last executing test programs: 18.042778128s ago: executing program 4 (id=838): unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00002b4000/0x1000)=nil], 0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="8be784923875240482ec7379b8172e5c1e53055c40fc337edb9ea527ebb1782e4079cdd07a0d037f22fc7eb32972f5944d2deddf9ffc0262e5f0c368373a54021ec9505baa10c2ecee1dc09c9a6d2315ecf72d3f4294516ea15c49ac577d6782bef82a2dcecf65b38b578d7b88e3cfda12222fe6f77c665e754cb1a7c26c89169871970af6e23b5ec68d9d52229f2972b7a9f158da6f8e19e5a415c60105b57a7447c2bcb02d2b1489635cd5ddf6fb81f6500540136422c34d835abe1eba9406825d32439ea56e1ae5b02410e217c58668a1b71cdc0d43a467e0479c70b7eb3eee70ba51321b", 0xe6}, {&(0x7f0000000440)="fed8912c4c6d7eacf5943ba597bf17715aa048a81529c1bcc30360b2f87f7415883642eeae82e90cf16faad5b02ff4e89625c2ae107b51e6ed14a58fbfdf3e07f5fe7b3dca155ff4e99f8d3b235b70f7dccdd26b5ac175fb3591a2fd6041635aad6ca03a0e12182481baf4319233bc313a", 0x71}, {&(0x7f0000000500)="4269739005a30282be2a03b6ba4df5240cc83b6494df5817a89f644801f3770d1f0f7dc39a8d94e087dc5f060f8176ae08be6c4d2dbcbb02d55482bd4cc91b63567debe60e28815db98f782096dfe41c04e01841eb8b44c19f9fe49f", 0x5c}, {&(0x7f0000000580)="60fd781d29b19a8acab4d4b69965378c60180ece3eb1a0cbeee9cd7eb41577e8b641ec5f8e72c2132dad84798c0c600a47cf3a55b89e6f0b2b3ab407ca6a76216b705d36345801b8147783e68cea26c1021e4d06e8c0abf147d3cd0f59c206b488f1527aa125bc8cdb727f04633cfe7f1f063ff8ba9b00f4319a35", 0x7b}, {&(0x7f0000000680)="16af2731d46a42376183879f106b185a1327532b3c2cd351d82fd88a4058979207301349024a0df9f8ea2ea740d5bb97ad2a48930b52679988dfb4a40980cb9d82bbc6691ea1d36210fd4aae9d7b5a2039574e3d6a2640531866f154873999151d363ad16ae6a8447b97", 0x6a}, {&(0x7f0000000700)="1a034996b5eeb3c07ed3e9cc4d78bb1b594298991e16e6e4abd96f370a452e6874ed3310bf97a6e482568b85b170bbc85c5fad48af4aad94b14ea5f48fbd87c88b76d72ab15cc1ec8182f79e17e4008f6f53e9a49a4a7e", 0x57}], 0x6, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r3]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r0, r2, r2, r2, r2]}}], 0x68, 0x4004015}}], 0x2, 0x20040800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r5 = userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 17.509112484s ago: executing program 4 (id=839): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0xa, 0xc01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x20, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000659000/0x1000)=nil, 0x1000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) close(r1) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x4, 0x1}, 0xc) r3 = socket(0x1e, 0x4, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000000), 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xeb2c, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0xffffffff}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x1000000, 0x1, 0x0, r4, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0x70f3, &(0x7f0000000180)={0x0, 0xdb0c, 0x8, 0xfffffffe, 0x24000}, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x428001) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x3, 0x5, 0x2, 0x207fe, 0x0, "0400b7e7a2aac9779bf500", '\x00', "0300", "e8cc1304", ["8bbb00fda8e45cfe00000900", "ab5286400300000000008516", '\x00', "000b000000000000001000"]}) r8 = shmget$private(0x0, 0x4000, 0xa4, &(0x7f0000ff9000/0x4000)=nil) shmat(r8, &(0x7f0000ffe000/0x2000)=nil, 0x5000) socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_STAT(r8, 0x2, &(0x7f0000000300)=""/47) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 13.612506774s ago: executing program 4 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], 0x0}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) unshare(0x42000000) r7 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.476977051s ago: executing program 3 (id=845): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb819bbe7bfabee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, &(0x7f0000000240)={0x9, 0x7f, 0x2, 0x2, 0xffff, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x2, 0x6e18, 0x1, 0x8, 0x400, 0x9, 0x1, 0x9}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x48084) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000100)="ab", 0x1, 0x40048c4, 0x0, 0x0) 11.250377413s ago: executing program 3 (id=848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) close(0x3) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00My0:\xc3\xad&\xbe\xa4\xd8\x9b\x96@r\x8c\xdc\xc0/j\x8f\x01(p\xbf\x9f\x8c=Q\x06\xa2\x99\xb7\x03?\xebX\xa6\x9d\x8e\xee\x16\xb7Zg\x87\xa3\x93mrEn\xda\xb7\xa1I#\x9eT\xab;\x16\x86\xed[\f\xf2P\x06\x8cjL\x12_0$ \x97)\xaf\x9b3\x06A\xa6A\xca\xd7\xcd\x02R\x8d\xe7\xcd\xee\x96\xac\x16\x0f\x1a\xfc\xca\x15\xf6`V\xa7\xe2R\x9e\xe3\xb4:\xadr\xd1>>*\xac\xabHt\xe3\xbf', 0x5) r6 = dup(r5) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x36) fanotify_mark(r4, 0x1, 0x48001059, r6, 0x0) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)) r9 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r9) keyctl$read(0xb, r9, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) 10.895140632s ago: executing program 2 (id=849): unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00002b4000/0x1000)=nil], 0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="8be784923875240482ec7379b8172e5c1e53055c40fc337edb9ea527ebb1782e4079cdd07a0d037f22fc7eb32972f5944d2deddf9ffc0262e5f0c368373a54021ec9505baa10c2ecee1dc09c9a6d2315ecf72d3f4294516ea15c49ac577d6782bef82a2dcecf65b38b578d7b88e3cfda12222fe6f77c665e754cb1a7c26c89169871970af6e23b5ec68d9d52229f2972b7a9f158da6f8e19e5a415c60105b57a7447c2bcb02d2b1489635cd5ddf6fb81f6500540136422c34d835abe1eba9406825d32439ea56e1ae5b02410e217c58668a1b71cdc0d43a467e0479c70b7eb3eee70ba51321b", 0xe6}, {&(0x7f0000000440)="fed8912c4c6d7eacf5943ba597bf17715aa048a81529c1bcc30360b2f87f7415883642eeae82e90cf16faad5b02ff4e89625c2ae107b51e6ed14a58fbfdf3e07f5fe7b3dca155ff4e99f8d3b235b70f7dccdd26b5ac175fb3591a2fd6041635aad6ca03a0e12182481baf4319233bc313a", 0x71}, {&(0x7f0000000500)="4269739005a30282be2a03b6ba4df5240cc83b6494df5817a89f644801f3770d1f0f7dc39a8d94e087dc5f060f8176ae08be6c4d2dbcbb02d55482bd4cc91b63567debe60e28815db98f782096dfe41c04e01841eb8b44c19f9fe49f", 0x5c}, {&(0x7f0000000580)="60fd781d29b19a8acab4d4b69965378c60180ece3eb1a0cbeee9cd7eb41577e8b641ec5f8e72c2132dad84798c0c600a47cf3a55b89e6f0b2b3ab407ca6a76216b705d36345801b8147783e68cea26c1021e4d06e8c0abf147d3cd0f59c206b488f1527aa125bc8cdb727f04633cfe7f1f063ff8ba9b00f4319a35", 0x7b}, {&(0x7f0000000680)="16af2731d46a42376183879f106b185a1327532b3c2cd351d82fd88a4058979207301349024a0df9f8ea2ea740d5bb97ad2a48930b52679988dfb4a40980cb9d82bbc6691ea1d36210fd4aae9d7b5a2039574e3d6a2640531866f154873999151d363ad16ae6a8447b97", 0x6a}, {&(0x7f0000000700)="1a034996b5eeb3c07ed3e9cc4d78bb1b594298991e16e6e4abd96f370a452e6874ed3310bf97a6e482568b85b170bbc85c5fad48af4aad94b14ea5f48fbd87c88b76d72ab15cc1ec8182f79e17e4008f6f53e9a49a4a7e", 0x57}], 0x6, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r3]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r0, r2, r2, r2, r2]}}], 0x68, 0x4004015}}], 0x2, 0x20040800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r5 = userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 10.751836816s ago: executing program 0 (id=850): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fe, 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7, r6}) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="1f", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000340)={r7}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0xffffffff, 0xbb46, 0x34324241}}) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dontfrag={{0x14, 0x29, 0x3e, 0xffffffff}}], 0x18}, 0x40080) 9.487735637s ago: executing program 1 (id=851): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 9.379671606s ago: executing program 1 (id=852): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) 9.184678527s ago: executing program 1 (id=853): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x9, 0x6, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000078000100ffff0000fdc9df250700000043"], 0x18}, 0x1, 0x5502000000000000}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) 9.14578308s ago: executing program 3 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001100), 0xa67a, 0x8000) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94) sendto$inet6(r5, 0x0, 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) io_setup(0x8, &(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) syz_usb_connect(0x0, 0x10e, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x0) 9.132652314s ago: executing program 4 (id=855): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 8.584416763s ago: executing program 0 (id=856): socket$packet(0x11, 0x3, 0x300) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x9, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x21, 0x800, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffffff, {[0x2, 0x5, 0x401, 0x4, 0x0, 0x8, 0xfff, 0x400]}}, 0x5c) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000100000000000000000fe80000000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000007807000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000000000044001c00fc020000000000000000000000000000000004d40000000000000000e00000020000000000000000000000000000000000000000fdffffff8f00000000000000"], 0x174}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) 8.146949122s ago: executing program 2 (id=857): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) ppoll(&(0x7f0000000280)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)) socket$unix(0x1, 0x5, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r6, 0xfa, 0x61}, &(0x7f0000000340)={'enc=', 'pkcs1', ' hash=', {'md4\x00'}}, &(0x7f0000000580)="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", &(0x7f0000000680)="ad123624519a32f2832939b39cad7341de0212fcbc99ca68cf2b8ee9124e1b493fc7c7ba6d44c459816944ec92ec71d9c709eee402da514570ebcae3720ca4388720e811be69f5b521ff86dfa2ba2b77a87fcc64b56798c5dadbdd5b3e85468c82") socket$nl_xfrm(0x10, 0x3, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000)=0x5b, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 6.706606215s ago: executing program 1 (id=858): socket$nl_generic(0x10, 0x3, 0x10) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88306, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r6, 0x0, &(0x7f0000eee000/0x1000)=nil, 0x1000, 0xfea2}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x5, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000900)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) userfaultfd(0x80800) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) 5.784159772s ago: executing program 0 (id=859): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) openat2(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r5, 0x0) shmctl$IPC_RMID(0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e23, 0x8, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x5, 0x31, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca8}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x2b}, 0x2, @in6=@empty, 0x3505, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 5.600576629s ago: executing program 2 (id=860): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000029c0), 0x400006d, 0x20000004) sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000fc00000000000000000000000000000000000400000000000a0060003b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0bc6097ea4b21144735a12830b92f72efb536a6a15287aaf4cfb6908fb27e9da76aecd06afae8b6ce6b112d3b0bb3200b3dc133d723478d567083ea489f406d7a945f3669e639abd1f1c3cc6f7dafb2d372e81f02fb699a3661a07a925244990cefb61a0d3c64e16444b80e69b1a4b8bb7782733323a1ae1f738d01468bdac80ed096f047256188d80920da86a01156315519d778cd1017a8cc672b54debd86429b8e773a8fbaaca9c2bf74bf2ce3297ee7f0c9837971d4fbf8a3aaec08517274c1a52c720fc", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32], 0x18, 0x8000}}], 0x2, 0x0) 5.194956766s ago: executing program 4 (id=861): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r3) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = shmget(0x1, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e23, 0x8, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x5, 0x31, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca8}, 0xfffffffe, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x2b}, 0x2, @in6=@mcast2, 0x3505, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) socket(0x400000000010, 0x3, 0x0) 4.007445043s ago: executing program 0 (id=862): unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00002b4000/0x1000)=nil], 0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="8be784923875240482ec7379b8172e5c1e53055c40fc337edb9ea527ebb1782e4079cdd07a0d037f22fc7eb32972f5944d2deddf9ffc0262e5f0c368373a54021ec9505baa10c2ecee1dc09c9a6d2315ecf72d3f4294516ea15c49ac577d6782bef82a2dcecf65b38b578d7b88e3cfda12222fe6f77c665e754cb1a7c26c89169871970af6e23b5ec68d9d52229f2972b7a9f158da6f8e19e5a415c60105b57a7447c2bcb02d2b1489635cd5ddf6fb81f6500540136422c34d835abe1eba9406825d32439ea56e1ae5b02410e217c58668a1b71cdc0d43a467e0479c70b7eb3eee70ba51321b", 0xe6}, {&(0x7f0000000440)="fed8912c4c6d7eacf5943ba597bf17715aa048a81529c1bcc30360b2f87f7415883642eeae82e90cf16faad5b02ff4e89625c2ae107b51e6ed14a58fbfdf3e07f5fe7b3dca155ff4e99f8d3b235b70f7dccdd26b5ac175fb3591a2fd6041635aad6ca03a0e12182481baf4319233bc313a", 0x71}, {&(0x7f0000000500)="4269739005a30282be2a03b6ba4df5240cc83b6494df5817a89f644801f3770d1f0f7dc39a8d94e087dc5f060f8176ae08be6c4d2dbcbb02d55482bd4cc91b63567debe60e28815db98f782096dfe41c04e01841eb8b44c19f9fe49f", 0x5c}, {&(0x7f0000000580)="60fd781d29b19a8acab4d4b69965378c60180ece3eb1a0cbeee9cd7eb41577e8b641ec5f8e72c2132dad84798c0c600a47cf3a55b89e6f0b2b3ab407ca6a76216b705d36345801b8147783e68cea26c1021e4d06e8c0abf147d3cd0f59c206b488f1527aa125bc8cdb727f04633cfe7f1f063ff8ba9b00f4319a35", 0x7b}, {&(0x7f0000000680)="16af2731d46a42376183879f106b185a1327532b3c2cd351d82fd88a4058979207301349024a0df9f8ea2ea740d5bb97ad2a48930b52679988dfb4a40980cb9d82bbc6691ea1d36210fd4aae9d7b5a2039574e3d6a2640531866f154873999151d363ad16ae6a8447b97", 0x6a}, {&(0x7f0000000700)="1a034996b5eeb3c07ed3e9cc4d78bb1b594298991e16e6e4abd96f370a452e6874ed3310bf97a6e482568b85b170bbc85c5fad48af4aad94b14ea5f48fbd87c88b76d72ab15cc1ec8182f79e17e4008f6f53e9a49a4a7e", 0x57}], 0x6, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r3]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r0, r2, r2, r2, r2]}}], 0x68, 0x4004015}}], 0x2, 0x20040800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r5 = userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 3.867636386s ago: executing program 3 (id=863): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) 3.771298029s ago: executing program 3 (id=864): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xe8000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x4, 0x1, 0x3, 0x0, 0x8}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x4000, 0xdffffffd, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r3, 0x141601) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r5 = msgget(0x1, 0xefea72844cf5e2b4) msgrcv(r5, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_RMID(r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2008, 0xe}}) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) 3.655587364s ago: executing program 1 (id=865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x40440c0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x20000) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 3.56133471s ago: executing program 2 (id=866): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a}, &(0x7f0000000100), &(0x7f0000ffe000)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_ts_info}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0xe4, 0x2c, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x0, 0x2}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xb4, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0xf}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x401}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x536e}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xc6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xef}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x81}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) 