last executing test programs: 53.622416372s ago: executing program 0 (id=3862): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x8, 0x0, 0x31) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 50.721768696s ago: executing program 0 (id=3866): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000440)='htcp\x00', 0x5) shutdown(r4, 0x1) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0xfffffffffffffffe, 0x0) 48.740813361s ago: executing program 0 (id=3869): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) syz_open_dev$ptys(0xc, 0x3, 0x1) 43.979263606s ago: executing program 0 (id=3874): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_FD(r5, 0x4c03, r5) dup2(r4, r1) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4000000) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, 0x0) 43.22046895s ago: executing program 0 (id=3875): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000002440)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) 42.485467078s ago: executing program 0 (id=3876): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000002440)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x143b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) 41.146423463s ago: executing program 32 (id=3876): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000002440)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x143b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) 17.599683309s ago: executing program 1 (id=3907): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) getresgid(0x0, 0x0, &(0x7f00000016c0)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) getpid() r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x4, 0xe3, 0x0, 0x0, @binary}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x4008094) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 17.504099871s ago: executing program 2 (id=3908): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c34000000000010902"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x100, 0x19, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r0 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15.570655923s ago: executing program 5 (id=3878): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) syz_open_dev$ptys(0xc, 0x3, 0x1) 15.111620711s ago: executing program 3 (id=3910): syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r2}, 0x68) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8d}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x0) faccessat2(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000022c0), 0x2041, 0x0) 14.946351138s ago: executing program 2 (id=3911): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x27) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r5 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x71) 14.702222097s ago: executing program 4 (id=3912): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r3, 0x15f1, 0xff98, 0x69, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_setup(0x6543, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) 12.436562733s ago: executing program 4 (id=3913): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r4 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) 12.131999247s ago: executing program 1 (id=3914): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x1000, 0xe000, 0x1, 0x0, '\x00', r3}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=@dellink={0x78, 0x11, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x20a94, 0x1080}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_batadv\x00'}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_EXT_MASK={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000008) r7 = gettid() r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r10, &(0x7f0000000200)='\n', 0x1, 0x0, 0x0, 0x2}]) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f00000000c0)={0x7, @pix={0x6, 0x7, 0x32314d4e, 0x9, 0x7fffffff, 0x81b, 0x8, 0x5, 0x0, 0x8, 0x2, 0x5}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) 11.824605314s ago: executing program 3 (id=3915): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400300012800b000100627269646765000020000280060006007c00000008000500010000000c08fdff0000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 11.435187472s ago: executing program 2 (id=3916): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) 9.249002571s ago: executing program 5 (id=3917): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) write$dsp(r0, &(0x7f00000012c0), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) 8.928730521s ago: executing program 4 (id=3918): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) pselect6(0x40, &(0x7f0000000340)={0x9, 0x9, 0xa, 0x1, 0x200, 0x8, 0x9, 0x8001}, 0x0, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) gettid() ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) 8.906314039s ago: executing program 3 (id=3919): fsopen(&(0x7f0000000000)='qnx6\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00', 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000240)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000"], 0xb0}, 0x1, 0x0, 0x0, 0x20010810}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000010a0101"], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e011800d3", @ANYRES16=r1], 0xffdd) syz_open_procfs(0xffffffffffffffff, 0x0) 8.261301461s ago: executing program 3 (id=3920): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, 0x0, 0x0) gettid() ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) 7.586544616s ago: executing program 1 (id=3921): r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.173369825s ago: executing program 2 (id=3922): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 6.711698271s ago: executing program 5 (id=3923): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x8, 0x0, 0x31) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 6.545908101s ago: executing program 4 (id=3924): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000001640)=ANY=[@ANYBLOB]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) syz_open_dev$ptys(0xc, 0x3, 0x1) 4.96939951s ago: executing program 1 (id=3925): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, 'macvlan1\x00'}}, 0x1e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x12ce, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x1, @local, @local, {[@dstopts]}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x10, 0x1}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf2508000100010000000800010002"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) 4.50281706s ago: executing program 5 (id=3926): syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r2}, 0x68) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8d}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x0) faccessat2(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000022c0), 0x2041, 0x0) 4.502381948s ago: executing program 3 (id=3927): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) read$FUSE(r3, &(0x7f0000001d40)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000008280)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() stat(0x0, 0x0) lstat(&(0x7f0000003f80)='./file0\x00', &(0x7f0000003fc0)) close_range(r0, 0xffffffffffffffff, 0x0) 4.24022173s ago: executing program 2 (id=3928): r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5605, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20160) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) socket$l2tp(0x2, 0x2, 0x73) 1.677225738s ago: executing program 5 (id=3929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="6930d8697c97a65b36159a023034632628cd4474514a1368f1e71dd9b7c48436c2ea07f3bd58a6bbc0f065ddba346122dff6ad81d21cea72e7d951c5c5b21a9f0ba768cd18ddcc7de78e2ba9ac88654a1d99806fb236617ff138f15994a6259de4f933ae62cdc98b2e33514066dd1b9ae1546df8db973d467507b2ecb6a4ece57b2ba7b9df20a0d6817b9fc2ee34e709a8bdef99624ab97472db298354edf3c072c710b9ba9d9a0ae44928172ce6a0d2695a17057255ec6e0b09c684a7f808e38302eb375390ae65d665da7f176a45ed0144a762fc666931f1a4c0ed03fb42e8f7ed4439add1a96b90904330d8e3c91527b405f36e89e44599c5ba4e742f1a281f0dab5fc2dc8855a78e1812ba99ce71fbabef429e87295d941c555c0fdacfa1f3256b70c1fc84b2d0df2c589dac34698d8d108474f84dce58efcbe580b8f348c550c6ca9abe230330d05dffea89475391015c707ddc45a3958a68ea44b5f7d81a84b9064111954da3b5c832df657efd5f0849b32834a053f4a052d7fd7d4db17be80879bf6859bc9605664557eceeb74753416e41b92fb84b572b3c78b6aab6f0bdfcfd7d3a830f12d1b3046e615889ae554db34d35775c6272243d7132426dfc9027ea50d62b91f356c58093933ad75013f9470ec90bfe1d9376002dbbcba9b7e7a1e023f878bfa4d88a9421c035951fd3169c5508ecf28c3a8691605242cc858fb56af44956bb5e677d1d90f0a3b97ad30c74adfc2f22232f7f1fa022c1f0492619cf98381039f26c784ca4d4706f67013bf457fe927aad53c1aa0da90d2730155664d84e41792f3f461840e41135c5b82c87834156b9d6403b7001e5ebb1846a6ad80723387bb92f8d991fa8db1fa65ef90a5054798635c18e7ff7649c41e867fb070bcfef61445a7d0c0c5fa02da82969db96aada4095e8cb2bf7728bf95eb020594c0d3617467701d8c4dd01c750712dae33dfba7548032b48ab93ff3c82e104b08116c1a68fb3b28a1b8ccc23c2698803828d1da099a5437b248078b502f7ccd867af9f8c79bc55643414c57466a781032bdd6dea9acd5cde821480a85c308dd03af012d03cb552b3770124ac279c9427c0e1b761c525eb251598d326bc650b5f055b610688fdaf9789e60fc234f1881536016901ddb2597b47e7bc675cac3ae8c50169230af084998dd6be35dc3609c5edbc93da3fe98ebb475a0d30437017ef640b96fd48ef52f509cf57e65c73ac09603081cd980e8b9d73ef4acf4511cfbb07d5074a6561192c2b2bce29cef8ec70ff599d4751103ffec500a8657d6ef30499b9ad0b10f3e7b6b53fc61dfbbb209e3691b1cba1af62468ebcb61c4c0a776fbfc92c5d2a10350bad29915e44cc952de4226ab646e28ab008683e470ccae3486bdb4ab4a6ffea9a671237bf0943660d929667ebe4a5f9cd1bdecbb53262a4fe3eaeed7fbb4ed1ca40da9e2efdaae4da05b14c754360f3c3e5b96