer: syz [ 2416.591104][ T1069] usb 3-1: SerialNumber: syz [ 2416.616406][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2416.616423][ T30] audit: type=1804 audit(1764414373.524:2529): pid=2820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5989" name="/newroot/1184/file1" dev="fuse" ino=1 res=1 errno=0 [ 2416.698821][ T1069] usb 3-1: config 0 descriptor?? [ 2416.750360][ T1069] f81534 3-1:0.12: required endpoints missing [ 2419.065560][T32669] usb 3-1: USB disconnect, device number 19 [ 2420.025907][ T30] audit: type=1326 audit(1764414376.814:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2420.341594][ T30] audit: type=1326 audit(1764414376.814:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2420.518689][ T30] audit: type=1326 audit(1764414376.814:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2420.769083][ T30] audit: type=1326 audit(1764414376.814:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2420.820563][ T30] audit: type=1326 audit(1764414376.814:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2420.930065][ T30] audit: type=1326 audit(1764414376.824:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2421.058476][ T30] audit: type=1326 audit(1764414376.824:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2421.210641][ T30] audit: type=1326 audit(1764414376.824:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2421.297953][ T30] audit: type=1326 audit(1764414376.824:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2866 comm="syz.4.5995" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2423.373288][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2423.373305][ T30] audit: type=1326 audit(1764414380.284:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2903 comm="syz.0.6001" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f65539 code=0x0 [ 2423.400806][ C1] vkms_vblank_simulate: vblank timer overrun [ 2423.630708][ T2905] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2423.640720][ T2905] net_ratelimit: 572 callbacks suppressed [ 2423.640775][ T2905] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2424.014196][ T2918] delete_channel: no stack [ 2424.111638][ T2919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2424.129389][ T2919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2424.344674][ T2919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2424.368284][ T2919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2424.377199][ T2919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2427.951927][ T2962] netlink: 'syz.1.6011': attribute type 13 has an invalid length. [ 2428.063871][ T2957] bond10 (unregistering): Released all slaves [ 2428.274347][ T2962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2429.460909][ T2972] binder: 2969:2972 ioctl c0306201 0 returned -14 [ 2429.471328][ T2972] binder: 2969:2972 ioctl c0306201 0 returned -14 [ 2432.004302][ T3010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6022'. [ 2432.111012][ T3010] 8021q: adding VLAN 0 to HW filter on device bond18 [ 2432.195095][ T3009] netlink: 'syz.4.6019': attribute type 11 has an invalid length. [ 2433.284504][ T3023] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2434.240015][ T3032] netlink: 'syz.4.6025': attribute type 29 has an invalid length. [ 2434.709438][ T3032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2434.719242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2437.158713][ T30] audit: type=1326 audit(1764414394.024:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2437.218971][ T30] audit: type=1326 audit(1764414394.034:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2437.824726][ T30] audit: type=1326 audit(1764414394.034:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2438.081767][ T30] audit: type=1326 audit(1764414394.034:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2438.113452][ T30] audit: type=1326 audit(1764414394.034:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2438.136511][ T30] audit: type=1326 audit(1764414394.034:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2438.160857][ T30] audit: type=1326 audit(1764414394.034:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2438.238312][ T30] audit: type=1326 audit(1764414394.034:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2438.262614][ T30] audit: type=1326 audit(1764414394.034:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2438.297849][ T30] audit: type=1326 audit(1764414394.034:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3041 comm="syz.3.6029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2440.017928][ T3083] netlink: 'syz.1.6031': attribute type 13 has an invalid length. [ 2440.219909][ T3093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.264039][ T3093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.295377][ T3093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.418183][ T3078] binder: 3073:3078 ioctl c0306201 80000100 returned -11 [ 2440.429632][ T3078] fuse: Bad value for 'fd' [ 2440.441883][ T3079] bond10 (unregistering): Released all slaves [ 2440.710832][ T3093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.755668][ T3083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2440.781947][ T3093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2440.890932][ T3098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2441.108603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2441.184764][ T3087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2441.702488][ T3107] syzkaller0: entered promiscuous mode [ 2441.708006][ T3107] syzkaller0: entered allmulticast mode [ 2442.065249][ T3084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6032'. [ 2443.218398][ T3135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6041'. [ 2443.635088][ T3138] Option ' %JCO:D?R%5|$>ܲL&zjy!?&SPZq*)ޑN8<.~@.guYrBK' to dns_resolver key: bad/missing value [ 2444.179349][ T3151] netlink: 2020 bytes leftover after parsing attributes in process `syz.4.6039'. [ 2444.221327][ T3151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6039'. [ 2445.808203][ T1069] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2446.040586][ T3164] program syz.0.6055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2446.060854][ T3164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6055'. [ 2446.258142][ T1069] usb 2-1: Using ep0 maxpacket: 8 [ 2446.276111][ T1069] usb 2-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 2446.286973][ T1069] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2446.298163][ T1069] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2446.317850][ T1069] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2446.336161][ T1069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.366385][ T1069] usb 2-1: Product: syz [ 2446.543184][ T3174] tipc: New replicast peer: 255.255.255.255 [ 2446.552225][ T1069] usb 2-1: Manufacturer: syz [ 2446.568247][ T1069] usb 2-1: SerialNumber: syz [ 2446.574199][ T3174] tipc: Enabled bearer , priority 10 [ 2446.705847][ T1069] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2446.724516][ T3174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2446.733329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2446.801839][ T1069] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2446.808900][ T1069] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2447.364139][ T1069] usb 2-1: USB disconnect, device number 22 [ 2448.603190][ T3190] 8021q: adding VLAN 0 to HW filter on device team0 [ 2448.629420][ T3190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2448.962545][ T3192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2448.979396][ T3190] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2449.030686][ T3192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.039267][ T3192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.051939][ T3190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.060566][ T3190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.068959][ T3190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.077296][ T3190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2449.930183][ T3205] syzkaller0: entered promiscuous mode [ 2450.048268][ T3205] syzkaller0: entered allmulticast mode [ 2452.043111][ T3237] net_ratelimit: 657 callbacks suppressed [ 2452.043130][ T3237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2452.068623][T32669] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 2452.319676][ T3238] fuse: Bad value for 'fd' [ 2452.422419][T32669] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2452.492409][T32669] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 2452.637819][T32669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.687923][T32669] usb 1-1: config 0 descriptor?? [ 2453.274269][T32669] waltop 0003:172F:0037.0038: collection stack underflow [ 2453.287775][T32669] waltop 0003:172F:0037.0038: item 0 1 0 12 parsing failed [ 2453.316660][T32669] waltop 0003:172F:0037.0038: probe with driver waltop failed with error -22 [ 2453.515455][ T3227] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 2453.707336][ T3244] input: syz1 as /devices/virtual/input/input100 [ 2454.160559][ T3262] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2454.481100][ T3265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2454.489661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2455.474962][T32669] usb 1-1: USB disconnect, device number 91 [ 2456.239290][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2456.239307][ T30] audit: type=1326 audit(1764414413.144:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.327140][ T483] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2456.340800][ T30] audit: type=1326 audit(1764414413.144:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.364123][ T483] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2456.398141][ T1067] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 2456.414398][ T30] audit: type=1326 audit(1764414413.144:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.452157][ T3286] tipc: New replicast peer: 255.255.255.255 [ 2456.459323][ T3286] tipc: Enabled bearer , priority 10 [ 2456.472704][ T30] audit: type=1326 audit(1764414413.144:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.494952][ T30] audit: type=1326 audit(1764414413.144:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.517704][ T30] audit: type=1326 audit(1764414413.144:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.548255][ T30] audit: type=1326 audit(1764414413.144:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.572022][ T30] audit: type=1326 audit(1764414413.144:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.594295][ T30] audit: type=1326 audit(1764414413.154:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.617599][ T30] audit: type=1326 audit(1764414413.154:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3273 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2456.657791][ T1067] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2456.667855][ T1067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.715709][ T1067] usb 3-1: Product: syz [ 2456.905895][ T1067] usb 3-1: Manufacturer: syz [ 2457.128800][ T1067] usb 3-1: SerialNumber: syz [ 2457.170788][ T1067] usb 3-1: config 0 descriptor?? [ 2457.178831][ T1069] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 2457.361481][ T1069] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 2457.458907][ T1069] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2457.489791][ T1067] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2457.579066][ T483] tipc: Node number set to 4269801488 [ 2457.659021][ T1069] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2457.850181][ T1069] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2457.894977][ T1069] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2457.951677][ T1069] usb 2-1: Product: syz [ 2458.013104][ T1069] usb 2-1: Manufacturer: syz [ 2458.032306][ T1069] usb 2-1: SerialNumber: syz [ 2458.097563][ T1069] usb 2-1: config 0 descriptor?? [ 2458.140864][ T1069] usb 2-1: selecting invalid altsetting 0 [ 2458.564760][ T3284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2458.579028][ T3284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2458.640801][ T483] usb 2-1: USB disconnect, device number 23 [ 2460.813044][ T3321] delete_channel: no stack [ 2460.835157][ T3320] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6074'. [ 2461.048275][ T1067] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2461.072271][ T1067] usb 3-1: USB disconnect, device number 20 [ 2461.188767][T32669] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2461.539300][ T3331] fuse: Bad value for 'fd' [ 2461.751116][T32669] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2461.782954][T32669] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2461.998523][T32669] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2462.438844][T32669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.459633][ T3321] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2462.473044][T32669] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2462.925228][ T3321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2462.934666][ T3321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2463.205679][ T3345] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2464.108282][ T1067] usb 1-1: USB disconnect, device number 92 [ 2466.648717][T32669] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2466.826471][T32669] usb 3-1: Using ep0 maxpacket: 8 [ 2466.907870][ T3381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6086'. [ 2467.288686][T32669] usb 3-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 2467.315737][ T3382] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 2467.378967][T32669] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65024, setting to 64 [ 2467.616100][T32669] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2467.712603][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.719939][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.841266][T32669] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2467.883390][T32669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.928646][T32669] usb 3-1: Product: syz [ 2467.932846][T32669] usb 3-1: Manufacturer: syz [ 2467.937534][T32669] usb 3-1: SerialNumber: syz [ 2468.000535][ T3389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6087'. [ 2468.011768][T32669] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2468.024609][T32669] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 2468.037455][T32669] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 2468.064849][ T3389] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2468.435789][ T1067] usb 3-1: USB disconnect, device number 21 [ 2468.633966][ T3412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2469.737822][ T3423] misc userio: The device must be registered before sending interrupts [ 2470.000351][T32669] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 2470.171271][T32669] usb 3-1: No LPM exit latency info found, disabling LPM. [ 2470.181876][T32669] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 2470.206675][T32669] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 2470.301768][T32669] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2470.341620][T32669] usb 3-1: string descriptor 0 read error: -22 [ 2470.351809][T32669] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2470.362760][T32669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2470.380181][ T3423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2470.387947][ T3423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2470.869222][ T3421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2470.881160][ T3421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2472.974321][T32669] usb 3-1: USB disconnect, device number 22 [ 2473.856333][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2473.856355][ T30] audit: type=1326 audit(1764414430.684:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2474.025418][ T30] audit: type=1326 audit(1764414430.684:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2474.158200][ T30] audit: type=1326 audit(1764414430.684:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2474.545291][ T30] audit: type=1326 audit(1764414430.684:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2474.808664][ T30] audit: type=1326 audit(1764414430.684:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2474.858743][ T30] audit: type=1326 audit(1764414430.684:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2474.909480][ T30] audit: type=1326 audit(1764414430.684:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2475.058718][ T30] audit: type=1326 audit(1764414430.684:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2475.318409][ T30] audit: type=1326 audit(1764414430.684:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2475.432296][ T30] audit: type=1326 audit(1764414430.684:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3442 comm="syz.2.6098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc5539 code=0x7ffc0000 [ 2475.534305][ T3464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2475.542983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.311764][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.320628][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.330266][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.348749][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.357470][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.491994][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.501011][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.570961][ T3474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2477.828382][ T3476] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2477.834942][ T3476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2477.897581][ T3483] netdevsim netdevsim4: Direct firmware load for nel/address_bits failed with error -2 [ 2478.158930][ T3476] vhci_hcd vhci_hcd.0: Device attached [ 2478.255270][ T3489] pim6reg: entered allmulticast mode [ 2478.478594][ T1069] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 2478.621877][ T3492] tipc: New replicast peer: 255.255.255.255 [ 2478.674680][ T3492] tipc: Enabled bearer , priority 10 [ 2479.125838][ T3483] netdevsim netdevsim4: Falling back to sysfs fallback for: nel/address_bits [ 2479.449959][ T483] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2479.620635][ T483] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 2479.642775][ T483] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2479.675489][ T483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2479.731901][ T483] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2479.754931][ T483] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2479.768461][ T1067] tipc: Node number set to 1265655187 [ 2479.811634][ T483] usb 4-1: Product: syz [ 2479.832038][ T483] usb 4-1: Manufacturer: syz [ 2479.852861][ T483] usb 4-1: SerialNumber: syz [ 2479.910730][ T483] usb 4-1: config 0 descriptor?? [ 2479.971790][ T483] usb 4-1: selecting invalid altsetting 0 [ 2480.309139][ T3477] vhci_hcd: connection reset by peer [ 2480.417356][ T36] vhci_hcd: stop threads [ 2480.429732][ T36] vhci_hcd: release socket [ 2480.439182][ T3498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2480.462716][ T36] vhci_hcd: disconnect device [ 2480.472747][ T3498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2480.649950][ T483] usb 4-1: USB disconnect, device number 40 [ 2481.198839][T16847] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2481.297695][ T3513] netlink: 'syz.0.6106': attribute type 13 has an invalid length. [ 2481.411198][ T3518] net_ratelimit: 574 callbacks suppressed [ 2481.411218][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.430141][ T3508] bond19 (unregistering): Released all slaves [ 2481.448703][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.509749][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.540509][ T3513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2481.556977][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.581694][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.591161][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.600620][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.609886][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2481.620681][ T3518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2482.187456][T16847] usb 2-1: config 0 has no interfaces? [ 2482.216973][T16847] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2482.231726][T16847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2482.242335][T16847] usb 2-1: Product: syz [ 2482.248248][T16847] usb 2-1: Manufacturer: syz [ 2482.448237][T16847] usb 2-1: SerialNumber: syz [ 2482.549409][T16847] usb 2-1: config 0 descriptor?? [ 2483.651679][ T3534] pimreg: entered allmulticast mode [ 2483.661623][ T3534] pimreg: left allmulticast mode [ 2483.728240][ T1069] vhci_hcd: vhci_device speed not set [ 2483.914726][T16842] usb 2-1: USB disconnect, device number 24 [ 2484.697122][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 2484.697135][ T30] audit: type=1326 audit(1764414441.604:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2484.757054][ T30] audit: type=1326 audit(1764414441.644:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2484.846002][ T30] audit: type=1326 audit(1764414441.644:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2486.029350][ T30] audit: type=1326 audit(1764414441.644:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2486.233692][ T3566] pim6reg: entered allmulticast mode [ 2486.268334][ T30] audit: type=1326 audit(1764414441.644:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2486.431008][ T30] audit: type=1326 audit(1764414441.644:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2486.626165][ T30] audit: type=1326 audit(1764414441.644:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2486.680762][ T30] audit: type=1326 audit(1764414441.644:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2487.001310][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6119'. [ 2487.028616][ T30] audit: type=1326 audit(1764414441.644:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2487.061082][ T30] audit: type=1326 audit(1764414441.644:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3544 comm="syz.1.6115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2488.141533][ T3594] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6122'. [ 2490.107797][ T3607] pimreg: entered allmulticast mode [ 2490.842187][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6126'. [ 2492.407054][ T3633] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2492.480352][ T3632] misc userio: No port type given on /dev/userio [ 2495.545835][ T3656] blkio.reset_stats is deprecated [ 2496.981189][ T3686] netlink: 'syz.2.6139': attribute type 12 has an invalid length. [ 2497.404984][ T3691] pimreg: entered allmulticast mode [ 2497.411685][ T3691] pimreg: left allmulticast mode [ 2498.593739][ T3700] net_ratelimit: 573 callbacks suppressed [ 2498.593752][ T3700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2498.643180][ T3700] gtp0: entered promiscuous mode [ 2500.234463][ T3714] misc userio: No port type given on /dev/userio [ 2500.417488][ T3716] hub 9-0:1.0: USB hub found [ 2500.423139][ T3716] hub 9-0:1.0: 1 port detected [ 2500.832909][ T3725] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2501.928138][ T1069] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2502.180209][ T1069] usb 1-1: Using ep0 maxpacket: 8 [ 2502.191828][ T1069] usb 1-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 2502.205127][ T1069] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 47872, setting to 64 [ 2502.236703][ T1069] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2502.297342][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2502.297360][ T30] audit: type=1326 audit(1764414459.194:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.408766][ T1069] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2502.419888][ T1069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2502.427918][ T1069] usb 1-1: Product: syz [ 2502.491978][ T30] audit: type=1326 audit(1764414459.194:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.529248][ T30] audit: type=1326 audit(1764414459.194:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.561821][ T1069] usb 1-1: Manufacturer: syz [ 2502.566666][ T30] audit: type=1326 audit(1764414459.194:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.596763][ T30] audit: type=1326 audit(1764414459.194:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.788421][ T1069] usb 1-1: SerialNumber: syz [ 2502.819505][ T30] audit: type=1326 audit(1764414459.194:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.861440][ T1069] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 2502.862698][ T30] audit: type=1326 audit(1764414459.364:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.895729][ T30] audit: type=1326 audit(1764414459.364:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2502.922811][ T1069] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 2502.938136][ T1069] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 2503.199661][ T1069] usb 1-1: USB disconnect, device number 93 [ 2503.228808][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.237232][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.261120][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.309634][ T30] audit: type=1326 audit(1764414459.364:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3740 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2503.343156][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.360144][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.403161][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.418274][ T30] audit: type=1326 audit(1764414459.504:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3732 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2503.457085][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.469843][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.479021][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.598658][ T3751] net_ratelimit: 513 callbacks suppressed [ 2503.598679][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.613315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.623330][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.632680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.641747][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.650623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.659714][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.668086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.677031][ T3751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2503.685898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2505.196007][ T3761] netlink: 'syz.3.6156': attribute type 12 has an invalid length. [ 2507.893039][ T3785] trusted_key: encrypted_key: insufficient parameters specified [ 2507.921612][ T3785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6170'. [ 2508.399524][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2508.400368][ T30] audit: type=1326 audit(1764414465.254:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2508.518542][ T3793] gtp0: entered promiscuous mode [ 2508.948608][ T30] audit: type=1326 audit(1764414465.254:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2509.348666][ T30] audit: type=1326 audit(1764414465.254:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2509.488948][ T30] audit: type=1326 audit(1764414465.254:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2509.548812][ T30] audit: type=1326 audit(1764414465.264:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2509.651462][ T30] audit: type=1326 audit(1764414465.264:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2509.799861][ T30] audit: type=1326 audit(1764414465.264:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2509.852870][ T30] audit: type=1326 audit(1764414465.264:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2509.911906][ T3806] netlink: 'syz.0.6164': attribute type 4 has an invalid length. [ 2510.014322][ T30] audit: type=1326 audit(1764414465.264:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2510.154615][ T30] audit: type=1326 audit(1764414465.264:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3783 comm="syz.4.6161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 2512.331617][ T3835] net_ratelimit: 50 callbacks suppressed [ 2512.331630][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.374795][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.383957][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.392713][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.412775][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.423046][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.435116][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.447174][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.458159][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.470601][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2512.603854][ T3836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6169'. [ 2512.976432][ T3847] xt_bpf: check failed: parse error [ 2514.090563][ T3849] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2514.097124][ T3849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2514.106444][ T3849] vhci_hcd vhci_hcd.0: Device attached [ 2514.176078][ T3849] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 2514.194208][ T3849] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 2514.348240][T16847] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 2515.762116][ T3867] trusted_key: encrypted_key: insufficient parameters specified [ 2515.807794][ T3867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6176'. [ 2515.917227][ T1069] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 2516.277534][ T1069] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2516.292999][ T1069] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2516.323258][ T1069] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2516.363503][ T1069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.782522][ T3864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2516.790411][ T3864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2516.857385][ T1069] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2517.180946][ T3881] gtp1: entered promiscuous mode [ 2519.227354][ T483] usb 1-1: USB disconnect, device number 94 [ 2519.989527][ T3909] net_ratelimit: 572 callbacks suppressed [ 2519.989552][ T3909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2520.004009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2521.865092][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6192'. [ 2521.953030][ T3928] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6192'. [ 2521.992471][ T3928] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6192'. [ 2522.276788][ T3934] netlink: 'syz.1.6193': attribute type 10 has an invalid length. [ 2522.409378][ T3936] netlink: 'syz.1.6193': attribute type 10 has an invalid length. [ 2522.504424][ T3934] bond0: (slave netdevsim0): Releasing backup interface [ 2522.632950][ T3934] team0: Port device netdevsim0 added [ 2522.684575][ T3936] team0: Port device netdevsim0 removed [ 2522.703388][ T3936] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2524.150861][ T3946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6195'. [ 2524.199568][ T3946] pimreg: entered allmulticast mode [ 2524.208546][ T3946] pimreg: left allmulticast mode [ 2524.225274][ T3950] loop2: detected capacity change from 0 to 7 [ 2524.286278][ T3950] Dev loop2: unable to read RDB block 7 [ 2524.299479][ T3950] loop2: AHDI p1 p2 p3 [ 2524.303841][ T3950] loop2: partition table partially beyond EOD, truncated [ 2524.311451][ T3950] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2524.318741][ T3950] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2525.137007][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.157882][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.184713][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.184863][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.184963][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.185068][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.185162][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.185264][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.185356][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2525.185448][ T3961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2527.849891][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6206'. [ 2529.152512][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.152574][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.177884][ T4022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6211'. [ 2531.500152][ T4032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6213'. [ 2534.406215][ T4063] pimreg: entered allmulticast mode [ 2534.412825][ T4063] pimreg: left allmulticast mode [ 2535.383653][ T4075] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2536.729924][ T4090] xt_bpf: check failed: parse error [ 2537.132473][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6225'. [ 2537.653827][ T4105] net_ratelimit: 671 callbacks suppressed [ 2537.653839][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.669171][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.688897][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.714416][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.723558][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.762639][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.782904][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.791293][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.800030][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2537.819003][ T4105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2540.890214][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2540.890232][ T30] audit: type=1326 audit(1764414497.794:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2540.963025][ T30] audit: type=1326 audit(1764414497.794:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2541.060111][ T30] audit: type=1326 audit(1764414497.804:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2541.268635][ T30] audit: type=1326 audit(1764414497.804:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2541.347877][ T30] audit: type=1326 audit(1764414497.864:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4135 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2541.399143][ T30] audit: type=1326 audit(1764414497.864:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2541.448389][ T483] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2541.751048][ T4146] xt_bpf: check failed: parse error [ 2542.006855][ T483] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2542.070953][ T483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2542.106550][ T483] usb 2-1: Product: syz [ 2542.123830][ T483] usb 2-1: Manufacturer: syz [ 2542.131740][ T30] audit: type=1326 audit(1764414497.864:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2542.155024][ T483] usb 2-1: SerialNumber: syz [ 2542.169351][ T483] usb 2-1: config 0 descriptor?? [ 2542.176987][ T30] audit: type=1326 audit(1764414497.944:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2542.199738][ T30] audit: type=1326 audit(1764414497.944:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2542.222671][ T30] audit: type=1326 audit(1764414497.944:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4126 comm="syz.1.6233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2542.223972][ T483] ch341 2-1:0.0: ch341-uart converter detected [ 2542.946709][ T4158] QAT: failed to copy from user. [ 2543.475517][ T483] usb 2-1: failed to receive control message: -110 [ 2543.595499][ T483] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2544.055130][ T4172] netlink: 'syz.4.6244': attribute type 10 has an invalid length. [ 2544.067528][ T4172] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2544.076755][ T4172] team0: Port device netdevsim0 added [ 2544.093463][ T4172] netlink: 'syz.4.6244': attribute type 10 has an invalid length. [ 2544.102133][ T4172] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 2544.146688][ T4172] team0: Port device netdevsim0 removed [ 2545.360245][ T1069] usb 2-1: USB disconnect, device number 25 [ 2545.367711][ T1069] ch341 2-1:0.0: device disconnected [ 2547.573671][ T4206] tipc: Enabling of bearer rejected, already enabled [ 2549.359344][ T4223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2550.801898][ T4238] netlink: 'syz.0.6258': attribute type 10 has an invalid length. [ 2550.810359][ T4238] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2550.838070][ T4238] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2550.855032][ T4238] team0: Port device netdevsim0 added [ 2550.860042][ T4239] netlink: 'syz.0.6258': attribute type 10 has an invalid length. [ 2550.881290][ T4239] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2551.173089][ T4239] team0: Port device netdevsim0 removed [ 2552.170495][ T4255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2552.434875][ T4263] netlink: 'syz.2.6262': attribute type 1 has an invalid length. [ 2552.443144][ T4263] netlink: 'syz.2.6262': attribute type 1 has an invalid length. [ 2552.462001][ T4263] netlink: 'syz.2.6262': attribute type 1 has an invalid length. [ 2558.891665][ T4320] vhci_hcd vhci_hcd.0: port 0 already used [ 2558.988902][ T4320] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 2558.995530][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2559.022253][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 2559.040489][ T4328] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 2559.047098][ T4328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2559.083336][ T4325] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 2559.089980][ T4325] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2559.105380][ T4328] vhci_hcd vhci_hcd.0: Device attached [ 2559.145311][ T4320] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 2559.151926][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2559.186663][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 2559.201890][ T4325] vhci_hcd vhci_hcd.0: Device attached [ 2559.288966][ T4320] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(20) [ 2559.295600][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2559.309231][ T4325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2559.336878][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 2559.392257][ T4320] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2559.468881][ T4325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2559.521845][ T4320] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(30) [ 2559.528490][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2559.614135][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 2559.963117][ T4329] vhci_hcd: connection closed [ 2559.963320][ T4323] vhci_hcd: connection closed [ 2559.968137][ T4326] vhci_hcd: connection closed [ 2559.973018][ T36] vhci_hcd: stop threads [ 2559.982109][ T4331] vhci_hcd: connection closed [ 2559.982382][ T36] vhci_hcd: release socket [ 2560.009427][ T36] vhci_hcd: disconnect device [ 2560.018883][ T4333] vhci_hcd: connection closed [ 2560.019955][ T36] vhci_hcd: stop threads [ 2560.037903][ T36] vhci_hcd: release socket [ 2560.042965][ T36] vhci_hcd: disconnect device [ 2560.072745][ T36] vhci_hcd: stop threads [ 2560.140003][ T36] vhci_hcd: release socket [ 2560.145539][ T36] vhci_hcd: disconnect device [ 2560.152970][ T36] vhci_hcd: stop threads [ 2560.157542][ T36] vhci_hcd: release socket [ 2560.167876][ T36] vhci_hcd: disconnect device [ 2560.183445][ T36] vhci_hcd: stop threads [ 2560.190554][ T36] vhci_hcd: release socket [ 2560.199002][ T36] vhci_hcd: disconnect device [ 2560.656214][ T4338] vhci_hcd: connection closed [ 2560.670091][T16842] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2560.695102][ T12] vhci_hcd: stop threads [ 2560.701290][ T12] vhci_hcd: release socket [ 2560.706474][ T12] vhci_hcd: disconnect device [ 2560.858839][T16842] usb 4-1: Using ep0 maxpacket: 16 [ 2560.865468][T16842] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 