3.045621756s ago: executing program 0 (id=867): unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00002b4000/0x1000)=nil], 0x0, 0x0, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="8be784923875240482ec7379b8172e5c1e53055c40fc337edb9ea527ebb1782e4079cdd07a0d037f22fc7eb32972f5944d2deddf9ffc0262e5f0c368373a54021ec9505baa10c2ecee1dc09c9a6d2315ecf72d3f4294516ea15c49ac577d6782bef82a2dcecf65b38b578d7b88e3cfda12222fe6f77c665e754cb1a7c26c89169871970af6e23b5ec68d9d52229f2972b7a9f158da6f8e19e5a415c60105b57a7447c2bcb02d2b1489635cd5ddf6fb81f6500540136422c34d835abe1eba9406825d32439ea56e1ae5b02410e217c58668a1b71cdc0d43a467e0479c70b7eb3eee70ba51321b", 0xe6}, {&(0x7f0000000440)="fed8912c4c6d7eacf5943ba597bf17715aa048a81529c1bcc30360b2f87f7415883642eeae82e90cf16faad5b02ff4e89625c2ae107b51e6ed14a58fbfdf3e07f5fe7b3dca155ff4e99f8d3b235b70f7dccdd26b5ac175fb3591a2fd6041635aad6ca03a0e12182481baf4319233bc313a", 0x71}, {&(0x7f0000000500)="4269739005a30282be2a03b6ba4df5240cc83b6494df5817a89f644801f3770d1f0f7dc39a8d94e087dc5f060f8176ae08be6c4d2dbcbb02d55482bd4cc91b63567debe60e28815db98f782096dfe41c04e01841eb8b44c19f9fe49f", 0x5c}, {&(0x7f0000000580)="60fd781d29b19a8acab4d4b69965378c60180ece3eb1a0cbeee9cd7eb41577e8b641ec5f8e72c2132dad84798c0c600a47cf3a55b89e6f0b2b3ab407ca6a76216b705d36345801b8147783e68cea26c1021e4d06e8c0abf147d3cd0f59c206b488f1527aa125bc8cdb727f04633cfe7f1f063ff8ba9b00f4319a35", 0x7b}, {&(0x7f0000000680)="16af2731d46a42376183879f106b185a1327532b3c2cd351d82fd88a4058979207301349024a0df9f8ea2ea740d5bb97ad2a48930b52679988dfb4a40980cb9d82bbc6691ea1d36210fd4aae9d7b5a2039574e3d6a2640531866f154873999151d363ad16ae6a8447b97", 0x6a}, {&(0x7f0000000700)="1a034996b5eeb3c07ed3e9cc4d78bb1b594298991e16e6e4abd96f370a452e6874ed3310bf97a6e482568b85b170bbc85c5fad48af4aad94b14ea5f48fbd87c88b76d72ab15cc1ec8182f79e17e4008f6f53e9a49a4a7e", 0x57}], 0x6, &(0x7f0000000880)=[@rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r3]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r0, r2, r2, r2, r2]}}], 0x68, 0x4004015}}], 0x2, 0x20040800) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r4, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r5 = userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 2.063286167s ago: executing program 4 (id=868): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f4, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) msgrcv(0x0, &(0x7f0000000300)={0x0, ""/196}, 0xcc, 0x0, 0x3c00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) pipe(&(0x7f0000000400)) 1.646532116s ago: executing program 2 (id=869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r2, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x2, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000a40)) r5 = eventfd(0xe95) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000200)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000480)={0x1d, r7, 0x3, {0x1, 0xf0, 0x2}, 0xfe}, 0x18) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="511fb1a35063543f666ad36930985b30fa9499ebc0cb6b7ce3fc6b3bac8c69d96255b4d1541574864afcbfbe31f53072c16e9c75ab86e50b0bf6437d9229bb817bed149c05271722736ca60220985ba4975da20e5ab72e9368ce2efa06cf53d732d41f0da8832950bd00b3bdd13803ec0f3715247d3e17cae5afd316cf641aa842c343118ea61a985b83d803c26f5b6c45f2f315b7d32d8186ccd6d0c0b7e8d55cec48687369951622789fa2573eddf30a13dcea39c3c612fe59e8997ab91e56156b31", 0x3f}], 0x2}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendto$packet(r4, 0x0, 0x0, 0x6400c000, &(0x7f0000000180)={0x11, 0x2, r7, 0x1, 0x6d, 0x6, @remote}, 0x14) ioctl$sock_ifreq(r8, 0x8948, &(0x7f0000000140)={'vlan1\x00', @ifru_data=&(0x7f0000000540)="c214d381131d3855021cd18c9e61fb2b7b78a5a07c672a56a878ed38a7594560"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x2fc}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) 1.54377994s ago: executing program 3 (id=870): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49df, 0x0, 0x0, 0x35, 0x10, "ec28a144f13d7607"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) r7 = socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}]}}]}, 0x40}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc28, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 1.226634957s ago: executing program 1 (id=871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r5, 0x4, 0xc1, 0x5c, 0x4, 0x13, @loopback, @mcast2, 0x8000, 0x700, 0x100, 0x7}}) sendmmsg$inet6(r6, &(0x7f0000002480)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3, @mcast1, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000002c0)="7d3b8a08e3255cdead8489515adac2f775ef2b2fa7436cb837c26d6d766cd174e42b72ad3eb3f1c8161411599aab7125cefdaf93c67dd2786b0292a8a7b88f4cce674f5652fe13b8d0db8247a64dcfa2baa1bd388abcc062ff2249b632cdb2313164cd93c34fa03a4e0de0cab2f3146ea07ff142793d392465bbb26de0f5bb4fca7d0dd1d5d345d6a93af2acebabcc8fbd888f9b71997a2fcc84e9d982fff12fac43678ac236548c9a4f7ae2495bbb258a1b7cc0890bb20ae23f5a5c", 0xbc}, {&(0x7f0000000380)="aa19f20553a5b71f816ce52bec5fe7bff3309a168d286e43dbc2b07bf52376e66745ef85699419a4f4e59ccdc5892c06b85a0d1d497650b2cc227d3bc6fe264c11e4e30d03ce7c2b6da8d66316de81a36f4c8a4ae6a63851e67ac70f46ac3dc076e5815c39d9bac2167fd02bb9bb1c674dd02b8138c71cc29204940fc282cf0232d2feec8bb395a5f2c9c5a378b8d9c2f966be5a4be1d6f07fa65fcedc83a64f3101e8eded72220290dd9567617e310f", 0xb0}, {&(0x7f0000000440)="f4ebd2a21573650d271cf282a8085bfc161698436fb60183aa09bd3a7fb8267963558f0345e9570e88e59d9fa016c1e66fa081227bff426da5b06a1fd916397ad7d7c06308da076c488c2bc124910092a04471b97a35d886ec5afc1e284c8b5b4c6b50560171689ac71705a81e1d7162a3842d902f3f3eea4804d7f8aa01063b17bcf9aeb5", 0x85}, {&(0x7f0000000500)="f94629e278a6cbc6ebc2850623748f86009103707f27d5738e63bae7d18e8be84a8b731ea77e9ccae1204bc4cc3ff97f60abaa3a7ada041a72918f37762264f2651b112c45b6a2efbe0d37f162d5a30c4469e80c5cfbcb7c0576c2d670bde466f6d0f87d953f34f0c63e713db59d0330b129b6459ec4202d189530dfda39534a03ddcd50a5f3785d33329ec36b2b887667c2c864a876050b8fdd936bbcdbb9942b51c24d874e1f75cfb553a2bc16c4d9562f326d425ab77f1efa5c42847a218c23d87d1c500a7b070e9a26609d57e7e837fa7f402fc511f2d51982", 0xdb}], 0x4, &(0x7f0000000640)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts={{0x40, 0x29, 0x36, {0x3c, 0x4, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x47}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x7fff, [0x8]}}, @ra={0x5, 0x2, 0x7}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}], 0x98}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x7ab, @local, 0x6}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000740)="5d6676bc83467c67f24ff3f55a097e04befa349d761ffa95fa4f61566fc09839e992ca977a75f2974273395d85a15c0de42b8446ed0c7ac1b18c4421627693b5dad5819e4443a56c911d5fd2621089eda2098d693b906ff2e03d3bd403650f042a7c28488bc228086d5cf260e0639b94b108ce70936c", 0x76}, {&(0x7f00000007c0)="26857f84b93440e45263e8f9c215a27f3799a7026969d82eeaddde61d11c45873dfc2742bcec88e904c7760895628cf72e476de98ca044de1bdc00a6f46647178a1c4bd1d83bceda519150823abc37859abdcfde7938794c7ccc92a8fbe2477db56088ad38b777e1d1c0bfb065ae81be3c805d4d0a536fd6b30f5bf3b46e3d3abbc47ccf00ded3f0f3fa1a89abaca0233143021dafc5be2197e151c19db90ef629c616594c6e9915eb3fea4065de07ccecb137f97b040121f6efc663", 0xbc}, {&(0x7f0000000880)="5918e3f741ec972d0561c0c47bded3b833ee42e2259227bd6b1f7346bf715c3a9d71f79925ac1366baf3af81e298c3a191a4a8675c7acdd1cc8e259f4e9651059cd818cd1a748fed56ff8f1d90093ce3425fe29c445d0f63725195bda078e010fec1bc14c98f8c41", 0x68}], 0x3, &(0x7f0000000a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x400}}, @flowinfo={{0x14, 0x29, 0xb, 0x13}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffd}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x1, 0x0, 0x0, [@loopback, @loopback, @private1]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xe, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x40, {0x2, 0xe, 0x81, 0x8, [0xff, 0x2, 0x200, 0xf, 0x49c, 0x5, 0x0]}}, @hao={0xc9, 0x10, @loopback}]}}}], 0x148}}, {{&(0x7f0000000980)={0xa, 0x4e23, 0x9, @mcast1, 0x9}, 0x1c, &(0x7f0000001ec0)=[{&(0x7f0000000c00)="80a14ea28efbb53f2ff612724738098424e2dcf78d3cd94e8a906752a2a4b1d260ef9125a0dc2ebef0f2fa1827f5b3b7649725a015402d9479d5369e6e77817418db457d290acaed6f87814512d713e938f3f0d90145e4722d5e941e24527d2f4be2b57778c85bc0f4a7bcde", 0x6c}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="ca5ac07a96b0ed7a3041e35f5b6a96e6826097a61cf9cb024591dbbff68595dec6e49619a0f6931a90bed740f00c89212c75aeff3c8463a9ba172dff9c51c1966005e87c49a4d21fe047ff05f2967f2ac9dc3518b210c64b4fe7dca1ea94e3a461e24e64843ef653853d731bf8", 0x6d}, {&(0x7f0000001d00)="8b77f39316dbb09038944dfac4b589b767f1a9f114bfbd760cfe1e293f7dac69822fbceb79bff80f186885757b846e46d196dc796b8daa706f454cf40ef37c72e78bb9940e09bcb90a70dd8993d14e873406c6611232d04c21bc4c03f27747ad137ff2991a4c766f20eea9b5d40c4bef6307787d97744ada908ae8b6fa4392a8a09093635aa8b133f5ae9a7de9ee3f1595e8fe0012394148b5f9195e422eb14f313970a8a309ef14a468d2d3ace567fab4882756fc9e1c3d43e37c3e3424cb8b6d97393e69f80a6d52c765db4fce7b2d988fbbc52e23d632b3b0", 0xda}, {&(0x7f0000001e00)="f6f21280cdfe13217bbfc4e21ab22443d3c7293519fa2d29bf0f30c98c9ea2a4d4d7fa07a1fe83f1d2d7aafd75317ed69bfb9c4d0d8c5bd78406647050b89dc53963172a46144d3c2c0c02e32a58a26d1ff5d04695861de0b8b3646a8fea60f3f07bcba5bc4590b10f29777e991d37c1555585e22ed595d4f7402289bff105a28427c50874f8c72249beab472ca8098872bc66faaef29c57b17cf605fc8493744e8d943567f6bc", 0xa7}], 0x5, &(0x7f0000001f40)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010100}, r5}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x1, 0xa7, 0x0, [@loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x76, 0x10, '\x00', [@generic={0x3, 0x85, "a585251a2c46436c5f5b33f363bc6c414895c30ff6ef06c6790d8fdaba498acdc01627f4c155c1a54b952739b29dde9eba9f7a85ec6869d4b6228b5fbd2711fb0cc9df3a2ec17b9e4f55ee86cfc31d13c25df20f4bec4ae22f4a38ec4abfac7bad392ea603024b4730d5f4d694ddadf421c9cfa762aeb5f2b416fcba2fe0fdd5c1eb708587"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x447}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffeb}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r7}}}], 0x1a0}}, {{&(0x7f0000002100)={0xa, 0x4e21, 0xe, @mcast2, 0xff}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000002140)="415b7e44385c540ce79dce80f1cca481dd9370925cfaa0405c0b5db24416a59316ad9400365d9ff2e7eb4884dd7074b1ced69aca2f161e15c782860f86b39a2caeee187e587a4ac72fb619e776ae86b8be6662e1405ccba189e44395f5dce9ec9fb2239a57d99925f3f7d46fd2b123bdb5433205383de37fb9f2c5203418dc239784f23f2fceaf05f0068d55b6cdc03bedb56ce1721d7bf74ce19850911c26e4d9b1d32d06fc07731e0016", 0xab}, {&(0x7f0000002200)="a9d7f83ed7cd8ee9e9d5aacbd09c7eac77129ca6525f24e6718ab1f7567cee8a31997077e9f7c870757fef1e4367d5caffa23992e3a3f40208c2077d0522d41cd57a240eb42c2549ec65f193ad391b70a29271745fbecedac21f40be938c30b85046a2827d08042a61f7910f62d7f5ea93c6ca9b3fb7be050428b31971576137b2fd4593a39afdbbf1134074807eecd32cb280944ed9330c8caf4ce1d988ed22ec39f1e8b798", 0xa6}, {&(0x7f00000022c0)="980e7ca11f29e45849dc2f07107e8e418f5028a966a16fa6201180fbd88476b43a7f15cdcc66ec0caf7defe85f6d54c1d35d29e8e556061e1a09202ed20c0d0f260941943cdb5c52e5551afcb04ed178aeeaaf9d0592dab2eaf3d0a0daf3800a974dd949a04d99bdd0cbba949873da7e110f5c69af3a394bf198890ebc34da08fcea6e1f6877fb5410d39e39659518c5", 0x90}], 0x3}}], 0x4, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r9, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 0s ago: executing program 0 (id=872): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149382, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000a00)={r7}) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x7f, 0x3, 0x300f, 0x6, 0x0, 0x3, 0x2, 0x7}}) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000200)={0xffffffffffffffff}) timer_settime(0x0, 0x1, 0x0, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000, 0x2}) fallocate(r9, 0x1, 0x100000000, 0x80000000) sendfile(r0, r0, 0x0, 0x400000000003d) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x400000004, &(0x7f0000000240), 0x111, 0x9}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r8}) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xff}, {&(0x7f0000001480)="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", 0xff9}], 0x3) kernel console output (not intermixed with test programs): 327.947946][ T5948] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 328.121021][ T5947] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 328.276492][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 328.310991][ T5947] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 328.320573][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.342018][ T5947] usb 2-1: Product: syz [ 328.372622][ T5947] usb 2-1: Manufacturer: syz [ 328.396484][ T5947] usb 2-1: SerialNumber: syz [ 328.442987][ T5947] usb 2-1: config 0 descriptor?? [ 328.497919][ T5947] as10x_usb: device has been detected [ 328.679663][ T5947] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 328.757597][ T7995] random: crng reseeded on system resumption [ 328.908089][ T5947] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 330.016133][ T5947] as10x_usb: error during firmware upload part1 [ 330.075750][ T5947] Registered device Sky IT Digital Key (green led) [ 330.201279][ T5948] usb 5-1: device descriptor read/8, error -71 [ 330.328298][ T5948] usb usb5-port1: unable to enumerate USB device [ 330.996562][ T8008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.534319][ T5978] usb 2-1: USB disconnect, device number 5 [ 331.684753][ T5978] Unregistered device Sky IT Digital Key (green led) [ 331.687340][ T5978] as10x_usb: device has been disconnected [ 331.986672][ T5854] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 332.036684][ T5854] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 332.046208][ T5854] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 332.065473][ T5854] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 332.116912][ T5854] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 332.239007][ T5854] usb 4-1: USB disconnect, device number 10 [ 332.367651][ T5854] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 332.560639][ T5854] keyspan 4-1:0.133: device disconnected [ 334.761578][ T8044] fuse: Bad value for 'fd' [ 335.926354][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 335.926374][ T30] audit: type=1326 audit(1756372237.218:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 335.974592][ T30] audit: type=1326 audit(1756372237.218:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 336.028643][ T30] audit: type=1326 audit(1756372237.218:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 336.113591][ T30] audit: type=1326 audit(1756372237.218:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 336.215657][ T30] audit: type=1326 audit(1756372237.218:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 336.338800][ T30] audit: type=1326 audit(1756372237.218:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 336.871829][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.355'. [ 336.924436][ T30] audit: type=1326 audit(1756372237.218:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 336.946656][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.025147][ T30] audit: type=1326 audit(1756372237.218:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 337.047359][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.126592][ T5978] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 337.227733][ T30] audit: type=1326 audit(1756372237.218:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 337.249738][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.301411][ T30] audit: type=1326 audit(1756372237.588:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 337.356405][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 337.382065][ T5978] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 337.390395][ T5978] usb 5-1: config 0 has no interface number 0 [ 337.449453][ T5978] usb 5-1: config 0 interface 184 has no altsetting 0 [ 337.480113][ T5978] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 