f203c4f87e5feeb73abb88aa57fb850702339b5ac192810597e99fefedd52558fc6aad5d2ac0eaec00dda68467a3c7c7cdc3b724990f1b2f4f65e9181e5ebd0a343c491a1fe0e4378f241bd071fabeb1487044fe5c5eb942eb92dc80ff317cabfa10c75434441716a7339115a3071e45eb2d0800627b99a4fb59e260b26d53953ff3f255dc4bf40d3cc8797287fe3d6356d1eaaf67745ef73844b4c64e89ca0f04a87659427c26f0d6bfa2f4881ef69dc5c7b4515c7c4394f621fb98f2c6f496b7ac640d3a1fcd483ae10c4ee9710a896e67175a679f2461be09c722be20df30c9670299db21bc8aeae63e57ebeab1ca61c265f10d8def8243583e6967c5e40162110025a65f0c658db29f5eb0e50b2dd318ac55209721c8c0d51fb05c9ff3106731b058e14c8c89dd33bef6333f218c9f66e2bd9fd897b985bda3747c88fbd24d90cc8428380048330abb044f9e7107ccae059b961e0c6a53d182de21cb77e12d1ed0faeeb214c9ab6b7dd5f99d9278df393958a7a46aa734726938ca2172e4cba5f0a68cc2823bd5aa622c099fd936e303549ea4a80521b12b616526fdaf00779de369a5a83dcedbb739d426eb7f3864cbe346ff458433ca67a86ccbc703939216e4a001d9ccc84b4c438e5bb583e733973b3b0d2fa9a1bd4be4fc2b497b80e1455657a3f339f512cd38428e022d311075190c8d443cd94505dc52b0c7b6138f2279dcfd0a20a564e45b8f144a6f09e5beda5303f885a7d9fbdb4a6f3778ff9e9fc6e0dbee5bdd0330c3c956ddc36f10fb6811320ab30b4817934bd7e11bdcefb58132a17ac76fb54aaab0188a32eec2284f1a24835cc79c6909f742ab35631b919673eb84d53715dc8bdac9b6d28a24b869929d7fb7bcb34b5b5bab1ee69ee38c86541982806b84db06d0dc81e940a872ca89a5a7e1c191bec2808ac6aa0d733c1d647f88df8455ccfbd35fd5bef780bc8c4fb86efb1951b8382915939779493c20279b165c2b775b7d5b63ea0ceec09a17472bab7ec8122dbcf5ebaf4ac3db25fd0776f13cd67a36ce6cfa58acd262cbf4bdcbf2fa7239c79386dc580121e986de5b78a4351388e7fa6461a7657bdb4383c659409f16c7508d5e5618d116a659bc0462c130b088d63ac4bb69c0d756b5fa2e80004019d6ca5371ea361e8cc613954332ee959de1766f8f3689ab8daf45b69ec0810d0ab7e3b402860c8b94ffc25de57920f8da7a3bc7badc4dc9088bc7f6c71b1d4d960c258cd87abcd739bbd5115aef29f994f062318e8accab85f5c64a263ca14c1629284f7369d86436d174f6f2b1a5e014dc5cc3021efbce66bb88d7b3827be33365d8ab2daed7c6dc0651b77af1dd289684df8e21b6a81c66a27294c7cbf5cd90add094477cd6dec894b140a409add754727459c695c4e63dc73fb491af8c22edf1dbabe56a9969146056259a65f9c1c62973abba625b8065fdcccddda10cd7ff7b2144c63b754af792cfe395902608da630aeed913e9f014bdd184c9341c62fe0c7dd2660e26eab22cbd0d9e21ba0552e71f1ce17407672f01ef1012877fb7da93cdc92056ecad3ab01922b3a8e13661ef1372d84ce5167153ca2551edfed8c2c6557626f2554d67a852a8d2b566fa40c6dfeee3b63e2be83523f64365922531ac93ae196fa6a98b3b8708eb90f410f150c3e8680d9cb7265f108f2b860e7d8c7dd64405bd545eea08520cb33857b3090fe1b364e47151eb847ff444fab989dbe1e03b29409d46fff338d6ae5a4c61426ba4b170d96617774b6f3ae64beb7f791334f4d48d3fd26969d4a4342a8f1088bafdbefbcb1990e9d0fc95edf96113137e619cb15df9c4d9a21de468e40d284f5af88cb8b038540b91ba070f311efe1b081000da886eaddb3aaad90bca70e2ed34dadacccebb095d8e116ac9911c2c4f2a7a95e939853950b5e04a98b6bc9340b28e323ad7cc58888e33ef8bf438080dc26c71c8e12e0bbccb1fde98231ebf61a9011a2190b33c941d927128d30570c11b2a51d919d4caf1fbca673931fb2016b81c12e4a31b3458d0f215c97c9dfec8d514d66e748931b6e8bd06085c7ee8e7b845912053766ceaa20f1917d075fdcf2e9cca3e21bbbb1dc0a5cad36ee44e7a4e136ec5e5fc233cb63d5f035f96628a7abb281b493d9cf8fc4251fc9c3c004bd5d64713c05ba68de2318826b01db27661561b6dd381e5973b887797bb21f7a7f30c9343696a60775c36e5b05eb19dc62fef3ff99f8f00e8ccd25e00bd1863609f51e6a69f7e9c650aff3c8897ed6ee4c8d0b0356627cf69a3a3abd0c352e255b2c6250834c9fb272d83bdeb959ebc1e7207546da012b3eb4861c98fa1fd126b18a14585a2e142b98e5fe902a4961ccbdf7b7728588b7559511b30a2d2e86857d0281bd5e08103dcd11becfeb8e9c5b3e4813c79c14055e46203a5cebaa30fedec57ed23538afa85711e0ef3f72541af4d3e6c938590ee053d4ad1de8ecac6c49f1d70707c4d93e031b6f930658425fb0dfc3cde7c9f775eb3cf28fff76097c35e532335a80053fc198b6de7fb09b87e2219ec04782f35bedffef4c08e6316b25824caffef257d7a072fcd6251450dd9882e25e3e0a05a63b022e53ffcbff4097ad150095fb7065c47f7b8a9fc2c8186a5942663e661d80649af235707a87619d277dc8b5ef70190663991a531d67660c74f778301f9939d4511eca1f8bdee0706fec004a6042e45954f710a9e90081a8b297bcde440bc8d54676ba38397734196aa3835d361d8f36acbe4c1bf0f2782d27611555b19d1b9bd1ba493ab4c3a884216bc143629d8d418518f9a06b2b0d25a5e10ce515f47c5a54fa63212a686eab067600d56b234fba7be63b4d40f8be1fef0e69a55373f8faaa8f02b2b85aaee0720d0dff9a0e84850d998959df6397cd824c1a7bed9b73ca92f83ba66e3f170c3b34a3f7ad509d7bdf916d5367c22454f2252ecbb9a334e2fd2032c569fbf4bfcf6f41bd003ed10911f2644d66f4a6ec4a2eca936fcaff29ea9f454d5fc68575cfcb7e6cf8cffca37d1c5d374ca1ed77ffde5a01d349e4d18ddd15cc7397e696d6a92e0ed7260efd42ac23b5396840df636f85f83b6fcfb27f3503e130200a77c61c01b3c80a5b77c90eff390e27c3c1256efae5da2cb7ca7169cb824a164da49078e461f4640ff4d7b074a32676aac9f96746c36fa151145e1d13187191dc9739fe3c3af9418d6258e525ac82f626666278fc888cc0b8616d851469d3c676c1a0ac6c71b5914009b9797a914f1498f6f439a92205f855a4bf69843489dd425c4b5482522b96f385ab8138aefa8833eaf2056cfd068da37229fc7a5900d30c152cf92cf2a4f7a7505190268b08c9acd3839d560ab5762a0dfca0f2db56e2298c1f7d894b98ae8c98dfc81ef6e8e7a8a7138f12005f54bcfb93c9244468b7c76fc3afdc4c59abea57ce6302291c5130697834e838147d62112c96acefb57900eef463048068a0344f2e09d4c5a9488b63b92c5a67d1486ef56aff7f79c06fc5eb3eed23ea56f4331a638bbde8e9b022c29c08a803fb2e386012a1cf008106e619b5fab2a60653fba60c6ec7fd19f33a8e2ff6dc8046c117d3d8131d5f23b70f900ae5d632a51bf76420b9a1055c4bf49e22b5011e0fd12c12c403b42f54f799ba61b57c0bc0933adabdb909f0609602e73e583a9747a8f0477f0ea3621669343960f2dad82056471f596449ba52bef2fb24959f80659df251df5443dfe6b6a91fe0919cf0193afb37a786f9d13eeeafacd839f876e70c791e911b6e8c35fff3e4dbb787bf50fdcf9c8d001d8c078c0cb994f17a95f08d8de87700286c251011ffd8baf2e976e587730390e412e35b664a1dbff7744b68c91eee7356348c2fbe5a2e38985337cdeceb12c836cb1bade7c4c999eff6333bc5c0f779573080d046f96cca17802a0a2b7b0d36560868c2e54a883bf3ed16d5067adb0f4ff81d246b00ab30aaa58ba139e0e2d84c2b86e77934ff04cbb05f5ce568ceeb3ceb1baaf084160617f6821fc503c238a6daa5ffc19321a878ebad11a898f8d0d27b823c2e3ce57a9333d9d40a492da5ba26593ccf97b25c7b6698d9b8b4a46dce1c81c98093a790075411a6a7abca59e592f37eac9d588ab3a2e86edfbba12bbb83af804afb015a8c240dda9124a0c9c9691569eae6e948b48d4cf470f898075a1d5f13a239b3c1e31e8d98ddde799d8c3035d1e3949c2ec5a760a0f38314f66b3bf40de785c7a60a8f22d701a9e70d6a3f1b35d6d1e94038f8a7f4c97fb5370c9f83e31daa73a6e648a21e929324faa27482b039bf2d55032bfd8d1b5712b9250c8269b0daae8dbb5c8d4a243484b0d5f941a987242d06987bedfa97a3e062510c9b4cd3b82222ef22a4927749f38bd4259c3e6c8d8cbf0a1224bb80d8a5923827e18b18778dd44e7e3fa8b8b407c0cdec6fbccb5e33c2fbd9f5f0a7e35c4a04dedd69cdda7d888f2082903dd86e45732a687568a248a9af16253db86bae7e893a8a8c380e53d596733523499c74ab1c1b1ab26888533bf2d3ccfe221033442ce0d34aa34bd9c420d4e39413c95de2c2acdc520fc6ce524149bc80e9bd32bc7d72e7def1c425391fdee15cd89a090ec7aa29a4b9c0bfc01df19b9bf692c4569a9f3e0e19b288710089f677905780d2c3132c909cb29bee3bd6d62f060a944d66c78493b01279203e7a1185001ee8f6cb0967e8b3ce9aa50106c5576912a7dae46229ff03b65cc659cf49dae6aa6b162d6dba82119c511119225d6a536fc24bbc55f6e237d957a43f351c50378d0efc9ba1eac7d6a1b280c16454452294c457b8eb10dabc768edd67877b2ed08abba8768bc6579eccde4839ee7d68f80cc4aa318fd458f97ea9609f3135ea417aa455592e394b1f5ab6ccc14385ddbb416d47279e5748ee4e02e76ecba7d7474fb6ed6a851da3e156a7542bb9ad9b48b8362bff43755ce5b657d5a752ef632bb416184e70f1937c494ed9db084cc1177ac6c491772b739fba1b4be52acc2cc0975c8dc0b00929f503fb3cfe4c7e6670295edaef2327cec950737f0cc96eb30e7fa8217d9b9968274c413ec79e1b050814145432bf164f6e7b75a43424dec600502011190097ffd1edf795be01c4135a9be178b6b050d82d8542375abb40f0fe776965bf3f0630a2652e5bcf3dc237a84a4634081d0a9ba1842e6ddd4faf787aa6449a50fa9498ffe97c2759558112d1b0ec0db512d7990fc0efce6bde80f4b1ec9799d0cdcd41e6863eb473c3edb5c2e70ddc7d3aba52c2ad2e054b01eb3d92c2023b33975b23a72211fec063bb4fbaa49abacc47efea7d5ede3675ad49eb74b7fdaa5667b9ddff2e6007eccc90a7cfda32a053d9fd2aa1d01fe54c112b955d8c26e3e0ac2994fcf3f50d1fb129ee3df3db886d93faad74cec81c11e2e0922fcd0b2187cb75369598a3b5c8c8495870403b2593647a8a2d4d86601da9fbf49f1222dcfe5b64d0102d3c9296d0c0d459c5a7bab1580fb0b25a5ef71eb579546bda6ea58be241ec8ac9737e0e30ea47fa93c4cf2d44d2b6421c856dd5e1c2c3569040113d7006be693b293074a2a6188b228129fc79f9984f5bafd6f7a32f68bd3dc7197a7094e93561d208f0c948d364743854efc6af051a3e2a7eea8f132442d1e3a87e670190f3752ef0699f470ed15719ba274371179935ff79853b928cda754d1045929f8db75ca71825f21642f738622e392bc0b35ca98eff3821b7d122732f8ccf8d251d84589ce028d2efe7d7cbd34e8137f518e2feda64d9c788713df3e1450e8a36dc031c22f3d5bf7d294a66f90b64fd285aeded6e4a07b82c740c87598a9684f8f6d47b266169696b126e66d7b4532ace038a2b7921bd62fc806bb552676abb8204b4ad975d449d1be97ec9b55dc8b2b10a3dfe4880487de3f8c6a3b4426ac6adfa03845b4d0cf1e6cbd86be473d154bf7439dee05d555268a769ab339b299379cb8546f16ed8bbb789049eb57dcaca48c26e78982cc331ba474bcdd9f893f5f6526b4999fabcadc7bc6e8805ecc68902a31522e20b3f1817c1b516f16ab5bcdc7101165d59ce074e633dc68202221d2bae4ea62a13f6a5e7c82e8fd232fc076ca7399b5d01c325d67ab82f50acc789dfe8cab35de7e2131081a9d90606e5dc5a9c3af3fc9bc895174215d8aeae8dfe75b33be25298a11eabf2e0481050731edb27894df45a17985ffb4f3f27ad6393af9ac6f461737394ffc89f9549b7607dbecbf7803899d2e6513a74473ec0fb6569f6d27cc9a83f242f4ab78aea3c293ee846a2e0b3114991d5543902c848a7e451da4789e478f707e585defb47e3ce3525cfa17571772e1526c16c1065e5f438442c25e43e1023511022647244415f0bb7d28be2f7a75dae78b5da0f9d063c66ac396ef0b66fdb7e701e4caf9a435ccc476cdf3e5356ade531a3e33640ede4af542bcdb1ec54fcfe6f0ba105e0fd72b707611020ae1adc3f794b3c66e3c1f9ab0c87e5641a4891d74a194b9cd8ce14c81ad35df9a3c7862921e2d8c3942d4a57f4f4d13a6d82d75a21f1b862e8f4402c8b2c0fe2fb788ab761a22a4377497b34d137d0184d2d7bce69826e7ecbf63a89b133f263d58945627bd79472e3cbef5595a0c9d2e512605b578f2e558d4c4b31416c12f5709f68bd4e7ab1b0954f395299d634102bbbc97506e2dc938c5ecd9fdb26566eeb4de1621954ecb5af9b0d9d39b0fb1b972fd92b959277bf78d0a1763df9d9bc4182ad3f3b8eeb19d00cf41016f4d0d4623f2541a73f588f5108cde960b0bdc93ec260c14a498931226c981b41804bc09ca8a9168d9a4e17d269815e7ada71