2560.878721][T16842] usb 4-1: config 0 has no interface number 0 [ 2560.911063][T16842] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2560.934828][T16842] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2560.960843][T16842] usb 4-1: Product: syz [ 2560.971027][T16842] usb 4-1: Manufacturer: syz [ 2560.984231][T16842] usb 4-1: SerialNumber: syz [ 2561.125816][T16842] usb 4-1: config 0 descriptor?? [ 2561.488722][ T1069] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2561.668665][ T1069] usb 3-1: Using ep0 maxpacket: 32 [ 2561.709291][ T1069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2561.820743][ T1069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.857938][ T1069] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2561.872837][ T4367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6283'. [ 2561.954515][ T1069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.069350][ T1069] usb 3-1: config 0 descriptor?? [ 2562.686536][T18850] usb 4-1: USB disconnect, device number 41 [ 2564.007606][ T4383] tipc: Enabling of bearer rejected, already enabled [ 2564.855782][ T1069] usb 3-1: string descriptor 0 read error: -71 [ 2564.876755][ T1069] usbhid 3-1:0.0: can't add hid device: -71 [ 2564.885808][ T1069] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2564.897202][ T1069] usb 3-1: USB disconnect, device number 23 [ 2566.748829][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6291'. [ 2566.795296][ T4406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6291'. [ 2567.650983][ T4418] netlink: 'syz.2.6292': attribute type 10 has an invalid length. [ 2567.695758][ T4418] netdevsim netdevsim2 : entered promiscuous mode [ 2567.719219][ T4418] team0: Port device  added [ 2567.754494][ T4420] netlink: 'syz.2.6292': attribute type 10 has an invalid length. [ 2567.806009][ T4420] netdevsim netdevsim2 : left promiscuous mode [ 2568.099982][ T4420] team0: Port device  removed [ 2569.004635][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6295'. [ 2569.014400][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6295'. [ 2571.039005][ T4451] netlink: 'syz.4.6299': attribute type 2 has an invalid length. [ 2571.355218][ T4446] net_ratelimit: 572 callbacks suppressed [ 2571.355240][ T4446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2571.370507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2572.801518][ T4467] tipc: Enabled bearer , priority 10 [ 2573.128441][ T4477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2573.206797][ T4473] pimreg: entered allmulticast mode [ 2575.177950][ T4492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2575.186384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2577.112845][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6311'. [ 2577.703421][ T4512] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2578.189137][ T483] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2578.396607][ T483] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2578.408524][ T483] usb 2-1: config 0 has no interface number 0 [ 2578.434559][ T483] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 2578.471589][ T483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.501522][ T483] usb 2-1: Product: syz [ 2578.518868][ T483] usb 2-1: Manufacturer: syz [ 2578.534965][ T483] usb 2-1: SerialNumber: syz [ 2578.567036][ T483] usb 2-1: config 0 descriptor?? [ 2578.595827][ T483] ftdi_sio 2-1:0.117: FTDI USB Serial Device converter detected [ 2578.656491][ T483] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 2578.870444][ T483] usb 2-1: USB disconnect, device number 26 [ 2578.877256][ T483] ftdi_sio 2-1:0.117: device disconnected [ 2578.985211][ T4522] gtp1: entered promiscuous mode [ 2580.185705][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6316'. [ 2582.513481][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6322'. [ 2582.638664][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6322'. [ 2584.442679][ T4582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6325'. [ 2585.414643][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6327'. [ 2585.710399][ T4593] tipc: Enabled bearer , priority 10 [ 2586.451591][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6330'. [ 2588.623547][ T4626] syz.0.6335 (4626): drop_caches: 2 [ 2589.680626][ T4641] delete_channel: no stack [ 2590.598937][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.607506][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.668227][ T1069] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2591.308997][ T1069] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2591.328800][ T1069] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2591.366938][ T1069] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2591.394778][ T1069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2591.574914][ T4639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2591.690867][ T1069] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2591.774866][ T4650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6338'. [ 2591.828633][T16842] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2592.018597][T16842] usb 2-1: Using ep0 maxpacket: 8 [ 2592.280660][T16842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2592.291352][T16842] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2592.312190][T16842] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2592.322673][T16842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.336249][T16842] usb 2-1: Product: syz [ 2592.344085][T16842] usb 2-1: Manufacturer: syz [ 2592.351747][T16842] usb 2-1: SerialNumber: syz [ 2592.395948][T16842] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2592.411186][T16842] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2592.417621][T16842] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2592.732234][T18850] usb 2-1: USB disconnect, device number 27 [ 2592.888629][ T483] usb 3-1: USB disconnect, device number 24 [ 2593.397939][ T4672] netlink: 'syz.0.6342': attribute type 9 has an invalid length. [ 2593.407315][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6342'. [ 2594.514648][ T4682] netlink: 'syz.1.6343': attribute type 1 has an invalid length. [ 2594.522982][ T4682] netlink: 'syz.1.6343': attribute type 1 has an invalid length. [ 2594.531893][ T4682] netlink: 'syz.1.6343': attribute type 1 has an invalid length. [ 2594.674795][ T4683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2594.830079][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6345'. [ 2597.111125][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6348'. [ 2598.168150][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6352'. [ 2599.084776][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6355'. [ 2599.132526][ T4745] netlink: 'syz.3.6356': attribute type 10 has an invalid length. [ 2599.202127][ T4746] netlink: 'syz.3.6356': attribute type 10 has an invalid length. [ 2599.292924][ T4746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6356'. [ 2599.495737][ T4718] tipc: Resetting bearer [ 2600.526304][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6353'. [ 2600.558424][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6353'. [ 2600.662159][ T4737] : entered promiscuous mode [ 2601.347096][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.355878][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.364786][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.373697][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.383108][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.392988][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.415255][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.424000][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.434210][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2601.444403][ T4764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2603.733338][ T4779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2604.883172][ T4790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6365'. [ 2605.001754][ T4790] pimreg: entered allmulticast mode [ 2605.007113][ T4791] pimreg: left allmulticast mode [ 2605.639574][ T4802] program syz.0.6366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2606.665915][ T4806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6367'. [ 2607.284980][ T4802] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2607.490612][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6369'. [ 2607.507308][ T4818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6369'. [ 2608.361226][ T4823] net_ratelimit: 572 callbacks suppressed [ 2608.361239][ T4823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2608.376270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2608.402348][ T4823] input: syz0 as /devices/virtual/input/input104 [ 2608.595515][ T4832] vivid-007: ================= START STATUS ================= [ 2608.603905][ T4832] vivid-007: FM Deviation: 75000 [ 2608.611970][ T4832] vivid-007: ================== END STATUS ================== [ 2609.457720][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6374'. [ 2609.467840][ T4840] pimreg: left allmulticast mode [ 2610.131706][ T4856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6378'. [ 2610.155722][ T4856] pimreg: entered allmulticast mode [ 2610.162773][ T4856] pimreg: left allmulticast mode [ 2611.028089][ T1072] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2611.086689][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6379'. [ 2611.189061][ T1072] usb 4-1: Using ep0 maxpacket: 8 [ 2611.212155][ T1072] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2611.348723][ T1072] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2612.065362][ T1072] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2612.167194][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.193725][ T1072] usb 4-1: Product: syz [ 2612.208692][ T1072] usb 4-1: Manufacturer: syz [ 2612.244711][ T1072] usb 4-1: SerialNumber: syz [ 2612.295803][ T1072] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2612.365457][ T1072] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 2612.397565][ T1072] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 2612.839410][T32669] usb 4-1: USB disconnect, device number 42 [ 2613.090214][ T4879] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[4879] [ 2613.165637][ T4879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6381'. [ 2613.796569][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.817061][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.826172][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.835206][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.844174][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.879085][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.889160][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.908997][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.917920][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2613.926886][ T4892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2615.547497][ T4903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2617.433752][ T4925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6391'. [ 2617.453709][ T4925] pimreg: entered allmulticast mode [ 2617.461188][ T4925] pimreg: left allmulticast mode [ 2617.537310][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6390'. [ 2619.772130][ T4946] netlink: 'syz.1.6395': attribute type 9 has an invalid length. [ 2619.780126][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6395'. [ 2620.608143][ T1072] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2620.841600][ T4961] net_ratelimit: 572 callbacks suppressed [ 2620.841621][ T4961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.856661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2621.017142][ T1072] usb 1-1: Using ep0 maxpacket: 8 [ 2621.037759][ T1072] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2621.048461][ T1072] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2621.171459][ T1072] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2621.197817][ T1072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2621.213735][ T1072] usb 1-1: Product: syz [ 2621.221734][ T1072] usb 1-1: Manufacturer: syz [ 2621.226592][ T1072] usb 1-1: SerialNumber: syz [ 2621.349606][ T1072] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 2621.417212][ T1072] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 2621.440297][ T1072] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 2622.031943][ T4982] binder: 4973:4982 ioctl c018620c 80000380 returned -22 [ 2622.385739][T32669] usb 1-1: USB disconnect, device number 95 [ 2623.336598][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.345286][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.354441][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.363087][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.371562][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.379977][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.388653][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2623.397416][ T4996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2626.975091][ T5032] binder: 5023:5032 ioctl c0306201 0 returned -14 [ 2628.622724][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6412'. [ 2630.198709][ T1072] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2630.305170][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6415'. [ 2630.438141][ T1072] usb 3-1: Using ep0 maxpacket: 8 [ 2630.450636][ T1072] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2630.465197][ T1072] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2630.582793][ T1072] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2630.654887][ T1072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.666729][ T1072] usb 3-1: Product: syz [ 2630.680412][ T1072] usb 3-1: Manufacturer: syz [ 2630.691972][ T1072] usb 3-1: SerialNumber: syz [ 2630.721594][ T1072] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2630.731886][ T1072] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 2630.740960][ T1072] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 2630.750372][ T5070] netlink: 'syz.1.6416': attribute type 12 has an invalid length. [ 2631.224625][ T1072] usb 3-1: USB disconnect, device number 25 [ 2632.049911][ T5080] net_ratelimit: 574 callbacks suppressed [ 2632.049987][ T5080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2632.277451][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.288549][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.301143][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.344403][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.359052][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.378043][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.398052][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.409494][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.418150][ T5080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2633.600697][ T1072] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2633.768091][ T1072] usb 4-1: Using ep0 maxpacket: 32 [ 2633.778505][ T1072] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 2633.791967][ T1072] usb 4-1: config 9 has no interface number 0 [ 2633.798715][ T1072] usb 4-1: config 9 interface 37 has no altsetting 0 [ 2633.834446][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6422'. [ 2633.928177][ T1072] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 2633.941799][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.019456][ T1072] usb 4-1: Product: х [ 2634.023557][ T1072] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣 [ 2634.204740][ T1072] usb 4-1: SerialNumber: syz [ 2635.573368][ T5116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6427'. [ 2635.587765][ T5116] pimreg: left allmulticast mode [ 2635.933075][ T5107] sctp: [Deprecated]: syz.0.6423 (pid 5107) Use of int in maxseg socket option. [ 2635.933075][ T5107] Use struct sctp_assoc_value instead [ 2635.948744][T32669] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2636.314170][T32669] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2636.348161][T32669] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2636.690109][T32669] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2636.727524][T32669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2636.799267][ T1072] gspca_main: spca506-2.14.0 probing 0734:043b [ 2636.869293][T32669] usb 2-1: SerialNumber: syz [ 2637.821321][ T1072] usb 4-1: USB disconnect, device number 43 [ 2638.570672][T32669] usb 2-1: 0:2 : does not exist [ 2638.744057][T32669] usb 2-1: USB disconnect, device number 28 [ 2639.086161][ T5059] udevd[5059]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2639.461140][ T5163] binder: 5149:5163 ioctl c018620c 80000380 returned -22 [ 2640.800726][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6433'. [ 2641.834507][ T5189] binder: 5181:5189 ioctl c018620c 800002c0 returned -1 [ 2642.753591][ T5195] 8021q: adding VLAN 0 to HW filter on device team0 [ 2642.948825][ T5195] net_ratelimit: 594 callbacks suppressed [ 2642.948832][ T5195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2642.989690][ T5201] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6440'. [ 2643.723796][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6441'. [ 2645.019118][ T5222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6442'. [ 2646.658050][ T4729] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2647.366780][ T4729] usb 3-1: Using ep0 maxpacket: 8 [ 2647.449358][ T4729] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 2647.648598][ T4729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2647.666533][ T4729] usb 3-1: config 0 has no interface number 0 [ 2647.689108][ T4729] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2647.701095][ T4729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.716608][ T4729] usb 3-1: Product: syz [ 2647.722945][ T4729] usb 3-1: Manufacturer: syz [ 2647.727571][ T4729] usb 3-1: SerialNumber: syz [ 2647.750640][ T4729] usb 3-1: config 0 descriptor?? [ 2647.765113][ T5252] binder: 5241:5252 ioctl c018620c 80000380 returned -22 [ 2648.187209][ T4729] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2648.195617][ T4729] uvcvideo 3-1:0.31: No valid video chain found. [ 2648.796731][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6450'. [ 2648.841624][ T5260] pimreg: entered allmulticast mode [ 2648.850114][ T5260] pimreg: left allmulticast mode [ 2649.010551][ T5266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2650.599209][ T5276] netlink: 'syz.4.6453': attribute type 27 has an invalid length. [ 2650.966664][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6455'. [ 2651.030199][ T4729] usb 3-1: USB disconnect, device number 26 [ 2651.318149][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2651.318167][ T30] audit: type=1326 audit(1764414608.204:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2651.608393][ T30] audit: type=1326 audit(1764414608.204:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2651.638341][ T30] audit: type=1326 audit(1764414608.204:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2651.776523][ T30] audit: type=1326 audit(1764414608.204:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2651.853657][ T30] audit: type=1326 audit(1764414608.204:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2652.059167][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.065539][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.065567][ T30] audit: type=1326 audit(1764414608.204:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2652.256873][ T30] audit: type=1326 audit(1764414608.214:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2652.448271][ T30] audit: type=1326 audit(1764414608.214:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2652.781072][ T30] audit: type=1326 audit(1764414608.214:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2652.850663][ T30] audit: type=1326 