337.494763][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.503432][ T5978] usb 5-1: Product: syz [ 337.526610][ T5978] usb 5-1: Manufacturer: syz [ 337.548932][ T5978] usb 5-1: SerialNumber: syz [ 337.577713][ T5978] usb 5-1: config 0 descriptor?? [ 337.599434][ T5978] smsc75xx v1.0.0 [ 337.613346][ T5978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 337.653907][ T5978] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 337.852571][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.860296][ T8058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.920002][ T8065] fuse: Unknown parameter 'fd00000000000000000000016' [ 337.991292][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.116097][ T8058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.217728][ T5978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 338.386516][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 338.394975][ T5978] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 338.412036][ T5978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 338.434890][ T5978] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 338.444898][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.455652][ T5978] usb 2-1: Product: syz [ 338.467107][ T5978] usb 2-1: Manufacturer: syz [ 338.662770][ T5978] usb 2-1: SerialNumber: syz [ 338.687699][ T5978] usb 2-1: config 0 descriptor?? [ 338.707360][ T5978] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 338.911481][ T5978] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 338.919617][ T5978] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 339.043550][ T5978] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 340.232659][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 341.275658][ T5947] usb 5-1: USB disconnect, device number 12 [ 344.554561][ T8115] block device autoloading is deprecated and will be removed. [ 344.570345][ T8115] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 344.730735][ T8120] vim2m vim2m.0: vidioc_s_fmt queue busy [ 344.968064][ T8116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.374846][ T5947] usb 2-1: USB disconnect, device number 6 [ 345.946378][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 345.946398][ T30] audit: type=1326 audit(1756372247.238:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 346.065934][ T8133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.089013][ T8133] binder: 8129:8133 ioctl c0306201 200000000240 returned -14 [ 346.456437][ T30] audit: type=1326 audit(1756372247.238:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 347.266382][ T30] audit: type=1326 audit(1756372247.248:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 347.336483][ T30] audit: type=1326 audit(1756372247.248:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 347.449691][ T30] audit: type=1326 audit(1756372247.248:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 347.523191][ T30] audit: type=1326 audit(1756372247.248:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 347.700059][ T30] audit: type=1326 audit(1756372247.248:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89dfd2ade9 code=0x7ffc0000 [ 347.863697][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 347.876551][ T8141] macsec0: left allmulticast mode [ 347.881688][ T8141] veth1_macvtap: left allmulticast mode [ 347.888257][ T8141] macsec0: left promiscuous mode [ 347.894408][ T8141] bridge0: port 3(macsec0) entered disabled state [ 348.038279][ T8141] bridge_slave_1: left allmulticast mode [ 348.114976][ T30] audit: type=1326 audit(1756372247.248:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 348.137444][ T30] audit: type=1326 audit(1756372247.248:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.2.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 348.159619][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.186514][ T8141] bridge_slave_1: left promiscuous mode [ 348.192518][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.272211][ T8149] netlink: 'syz.4.373': attribute type 27 has an invalid length. [ 348.431959][ T8141] bridge_slave_0: left allmulticast mode [ 348.438435][ T8141] bridge_slave_0: left promiscuous mode [ 348.444399][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.146808][ T5854] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 349.336440][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 349.343552][ T5854] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.397187][ T5854] usb 5-1: config 0 has no interface number 0 [ 349.455904][ T5854] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 349.475967][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.516213][ T5854] usb 5-1: Product: syz [ 349.620374][ T5854] usb 5-1: Manufacturer: syz [ 349.633112][ T5854] usb 5-1: SerialNumber: syz [ 349.644293][ T5854] usb 5-1: config 0 descriptor?? [ 349.657314][ T5854] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 349.803065][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.810799][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.653215][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.662291][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.806580][ T8151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.846606][ T5854] gspca_spca1528: reg_w err -110 [ 350.857358][ T6271] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.894946][ T6271] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.906529][ T5854] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 350.963534][ T6271] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.009068][ T6271] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.741330][ T8172] syz.3.378 uses obsolete (PF_INET,SOCK_PACKET) [ 351.913157][ T8170] netlink: 36 bytes leftover after parsing attributes in process `syz.0.377'. [ 352.660528][ T8179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.713519][ T8151] syz.4.373 (8151) used greatest stack depth: 17776 bytes left [ 352.782192][ T5947] usb 5-1: USB disconnect, device number 13 [ 352.995149][ T8166] delete_channel: no stack [ 353.929898][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 353.944030][ T8189] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 353.958270][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.986586][ T5978] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 356.156404][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 359.621207][ T5978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 359.634987][ T5978] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 359.643449][ T5978] usb 2-1: can't read configurations, error -71 [ 362.246686][ T5947] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 362.399108][ T5947] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 363.306577][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.420258][ T5947] usb 4-1: config 0 descriptor?? [ 363.441229][ T5947] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 363.576167][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 363.585409][ T8268] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 363.593230][ T8268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.034254][ T5947] gp8psk: usb in 128 operation failed. [ 364.065853][ T5947] gp8psk: usb in 137 operation failed. [ 364.096493][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.137918][ T5947] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 364.151210][ T5947] usb 4-1: media controller created [ 364.220635][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.347515][ T5947] gp8psk_fe: Frontend attached [ 364.377501][ T5947] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 364.425165][ T5947] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 364.787149][ T30] audit: type=1326 audit(1756372266.098:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 364.816867][ T30] audit: type=1326 audit(1756372266.118:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 364.840718][ T30] audit: type=1326 audit(1756372266.118:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 364.902180][ T30] audit: type=1326 audit(1756372266.118:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 364.998715][ T5947] gp8psk: usb in 137 operation failed. [ 365.028986][ T5947] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 365.038929][ T5947] gp8psk: found Genpix USB device pID = 203 (hex) [ 365.045516][ T30] audit: type=1326 audit(1756372266.118:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 365.144787][ T5947] usb 4-1: USB disconnect, device number 11 [ 365.154883][ T30] audit: type=1326 audit(1756372266.118:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8280 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 365.445971][ T5947] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 367.371106][ T30] audit: type=1326 audit(1756372268.678:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 367.557273][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 367.575426][ T30] audit: type=1326 audit(1756372268.708:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 367.790789][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 367.886349][ T30] audit: type=1326 audit(1756372268.708:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 367.978332][ T30] audit: type=1326 audit(1756372268.708:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 368.076471][ T5947] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 368.226380][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 368.329691][ T5947] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 368.408488][ T5947] usb 2-1: config 0 has no interface number 0 [ 368.432607][ T5947] usb 2-1: config 0 interface 184 has no altsetting 0 [ 368.622462][ T5947] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.859392][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.897576][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 368.910328][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 369.082010][ T6256] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.095390][ T6256] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.133469][ T5947] usb 2-1: Product: syz [ 369.149920][ T6256] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.159645][ T5947] usb 2-1: Manufacturer: syz [ 369.191100][ T5947] usb 2-1: SerialNumber: syz [ 369.210401][ T6256] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.554395][ T5947] usb 2-1: config 0 descriptor?? [ 369.634855][ T8321] @: renamed from vlan0 (while UP) [ 369.704639][ T5947] smsc75xx v1.0.0 [ 369.708401][ T5947] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 369.804699][ T5947] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 370.196756][ T8330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.204361][ T8330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.446489][ T8330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.459807][ T8330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.797265][ T8336] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.407'. [ 370.815157][ T8336] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 372.090667][ T8347] lo: entered promiscuous mode [ 372.096051][ T8347] tunl0: entered promiscuous mode [ 372.124755][ T8347] gre0: entered promiscuous mode [ 372.131964][ T8347] gretap0: entered promiscuous mode [ 372.138130][ T8347] erspan0: entered promiscuous mode [ 372.144236][ T8347] ip_vti0: entered promiscuous mode [ 372.150417][ T8347] ip6_vti0: entered promiscuous mode [ 372.157061][ T8347] sit0: entered promiscuous mode [ 372.163053][ T8347] ip6tnl0: entered promiscuous mode [ 372.169387][ T8347] ip6gre0: entered promiscuous mode [ 372.175642][ T8347] syz_tun: entered promiscuous mode [ 372.181720][ T8347] ip6gretap0: entered promiscuous mode [ 372.188022][ T8347] vcan0: entered promiscuous mode [ 372.193608][ T8347] bond0: entered promiscuous mode [ 372.198844][ T8347] bond_slave_0: entered promiscuous mode [ 372.204908][ T8347] bond_slave_1: entered promiscuous mode [ 372.212317][ T8347] team0: entered promiscuous mode [ 372.217640][ T8347] team_slave_0: entered promiscuous mode [ 372.223650][ T8347] team_slave_1: entered promiscuous mode [ 372.231094][ T8347] dummy0: entered promiscuous mode [ 372.236787][ T8347] nlmon0: entered promiscuous mode [ 372.282605][ T8347] caif0: entered promiscuous mode [ 372.293217][ T8347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.724450][ T43] usb 2-1: USB disconnect, device number 9 [ 373.952021][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 374.121168][ T8357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.865216][ T8375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.408952][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'. [ 379.079383][ T8404] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 379.095426][ T8404] nvme_fabrics: unknown parameter or missing value 'œ «' in ctrl creation request [ 379.773555][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 380.729631][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 380.947794][ T8422] : entered promiscuous mode [ 384.000277][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.007930][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.685571][ T8458] netlink: 'syz.4.428': attribute type 29 has an invalid length. [ 384.699386][ T8458] netlink: 'syz.4.428': attribute type 29 has an invalid length. [ 384.714258][ T8458] netlink: 500 bytes leftover after parsing attributes in process `syz.4.428'. [ 385.425730][ T5947] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 385.606484][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 385.623755][ T5947] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 385.656838][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 385.703029][ T5947] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.757820][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 385.801146][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 385.858881][ T5947] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 385.866838][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 385.886322][ T5947] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.916368][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 385.946392][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 385.968444][ T5947] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 385.975917][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 385.987758][ T5947] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.026322][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 386.046316][ T5947] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 386.072374][ T5947] usb 3-1: string descriptor 0 read error: -22 [ 386.079927][ T5947] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 386.096301][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.118948][ T8467] input: syz1 as /devices/virtual/input/input13 [ 386.132831][ T8467] program syz.1.