be1fc410b38874aa5782abc7ba7976daa94d724c9687c419165e77b7effe77d07e5fd6f55993b8a151889e57166c2ff63f04e3e09eead6f8c92e49e926c8f60a2f933c8926be5fb83b650b126cdbd9d239f6f11d717f8f32fd757350e7db0bd32e191052524922b2bf2b92801a717be7504ab79d55e425b09a79c8a84af1cf94c66dada7789e6d67dc041b4ac0e57c4e658d11be13af2fc3c200086e147a2223296a4253297155210440f0f17c3aa21ab7e15fe2e12bb9e9356d1018cc68313034b469152b650adab57f73350a6c0f76a36580a7dd8af218d656fa4bdd57b9d584e5acd1fa95e14120d7f9ed1fc3a83aa24135ca45472844d115f0a1bdebe2f6bc37cabdd0d7f9aab4fdc6a2c58aa0beb0ce431620d5ede6ef98e2b77e8d0558d250aa20c54c62d4b61d9bdd63286c6887ee3a556677e0673c94e46b9f834c6e4996b1c91141cd0d39b712f93e5195a7f7838f3af8325f649938d8c319ceebfa8154d23197bcbcf616be6f1f5d6fc070ed76abe89d6b94bf8a8d3f5b9bedce758b17d1e0be38bce845c8c3209d3fc30901494408c96956d050d14548d6edf55f4add18c91fb6da723a0c7c3c3f4c4b3a7056e611bdabdfd4edfb7a79a2b02c05ef4027c15db8bf2bcd015c66ae6d3203164615c56dba94606702caa577777e05e642ce3df5573ba3ae268f4ce4b38cc9013faf21d7dd7174ce7ea498c9451a1626f02398e49a33def46d228edb6de6fe8dec11f553634fb923849e3cdfbe645cff327b8251afc107b7fb8cf3cd735ed9bb1275ecc804a4f126bfeb853e13e636a74a4efc9faf01118aa82d00ac20ce0c0af140c756ab90e5dfa238707318c353c7bc9342c36ddcb6e74400933c8fa99448f3a169b95cd6d2558d755e1dd53f3fcfc46b057c550de64829e556c8cae40e796ef76fcb953086168fb2eae89349f29d3dd26ac6282292355be3b123b0c02e553bfb8948afe8d7e8ae5d63184b20795481a9385be05e9eff807b94eb1e977d50a7dd7da582695aa496a9a7587d01f970c3ed8d63db217164824d8b8bf4c5e493f801e1ed241afda4b695a4c606d6b5344493d9922dff76b4be7021d26b60d1f785d205c39d83694b0585eff60c9e1bb2f7023c5b5d3d043897baa9a9ef3507c280d9580d43c7985db146694b8649e2bf67e37081a945c4c81fad0a48e64d8877dd149443c8f4d2267b4aeaec8f168b44d5af109f505644e2a545fefb13d673210bd2b418b054cb4fc9fb7f2041e87be5f31466b51b308deff16bd9878a3ec72d0a1ad27c5cbd497b2c9585d914392da52b3708b198a3693d2988f03c7d3a41762c78cb9c268dbbcb0d1efc800fab4183286d924604a5fe9657cebad2d8bb0ef0006a46a4ef9fe92c3fdc1682b993239421879cb5626bae2368b646e61c870342b5cbb7f7baab7142a9ca2378805310c1abc12098c796550a20f3d5f01141470c1b5550857202ec712e3813d1ff7150111f4730bd83c8516aa86b345c280fb461c7bc6ff6f0bea507033d312027f51b4a90becfb048e676bfecfe2b1cd7504a226e89bb4df31d13436db7765062fc74789b75f82e77a6e83f49092558d38da47755ca0373ee0979c880e224bd5f70d6a69d8e2463d9b70bc7dbbdc9f27e1ba38d5adfdd6a5a0c564cda76a9ed6dc0e5117b06b9817d6d47f2a82d41a5a821431fe5f38eb3417d820c769afc09ffd001fd0a6f3c3879dc74ffcba15b8b29a4f435249226ee1cd7fb8c0bb6ec9012178bd25c05e69cb1d6e7121295a4e166c80d918b915232e6e8823ed6529eda300f2541142092df194de0cc255beed438afa94cbd350acf809e7f0467830b20108b95c9b653b030e311026cecc32332697cc2f8ef9cecb227de6de7144fc4b25e2180784f55204b17612228548fc825e60c88144c72abf3cb468a2d5491c431f38d858fb5471ce84c69d1d2b38e8ae2b134f4f94aa03996b2e0f1edc538ff32f7ee409b79922660b0f3421083298b14f26733577ff59b672b7214bd0e4508503c61da0b70cb6186b01ed575f9e5bf8f3bf538c2260f4a82755094c33c931ad0bb346518cff593de0985602852749610e073f20dd0be87ec8c452c3dfb4ac19d73a489e74a8a48411faac7ecf7e53d76ced94495ec2e814259fb5114a7986fb81a936d38c99443ebd55026acc6c78e1b14728551bae0bdb86cd518eeeb22dbfd7f7a32d2b94f7b0f757f34d6d22156e4dc1e7b9533fcf7a0d0cc3e41480345ddc68c11e47f8c514f1ed601d69e5b36e03962643544064ddbf689a3cbf378074879f6cd33d56c0a728a2050ab202981d6723b99a0e505cd8fea39da000bc7608a53024614407a5ebd5e034b9a59fa952841ab4f0758e988161e56fb454db449b3090eb1c4154ea6e34ea13101bb3a62dfa1878448952b1955a3c462432d7035228caf6ed4381e3ec1295e90decc62ebed5e60acbae3d26982e7834ee00a7632f581b6198f9bf42161a4980d08fac53d40b81731e4c727f5a24e75f6a262a1d2ab37b3ebc09ca6b0ffb0a1edf942e93d17d95eb3532b57488469575d9d47c2d08eec166f8fc1f6183795e1d5e48f46ae05a173af5765e03e98e6710b408cbeb169fb67f1d79a1999a977b7df51d7ede5aca5d31e9d75d2be3838a014d8283c3566ef5ea37955d6e66628d755c927e14d40f723428a69e03c8b100924b72e2c49926208044ff49536b0a1eca6c7c42ff9c90716fa35b02d2d869bcceb60e91dacf34ac1249f5d7934a078417e4fd416da2fbf9122fd37c042712ad9ce8592806b556d26163990b11466bf759615d2b852e75681a8b87571b5f0a21a4b5617cb94e2dc9efb264c0a331a752994d10a958b245cb40d9985365c4dd3b9551c4d03157aa29222a2af29ada6c123eaf08722310da16f7611cfe729255044642a8c5cb9f94c3f778248bf35520ac980af12ddd3b001df23404e49e3a57cc11fd12e51e422a92b5bf9e2ad225d42ad5d0325ca35804340fdde061c5bf2a4c8cc86e946a60040130ce831b9be93885f4ddb9fb7584ad875b05d59128f533c40c541ec03dfccba2af6fbdae4efb10a45e0f7d9851126b1dd9d374cec36067cdf2eefcb0a0cbf5619fa7ac2027d4b5c9da389bc1ffee655aef769a5aa542b291c0d71c8dc5e54268dc5f86a4133cc917a84efaf1456de9106c6fb3f5d41ff9f9a76a1dd3243a5e99c95e933d32e13f3eeb5a550", 0x2000, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e00000000a0dc4d663b"], 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.350300377s ago: executing program 4 (id=3930): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=';%lz@', 0x5}], 0x1, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) syz_emit_ethernet(0x1a, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaa812636ae836d810000000004fa00af66185a0000a7c3d6adca3d322ed942409716ada26d5c870eed345ef83d6434d5a39112b4260c4ca9895dae735b3a3120a9e0612c823df17a50b948db8467cf1012e205bb709e3fc960ed3c3026d2a7c61605b74a2606fe2a0972d375f96653abc04219095309e69dccd1decf00f77414c71bbc05000000c2de276050c3374646c49ddc5e18019319365feb8e4aa882986d5ab185418f08b5afd800d70669a7a3547c9df8358518be4724df1377ff2b29718157859583cd432daa9ddcec"], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r6 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x4}) unshare(0x22020600) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6, 0x4, 0x1}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'dh\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) r7 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x2a0800, 0x0) recvfrom$inet(r7, &(0x7f0000000b00)=""/102, 0x66, 0x20, &(0x7f0000000640)={0x2, 0x4e22, @multicast1}, 0x10) 1.10853972s ago: executing program 2 (id=3931): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) acct(&(0x7f0000000140)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x10}}], 0x10}, 0x40080) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="1909208750b401956bfe", 0xa}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x7, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) 1.019101805s ago: executing program 4 (id=3932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000280)={0x1, 0x1, 0x1, {0x0, @raw_data="ba53a5f7b8f6cfcd32e7db140a46e9a2bb6ddc9d01d6a7d0a668b93fd8abfd1b581ffc1bfcd0ef9a86831b31cad11443530b3f21462da2ae7ddd47afa3061bd8fcbdf0248cb16b0e98a3c88f95781fb6fc0a649146709c79a21959510e1af1ebbd6eda60bd6b9c8306a0e49f3ca0091ecc812c0d35955861befd592c491dd58a1971ae892d69741c77ff716500eaa5556f52d11c38fe8c48836400b5a853957a9a97fa5d0b1f62d655bcda1597a419a88e0b850c6f38d7be9e1f147cc9688369d8144500234fd4a7"}, 0x6}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000085311fc3c9f492b1418b2461fee0df0434efc163e572f620492fd93ba1067c9aac638a842bfb72a1e707c400ed9fbeaaa5f84aa32fbf3d35e091"], 0x24, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r4, &(0x7f0000000540)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) 978.800899ms ago: executing program 1 (id=3933): socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086a"], 0x30}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000340)={0x0, 0x1}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 78.951196ms ago: executing program 3 (id=3934): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) pselect6(0x0, 0x0, &(0x7f0000000380)={0x5, 0xd1b7, 0xfffffffffffff801, 0x2, 0x7fffffff, 0x7fff, 0x3, 0x4}, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) gettid() ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) 0s ago: executing program 1 (id=3935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000000c0)=0x9) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000140)) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x80000007, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xd, 0x9, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x7ff}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) inotify_add_watch(r2, 0x0, 0x400002d2) unshare(0x40000000) kernel console output (not intermixed with test programs): 1477.973974][ T30] audit: type=1326 audit(1757325621.851:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.2.3188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1478.017303][ T30] audit: type=1326 audit(1757325621.851:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.2.3188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1478.088911][ T30] audit: type=1326 audit(1757325621.911:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.2.3188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1478.240365][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a7a8c00: abort rx timeout. Force session deactivation [ 1478.348227][ T30] audit: type=1326 audit(1757325621.921:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.2.3188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1478.509014][ T30] audit: type=1326 audit(1757325621.921:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.2.3188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1478.578210][T22205] kvm: kvm [22204]: vcpu2, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 1478.602877][ T30] audit: type=1326 audit(1757325621.921:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22185 comm="syz.2.3188" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1478.742243][T22205] kvm: kvm [22204]: vcpu2, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 1480.636531][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'. [ 