audit(1764414608.214:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.1.6456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2653.280759][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.289737][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.298698][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.307074][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.316477][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.328764][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.398667][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.406929][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.426106][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.598857][ T5311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6459'. [ 2654.048618][ T5303] net_ratelimit: 337 callbacks suppressed [ 2654.048639][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.062895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.073741][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.082124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.091117][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.099524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.108318][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.116623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.125458][ T5303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.133851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2655.346099][ T5321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6472'. [ 2656.485319][ T5331] fuse: Unknown parameter 'mGN8oad' [ 2656.762658][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2656.768999][ T5334] usb usb8: usbfs: process 5334 (syz.1.6464) did not claim interface 0 before use [ 2656.783893][ T30] audit: type=1400 audit(1764414613.674:2908): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5327 comm="syz.1.6464" [ 2658.755369][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6467'. [ 2658.828881][ T5358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6467'. [ 2660.432897][ T30] audit: type=1326 audit(1764414617.344:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.2.6473" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc5539 code=0x0 [ 2661.645372][ T5391] netdevsim netdevsim1: Direct firmware load for . [ 2661.645372][ T5391] failed with error -2 [ 2661.688730][ T5391] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2661.688730][ T5391] [ 2662.544938][ T5398] net_ratelimit: 912 callbacks suppressed [ 2662.544956][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.559387][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.567777][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.576253][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.584716][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.593276][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.602946][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.611419][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.619901][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2662.628526][ T5398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2663.806346][ T5410] netlink: 'syz.2.6479': attribute type 1 has an invalid length. [ 2664.797862][ T5430] usb usb8: usbfs: process 5430 (syz.2.6482) did not claim interface 0 before use [ 2667.771720][ T5459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6487'. [ 2673.213122][ T5520] net_ratelimit: 1258 callbacks suppressed [ 2673.213134][ T5520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.247373][ T5520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.261108][ T5520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.272473][ T5520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.289307][ T5520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.304188][ T5520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.401162][ T5520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.553227][ T5523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.562910][ T5523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.571748][ T5523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2676.274449][ T5552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6500'. [ 2676.292948][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6500'. [ 2676.302477][ T5552] netlink: 91 bytes leftover after parsing attributes in process `syz.0.6500'. [ 2679.236114][ T5601] binder: 5594:5601 ioctl c018620c 800002c0 returned -1 [ 2684.959735][ T30] audit: type=1326 audit(1764414641.854:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5664 comm="syz.0.6517" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f65539 code=0x0 [ 2687.112235][ T5687] net_ratelimit: 241 callbacks suppressed [ 2687.112253][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.126972][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.135927][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.144904][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.153799][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.182109][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.234059][ T5688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2687.341638][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.355581][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.364612][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.373542][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2689.004265][ T30] audit: type=1326 audit(1764414645.914:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2689.119112][ T30] audit: type=1326 audit(1764414645.944:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2689.161432][ T30] audit: type=1326 audit(1764414645.944:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2689.496118][ T30] audit: type=1326 audit(1764414645.944:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2689.657428][ T30] audit: type=1326 audit(1764414645.944:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2689.715330][ T30] audit: type=1326 audit(1764414645.944:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2689.765905][ T30] audit: type=1326 audit(1764414645.944:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2689.827378][ T30] audit: type=1326 audit(1764414645.944:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2690.030649][ T30] audit: type=1326 audit(1764414645.944:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2690.084925][ T30] audit: type=1326 audit(1764414645.944:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2690.168049][ T30] audit: type=1326 audit(1764414645.944:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2691.094675][ T30] audit: type=1326 audit(1764414645.944:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2691.188362][ T30] audit: type=1326 audit(1764414645.944:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2691.310199][ T30] audit: type=1326 audit(1764414645.944:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2691.702043][ T5723] fuse: Unknown parameter '0x0000000000000009' [ 2691.721597][ T5723] fuse: Unknown parameter '0x0000000000000008 g%wA˘v' [ 2691.753093][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6538'. [ 2691.788010][ T30] audit: type=1326 audit(1764414645.944:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2691.810015][ C0] vkms_vblank_simulate: vblank timer overrun [ 2691.845412][ T5729] pimreg: entered allmulticast mode [ 2691.863938][ T5731] pimreg: left allmulticast mode [ 2691.948272][ T30] audit: type=1326 audit(1764414645.944:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2692.048428][ T4731] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2692.161028][ T30] audit: type=1326 audit(1764414645.944:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2692.184494][ T30] audit: type=1326 audit(1764414645.944:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5700 comm="syz.0.6525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f65539 code=0x7ffc0000 [ 2692.207549][ C0] vkms_vblank_simulate: vblank timer overrun [ 2692.238564][ T4731] usb 3-1: Using ep0 maxpacket: 16 [ 2692.247076][ T4731] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2692.281639][ T4731] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2692.292172][ T4731] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2692.328460][ T4731] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 2692.857093][ T4731] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2693.030844][ T4731] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2693.108716][ T4731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2693.130654][ T4731] usb 3-1: SerialNumber: syz [ 2693.169199][ T5745] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6531'. [ 2693.199375][ T5745] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6531'. [ 2693.254602][ T5723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2693.315969][ T4731] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 2693.385546][ T4731] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 2694.426671][ T5751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6532'. [ 2694.855754][ T4731] usb 3-1: USB disconnect, device number 27 [ 2695.810789][ T5765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6545'. [ 2696.965626][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6537'. [ 2696.974787][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6537'. [ 2700.800676][ T5825] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6546'. [ 2700.868414][ T5825] netlink: 'syz.4.6546': attribute type 21 has an invalid length. [ 2700.876507][ T5825] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6546'. [ 2701.386119][ T5825] netlink: 'syz.4.6546': attribute type 4 has an invalid length. [ 2701.424508][ T5825] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6546'. [ 2701.478879][ T5825] batadv1: entered promiscuous mode [ 2701.488319][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2702.101007][ T5833] binder: 5828:5833 ioctl c018620c 800002c0 returned -1 [ 2702.511526][ T5846] overlayfs: missing 'lowerdir' [ 2705.585396][ T5899] kvm: user requested TSC rate below hardware speed [ 2705.928660][T32669] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2705.936271][ T4731] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2706.288547][ T4731] usb 2-1: Using ep0 maxpacket: 8 [ 2706.296565][ T4731] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2706.307426][T32669] usb 3-1: Using ep0 maxpacket: 16 [ 2706.312866][ T4731] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2706.335050][T32669] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2706.345014][T32669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.488727][ T4731] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2706.532092][T32669] usb 3-1: Product: syz [ 2706.546912][T32669] usb 3-1: Manufacturer: syz [ 2706.557833][ T4731] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2706.678666][T32669] usb 3-1: SerialNumber: syz [ 2706.690628][T32669] usb 3-1: config 0 descriptor?? [ 2706.696388][ T4731] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2706.706832][ T4731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2706.934981][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2706.947532][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2706.973712][T32669] usb 3-1: ignoring: not an USB2CAN converter [ 2708.596057][ T4731] usb 2-1: usb_control_msg returned -71 [ 2708.602061][ T4731] usbtmc 2-1:16.0: can't read capabilities [ 2708.628555][ T4731] usb 2-1: USB disconnect, device number 29 [ 2708.827221][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6570'. [ 2708.842783][ T5924] pimreg: entered allmulticast mode [ 2708.850330][ T5924] pimreg: left allmulticast mode [ 2709.024940][ T4731] usb 3-1: USB disconnect, device number 28 [ 2709.484884][ T5937] ipip1: entered promiscuous mode [ 2709.490408][ T5937] ipip1: entered allmulticast mode [ 2709.708062][ T1072] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 2709.880985][ T5945] net_ratelimit: 580 callbacks suppressed [ 2709.881005][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2709.895575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2710.658530][ T1072] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2710.719269][ T1072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2710.755234][ T1072] usb 2-1: config 0 descriptor?? [ 2710.781909][ T1072] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2712.736355][ T1072] gp8psk: usb in 128 operation failed. [ 2712.750987][ T1072] gp8psk: usb in 137 operation failed. [ 2712.756498][ T1072] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2712.888116][ T1072] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2713.050886][ T1072] usb 2-1: USB disconnect, device number 30 [ 2713.609177][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.627660][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.029700][ T5957] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6563'. [ 2714.039549][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6563'. [ 2714.055435][ T5957] netlink: 'syz.0.6563': attribute type 3 has an invalid length. [ 2714.141866][ T31] INFO: task kworker/1:4:1067 blocked for more than 143 seconds. [ 2714.206214][ T31] Not tainted syzkaller #0 [ 2714.211722][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2714.221022][ T31] task:kworker/1:4 state:D stack:21552 pid:1067 tgid:1067 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2714.282353][ T31] Workqueue: usb_hub_wq hub_event [ 2714.304537][ T31] Call Trace: [ 2714.494675][ T31] [ 2714.540908][ T31] __schedule+0x1798/0x4cc0 [ 2714.727649][ T31] ? __pfx___schedule+0x10/0x10 [ 2714.736484][ T31] ? schedule+0x91/0x360 [ 2714.745265][ T31] schedule+0x165/0x360 [ 2714.757758][ T31] schedule_preempt_disabled+0x13/0x30 [ 2714.774416][ T31] __mutex_lock+0x7e6/0x1350 [ 2714.786781][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2714.814528][ T31] ? hub_event+0x21e5/0x4a20 [ 2714.828648][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2714.833762][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2714.840477][ T31] hub_event+0x21e5/0x4a20 [ 2714.845017][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2714.858758][ T31] ? __pfx_hub_event+0x10/0x10 [ 2714.866793][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2714.873354][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2714.880110][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2714.885984][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2714.892454][ T31] process_scheduled_works+0xae1/0x17b0 [ 2714.898807][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2714.904955][ T31] worker_thread+0x8a0/0xda0 [ 2714.911182][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2714.917766][ T31] ? __kthread_parkme+0x7b/0x200 [ 2714.924447][ T31] kthread+0x711/0x8a0 [ 2714.929131][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2714.934338][ T31] ? __pfx_kthread+0x10/0x10 [ 2714.939758][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2714.945019][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2714.951041][ T31] ? __pfx_kthread+0x10/0x10 [ 2714.955707][ T31] ret_from_fork+0x4bc/0x870 [ 2714.961043][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2714.966260][ T31] ? __switch_to_asm+0x39/0x70 [ 2714.971783][ T31] ? __switch_to_asm+0x33/0x70 [ 2714.976607][ T31] ? __pfx_kthread+0x10/0x10 [ 2714.981767][ T31] ret_from_fork_asm+0x1a/0x30 [ 2714.986563][ T31] [ 2714.990429][ T31] [ 2714.990429][ T31] Showing all locks held in the system: [ 2715.030971][ T31] 1 lock held by khungtaskd/31: [ 2715.048272][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2715.074553][ T31] 2 locks held by getty/5586: [ 2715.089800][ T31] #0: ffff88803344d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2715.123032][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2715.133872][ T31] 5 locks held by kworker/1:6/16847: [ 2715.139746][ T31] #0: ffff888021aad148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2715.161285][ T31] #1: ffffc9001bca7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2715.179238][ T31] #2: ffff888028ef7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2715.188758][ T31] #3: ffff8881457d7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2715.199257][ T31] #4: ffff888028d15768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2715.209633][ T31] 5 locks held by kworker/1:7/16848: [ 2715.215444][ T31] #0: ffff888021aad148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2715.230812][ T31] #1: ffffc9001ce3fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2715.244189][ T31] #2: ffff888145777198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2715.257463][ T31] #3: ffff8881457ca518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2715.269318][ T31] #4: ffff888145739b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2715.279633][ T31] 5 locks held by kworker/1:4/1067: [ 2715.284848][ T31] #0: ffff888021aad148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2715.296742][ T31] #1: ffffc9000514fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2715.309216][ T31] #2: ffff888028faa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2715.318712][ T31] #3: ffff888028f72518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2715.329128][ T31] #4: ffff888028d15768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2715.339266][ T31] [ 2715.341600][ T31] ============================================= [ 2715.341600][ T31] [ 2715.350692][ T31] NMI backtrace for cpu 0 [ 2715.350708][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2715.350728][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2715.350738][ T31] Call Trace: [ 2715.350745][ T31] [ 2715.350752][ T31] dump_stack_lvl+0x189/0x250 [ 2715.350778][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2715.350797][ T31] ? __pfx__printk+0x10/0x10 [ 2715.350821][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2715.350840][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2715.350859][ T31] ? __pfx__printk+0x10/0x10 [ 2715.350876][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2715.350900][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2715.350918][ T31] watchdog+0xf60/0xfa0 [ 2715.350936][ T31] ? watchdog+0x1e2/0xfa0 [ 2715.350954][ T31] kthread+0x711/0x8a0 [ 2715.350975][ T31] ? __pfx_watchdog+0x10/0x10 [ 2715.350988][ T31] ? __pfx_kthread+0x10/0x10 [ 2715.351007][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2715.351025][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2715.351049][ T31] ? __pfx_kthread+0x10/0x10 [ 2715.351067][ T31] ret_from_fork+0x4bc/0x870 [ 2715.351083][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2715.351103][ T31] ? __switch_to_asm+0x39/0x70 [ 2715.351114][ T31] ? __switch_to_asm+0x33/0x70 [ 2715.351125][ T31] ? __pfx_kthread+0x10/0x10 [ 2715.351143][ T31] ret_from_fork_asm+0x1a/0x30 [ 2715.351168][ T31] [ 2715.351178][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2715.500307][ C1] NMI backtrace for cpu 1 [ 2715.500338][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2715.500356][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2715.500366][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2715.500391][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2715.500405][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2715.500419][ C1] RAX: f095160fd093bc00 RBX: ffffffff81967b47 RCX: f095160fd093bc00 [ 2715.500431][ C1] RDX: 0000000000000001 RSI: ffffffff8d70f556 RDI: ffffffff8bbf0960 [ 2715.500442][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 2715.500453][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cf770 [ 2715.500464][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395cb58 [ 2715.500475][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 2715.500487][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2715.500498][ C1] CR2: 00000000f73f99b4 CR3: 0000000074fd8000 CR4: 00000000003526f0 [ 2715.500512][ C1] Call Trace: [ 2715.500519][ C1] [ 2715.500525][ C1] default_idle+0x13/0x20 [ 2715.500540][ C1] default_idle_call+0x73/0xb0 [ 2715.500555][ C1] do_idle+0x1e7/0x510 [ 2715.500571][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2715.500588][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2715.500607][ C1] ? __pfx_do_idle+0x10/0x10 [ 2715.500626][ C1] ? do_idle+0xc/0x510 [ 2715.500642][ C1] cpu_startup_entry+0x44/0x60 [ 2715.500657][ C1] start_secondary+0x101/0x110 [ 2715.500688][ C1] common_startup_64+0x13e/0x147 [ 2715.500715][ C1]