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.255103][ T5947] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 386.957274][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 386.957297][ T30] audit: type=1326 audit(1756372288.178:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.2.429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x0 [ 388.758852][ T10] usb 3-1: USB disconnect, device number 13 [ 390.179486][ T8504] fuse: Bad value for 'fd' [ 390.220901][ T8511] random: crng reseeded on system resumption [ 390.288980][ T8504] ip6erspan0: entered promiscuous mode [ 390.667849][ T8514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.675392][ T8514] IPv6: NLM_F_CREATE should be set when creating new route [ 395.644257][ T30] audit: type=1800 audit(1756372296.938:537): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.444" name="bus" dev="ramfs" ino=21231 res=0 errno=0 [ 396.822514][ T8571] input: syz0 as /devices/virtual/input/input15 [ 396.858045][ T30] audit: type=1326 audit(1756372298.108:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 397.077530][ T30] audit: type=1326 audit(1756372298.108:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 397.127362][ T30] audit: type=1326 audit(1756372298.108:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 397.211825][ T30] audit: type=1326 audit(1756372298.118:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 397.611041][ T30] audit: type=1326 audit(1756372298.118:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 397.723564][ T30] audit: type=1326 audit(1756372298.118:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 397.745677][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.856434][ T30] audit: type=1326 audit(1756372298.118:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 397.878640][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.943554][ T8577] input: syz1 as /devices/virtual/input/input16 [ 398.281178][ T30] audit: type=1326 audit(1756372298.118:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 398.369782][ T30] audit: type=1326 audit(1756372298.118:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34ff58ebe9 code=0x7ffc0000 [ 398.392064][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.503557][ T8592] pim6reg: entered allmulticast mode [ 399.524109][ T8592] pim6reg: left allmulticast mode [ 402.257370][ T8619] netlink: 'syz.2.455': attribute type 23 has an invalid length. [ 403.503322][ T8629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.455893][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 406.596617][ T8651] pim6reg: entered allmulticast mode [ 406.794688][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 406.794703][ T30] audit: type=1326 audit(1756372308.098:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 406.989873][ T8648] pim6reg: left allmulticast mode [ 407.122085][ T8660] fuse: Bad value for 'fd' [ 407.208945][ T8664] input: syz1 as /devices/virtual/input/input17 [ 407.511318][ T30] audit: type=1326 audit(1756372308.138:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 407.726573][ T30] audit: type=1326 audit(1756372308.148:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 407.748784][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.761517][ T30] audit: type=1326 audit(1756372308.148:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 407.860574][ T30] audit: type=1326 audit(1756372308.148:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 407.882684][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.063483][ T30] audit: type=1326 audit(1756372308.148:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 408.317565][ T30] audit: type=1326 audit(1756372308.148:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 409.506463][ T5946] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 409.806469][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 409.859914][ T5946] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 409.881700][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.905576][ T5946] usb 1-1: Product: syz [ 409.915780][ T5946] usb 1-1: Manufacturer: syz [ 409.925969][ T5946] usb 1-1: SerialNumber: syz [ 409.950170][ T5946] r8152-cfgselector 1-1: Unknown version 0x0000 [ 409.975523][ T5946] r8152-cfgselector 1-1: config 0 descriptor?? [ 410.522874][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.562465][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.286569][ T8694] mac80211_hwsim hwsim7 è: renamed from wlan1 [ 412.222077][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 412.374850][ T5948] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 412.436464][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 412.445503][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 412.455175][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.472170][ T10] usb 5-1: Product: syz [ 412.492487][ T10] usb 5-1: Manufacturer: syz [ 412.506823][ T10] usb 5-1: SerialNumber: syz [ 412.584364][ T10] usb 5-1: config 0 descriptor?? [ 412.601139][ T10] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 412.927629][ T10] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 413.979845][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 413.989040][ T8723] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 413.996953][ T8723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.346473][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 416.160629][ T10] usb 5-1: USB disconnect, device number 14 [ 417.043466][ T8745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.466449][ T5947] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 418.849919][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 418.879387][ T5947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.329444][ T5947] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 419.339274][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.359295][ T5947] usb 2-1: Product: syz [ 419.376835][ T5947] usb 2-1: Manufacturer: syz [ 419.384449][ T5947] usb 2-1: SerialNumber: syz [ 419.617221][ T5947] usb 2-1: config 0 descriptor?? [ 419.806864][ T5947] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 421.148975][ T30] audit: type=1400 audit(1756372322.438:626): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=8773 comm="syz.3.482" [ 421.943095][ T5948] usb 2-1: USB disconnect, device number 10 [ 422.981953][ T8795] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.486'. [ 422.994499][ T8795] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.486'. [ 423.004199][ T8795] netlink: 332 bytes leftover after parsing attributes in process `syz.0.486'. [ 424.706438][ T8807] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 425.833210][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 426.120249][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 426.501677][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 426.521223][ T24] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 426.532531][ T24] usb 2-1: config 0 has no interface number 0 [ 426.564987][ T24] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 426.580345][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.589878][ T24] usb 2-1: Product: syz [ 426.594081][ T24] usb 2-1: Manufacturer: syz [ 426.600732][ T24] usb 2-1: SerialNumber: syz [ 427.069761][ T24] usb 2-1: config 0 descriptor?? [ 427.406340][ T5948] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 427.487054][ T24] redrat3 2-1:0.31: Couldn't find all endpoints [ 427.634720][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 429.693133][ T8854] fuse: Unknown parameter 'fd00000000000000000000015' [ 431.064977][ T10] usb 2-1: USB disconnect, device number 11 [ 431.733310][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'. [ 431.753423][ T5948] usb 1-1: unable to get BOS descriptor or descriptor too short [ 432.133538][ T5948] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 432.154279][ T5948] usb 1-1: can't read configurations, error -71 [ 432.740924][ T8885] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 433.436426][ T5948] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 433.667283][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.677793][ T5948] usb 1-1: config 0 has no interfaces? [ 433.706592][ T5948] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.794879][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.831479][ T5948] usb 1-1: config 0 descriptor?? [ 434.089346][ T8885] delete_channel: no stack [ 434.106922][ T24] usb 1-1: USB disconnect, device number 10 [ 434.274163][ T8892] netlink: 'syz.4.505': attribute type 6 has an invalid length. [ 434.866389][ T5947] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 435.103432][ T5947] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 435.138072][ T5947] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 435.153542][ T5947] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.168371][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.188338][ T5947] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.220812][ T5947] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 435.536066][ T8454] udevd[8454]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.859000][ T30] audit: type=1326 audit(1756372337.168:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 435.999101][ T30] audit: type=1326 audit(1756372337.168:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 436.079934][ T30] audit: type=1326 audit(1756372337.198:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 436.180599][ T8906] input: syz1 as /devices/virtual/input/input18 [ 436.208498][ T5947] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 436.245325][ T30] audit: type=1326 audit(1756372337.198:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 436.540352][ T30] audit: type=1326 audit(1756372337.198:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 436.562683][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.576675][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 436.731610][ T5947] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 436.742671][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.854244][ T5947] usb 2-1: Product: syz [ 436.878944][ T5947] usb 2-1: Manufacturer: syz [ 436.893581][ T30] audit: type=1326 audit(1756372337.198:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 436.955431][ T5947] usb 2-1: SerialNumber: syz [ 436.996335][ T5947] usb 2-1: config 0 descriptor?? [ 437.028669][ T5947] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 437.035498][ T30] audit: type=1326 audit(1756372337.198:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 437.136276][ T30] audit: type=1326 audit(1756372337.198:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 437.235590][ T24] usb 5-1: USB disconnect, device number 15 [ 437.499526][ T5948] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 438.316949][ T5947] gspca_sonixj: reg_r err -110 [ 438.321897][ T5947] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 438.348617][ T5948] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 438.796502][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.861957][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.664293][ T5947] usb 2-1: USB disconnect, device number 12 [ 441.102803][ T8936] kernel profiling enabled (shift: 17) [ 441.111050][ T8936] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 441.119040][ T8936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.512'. [ 441.129455][ T8936] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 443.844703][ T30] audit: type=1326 audit(1756372345.148:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 443.856935][ T8961] input: syz0 as /devices/virtual/input/input19 [ 443.866966][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.949534][ T30] audit: type=1326 audit(1756372345.148:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 444.084260][ T30] audit: type=1326 audit(1756372345.148:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 444.133187][ T30] audit: type=1326 audit(1756372345.148:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 444.166430][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.194904][ T30] audit: type=1326 audit(1756372345.148:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 444.217207][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.291351][ T30] audit: type=1326 audit(1756372345.148:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 444.568174][ T30] audit: type=1326 audit(1756372345.148:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 444.870426][ T8978] input: syz1 as /devices/virtual/input/input20 [ 445.155831][ T30] audit: type=1326 audit(1756372345.148:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 445.396990][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.403474][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.439205][ T30] audit: type=1326 audit(1756372345.148:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 445.784428][ T30] audit: type=1326 audit(1756372345.148:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8958 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 447.596581][ T5948] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 447.922361][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 448.212672][ T5948] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.228480][ T5948] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 448.237471][ T5948] usb 4-1: config 8 has no interface number 0 [ 448.244538][ T5948] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 448.260745][ T5948] usb 4-1: config 8 interface 24 has no altsetting 0 [ 448.442123][ T5948] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 448.451599][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.471689][ T5948] usb 4-1: Product: syz [ 448.475991][ T5948] usb 4-1: Manufacturer: syz [ 448.519411][ T5948] usb 4-1: SerialNumber: syz [ 451.429823][ T9038] program syz.0.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.634488][ T9028] sctp: failed to load transform for md5: -2 [ 451.666409][ T5947] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 452.106421][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 452.177907][ T5947] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 452.219674][ T5948] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 452.273578][ T5947] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 452.282139][ T5948] usb 4-1: USB disconnect, device number 12 [ 452.306328][ T5978] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 452.374414][ T5947] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 452.451510][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.466404][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 452.479390][ T5978] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 452.506439][ T5978] usb 5-1: config 0 has no interface number 0 [ 452.517833][ T5947] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 452.522843][ T5978] usb 5-1: config 0 interface 184 has no altsetting 0 [ 452.561230][ T5978] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 452.566109][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 452.571486][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.613407][ T5947] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 452.631642][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.664105][ T5978] usb 5-1: Product: syz [ 452.681257][ T5978] usb 5-1: Manufacturer: syz [ 452.696940][ T5947] usb 2-1: config 0 descriptor?? [ 452.711164][ T5978] usb 5-1: SerialNumber: syz [ 452.720284][ T9048] PKCS7: Unknown OID: [5] (bad) [ 452.726677][ T9048] PKCS7: Only support pkcs7_signedData type [ 452.784311][ T5978] usb 5-1: config 0 descriptor?? [ 452.899757][ T5978] smsc75xx v1.0.0 [ 452.903466][ T5978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 452.934777][ T5978] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 452.996519][ T5948] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 453.301736][ T9050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.531'. [ 453.312070][ T9050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.448598][ T5947] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 453.461121][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 453.468917][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 453.468936][ T30] audit: type=1326 audit(1756372354.778:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 453.559628][ T30] audit: type=1326 audit(1756372354.778:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 453.676653][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.695568][ T9056] input: syz1 as /devices/virtual/input/input21 [ 453.943654][ T5948] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 453.963695][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.979020][ T30] audit: type=1326 audit(1756372354.778:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 454.014442][ T30] audit: type=1326 audit(1756372354.778:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 454.041400][ T5948] usb 3-1: config 0 descriptor?? [ 454.095281][ T30] audit: type=1326 audit(1756372354.778:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 