1482.458980][T10853] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1482.698917][T10853] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1482.711775][T10853] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1482.824422][T10853] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1482.888809][T10853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.031030][T22235] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1483.085003][T10853] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1483.096578][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1483.096598][ T30] audit: type=1326 audit(1757325627.641:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1483.376059][ T30] audit: type=1326 audit(1757325627.641:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1483.498893][ T30] audit: type=1326 audit(1757325627.691:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1483.554536][ T30] audit: type=1326 audit(1757325627.691:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1483.766729][ T30] audit: type=1326 audit(1757325627.691:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1484.068216][ T30] audit: type=1326 audit(1757325627.691:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1484.376700][T22256] pim6reg: entered allmulticast mode [ 1484.585041][ T30] audit: type=1326 audit(1757325627.701:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1485.048902][ T30] audit: type=1326 audit(1757325627.701:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1485.104515][ T30] audit: type=1326 audit(1757325627.711:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1485.127805][T22250] pim6reg: left allmulticast mode [ 1485.268117][ T30] audit: type=1326 audit(1757325627.711:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.0.3202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1485.434185][T19548] usb 5-1: USB disconnect, device number 42 [ 1485.744636][T22259] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 1485.801668][T22260] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 1485.820381][T22259] bridge0: entered allmulticast mode [ 1485.826876][T22259] : (slave bridge0): Enslaving as an active interface with an up link [ 1485.838469][T22260] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1485.997624][T22260] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1486.031839][T22260] : (slave netdevsim0): Enslaving as an active interface with an up link [ 1486.318015][T22271] syz.4.3206 (22271): drop_caches: 2 [ 1486.387018][T22271] syz.4.3206 (22271): drop_caches: 2 [ 1486.433177][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1487.398840][T10873] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1487.604276][T10873] usb 2-1: config 0 has no interfaces? [ 1487.614706][T10873] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1487.631315][T10873] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1487.651757][T10873] usb 2-1: Product: syz [ 1487.655972][T10873] usb 2-1: Manufacturer: syz [ 1487.953235][T10873] usb 2-1: SerialNumber: syz [ 1487.995203][T10873] usb 2-1: config 0 descriptor?? [ 1489.964758][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.978915][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.316365][T10856] usb 2-1: USB disconnect, device number 59 [ 1490.429848][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3221'. [ 1491.641751][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1491.641768][ T30] audit: type=1326 audit(1757325636.131:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1491.721551][ T30] audit: type=1326 audit(1757325636.131:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1491.933084][ T30] audit: type=1326 audit(1757325636.141:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1491.956718][ T30] audit: type=1326 audit(1757325636.141:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1492.947457][ T30] audit: type=1326 audit(1757325636.141:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1493.138315][ T30] audit: type=1326 audit(1757325636.141:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1493.339252][ T30] audit: type=1326 audit(1757325636.141:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1493.368855][ T30] audit: type=1326 audit(1757325636.141:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1493.395459][ T30] audit: type=1326 audit(1757325636.141:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1493.604173][ T30] audit: type=1326 audit(1757325636.141:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22341 comm="syz.4.3226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1495.079737][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1495.091541][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1496.028798][T19548] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1496.205571][T19548] usb 4-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.239900][T19548] usb 4-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 1496.254281][T19548] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 1496.280465][T19548] usb 4-1: Product: syz [ 1496.284749][T19548] usb 4-1: Manufacturer: syz [ 1496.292874][T19548] usb 4-1: SerialNumber: syz [ 1496.341228][T22383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3234'. [ 1498.520108][T19548] hub 4-1:189.0: bad descriptor, ignoring hub [ 1498.526834][T19548] hub 4-1:189.0: probe with driver hub failed with error -5 [ 1498.535312][T19548] keyspan 4-1:189.0: Keyspan - (without firmware) converter detected [ 1498.866253][T19548] usb 4-1: USB disconnect, device number 58 [ 1498.904359][T19548] keyspan 4-1:189.0: device disconnected [ 1499.159446][T10873] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1499.542541][T10873] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 1499.551219][T10873] usb 2-1: config 0 has no interface number 1 [ 1499.557449][T10873] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1499.998909][T10873] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1500.033877][T10873] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1500.052752][T10873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1500.178060][T10873] usb 2-1: SerialNumber: syz [ 1500.278918][T10873] usb 2-1: config 0 descriptor?? [ 1500.297268][T10873] usb 2-1: Found UVC 0.00 device (0002:0000) [ 1500.353173][T10873] usb 2-1: No valid video chain found. [ 1500.581043][T10856] usb 2-1: USB disconnect, device number 60 [ 1502.544272][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1502.544295][ T30] audit: type=1326 audit(1757325647.081:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1502.598344][ T30] audit: type=1326 audit(1757325647.121:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1502.625290][ T30] audit: type=1326 audit(1757325647.121:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1502.855239][ T30] audit: type=1326 audit(1757325647.121:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1502.895348][ T30] audit: type=1326 audit(1757325647.121:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1502.928207][ T30] audit: type=1326 audit(1757325647.121:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1503.606075][ T30] audit: type=1326 audit(1757325647.121:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1504.159809][ T30] audit: type=1326 audit(1757325647.121:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1504.302940][ T30] audit: type=1326 audit(1757325647.121:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1504.415821][ T30] audit: type=1326 audit(1757325647.131:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22420 comm="syz.1.3243" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1504.437987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.258897][T10856] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1505.729044][T10856] usb 3-1: Using ep0 maxpacket: 16 [ 1505.996647][T10856] usb 3-1: config 0 has no interfaces? [ 1506.006204][T10856] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1506.030437][T10856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.054383][T10856] usb 3-1: config 0 descriptor?? [ 1506.286716][T10866] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1506.448827][T10866] usb 2-1: Using ep0 maxpacket: 8 [ 1506.504179][T10866] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1506.525229][T10866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.686728][T10866] usb 2-1: Product: syz [ 1506.702178][T10866] usb 2-1: Manufacturer: syz [ 1506.709892][T10866] usb 2-1: SerialNumber: syz [ 1506.732832][T10866] usb 2-1: config 0 descriptor?? [ 1506.945774][T10866] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1508.092019][T10856] usb 3-1: USB disconnect, device number 52 [ 1508.844750][T10866] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1508.909793][T10866] usb 2-1: USB disconnect, device number 61 [ 1510.314331][T22501] sctp: [Deprecated]: syz.0.3257 (pid 22501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1510.314331][T22501] Use struct sctp_sack_info instead [ 1513.995881][T22537] input: syz0 as /devices/virtual/input/input38 [ 1514.586134][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1514.586156][ T30] audit: type=1326 audit(1757325659.111:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1514.898537][ T30] audit: type=1326 audit(1757325659.171:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.109713][ T30] audit: type=1326 audit(1757325659.171:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.132524][ T30] audit: type=1326 audit(1757325659.171:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.159858][ T30] audit: type=1326 audit(1757325659.171:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.412919][ T30] audit: type=1326 audit(1757325659.171:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.469490][ T30] audit: type=1326 audit(1757325659.171:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.567534][ T30] audit: type=1326 audit(1757325659.171:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.589772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.691520][ T30] audit: type=1326 audit(1757325659.171:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1515.776510][ T30] audit: type=1326 audit(1757325659.171:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22557 comm="syz.2.3269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1516.008276][T22565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1518.072058][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1519.575301][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3280'. [ 1522.118993][T22610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1522.154760][T22610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1522.326658][T22610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1522.395208][T22622] fuse: Bad value for 'fd' [ 1524.179497][T19640] Bluetooth: hci2: command 0x0406 tx timeout [ 1524.185734][T19640] Bluetooth: hci0: command 0x0406 tx timeout [ 1524.244698][T22635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3287'. [ 1524.620179][T19617] Bluetooth: hci3: command 0x0406 tx timeout [ 1526.337382][T22658] vivid-000: ================= START STATUS ================= [ 1526.348941][T22658] vivid-000: Test Pattern: 75% Colorbar [ 1526.356865][T22658] vivid-000: Fill Percentage of Frame: 100 [ 1526.365633][T22658] vivid-000: Horizontal Movement: Move Left Slow [ 1526.372349][T22658] vivid-000: Vertical Movement: Move Up [ 1526.382447][T22658] vivid-000: OSD Text Mode: All [ 1526.395725][T22658] vivid-000: Show Border: false [ 1526.400970][T22658] vivid-000: Show Square: false [ 1526.408755][T22658] vivid-000: Sensor Flipped Horizontally: false [ 1526.417477][T22658] vivid-000: Sensor Flipped Vertically: true [ 1526.426934][T22658] vivid-000: Insert SAV Code in Image: false [ 1526.437510][T22658] vivid-000: Insert EAV Code in Image: false [ 1526.444173][T22658] vivid-000: Insert Video Guard Band: false [ 1526.460751][T22658] vivid-000: Reduced Framerate: false [ 1526.472134][T22658] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1526.490778][T22658] vivid-000: S-Video 000-0 Is Connected To: None [ 1526.501523][T22658] vivid-000: Enable Capture Cropping: true grabbed [ 1526.510820][T22658] vivid-000: Enable Capture Composing: true grabbed [ 1526.523627][T22658] vivid-000: Enable Capture Scaler: true grabbed [ 1526.534673][T22658] vivid-000: Timestamp Source: End of Frame [ 1526.549682][T22658] vivid-000: Colorspace: sRGB [ 1526.561025][T22658] vivid-000: Transfer Function: Default [ 1526.696704][T22658] vivid-000: Y'CbCr Encoding: Default [ 1526.717842][T22658] vivid-000: HSV Encoding: Hue 0-256 [ 1527.201105][T22658] vivid-000: Quantization: Default [ 1527.263715][T22658] vivid-000: Apply Alpha To Red Only: false [ 1527.308823][T22658] vivid-000: Standard Aspect Ratio: 4x3 [ 1527.314653][T22658] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1527.323022][T22658] vivid-000: DV Timings: 640x480p59 inactive [ 1527.329313][T22658] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1527.336859][T22658] vivid-000: Maximum EDID Blocks: 1 [ 1527.342332][T22658] vivid-000: Limited RGB Range (16-235): false [ 1527.348884][T22658] vivid-000: Rx RGB Quantization Range: Automatic [ 1527.348962][T22658] vivid-000: Power Present: 0x00000001 [ 1527.349033][T22658] tpg source WxH: 320x180 (R'G'B) [ 1527.349099][T22658] tpg field: 1 [ 1527.349110][T22658] tpg crop: (0,0)/320x180 [ 1527.349172][T22658] tpg compose: (0,0)/320x180 [ 1527.349189][T22658] tpg colorspace: 8 [ 1527.349247][T22658] tpg transfer function: 0/2 [ 1527.349260][T22658] tpg quantization: 0/1 [ 1527.349271][T22658] tpg RGB range: 0/2 [ 1527.349318][T22658] vivid-000: ================== END STATUS ================== [ 1528.979833][T10856] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1529.690557][T10856] usb 2-1: Using ep0 maxpacket: 16 [ 1529.708784][T10856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1529.720548][T10856] usb 2-1: config 1 has an invalid interface number: 26 but max is 1 [ 1529.729028][T10856] usb 2-1: config 1 has an invalid interface number: 89 but max is 1 [ 1529.758874][T10856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.779407][T10856] usb 2-1: config 1 has no interface number 0 [ 1529.788773][T10856] usb 2-1: config 1 has no interface number 1 [ 1529.795499][T10856] usb 2-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1529.809119][T10856] usb 2-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1529.822992][T10856] usb 2-1: config 1 interface 26 has no altsetting 0 [ 1529.830349][T10856] usb 2-1: config 1 interface 89 has no altsetting 0 [ 1530.003809][T10856] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 1530.030595][T10856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.076195][T10856] usb 2-1: Product: syz [ 1530.245126][T10856] usb 2-1: Manufacturer: syz [ 1530.269176][T10856] usb 2-1: SerialNumber: syz [ 1530.553403][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3300'. [ 1530.566091][T22693] tipc: New replicast peer: 255.255.255.255 [ 1530.574976][T22693] tipc: Enabled bearer , priority 10 [ 1531.031297][T22703] netlink: 'syz.2.3301': attribute type 10 has an invalid length. [ 1531.039799][T22703] : (slave hsr0): The slave device specified does not support setting the MAC address [ 1531.053910][T22703] : (slave hsr0): Error -95 calling set_mac_address [ 1532.033765][T10856] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 1532.093325][T10856] usb 2-1: 26:2 : does not exist [ 1532.143317][T10856] usb 2-1: unknown interface protocol 0x13, assuming v1 [ 1532.226167][T10856] usb 2-1: 89:0 : does not exist [ 1532.427820][T10856] usb 2-1: USB disconnect, device number 62 [ 1532.700830][T22675] udevd[22675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.385941][T19640] Bluetooth: hci3: command 0x0406 tx timeout [ 1533.459169][T19640] Bluetooth: hci0: command 0x0406 tx timeout [ 1533.475968][T22705] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1533.816297][T22705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1533.823005][T22705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1534.086884][T22731] program syz.1.3316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1535.541596][T19640] Bluetooth: hci2: command 0x0406 tx timeout [ 1535.866234][T19640] Bluetooth: hci3: command 0x0406 tx timeout [ 1535.988368][T22757] netlink: 'syz.4.3311': attribute type 10 has an invalid length. [ 1541.630407][T22813] syzkaller0: entered promiscuous mode [ 1541.869011][T22813] syzkaller0: entered allmulticast mode [ 1542.093094][T22820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 1543.561912][T22829] netlink: 'syz.1.3324': attribute type 10 has an invalid length. [ 1545.926071][T22855] syz.2.3329 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1547.658787][T22873] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3335'. [ 1550.495924][T22891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1551.408964][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.415321][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.444370][T22910] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1553.026261][T22920] input: syz1 as /devices/virtual/input/input39 [ 1555.181265][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 1555.190434][T22937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3351'. [ 1557.042783][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1557.042803][ T30] audit: type=1326 audit(1757325701.591:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22963 comm="syz.4.3357" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0 [ 1558.206129][T22973] kvm: user requested TSC rate below hardware speed [ 1562.003971][ T30] audit: type=1326 audit(1757325706.501:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1562.026096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.248888][ T30] audit: type=1326 audit(1757325706.501:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1562.319092][ T30] audit: type=1326 audit(1757325706.501:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1562.948844][ T30] audit: type=1326 audit(1757325706.501:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1563.103118][ T30] audit: type=1326 audit(1757325706.501:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1563.125586][ C0] vkms_vblank_simulate: vblank timer overrun [ 1563.229487][ T30] audit: type=1326 audit(1757325706.501:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1563.383237][ T30] audit: type=1326 audit(1757325706.501:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1563.502682][ T30] audit: type=1326 audit(1757325706.501:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1563.568836][ T30] audit: type=1326 audit(1757325706.501:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1563.648486][ T30] audit: type=1326 audit(1757325706.501:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1563.826271][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3380'. [ 1563.855861][ T30] audit: type=1326 audit(1757325706.501:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23007 comm="syz.4.3366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1564.166606][T23029] netlink: 'syz.3.3371': attribute type 10 has an invalid length. [ 1564.178095][T23029] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1564.453815][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'. [ 1564.469636][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'. [ 