454.304883][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 454.367475][ T9063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.425726][ T30] audit: type=1326 audit(1756372354.778:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 454.629723][ T30] audit: type=1326 audit(1756372354.778:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 455.336762][ T10] usb 2-1: USB disconnect, device number 13 [ 455.350131][ T10] usblp0: removed [ 455.545662][ T5947] usb 5-1: USB disconnect, device number 16 [ 456.340112][ T9077] lo: entered promiscuous mode [ 456.347963][ T9077] tunl0: entered promiscuous mode [ 456.357301][ T9077] gre0: entered promiscuous mode [ 456.364345][ T9077] gretap0: entered promiscuous mode [ 456.371792][ T9077] erspan0: entered promiscuous mode [ 456.379030][ T9077] ip_vti0: entered promiscuous mode [ 456.387513][ T9077] ip6_vti0: entered promiscuous mode [ 456.396044][ T9077] sit0: entered promiscuous mode [ 456.403431][ T9077] ip6tnl0: entered promiscuous mode [ 456.411675][ T9077] ip6gre0: entered promiscuous mode [ 456.419515][ T9077] syz_tun: entered promiscuous mode [ 456.427503][ T9077] ip6gretap0: entered promiscuous mode [ 456.435221][ T9077] bridge0: entered promiscuous mode [ 456.443107][ T9077] vcan0: entered promiscuous mode [ 456.450604][ T9077] bond0: entered promiscuous mode [ 456.456053][ T9077] bond_slave_0: entered promiscuous mode [ 456.465185][ T9077] bond_slave_1: entered promiscuous mode [ 456.475335][ T9077] team0: entered promiscuous mode [ 456.480653][ T9077] team_slave_0: entered promiscuous mode [ 456.489939][ T9077] team_slave_1: entered promiscuous mode [ 456.505530][ T9077] dummy0: entered promiscuous mode [ 456.528465][ T9077] nlmon0: entered promiscuous mode [ 457.073976][ T9077] caif0: entered promiscuous mode [ 457.254099][ T9077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.975764][ T5948] usbhid 3-1:0.0: can't add hid device: -71 [ 457.981997][ T5948] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 458.037628][ T5948] usb 3-1: USB disconnect, device number 14 [ 464.297878][ T9129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.740377][ T9133] netlink: 356 bytes leftover after parsing attributes in process `syz.1.546'. [ 466.431416][ T9153] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.548'. [ 466.932624][ T30] audit: type=1326 audit(1756372368.198:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 467.044335][ T30] audit: type=1326 audit(1756372368.198:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 467.122978][ T9158] input: syz1 as /devices/virtual/input/input22 [ 467.152464][ T30] audit: type=1326 audit(1756372368.198:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 467.289930][ T30] audit: type=1326 audit(1756372368.198:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 467.312217][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.782654][ T30] audit: type=1326 audit(1756372368.198:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 467.816469][ T30] audit: type=1326 audit(1756372368.198:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 467.968177][ T30] audit: type=1326 audit(1756372368.198:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 468.434082][ T9153] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=#' [ 468.450587][ T9153] CPU: 1 UID: 0 PID: 9153 Comm: syz.2.548 Not tainted syzkaller #0 PREEMPT(full) [ 468.450619][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.450633][ T9153] Call Trace: [ 468.450639][ T9153] [ 468.450647][ T9153] dump_stack_lvl+0x189/0x250 [ 468.450676][ T9153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.450695][ T9153] ? __pfx__printk+0x10/0x10 [ 468.450721][ T9153] ? kernfs_path_from_node+0x2f/0x290 [ 468.450738][ T9153] ? kernfs_path_from_node+0x250/0x290 [ 468.450754][ T9153] ? kernfs_path_from_node+0x2f/0x290 [ 468.450774][ T9153] sysfs_warn_dup+0x8e/0xa0 [ 468.450790][ T9153] sysfs_do_create_link_sd+0xc0/0x110 [ 468.450809][ T9153] device_add_class_symlinks+0x1cf/0x240 [ 468.450829][ T9153] device_add+0x475/0xb50 [ 468.450847][ T9153] wiphy_register+0x1ba6/0x28d0 [ 468.450883][ T9153] ? __pfx_wiphy_register+0x10/0x10 [ 468.450904][ T9153] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 468.450927][ T9153] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 468.450947][ T9153] ieee80211_register_hw+0x3425/0x4080 [ 468.450977][ T9153] ? ieee80211_register_hw+0x14e1/0x4080 [ 468.451001][ T9153] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 468.451021][ T9153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.451053][ T9153] ? __hrtimer_setup+0x187/0x210 [ 468.451067][ T9153] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 468.451093][ T9153] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 468.451136][ T9153] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 468.451155][ T9153] ? trace_kmalloc+0x1f/0xd0 [ 468.451173][ T9153] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 468.451195][ T9153] ? kstrndup+0xbf/0x160 [ 468.451219][ T9153] hwsim_new_radio_nl+0xea4/0x1b10 [ 468.451241][ T9153] ? __pfx___nla_validate_parse+0x10/0x10 [ 468.451276][ T9153] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 468.451306][ T9153] ? __nla_parse+0x40/0x60 [ 468.451332][ T9153] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 468.451358][ T9153] genl_family_rcv_msg_doit+0x212/0x300 [ 468.451383][ T9153] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.451412][ T9153] ? bpf_lsm_capable+0x9/0x20 [ 468.451432][ T9153] ? security_capable+0x7e/0x2e0 [ 468.451460][ T9153] genl_rcv_msg+0x60e/0x790 [ 468.451483][ T9153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.451500][ T9153] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 468.451531][ T9153] netlink_rcv_skb+0x205/0x470 [ 468.451552][ T9153] ? __lock_acquire+0xab9/0xd20 [ 468.451581][ T9153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.451599][ T9153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.451637][ T9153] ? down_read+0x1ad/0x2e0 [ 468.451653][ T9153] genl_rcv+0x28/0x40 [ 468.451669][ T9153] netlink_unicast+0x82f/0x9e0 [ 468.451696][ T9153] ? __pfx_netlink_unicast+0x10/0x10 [ 468.451719][ T9153] ? netlink_sendmsg+0x642/0xb30 [ 468.451741][ T9153] ? skb_put+0x11b/0x210 [ 468.451759][ T9153] netlink_sendmsg+0x805/0xb30 [ 468.451790][ T9153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.451816][ T9153] ? aa_sock_msg_perm+0xf1/0x1d0 [ 468.451832][ T9153] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.451847][ T9153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.451871][ T9153] __sock_sendmsg+0x21c/0x270 [ 468.451895][ T9153] ____sys_sendmsg+0x505/0x830 [ 468.451915][ T9153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.451939][ T9153] ? import_iovec+0x74/0xa0 [ 468.451959][ T9153] ___sys_sendmsg+0x21f/0x2a0 [ 468.451978][ T9153] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.452027][ T9153] ? __fget_files+0x2a/0x420 [ 468.452050][ T9153] ? __fget_files+0x3a0/0x420 [ 468.452081][ T9153] __x64_sys_sendmsg+0x19b/0x260 [ 468.452100][ T9153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.452125][ T9153] ? rcu_is_watching+0x15/0xb0 [ 468.452144][ T9153] ? do_syscall_64+0xbe/0x3b0 [ 468.452171][ T9153] do_syscall_64+0xfa/0x3b0 [ 468.452194][ T9153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.452209][ T9153] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 468.452223][ T9153] ? clear_bhb_loop+0x60/0xb0 [ 468.452241][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.452260][ T9153] RIP: 0033:0x7f89dfd8ebe9 [ 468.452278][ T9153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.452291][ T9153] RSP: 002b:00007f89e0b77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.452308][ T9153] RAX: ffffffffffffffda RBX: 00007f89dffb6360 RCX: 00007f89dfd8ebe9 [ 468.452319][ T9153] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 000000000000000b [ 468.452328][ T9153] RBP: 00007f89dfe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 468.452338][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.452347][ T9153] R13: 00007f89dffb63f8 R14: 00007f89dffb6360 R15: 00007f89e00dfa28 [ 468.452371][ T9153] [ 468.911471][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.775669][ T9166] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 469.919718][ T9171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.935322][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 475.760475][ T30] audit: type=1326 audit(1756372377.068:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 476.065010][ T9226] input: syz1 as /devices/virtual/input/input23 [ 476.363068][ T30] audit: type=1326 audit(1756372377.088:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 476.414849][ T9225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.557212][ T30] audit: type=1326 audit(1756372377.088:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 476.741018][ T30] audit: type=1326 audit(1756372377.088:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 476.784110][ T30] audit: type=1326 audit(1756372377.088:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 476.808826][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 476.945834][ T30] audit: type=1326 audit(1756372377.088:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 477.189991][ T30] audit: type=1326 audit(1756372377.098:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 480.146060][ T9261] netlink: 'syz.3.569': attribute type 10 has an invalid length. [ 480.326088][ T9258] delete_channel: no stack [ 480.939308][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 481.207928][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 481.487965][ T24] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 481.566310][ T24] usb 1-1: config 2 has no interface number 0 [ 481.585552][ T24] usb 1-1: config 2 interface 31 has no altsetting 0 [ 481.741062][ T24] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 481.750492][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.890116][ T24] usb 1-1: Product: syz [ 481.894321][ T24] usb 1-1: Manufacturer: syz [ 482.096421][ T24] usb 1-1: SerialNumber: syz [ 482.177241][ T24] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 485.303384][ T5946] usb 1-1: USB disconnect, device number 11 [ 486.270468][ T9317] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 486.841256][ T9324] PKCS7: Unknown OID: [5] (bad) [ 486.847329][ T9324] PKCS7: Only support pkcs7_signedData type [ 487.196360][ T5948] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 487.382113][ T6251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.396328][ T6251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.437005][ T1000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.456373][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 487.656623][ T5948] usb 2-1: config 0 has no interfaces? [ 487.678967][ T5948] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 487.689005][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.699137][ T1000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.708209][ T5948] usb 2-1: Product: syz [ 487.716587][ T5948] usb 2-1: Manufacturer: syz [ 487.721299][ T5948] usb 2-1: SerialNumber: syz [ 487.738717][ T5948] usb 2-1: config 0 descriptor?? [ 488.189524][ T9331] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 488.889057][ T9328] delete_channel: no stack [ 490.742890][ T5948] usb 2-1: USB disconnect, device number 14 [ 491.327130][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 491.422988][ T9356] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 492.271509][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.588'. [ 494.554559][ T9374] sctp: [Deprecated]: syz.0.590 (pid 9374) Use of int in maxseg socket option. [ 494.554559][ T9374] Use struct sctp_assoc_value instead [ 495.346928][ T9390] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 496.129394][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 496.598211][ T9407] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 496.922989][ T9404] delete_channel: no stack [ 498.660146][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 499.146796][ T9434] hub 9-0:1.0: USB hub found [ 499.153258][ T9434] hub 9-0:1.0: 1 port detected [ 500.431967][ T30] audit: type=1326 audit(1756372401.708:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 500.776615][ T30] audit: type=1326 audit(1756372401.718:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 500.896295][ T30] audit: type=1326 audit(1756372401.718:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.252044][ T30] audit: type=1326 audit(1756372401.718:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.305322][ T30] audit: type=1326 audit(1756372401.718:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.356323][ T30] audit: type=1326 audit(1756372401.718:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.446530][ T30] audit: type=1326 audit(1756372401.718:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.716807][ T30] audit: type=1326 audit(1756372401.718:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.719351][ T9451] hsr0: entered promiscuous mode [ 501.739214][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.740194][ T30] audit: type=1326 audit(1756372401.718:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.772730][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.779295][ T30] audit: type=1326 audit(1756372401.718:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 501.801470][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.892519][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 502.034866][ T9451] hsr_slave_0: left promiscuous mode [ 502.041486][ T9451] hsr_slave_1: left promiscuous mode [ 502.128030][ T9451] hsr0 (unregistering): left promiscuous mode [ 502.186484][ T5947] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 502.483493][ T5947] usb 2-1: config 0 has no interfaces? [ 502.663690][ T5947] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 502.673095][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.747617][ T5947] usb 2-1: Product: syz [ 502.751886][ T5947] usb 2-1: Manufacturer: syz [ 502.776606][ T5947] usb 2-1: SerialNumber: syz [ 502.789839][ T5947] usb 2-1: config 0 descriptor?? [ 504.772048][ T9474] netlink: 'syz.3.618': attribute type 21 has an invalid length. [ 504.796405][ T9474] netlink: 128 bytes leftover after parsing attributes in process `syz.3.618'. [ 504.948630][ T9474] netlink: 'syz.3.618': attribute type 4 has an invalid length. [ 504.966643][ T9474] netlink: 'syz.3.618': attribute type 5 has an invalid length. [ 504.975044][ T9474] netlink: 3 bytes leftover after parsing attributes in process `syz.3.618'. [ 505.541437][ T9486] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 505.684984][ T5947] usb 2-1: USB disconnect, device number 15 [ 506.816739][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.824318][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.394217][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.613'. [ 508.486637][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 512.207016][ T9554] fuse: Unknown parameter 'subj_type' [ 513.012039][ T9568] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 513.286434][ T5947] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 513.698178][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.711396][ T5947] usb 1-1: config 0 has no interfaces? [ 513.719688][ T5947] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.733273][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.752067][ T5947] usb 1-1: config 0 descriptor?? [ 514.055519][ T9568] delete_channel: no stack [ 514.097046][ T5947] usb 1-1: USB disconnect, device number 12 [ 515.457131][ T9581] sctp: [Deprecated]: syz.2.626 (pid 9581) Use of int in maxseg socket option. [ 515.457131][ T9581] Use struct sctp_assoc_value instead [ 516.144463][ T9589] IPv6: Can't replace route, no match found [ 517.116556][ T5948] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 517.314875][ T5948] usb 4-1: config 0 has no interfaces? [ 517.406748][ T5948] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 517.467737][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.564659][ T5948] usb 4-1: Product: syz [ 517.650252][ T5948] usb 4-1: Manufacturer: syz [ 517.654912][ T5948] usb 4-1: SerialNumber: syz [ 517.826300][ T5948] usb 4-1: config 0 descriptor?? [ 518.070988][ T9601] netlink: 36 bytes leftover after parsing attributes in process `syz.0.631'. [ 518.556004][ T5947] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 518.729041][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.005455][ T5947] usb 3-1: config 0 has no interfaces? [ 519.096380][ T5947] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.120757][ T9607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.156259][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.204633][ T5947] usb 3-1: config 0 descriptor?? [ 519.553433][ T5947] usb 3-1: USB disconnect, device number 15 [ 519.892606][ T5947] usb 4-1: USB disconnect, device number 13 [ 521.202187][ T9632] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 521.485606][ T9604] syz.0.631 (9604): drop_caches: 2 [ 521.516257][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'. [ 527.375672][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 527.375687][ T30] audit: type=1326 audit(1756372428.668:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 527.409124][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 527.497757][ T30] audit: type=1326 audit(1756372428.668:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 527.645170][ T9681] input: syz1 as /devices/virtual/input/input24 [ 527.695859][ T30] audit: type=1326 audit(1756372428.668:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 527.855340][ T30] audit: type=1326 audit(1756372428.758:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 528.100762][ T30] audit: type=1326 audit(1756372428.758:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 528.527541][ T30] audit: type=1326 audit(1756372428.758:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.0.