1567.297309][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1567.297332][ T30] audit: type=1326 audit(1757325711.811:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1567.415725][ T30] audit: type=1326 audit(1757325711.831:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1567.457624][ T30] audit: type=1326 audit(1757325711.831:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1567.631561][ T30] audit: type=1326 audit(1757325711.831:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1568.170947][ T30] audit: type=1326 audit(1757325711.831:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1568.468975][ T30] audit: type=1326 audit(1757325711.881:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1568.497621][ T30] audit: type=1326 audit(1757325711.881:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1568.528708][ T30] audit: type=1326 audit(1757325711.881:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1568.562575][ T30] audit: type=1326 audit(1757325711.881:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1568.902223][ T30] audit: type=1326 audit(1757325712.091:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23046 comm="syz.3.3376" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1569.141269][T23079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 1570.686130][T23092] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1570.692703][T23092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1570.737369][T23092] vhci_hcd vhci_hcd.0: Device attached [ 1570.868252][T23088] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1570.878424][T23088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1571.031776][T10871] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1571.509185][T23093] vhci_hcd: connection closed [ 1571.619102][ T12] vhci_hcd: stop threads [ 1571.628395][ T12] vhci_hcd: release socket [ 1571.633798][ T12] vhci_hcd: disconnect device [ 1572.603147][T23109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3389'. [ 1573.747333][T23118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1573.906407][T23123] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1576.642964][T23151] netlink: 'syz.0.3398': attribute type 10 has an invalid length. [ 1576.652053][T23151] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1576.691864][T23151] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1576.749515][T10871] vhci_hcd: vhci_device speed not set [ 1577.222689][T23151] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1577.276495][T23154] kvm: kvm [23150]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 1577.400869][T23158] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[23158] [ 1577.713567][T23158] vlan0: entered promiscuous mode [ 1578.002430][T23158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3397'. [ 1578.484684][T23165] netlink: 'syz.3.3402': attribute type 1 has an invalid length. [ 1578.525523][T23165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1578.604907][T23165] bond1: (slave geneve2): making interface the new active one [ 1578.778367][T23165] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1578.824974][T23167] bond1: entered promiscuous mode [ 1578.859319][T23167] geneve2: entered promiscuous mode [ 1581.604748][T23189] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1581.611364][T23189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1581.622459][T23189] vhci_hcd vhci_hcd.0: Device attached [ 1581.847596][T23201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1582.059459][T10871] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1582.323728][T23203] netlink: 'syz.3.3409': attribute type 10 has an invalid length. [ 1582.593177][T23196] vhci_hcd: connection reset by peer [ 1582.607883][ T6599] vhci_hcd: stop threads [ 1582.612674][ T6599] vhci_hcd: release socket [ 1582.625054][ T6599] vhci_hcd: disconnect device [ 1582.709688][T23214] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1583.967979][T10866] IPVS: starting estimator thread 0... [ 1584.308499][T23221] IPVS: using max 38 ests per chain, 91200 per kthread [ 1585.738580][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1585.778559][T23237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1586.200575][T23246] tipc: Enabling of bearer rejected, failed to enable media [ 1587.349071][T10871] vhci_hcd: vhci_device speed not set [ 1587.978836][T23263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3414'. [ 1589.539252][T10856] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1589.747960][T10856] usb 3-1: config 0 has no interfaces? [ 1589.763068][T10856] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1589.776581][T10856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.816105][T23276] tipc: Started in network mode [ 1589.824752][T10856] usb 3-1: Product: syz [ 1589.834557][T10856] usb 3-1: Manufacturer: syz [ 1589.849036][T23276] tipc: Node identity da35a4021c72, cluster identity 4711 [ 1589.857437][T10856] usb 3-1: SerialNumber: syz [ 1589.887576][T23276] tipc: Enabled bearer , priority 0 [ 1589.906843][T10856] usb 3-1: config 0 descriptor?? [ 1589.926906][T23277] syzkaller0: entered promiscuous mode [ 1589.964624][T23277] syzkaller0: entered allmulticast mode [ 1590.084688][T23276] tipc: Resetting bearer [ 1590.136239][T23275] tipc: Resetting bearer [ 1590.207795][T23275] tipc: Disabling bearer [ 1590.668482][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 1590.707748][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 1592.440750][T10856] usb 3-1: USB disconnect, device number 53 [ 1593.329557][T23314] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1593.336104][T23314] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1594.393986][T23314] vhci_hcd vhci_hcd.0: Device attached [ 1594.890067][T10873] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1595.587604][T23315] vhci_hcd: connection reset by peer [ 1595.654962][T20878] vhci_hcd: stop threads [ 1595.912974][T20878] vhci_hcd: release socket [ 1596.002072][T20878] vhci_hcd: disconnect device [ 1597.083477][T23334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.162993][T23334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.164242][T23351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1597.242946][T23334] xfrm0: left promiscuous mode [ 1597.263258][T23334] xfrm0: left allmulticast mode [ 1597.717101][T23334] vlan2: left promiscuous mode [ 1597.723318][T23334] bond2: left promiscuous mode [ 1597.729191][T23334] gretap1: left promiscuous mode [ 1597.735942][T23334] vlan2: left allmulticast mode [ 1597.741792][T23334] bond2: left allmulticast mode [ 1597.746744][T23334] gretap1: left allmulticast mode [ 1597.760448][T23334] gretap2: left promiscuous mode [ 1597.780461][T23334] geneve2: left promiscuous mode [ 1597.785913][T23334] geneve2: left allmulticast mode [ 1597.817094][T23334] bridge0: left allmulticast mode [ 1597.833252][T23334] ip6erspan0: left promiscuous mode [ 1597.920181][ T6599] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.930472][ T6599] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.019794][ T6599] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.267976][T23384] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1598.365056][ T6599] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.604553][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1598.604575][ T30] audit: type=1326 audit(1757325743.131:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23379 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1599.395869][ T30] audit: type=1326 audit(1757325743.131:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23379 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1599.660958][ T30] audit: type=1326 audit(1757325743.221:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23379 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1600.249272][ T30] audit: type=1326 audit(1757325743.221:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23379 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1600.306214][ T30] audit: type=1326 audit(1757325743.221:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23379 comm="syz.1.3439" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1600.328501][T10873] vhci_hcd: vhci_device speed not set [ 1601.172562][T23398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3442'. [ 1601.236636][T23415] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1601.424592][T23417] netlink: 'syz.4.3448': attribute type 10 has an invalid length. [ 1601.433512][T23417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1602.334511][T23429] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1602.344713][T10873] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1602.510064][T10873] usb 5-1: Using ep0 maxpacket: 8 [ 1602.540412][T10873] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1602.553594][T10873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.562046][T10873] usb 5-1: Product: syz [ 1602.566968][T10873] usb 5-1: Manufacturer: syz [ 1602.577128][T10873] usb 5-1: SerialNumber: syz [ 1602.599259][T10873] usb 5-1: config 0 descriptor?? [ 1602.617124][T10873] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 1602.895213][T23424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.908758][T23424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.124992][T23435] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1604.132441][T23435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1605.316176][T10866] usb 5-1: USB disconnect, device number 43 [ 1605.842677][T23375] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1606.139140][T23375] usb 