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 529.316455][ T5946] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 529.566326][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 529.592528][ T5946] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 529.601778][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 529.610101][ T5946] usb 5-1: Product: syz [ 529.614273][ T5946] usb 5-1: Manufacturer: syz [ 529.622446][ T5946] usb 5-1: SerialNumber: syz [ 529.629468][ T5946] usb 5-1: config 0 descriptor?? [ 529.869925][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 531.124476][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.133752][ T9717] team0: Port device batadv0 added [ 532.378125][ T5946] usb 5-1: USB disconnect, device number 17 [ 533.966290][ T5947] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 534.857093][ T5947] usb 2-1: config 0 has no interfaces? [ 534.899429][ T5947] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 534.936429][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.981990][ T5947] usb 2-1: Product: syz [ 535.000663][ T5947] usb 2-1: Manufacturer: syz [ 535.061485][ T5947] usb 2-1: SerialNumber: syz [ 535.125567][ T5947] usb 2-1: config 0 descriptor?? [ 535.413121][ T9745] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 535.752994][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 535.762197][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 535.928235][ T5947] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 536.045789][ T30] audit: type=1326 audit(1756372437.308:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.090189][ T30] audit: type=1326 audit(1756372437.308:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.112411][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.126926][ T30] audit: type=1326 audit(1756372437.308:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.343387][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.362635][ T5947] usb 3-1: config 0 has no interfaces? [ 536.368373][ T5947] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.380520][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.434017][ T30] audit: type=1326 audit(1756372437.308:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.493570][ T30] audit: type=1326 audit(1756372437.308:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.553928][ T30] audit: type=1326 audit(1756372437.308:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.578065][ T5947] usb 3-1: config 0 descriptor?? [ 536.605021][ T30] audit: type=1326 audit(1756372437.308:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.627321][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.661324][ T30] audit: type=1326 audit(1756372437.308:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.860866][ T30] audit: type=1326 audit(1756372437.308:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 536.953497][ T43] usb 3-1: USB disconnect, device number 16 [ 536.991192][ T9745] delete_channel: no stack [ 537.176428][ T30] audit: type=1326 audit(1756372437.318:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9742 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 537.457035][ T9759] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 537.792976][ T5978] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 538.576875][ T5978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.595189][ T5978] usb 4-1: config 0 has no interfaces? [ 538.611152][ T5978] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 538.626407][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.654326][ T5978] usb 4-1: config 0 descriptor?? [ 539.064053][ T9759] delete_channel: no stack [ 539.070259][ T5947] usb 4-1: USB disconnect, device number 14 [ 539.135945][ T43] usb 2-1: USB disconnect, device number 16 [ 539.309691][ T9769] input: syz1 as /devices/virtual/input/input25 [ 539.496808][ T9773] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 539.916531][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 540.166451][ T5978] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 540.534162][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 540.534283][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.606372][ T5946] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 540.709450][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.725076][ T43] usb 2-1: config 0 has no interfaces? [ 540.760428][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 540.804482][ T5978] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 540.856363][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.894657][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.923272][ T43] usb 2-1: config 0 descriptor?? [ 541.012962][ T5978] usb 5-1: config 0 descriptor?? [ 541.186314][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 541.219996][ T9773] delete_channel: no stack [ 541.308986][ T43] usb 2-1: USB disconnect, device number 17 [ 541.336159][ T5946] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 541.406978][ T5948] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 541.514224][ T5946] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 541.657710][ T5946] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 542.304598][ T5948] usb 4-1: config 0 has no interfaces? [ 542.323050][ T5948] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 542.344095][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.375047][ T5948] usb 4-1: Product: syz [ 542.392170][ T5948] usb 4-1: Manufacturer: syz [ 542.580959][ T5948] usb 4-1: SerialNumber: syz [ 542.632271][ T5948] usb 4-1: config 0 descriptor?? [ 543.586739][ T9802] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 543.866446][ T9792] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 543.996440][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 544.051030][ T9792] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 544.058911][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.126516][ T9792] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.249159][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 544.297405][ T5946] usb 1-1: string descriptor 0 read error: -71 [ 544.350626][ T5946] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.365574][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 544.381504][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.398497][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.433618][ T43] usb 3-1: config 0 has no interfaces? [ 544.457593][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 544.516561][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.526890][ T9792] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 544.534404][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 544.568060][ T43] usb 3-1: config 0 descriptor?? [ 544.625105][ T5978] usbhid 5-1:0.0: can't add hid device: -71 [ 544.649347][ T5946] usb 1-1: can't set config #1, error -71 [ 544.676999][ T5978] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 544.816578][ T9802] delete_channel: no stack [ 544.837166][ T43] usb 3-1: USB disconnect, device number 17 [ 544.858413][ T5946] usb 1-1: USB disconnect, device number 13 [ 544.877031][ T9792] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.933528][ T5978] usb 5-1: USB disconnect, device number 18 [ 544.946878][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 544.958218][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 545.010644][ T9792] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 545.041146][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 545.075219][ T9792] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.223061][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 545.252578][ T9792] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 545.275206][ T5946] usb 4-1: USB disconnect, device number 15 [ 545.662128][ T9813] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 545.745445][ T9792] usb 2-1: string descriptor 0 read error: -22 [ 545.752812][ T9792] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 545.768174][ T9792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.794820][ T9792] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 546.246626][ T5946] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 546.477852][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 546.485112][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 546.503723][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 546.859610][ T9792] usb 2-1: USB disconnect, device number 18 [ 546.918086][ T5946] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 546.936406][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.966375][ T5946] usb 4-1: Product: syz [ 546.978118][ T5946] usb 4-1: Manufacturer: syz [ 546.995144][ T5946] usb 4-1: SerialNumber: syz [ 547.027494][ T5946] usb 4-1: config 0 descriptor?? [ 547.069528][ T5946] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 547.099293][ T5946] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 547.572776][ T9824] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 547.948291][ T5946] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 548.065382][ T5946] em28xx 4-1:0.0: Config register raw data: 0x41 [ 549.512920][ T9843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.684'. [ 550.428541][ T5854] usb 4-1: USB disconnect, device number 16 [ 550.437464][ T5854] em28xx 4-1:0.0: Disconnecting em28xx [ 550.467430][ T5854] em28xx 4-1:0.0: Freeing device [ 550.778980][ T9850] netlink: 'syz.3.675': attribute type 10 has an invalid length. [ 551.186682][ T5947] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 551.217234][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 551.711027][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.777806][ T5947] usb 4-1: config 0 has no interfaces? [ 552.006565][ T9865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.084075][ T5947] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.109628][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.243346][ T5947] usb 4-1: config 0 descriptor?? [ 552.717033][ T9867] sctp: failed to load transform for md5: -2 [ 552.948426][ T9850] delete_channel: no stack [ 552.953032][ T5978] usb 4-1: USB disconnect, device number 17 [ 554.296339][ T5946] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 554.446795][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 554.459826][ T5946] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 554.542194][ T5946] usb 2-1: config 0 interface 0 has no altsetting 0 [ 554.569111][ T5946] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 554.581055][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.590324][ T5946] usb 2-1: Product: syz [ 554.595797][ T5946] usb 2-1: Manufacturer: syz [ 554.662029][ T5946] usb 2-1: SerialNumber: syz [ 554.736418][ T5946] usb 2-1: config 0 descriptor?? [ 554.762147][ T5946] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 554.999549][ T5946] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 555.147343][ T5946] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 555.183012][ T5946] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 556.985091][ T9905] tipc: Enabling of bearer rejected, failed to enable media [ 558.406296][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 558.767943][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 558.833079][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 558.846342][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.870244][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.945944][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.958976][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.971097][ T43] usb 3-1: Product: syz [ 558.978087][ T43] usb 3-1: Manufacturer: syz [ 558.992583][ T43] usb 3-1: SerialNumber: syz [ 560.296388][ T43] usb 3-1: 0:2 : does not exist [ 560.761883][ T9912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.713432][ T9935] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 562.391621][ T43] usb 2-1: USB disconnect, device number 19 [ 562.985759][ T5854] usb 3-1: USB disconnect, device number 18 [ 563.226419][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 563.548512][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 563.567749][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 563.579310][ T43] usb 2-1: config 0 has no interface number 0 [ 563.589293][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 563.625082][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 563.645472][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.675843][ T43] usb 2-1: Product: syz [ 563.693870][ T43] usb 2-1: Manufacturer: syz [ 563.713847][ T43] usb 2-1: SerialNumber: syz [ 563.741169][ T43] usb 2-1: config 0 descriptor?? [ 563.786526][ T43] smsc75xx v1.0.0 [ 563.801463][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 563.839621][ T43] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 564.020809][ T9934] syz.3.690 (9934): drop_caches: 2 [ 564.870553][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.906046][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.587402][ T9953] Invalid logical block size (7) [ 567.280580][ T9941] team0: Port device batadv0 removed [ 567.573557][ T24] usb 2-1: USB disconnect, device number 20 [ 568.262673][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.271869][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.607800][ T5978] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 568.797423][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 568.867778][ T5978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 568.977688][ T5978] usb 2-1: config 152 has an invalid interface number: 136 but max is 0 [ 568.989638][ T5978] usb 2-1: config 152 has an invalid interface association descriptor of length 5, skipping [ 569.004532][ T5978] usb 2-1: config 152 has no interface number 0 [ 569.020685][ T5978] usb 2-1: config 152 interface 136 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 569.088903][ T5978] usb 2-1: config 152 interface 136 has no altsetting 0 [ 569.130883][ T5978] usb 2-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 569.144319][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.160873][ T5978] usb 2-1: Product: syz [ 569.167805][ T5978] usb 2-1: Manufacturer: syz [ 569.178105][ T5978] usb 2-1: SerialNumber: syz [ 570.436450][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 570.930666][ T24] usb 3-1: config 0 has no interfaces? [ 570.943852][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 570.953260][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.966302][ T24] usb 3-1: Product: syz [ 570.975403][ T24] usb 3-1: Manufacturer: syz [ 570.995743][ T24] usb 3-1: SerialNumber: syz [ 571.034324][ T24] usb 3-1: config 0 descriptor?? [ 571.323816][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 572.957324][ T5978] plusb 2-1:152.136: probe with driver plusb failed with error -22 [ 573.043967][ T5978] usb 2-1: USB disconnect, device number 21 [ 573.162016][T10014] usb usb8: usbfs: process 10014 (syz.1.703) did not claim interface 0 before use [ 573.830347][T10008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.702'. [ 573.924897][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 573.966884][ T5854] usb 3-1: USB disconnect, device number 19 [ 574.478004][T10026] input: syz0 as /devices/virtual/input/input26 [ 574.559744][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 574.559767][ T30] audit: type=1326 audit(1756372475.778:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 574.670090][ T30] audit: type=1326 audit(1756372475.778:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 574.911693][ T30] audit: type=1326 audit(1756372475.778:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 575.081996][ T30] audit: type=1326 audit(1756372475.778:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 575.195978][ T30] audit: type=1326 audit(1756372475.778:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 575.328774][ T30] audit: type=1326 audit(1756372475.778:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 575.419015][ T30] audit: type=1326 audit(1756372475.778:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 575.441299][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.512575][ T30] audit: type=1326 audit(1756372475.778:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 575.655449][ T30] audit: type=1326 audit(1756372475.778:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 575.677789][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.728869][ T30] audit: type=1326 audit(1756372475.778:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.4.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 576.875353][T10053] input: syz0 as /devices/virtual/input/input27 [ 581.342335][T10088] sctp: failed to load transform for md5: -2 [ 582.009003][T10108] libceph: resolve '0.0' (ret=-3): failed [ 582.309729][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 582.309750][ T30] audit: type=1326 audit(1756372483.608:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.4.718" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9cb78ebe9 code=0x0 [ 582.987921][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 585.408374][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.723'. [ 586.850452][T10148] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 587.148915][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 587.249945][ T30] audit: type=1326 audit(1756372488.558:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 587.666839][ T30] audit: type=1326 audit(1756372488.558:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 587.748521][ T30] audit: type=1326 audit(1756372488.558:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 587.783559][T10159] input: syz1 as /devices/virtual/input/input28 [ 588.123931][ T30] audit: type=1326 audit(1756372488.558:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 588.135417][T10163] netlink: 380 bytes leftover after parsing attributes in process `syz.1.728'. [ 588.147594][ T30] audit: type=1326 audit(1756372488.558:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 588.369009][ T30] audit: type=1326 audit(1756372488.578:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 588.452979][ T30] audit: type=1326 audit(1756372488.578:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 588.647212][ T30] audit: type=1326 audit(1756372488.578:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 588.786712][ T30] audit: type=1326 audit(1756372488.578:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10151 comm="syz.3.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5773b8ebe9 code=0x7ffc0000 [ 590.317014][T10176] netlink: 'syz.0.730': attribute type 10 has an invalid length. [ 590.611874][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 590.681866][T10182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.811882][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.832481][ T24] usb 1-1: config 0 has no interfaces? [ 590.918478][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 590.930652][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.957975][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 591.103782][ T24] usb 1-1: config 0 descriptor?? [ 591.927963][T10192] netlink: 'syz.2.734': attribute type 3 has an invalid length. [ 592.855808][ T30] audit: type=1326 audit(1756372494.128:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 592.922520][ T30] audit: type=1326 audit(1756372494.128:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.042272][ T30] audit: type=1326 audit(1756372494.128:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.316213][ T30] audit: type=1326 audit(1756372494.128:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.434807][ T30] audit: type=1326 audit(1756372494.138:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.524394][ T30] audit: type=1326 audit(1756372494.138:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.568723][ T30] audit: type=1326 audit(1756372494.138:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.706412][ T30] audit: type=1326 audit(1756372494.138:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.834621][ T30] audit: type=1326 audit(1756372494.138:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 593.911652][ T30] audit: type=1326 audit(1756372494.138:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89dfd8ebe9 code=0x7ffc0000 [ 594.071186][T10203] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 594.290594][T10208] fuse: Bad value for 'fd' [ 594.317928][ T5946] usb 1-1: USB disconnect, device number 14 [ 594.378196][T10175] delete_channel: no stack [ 594.387455][T10205] gretap1: entered promiscuous mode [ 594.503514][T10205] bond1: (slave gretap1): making interface the new active one [ 594.626927][T10205] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 594.730746][T10211] ip6erspan0: entered promiscuous mode [ 594.812712][T10219] netlink: 'syz.4.738': attribute type 10 has an invalid length. [ 595.205884][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 595.350826][ T5946] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 596.658764][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.671306][ T5946] usb 5-1: config 0 has no interfaces? [ 597.392875][ T5946] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.402320][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.616698][ T5946] usb 5-1: config 0 descriptor?? [ 598.276470][ T24] usb 5-1: USB disconnect, device number 19 [ 598.304873][T10215] delete_channel: no stack [ 598.846413][T10252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.760334][T10262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.745'. [ 601.515542][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 602.878156][T10287] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 603.226364][ T9792] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 603.423268][ T9792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.626368][ T9792] usb 3-1: config 0 has no interfaces? [ 603.816243][T10296] program syz.0.751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.932265][ T9792] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 603.959950][ T9792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.019526][ T9792] usb 3-1: config 0 descriptor?? [ 604.933626][T10302] netlink: 'syz.1.753': attribute type 10 has an invalid length. [ 605.298899][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 605.617518][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.628434][ T24] usb 2-1: config 0 has no interfaces? [ 605.634055][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.650305][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.691913][ T24] usb 2-1: config 0 descriptor?? [ 606.146503][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 606.397475][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 606.397495][ T30] audit: type=1326 audit(1756372507.648:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 606.690696][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.777643][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 606.814786][ T30] audit: type=1326 audit(1756372507.648:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 606.837298][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.864517][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.884818][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.941235][T10311] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 606.960157][ T30] audit: type=1326 audit(1756372507.648:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 607.007126][ T43] usb 3-1: USB disconnect, device number 20 [ 607.023121][T10286] delete_channel: no stack [ 607.056724][ T30] audit: type=1326 audit(1756372507.648:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 607.081796][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.304010][ T30] audit: type=1326 audit(1756372507.648:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 607.410458][T10313] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 607.436378][ T30] audit: type=1326 audit(1756372507.648:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 607.470742][ T30] audit: type=1326 audit(1756372507.648:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 607.537607][ T30] audit: type=1326 audit(1756372507.648:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 607.639739][ T30] audit: type=1326 audit(1756372507.648:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10316 comm="syz.0.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7face638ebe9 code=0x7ffc0000 [ 607.689590][T10325] kvm: user requested TSC rate below hardware speed [ 608.829684][ T24] usb 4-1: USB disconnect, device number 18 [ 609.457248][ T5854] usb 2-1: USB disconnect, device number 22 [ 609.467522][T10300] delete_channel: no stack [ 610.822094][ T5854] IPVS: starting estimator thread 0... [ 610.942518][T10359] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 611.037858][T10360] IPVS: using max 29 ests per chain, 69600 per kthread [ 611.594309][T10364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.485165][ T5854] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 614.676262][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 614.743046][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 614.894792][ T5854] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 615.027518][ T5854] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 615.154404][ T5854] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 615.225105][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.326414][ T5854] usb 3-1: Product: syz [ 615.382081][ T5854] usb 3-1: Manufacturer: syz [ 615.426304][ T5854] usb 3-1: SerialNumber: syz [ 615.577854][ T5854] usb 3-1: config 0 descriptor?? [ 615.584208][T10394] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.869737][ T5854] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 615.875676][ T5854] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 615.956821][ T5854] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 615.976061][ T5854] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 615.990904][ T5854] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 616.030288][T10408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.288617][ T30] audit: type=1326 audit(1756372517.598:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 616.383389][ T30] audit: type=1326 audit(1756372517.598:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 616.553454][T10415] netlink: 'syz.1.771': attribute type 10 has an invalid length. [ 616.563685][ T30] audit: type=1326 audit(1756372517.598:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 617.029384][ T30] audit: type=1326 audit(1756372517.598:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 617.096406][ T5946] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 617.123810][ T30] audit: type=1326 audit(1756372517.598:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 617.273207][ T30] audit: type=1326 audit(1756372517.598:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 617.400593][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.401704][ T30] audit: type=1326 audit(1756372517.598:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa9cb78ebe9 code=0x7ffc0000 [ 617.496340][ T5946] usb 2-1: config 0 has no interfaces? [ 617.501915][ T5946] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.634236][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.728638][ T5946] usb 2-1: config 0 descriptor?? [ 618.481340][T10429] kvm: user requested TSC rate below hardware speed [ 618.615903][ T5946] usb 3-1: USB disconnect, device number 21 [ 618.627350][ T5946] mcba_usb 3-1:0.0 can0: device disconnected [ 620.274525][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'. [ 620.530819][T10458] netlink: 168 bytes leftover after parsing attributes in process `syz.2.784'. [ 621.142508][ T5854] usb 2-1: USB disconnect, device number 23 [ 621.168479][T10413] delete_channel: no stack [ 622.163344][T10474] netlink: 'syz.4.776': attribute type 5 has an invalid length. [ 622.642439][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 623.308127][ T24] usb 5-1: config 0 has no interfaces? [ 623.626602][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 623.635713][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 624.265942][ T24] usb 5-1: Manufacturer: syz [ 624.314759][ T24] usb 5-1: config 0 descriptor?? [ 625.516393][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 625.739686][ T43] usb 2-1: config 0 has no interfaces? [ 625.862469][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 625.871835][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.048376][ T43] usb 2-1: Product: syz [ 626.053455][ T43] usb 2-1: Manufacturer: syz [ 626.071116][ T43] usb 2-1: SerialNumber: syz [ 626.127414][ T43] usb 2-1: config 0 descriptor?? [ 626.163259][ T24] usb 5-1: USB disconnect, device number 20 [ 626.252405][T10519] netlink: 'syz.2.785': attribute type 10 has an invalid length. [ 626.624469][ T5854] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 626.859781][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.874397][ T5854] usb 3-1: config 0 has no interfaces? [ 626.910758][ T5854] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.932802][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.959477][T10504] misc userio: No port type given on /dev/userio [ 627.002537][ T5854] usb 3-1: config 0 descriptor?? [ 628.201064][T10534] lo: left promiscuous mode [ 628.207533][T10534] tunl0: left promiscuous mode [ 628.214112][T10534] gre0: left promiscuous mode [ 628.220449][T10534] gretap0: left promiscuous mode [ 628.226926][T10534] erspan0: left promiscuous mode [ 628.234871][T10534] ip_vti0: left promiscuous mode [ 628.241581][T10534] ip6_vti0: left promiscuous mode [ 628.248108][T10534] sit0: left promiscuous mode [ 628.267956][T10534] ip6tnl0: left promiscuous mode [ 628.274111][T10534] ip6gre0: left promiscuous mode [ 628.435610][T10536] vim2m vim2m.0: vidioc_s_fmt queue busy [ 628.517430][T10534] syz_tun: left promiscuous mode [ 628.669668][T10534] ip6gretap0: left promiscuous mode [ 628.678392][T10534] bridge0: left promiscuous mode [ 628.739139][T10534] vcan0: left promiscuous mode [ 628.751132][T10534] bond0: left promiscuous mode [ 628.852592][T10534] bond_slave_0: left promiscuous mode [ 628.861752][T10534] bond_slave_1: left promiscuous mode [ 628.875167][T10534] team0: left promiscuous mode [ 628.880604][T10534] team_slave_0: left promiscuous mode [ 628.889718][T10534] team_slave_1: left promiscuous mode [ 628.903199][T10534] dummy0: left promiscuous mode [ 628.914221][T10534] nlmon0: left promiscuous mode [ 628.979725][T10534] caif0: left promiscuous mode [ 628.986327][T10534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.804762][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.811443][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.065519][ T24] usb 2-1: USB disconnect, device number 24 [ 630.226506][T10547] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.789'. [ 630.853514][ T9792] usb 3-1: USB disconnect, device number 22 [ 630.887407][T10518] delete_channel: no stack [ 631.760256][T10567] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 631.815200][T10567] block device autoloading is deprecated and will be removed. [ 637.638937][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.800'. [ 638.037764][T10624] syz_tun: entered allmulticast mode [ 638.519857][T10631] kAFS: unable to lookup cell '(/c¾ûL' [ 638.568661][T10610] syz_tun: left allmulticast mode [ 638.773305][T10631] overlayfs: missing 'lowerdir' [ 641.336480][T10658] netlink: 'syz.2.807': attribute type 10 has an invalid length. [ 641.916262][ T5854] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 642.501027][T10666] : renamed from bridge_slave_0 (while UP) [ 642.930761][ T5854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.065954][ T5854] usb 3-1: config 0 has no interfaces? [ 643.075386][ T5854] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 643.094100][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.174631][ T5854] usb 3-1: config 0 descriptor?? [ 643.897943][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 644.056772][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 644.074552][ T43] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 644.084123][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.100231][ T43] usb 5-1: config 0 descriptor?? [ 644.960647][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 644.984480][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.089970][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 645.116998][ T43] usb 5-1: media controller created [ 645.258633][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.354666][ T9792] usb 3-1: USB disconnect, device number 23 [ 646.366954][T10657] delete_channel: no stack [ 647.490800][ T43] az6027: usb out operation failed. (-110) [ 647.581278][ T43] az6027: usb out operation failed. (-71) [ 647.594951][ T43] stb0899_attach: Driver disabled by Kconfig [ 647.601566][ T43] az6027: no front-end attached [ 647.601566][ T43] [ 647.626854][ T43] az6027: usb out operation failed. (-71) [ 647.633114][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 647.839302][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 647.895366][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 647.933451][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 648.000455][ T43] usb 5-1: USB disconnect, device number 21 [ 648.254361][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 648.269698][T10717] input: syz0 as /devices/virtual/input/input33 [ 648.590412][T10723] lo: entered promiscuous mode [ 648.607341][T10723] tunl0: entered promiscuous mode [ 648.609827][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 648.645523][T10723] gre0: entered promiscuous mode [ 648.678987][T10723] gretap0: entered promiscuous mode [ 648.690562][T10723] erspan0: entered promiscuous mode [ 648.701236][T10723] ip_vti0: entered promiscuous mode [ 648.723973][T10723] ip6_vti0: entered promiscuous mode [ 648.735199][T10723] sit0: entered promiscuous mode [ 648.771447][T10723] ip6tnl0: entered promiscuous mode [ 648.791261][T10723] ip6gre0: entered promiscuous mode [ 648.803209][T10723] syz_tun: entered promiscuous mode [ 648.820583][T10723] ip6gretap0: entered promiscuous mode [ 648.843757][T10723] bridge0: entered promiscuous mode [ 648.880264][T10723] vcan0: entered promiscuous mode [ 648.973215][T10723] bond0: entered promiscuous mode [ 649.054188][T10723] bond_slave_0: entered promiscuous mode [ 649.125078][T10723] bond_slave_1: entered promiscuous mode [ 649.136609][T10723] team0: entered promiscuous mode [ 649.146325][T10723] team_slave_0: entered promiscuous mode [ 649.156286][T10723] team_slave_1: entered promiscuous mode [ 649.170233][T10723] dummy0: entered promiscuous mode [ 649.176234][T10723] nlmon0: entered promiscuous mode [ 649.186688][T10723] caif0: entered promiscuous mode [ 649.192942][T10723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.276306][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 649.496370][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 649.564519][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 649.583993][ T43] usb 5-1: config 4 has an invalid interface number: 239 but max is 0 [ 649.593857][ T43] usb 5-1: config 4 has no interface number 0 [ 649.706934][ T43] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=48.59 [ 649.716003][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.771859][ T43] usb 5-1: Product: syz [ 649.783312][ T43] usb 5-1: Manufacturer: syz [ 649.788314][ T43] usb 5-1: SerialNumber: syz [ 651.370184][ T43] usb 5-1: MBOX3: Invalid descriptor size=18. [ 651.409632][ T43] usb 5-1: USB disconnect, device number 22 [ 653.138556][T10757] Invalid logical block size (7) [ 654.369637][T10769] tipc: Started in network mode [ 654.375239][T10769] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 654.385156][T10769] tipc: Enabling of bearer rejected, failed to enable media [ 656.216381][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 656.403250][ T43] usb 4-1: config 0 has no interfaces? [ 656.418677][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 656.430879][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.633957][ T43] usb 4-1: Product: syz [ 656.696189][ T43] usb 4-1: Manufacturer: syz [ 656.718993][ T43] usb 4-1: SerialNumber: syz [ 657.020632][ T43] usb 4-1: config 0 descriptor?? [ 657.424945][T10785] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 659.239994][ T43] usb 4-1: USB disconnect, device number 19 [ 659.538085][T10819] netlink: 52 bytes leftover after parsing attributes in process `syz.1.834'. [ 659.638959][T10822] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 660.329846][T10826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.773298][T10851] bond1: entered promiscuous mode [ 669.878678][T10915] netlink: 'syz.3.854': attribute type 23 has an invalid length. [ 670.256255][ T5978] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 670.873479][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 671.060646][ T5978] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 671.069403][ T5978] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 671.080947][ T5978] usb 4-1: config 135 has no interface number 0 [ 671.087703][ T5978] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.107874][ T5978] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 671.126279][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.289488][ T5978] usb 4-1: Product: syz [ 671.298399][ T5978] usb 4-1: Manufacturer: syz [ 671.309848][ T5978] usb 4-1: SerialNumber: syz [ 671.423091][ T5978] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 671.434337][ T5978] usb 4-1: No valid video chain found. [ 674.847897][T10940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.908977][ T5978] usb 4-1: USB disconnect, device number 20 [ 677.198695][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.868'. [ 677.546303][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 677.622191][T10999] sch_fq: defrate 6 ignored. [ 678.476282][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 678.956619][T11016] page: refcount:515 mapcount:0 mapping:ffff888027772590 index:0x0 pfn:0x140200 [ 678.966779][T11016] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 678.975302][T11016] aops:hugetlbfs_aops ino:852e dentry name(?):"anon_hugepage" [ 678.982770][T11016] flags: 0x57ff00000000045(locked|referenced|head|node=1|zone=2|lastcpupid=0x7ff) [ 678.991977][T11016] page_type: f4(hugetlb) [ 678.996222][T11016] raw: 057ff00000000045 ffffc90003d8fe10 ffffc90003d8fe10 ffff888027772590 [ 679.004825][T11016] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 679.013416][T11016] head: 057ff00000000045 ffffc90003d8fe10 ffffc90003d8fe10 ffff888027772590 [ 679.022090][T11016] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 679.030760][T11016] head: 057ff00000000009 ffffea0005008001 0000000000000000 0000000000000000 [ 679.039428][T11016] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 679.048107][T11016] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 679.055569][T11016] page_owner tracks the page as allocated [ 679.062152][T11016] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 9818, tgid 9816 (syz.3.670), ts 547521658822, free_ts 526736007585 [ 679.082830][T11016] post_alloc_hook+0x240/0x2a0 [ 679.087623][T11016] get_page_from_freelist+0x21e4/0x22c0 [ 679.093165][T11016] __alloc_frozen_pages_noprof+0x181/0x370 [ 679.098968][T11016] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 679.104508][T11016] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 679.110570][T11016] alloc_surplus_hugetlb_folio+0x103/0x430 [ 679.116382][T11016] alloc_hugetlb_folio+0xb1a/0x16a0 [ 679.121592][T11016] hugetlb_fault+0x1dc2/0x2970 [ 679.126364][T11016] handle_mm_fault+0x740/0x8e0 [ 679.131134][T11016] do_user_addr_fault+0x764/0x1390 [ 679.136257][T11016] exc_page_fault+0x76/0xf0 [ 679.140763][T11016] asm_exc_page_fault+0x26/0x30 [ 679.145610][T11016] page_owner free stack trace missing [ 679.150984][T11016] page has been migrated, last migrate reason: mempolicy_mbind [ 679.158650][T11016] ------------[ cut here ]------------ [ 679.164100][T11016] kernel BUG at mm/filemap.c:154! [ 679.169140][T11016] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 679.175379][T11016] CPU: 0 UID: 0 PID: 11016 Comm: syz.1.871 Not tainted syzkaller #0 PREEMPT(full) [ 679.184657][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.194709][T11016] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 679.200958][T11016] Code: a4 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 73 f4 31 ff 90 0f 0b e8 eb a3 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 5c f4 31 ff 90 <0f> 0b e8 d4 a3 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 45 f4 31 ff [ 679.220574][T11016] RSP: 0018:ffffc900046b6e20 EFLAGS: 00010046 [ 679.226655][T11016] RAX: 27110f8ce4fadf00 RBX: ffffea0005008000 RCX: 27110f8ce4fadf00 [ 679.234629][T11016] RDX: 0000000000000005 RSI: ffffffff8dba7259 RDI: ffff8880247a0000 [ 679.242600][T11016] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 679.250585][T11016] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040 [ 679.258557][T11016] R13: 1ffffd4000a01000 R14: 1ffffd4000a01001 R15: ffffea0005008008 [ 679.266530][T11016] FS: 00007f35004636c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 679.275458][T11016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.282064][T11016] CR2: 0000200000018030 CR3: 0000000044374000 CR4: 00000000003526f0 [ 679.290035][T11016] Call Trace: [ 679.293336][T11016] [ 679.296277][T11016] __filemap_remove_folio+0xc3/0x500 [ 679.301581][T11016] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 679.306952][T11016] ? __pfx___filemap_remove_folio+0x10/0x10 [ 679.312849][T11016] ? _raw_spin_lock_irq+0xae/0xf0 [ 679.317875][T11016] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 679.323424][T11016] filemap_remove_folio+0xe6/0x1f0 [ 679.328546][T11016] remove_inode_hugepages+0x594/0x1100 [ 679.334010][T11016] ? folio_try_get+0x1c/0x340 [ 679.338781][T11016] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 679.344760][T11016] ? preempt_schedule_irq+0xde/0x150 [ 679.350062][T11016] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 679.355453][T11016] ? up_write+0x1c4/0x420 [ 679.359785][T11016] hugetlbfs_fallocate+0xbc7/0x1100 [ 679.364988][T11016] ? aa_file_perm+0x13a/0x1550 [ 679.369758][T11016] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 679.375427][T11016] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 679.381327][T11016] vfs_fallocate+0x666/0x7e0 [ 679.385924][T11016] ? __pfx_vfs_fallocate+0x10/0x10 [ 679.391048][T11016] madvise_vma_behavior+0x3254/0x3af0 [ 679.396429][T11016] ? __lock_acquire+0xab9/0xd20 [ 679.401286][T11016] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 679.407015][T11016] ? finish_task_switch+0x266/0x950 [ 679.412219][T11016] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.417436][T11016] ? finish_task_switch+0x266/0x950 [ 679.422640][T11016] ? rcu_is_watching+0x15/0xb0 [ 679.427421][T11016] ? trace_sched_exit_tp+0x36/0x110 [ 679.432632][T11016] ? __schedule+0x17ae/0x4cc0 [ 679.437323][T11016] ? mas_prev_slot+0xb31/0xbb0 [ 679.442099][T11016] ? find_vma_prev+0xfc/0x170 [ 679.446784][T11016] ? __pfx_find_vma_prev+0x10/0x10 [ 679.452081][T11016] madvise_walk_vmas+0x51c/0xa30 [ 679.457032][T11016] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 679.462497][T11016] ? blk_start_plug+0x6f/0x1b0 [ 679.467281][T11016] madvise_do_behavior+0x38e/0x550 [ 679.472423][T11016] ? __pfx_madvise_do_behavior+0x10/0x10 [ 679.478075][T11016] ? down_read+0x1ad/0x2e0 [ 679.482493][T11016] do_madvise+0x1bc/0x270 [ 679.486843][T11016] ? __pfx_do_madvise+0x10/0x10 [ 679.491710][T11016] __x64_sys_madvise+0xa7/0xc0 [ 679.496480][T11016] do_syscall_64+0xfa/0x3b0 [ 679.501126][T11016] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.506338][T11016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.512486][T11016] ? clear_bhb_loop+0x60/0xb0 [ 679.517160][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.523053][T11016] RIP: 0033:0x7f34ff58ebe9 [ 679.527470][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.547070][T11016] RSP: 002b:00007f3500463038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 679.555493][T11016] RAX: ffffffffffffffda RBX: 00007f34ff7b6270 RCX: 00007f34ff58ebe9 [ 679.563461][T11016] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 679.571440][T11016] RBP: 00007f34ff611e19 R08: 0000000000000000 R09: 0000000000000000 [ 679.579409][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.587375][T11016] R13: 00007f34ff7b6308 R14: 00007f34ff7b6270 R15: 00007f34ff8dfa28 [ 679.595350][T11016] [ 679.598373][T11016] Modules linked in: [ 679.602272][T11016] ---[ end trace 0000000000000000 ]--- [ 679.607723][T11016] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 679.613973][T11016] Code: a4 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 73 f4 31 ff 90 0f 0b e8 eb a3 c9 ff 48 89 df 48 c7 c6 40 3a 94 8b e8 5c f4 31 ff 90 <0f> 0b e8 d4 a3 c9 ff 48 89 df 48 c7 c6 60 3b 94 8b e8 45 f4 31 ff [ 679.633666][T11016] RSP: 0018:ffffc900046b6e20 EFLAGS: 00010046 [ 679.639740][T11016] RAX: 27110f8ce4fadf00 RBX: ffffea0005008000 RCX: 27110f8ce4fadf00 [ 679.647712][T11016] RDX: 0000000000000005 RSI: ffffffff8dba7259 RDI: ffff8880247a0000 [ 679.655679][T11016] RBP: 0000000000000001 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 679.663661][T11016] R10: dffffc0000000000 R11: ffffed10170c484b R12: 0000000000000040 [ 679.671629][T11016] R13: 1ffffd4000a01000 R14: 1ffffd4000a01001 R15: ffffea0005008008 [ 679.679599][T11016] FS: 00007f35004636c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 679.688611][T11016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.695189][T11016] CR2: 0000200000018030 CR3: 0000000044374000 CR4: 00000000003526f0 [ 679.703164][T11016] Kernel panic - not syncing: Fatal exception [ 679.709655][T11016] Kernel Offset: disabled [ 679.714008][T11016] Rebooting in 86400 seconds..