3-1: Using ep0 maxpacket: 16 [ 1606.148243][T23375] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1606.156951][T23375] usb 3-1: config 0 has no interface number 0 [ 1606.163672][T23375] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1606.188587][T23375] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 1606.208096][T23375] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1606.218487][T23375] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1606.238043][T23375] usb 3-1: Product: syz [ 1606.247167][T23375] usb 3-1: SerialNumber: syz [ 1606.266039][T23375] usb 3-1: config 0 descriptor?? [ 1606.293840][T23375] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 1606.317044][T23375] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input43 [ 1606.567526][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1607.600451][ C0] cm109_urb_ctl_callback: 71 callbacks suppressed [ 1607.600480][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1607.601122][T10866] usb 3-1: USB disconnect, device number 54 [ 1607.606965][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1607.671168][T10866] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1609.165068][T23485] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3464'. [ 1609.639068][ T30] audit: type=1326 audit(1757325754.151:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23477 comm="syz.3.3463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7fc00000 [ 1610.808938][T10866] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1610.984927][T10866] usb 2-1: Using ep0 maxpacket: 8 [ 1611.004464][T10866] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1611.021267][T10866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.778743][T23375] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1612.024984][T10866] usb 2-1: Product: syz [ 1612.032006][T10866] usb 2-1: Manufacturer: syz [ 1612.036741][T10866] usb 2-1: SerialNumber: syz [ 1612.120073][T10866] usb 2-1: config 0 descriptor?? [ 1612.150646][T23375] usb 3-1: Using ep0 maxpacket: 16 [ 1612.158991][T23375] usb 3-1: config 3 has an invalid interface number: 100 but max is 2 [ 1612.174396][T23375] usb 3-1: config 3 has an invalid descriptor of length 197, skipping remainder of the config [ 1612.206343][T23375] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 1612.206943][T10866] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1612.242713][T23375] usb 3-1: config 3 has no interface number 0 [ 1612.268904][T23375] usb 3-1: config 3 interface 100 altsetting 129 has an invalid endpoint descriptor of length 2, skipping [ 1612.289248][T23375] usb 3-1: config 3 interface 100 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.328927][T23375] usb 3-1: config 3 interface 100 has no altsetting 0 [ 1612.393903][T23496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.407440][T23496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.480431][T23375] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=1e.7a [ 1612.489853][T23375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.497850][T23375] usb 3-1: Product: 缬ë±â”쎉ë¯è§µâ‡‘ä ƒì²íš¬âœˆâ„ºì««ìšïƒ‚䙈횣ﵾㄚå¯é¨’厸ߵ욋ê˜ä²ç¦¬å´ºá¶¯êºœê³¢Ú³æ£ì¬›ìˆ«ã›´á‘‚뿶쿃啤è¤ç™šè½¸â¼¼ï©§ç³˜ç¸­ [ 1612.534001][T23375] usb 3-1: Manufacturer: 玢಴蓬ﯔ䠲嬊â³êƒ€è‰‹ä¨Ÿæ±‡é½±ê¨“짤â¼é²ˆà´³ã¾–쬈ˬ導àµï«ê™‰è¹¨á ƒìž€é®¹æƒƒà­•ç«ƒïŒ—ㅨ뙎퇳轉⊤ﲢ⒩䷺酀張炯⼽빅ꖎ鼀çžè‰­êŽ–çºà²ƒî¾³ï¸½ìª™î«°ã¤ ë“측⬪앴턂마릎 [ 1612.557134][T23375] usb 3-1: SerialNumber: syz [ 1612.779043][T23513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.796818][T23513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.824843][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.832231][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.089242][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 1613.106417][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 1613.139732][T23375] usb 3-1: can't set first interface for hiFace device. [ 1613.156284][T23375] snd-usb-hiface 3-1:3.100: probe with driver snd-usb-hiface failed with error -5 [ 1613.204297][T23375] usb 3-1: USB disconnect, device number 55 [ 1615.051462][T10866] usb 2-1: USB disconnect, device number 63 [ 1616.425763][T23556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1617.427708][T23558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3482'. [ 1617.533610][T23560] netlink: 'syz.2.3483': attribute type 10 has an invalid length. [ 1617.563454][T23560] wlan1: mtu less than device minimum [ 1617.591685][T23560] : (slave wlan1): Error -22 calling dev_set_mtu [ 1617.705203][ T30] audit: type=1326 audit(1757325762.231:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1617.738431][ T30] audit: type=1326 audit(1757325762.231:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1617.795325][ T30] audit: type=1326 audit(1757325762.231:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1617.839867][ T30] audit: type=1326 audit(1757325762.231:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1617.874318][ T30] audit: type=1326 audit(1757325762.231:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1618.025457][T23569] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 1618.073099][ T30] audit: type=1326 audit(1757325762.231:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1618.140235][ T30] audit: type=1326 audit(1757325762.231:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1618.202516][T23569] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 1618.270362][ T30] audit: type=1326 audit(1757325762.231:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1618.385099][ T30] audit: type=1326 audit(1757325762.231:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1618.733577][ T30] audit: type=1326 audit(1757325762.231:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23561 comm="syz.4.3484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1618.755714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.444790][T23594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3491'. [ 1620.430723][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 1622.855526][T23615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1624.329853][T23630] netlink: 'syz.2.3497': attribute type 10 has an invalid length. [ 1624.359651][T23630] wlan1: mtu less than device minimum [ 1624.365095][T23630] : (slave wlan1): Error -22 calling dev_set_mtu [ 1625.162632][T23645] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1626.000038][T23635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.007524][T23635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.161585][T23653] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1626.169193][T23653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1626.896026][T23635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1627.068598][T23635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1627.658893][T10866] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1627.753399][T23635] bond1: left promiscuous mode [ 1627.758218][T23635] geneve2: left promiscuous mode [ 1627.791270][T23667] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.802782][ T6538] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.834706][ T6538] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.923819][ T6538] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.935020][T23667] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.939166][T10866] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1627.971205][T10866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1627.978034][ T6538] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.000741][T10866] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1628.019273][T10866] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1628.027485][T10866] usb 5-1: Product: syz [ 1628.041861][T10866] usb 5-1: Manufacturer: syz [ 1628.046510][T10866] usb 5-1: SerialNumber: syz [ 1628.073220][T10866] usb 5-1: config 0 descriptor?? [ 1628.091502][T10866] usb 5-1: selecting invalid altsetting 0 [ 1628.164550][T23667] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.350458][T23667] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.404134][T23667] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.605020][T23667] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.654193][T23667] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.926584][T23372] usb 5-1: USB disconnect, device number 44 [ 1629.778947][T10866] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1629.942341][T10866] usb 2-1: not running at top speed; connect to a high speed hub [ 1629.954022][T10866] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1629.969943][T10866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1629.988887][T10866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.004279][T10866] usb 2-1: Product: syz [ 1630.010497][T10866] usb 2-1: Manufacturer: syz [ 1630.015422][T10866] usb 2-1: SerialNumber: syz [ 1630.088886][T10866] usb 2-1: bad CDC descriptors [ 1630.272624][T23372] usb 2-1: USB disconnect, device number 64 [ 1632.045979][T23706] fuse: Unknown parameter '00000000000000000003' [ 1633.220229][T23717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3516'. [ 1633.715761][T23724] xfrm0: left promiscuous mode [ 1633.720713][T23724] xfrm0: left allmulticast mode [ 1633.727377][T23724] bridge1: left allmulticast mode [ 1633.733177][T23724] sit1: left promiscuous mode [ 1633.743435][T23724] vlan2: left promiscuous mode [ 1633.748324][T23724] bond2: left promiscuous mode [ 1633.753235][T23724] gretap1: left promiscuous mode [ 1633.758575][T23724] vlan2: left allmulticast mode [ 1633.763775][T23724] bond2: left allmulticast mode [ 1633.768881][T23724] gretap1: left allmulticast mode [ 1633.824665][T23724] tipc: Resetting bearer [ 1633.883485][T23724] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1633.965892][T23724] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1634.000319][T23724] macvlan3: left promiscuous mode [ 1634.012830][T23724] macvlan3: left allmulticast mode [ 1634.044195][T23724] ip6erspan0: left promiscuous mode [ 1634.181562][T23734] netlink: 'syz.2.3521': attribute type 10 has an invalid length. [ 1634.204746][T23734] net_ratelimit: 55 callbacks suppressed [ 1634.204766][T23734] wlan1: mtu less than device minimum [ 1634.265258][T23734] : (slave wlan1): Error -22 calling dev_set_mtu [ 1634.538826][T23348] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1634.582199][T23746] input: syz1 as /devices/virtual/input/input47 [ 1634.738123][T23348] usb 2-1: config 0 has no interfaces? [ 1634.768777][T23348] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1634.794000][T23348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.964844][T23348] usb 2-1: Product: syz [ 1634.969598][T23348] usb 2-1: Manufacturer: syz [ 1634.974239][T23348] usb 2-1: SerialNumber: syz [ 1634.992471][T23348] usb 2-1: config 0 descriptor?? [ 1635.178830][T22398] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1635.424423][T22398] usb 3-1: config 0 has no interfaces? [ 1635.823457][T22398] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1635.907973][T22398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.922020][T22398] usb 3-1: Product: syz [ 1635.928203][T22398] usb 3-1: Manufacturer: syz [ 1635.958765][T22398] usb 3-1: SerialNumber: syz [ 1636.012708][T22398] usb 3-1: config 0 descriptor?? [ 1637.370417][T23348] usb 2-1: USB disconnect, device number 65 [ 1637.464389][T23759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1638.633049][T23371] usb 3-1: USB disconnect, device number 56 [ 1640.831939][T23798] netlink: 'syz.2.3535': attribute type 10 has an invalid length. [ 1640.891430][T23798] wlan1: mtu less than device minimum [ 1640.967991][T23798] : (slave wlan1): Error -22 calling dev_set_mtu [ 1640.976347][T23800] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1641.010356][T23800] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 1641.036587][T23800] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1641.074903][T23800] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 1641.322774][T23808] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.356548][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.384785][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.392644][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.596033][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.624849][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.682563][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.711917][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1641.735872][T23811] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1642.261021][T23823] ptrace attach of "./syz-executor exec"[20851] was attempted by "./syz-executor exec"[23823] [ 1643.447089][T23825] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[23825] [ 1643.542228][T23825] vlan3: entered promiscuous mode [ 1643.558012][T23825] bridge0: entered promiscuous mode [ 1643.748123][T23825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1648.568940][T23371] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1648.918401][T23371] usb 2-1: config 0 has no interfaces? [ 1649.087197][T23371] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1649.096682][T23371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.104820][T23371] usb 2-1: Product: syz [ 1649.109394][T23371] usb 2-1: Manufacturer: syz [ 1649.114291][T23371] usb 2-1: SerialNumber: syz [ 1649.123857][T23371] usb 2-1: config 0 descriptor?? [ 1649.531685][T23878] netlink: 'syz.4.3555': attribute type 1 has an invalid length. [ 1649.571060][T23878] netlink: 'syz.4.3555': attribute type 2 has an invalid length. [ 1650.264387][T23371] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1650.618444][T23371] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.640539][T23371] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1650.851057][T23371] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1650.851084][T23371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1650.851099][T23371] usb 3-1: SerialNumber: syz [ 1651.066651][T23372] usb 2-1: USB disconnect, device number 66 [ 1651.909365][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 1651.909387][ T30] audit: type=1326 audit(1757325796.461:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0 [ 1652.060454][ T30] audit: type=1326 audit(1757325796.591:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.105506][T23907] fuse: Bad value for 'fd' [ 1652.129592][ T30] audit: type=1326 audit(1757325796.591:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.171334][ T30] audit: type=1326 audit(1757325796.591:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.204489][ T30] audit: type=1326 audit(1757325796.591:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.227551][ T30] audit: type=1326 audit(1757325796.591:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.256928][ T30] audit: type=1326 audit(1757325796.591:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.282229][T23910] ptrace attach of "./syz-executor exec"[5883] was attempted by "./syz-executor exec"[23910] [ 1652.322633][T23910] vlan0: entered promiscuous mode [ 1652.327885][T23910] bridge0: entered promiscuous mode [ 1652.346167][ T30] audit: type=1326 audit(1757325796.591:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.403230][ T30] audit: type=1326 audit(1757325796.591:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1652.452439][T23910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3553'. [ 1653.299238][ T30] audit: type=1326 audit(1757325796.591:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23905 comm="syz.4.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1653.532468][T23371] usb 3-1: 0:2 : does not exist [ 1653.790867][T23371] usb 3-1: USB disconnect, device number 57 [ 1653.869631][T23920] lo: entered promiscuous mode [ 1653.874441][T23920] lo: entered allmulticast mode [ 1653.883319][T23920] tunl0: entered promiscuous mode [ 1653.888468][T23920] tunl0: entered allmulticast mode [ 1653.906901][T23920] gre0: entered promiscuous mode [ 1653.938378][T23920] gre0: entered allmulticast mode [ 1653.972033][T23920] gretap0: entered promiscuous mode [ 1653.990206][T23920] gretap0: entered allmulticast mode [ 1654.069888][T22981] udevd[22981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1654.149163][T23920] erspan0: entered promiscuous mode [ 1654.158676][T23920] erspan0: entered allmulticast mode [ 1654.166140][T23920] ip_vti0: entered promiscuous mode [ 1654.195789][T23920] ip_vti0: entered allmulticast mode [ 1654.293868][T23920] ip6_vti0: entered promiscuous mode [ 1654.308802][T23920] ip6_vti0: entered allmulticast mode [ 1654.330152][T23920] sit0: entered promiscuous mode [ 1654.436819][T23920] sit0: entered allmulticast mode [ 1654.456791][T23920] ip6tnl0: entered promiscuous mode [ 1654.467379][T23920] ip6tnl0: entered allmulticast mode [ 1654.485107][T23920] ip6gre0: entered promiscuous mode [ 1654.500847][T23920] ip6gre0: entered allmulticast mode [ 1654.613276][T23920] syz_tun: entered promiscuous mode [ 1654.652233][T23920] syz_tun: entered allmulticast mode [ 1654.938206][T23920] ip6gretap0: entered promiscuous mode [ 1654.945677][T23920] ip6gretap0: entered allmulticast mode [ 1655.223895][T23920] vcan0: entered promiscuous mode [ 1655.243233][T23920] vcan0: entered allmulticast mode [ 1655.254642][T23920] bond0: entered allmulticast mode [ 1655.261440][T23920] bond_slave_0: entered allmulticast mode [ 1655.267675][T23920] bond_slave_1: entered allmulticast mode [ 1655.280469][T23920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.288267][T23920] team0: entered allmulticast mode [ 1655.471168][T23920] team_slave_0: entered allmulticast mode [ 1655.477166][T23920] team_slave_1: entered allmulticast mode [ 1655.587346][T23920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.642298][T23943] loop2: detected capacity change from 0 to 7 [ 1655.681195][T23943] Dev loop2: unable to read RDB block 7 [ 1655.701625][T23920] nlmon0: entered promiscuous mode [ 1655.721125][T23943] loop2: unable to read partition table [ 1655.753873][T23943] loop2: partition table beyond EOD, truncated [ 1655.762779][T23943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1655.792115][T23920] nlmon0: entered allmulticast mode [ 1655.849294][T23920] caif0: entered promiscuous mode [ 1655.856589][T23920] caif0: entered allmulticast mode [ 1655.863754][T23920] net_ratelimit: 145 callbacks suppressed [ 1656.168704][T23920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1656.263202][T23929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.274364][T23929] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1658.702017][T23970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1659.304323][T23348] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1659.485935][T23348] usb 5-1: config 0 has no interfaces? [ 1659.498408][T23348] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1659.522438][T23348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.546239][T23348] usb 5-1: Product: syz [ 1659.577154][T23348] usb 5-1: Manufacturer: syz [ 1659.585420][T23348] usb 5-1: SerialNumber: syz [ 1659.609511][T23348] usb 5-1: config 0 descriptor?? [ 1659.829008][T23962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1660.082446][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'. [ 1662.074204][T22398] usb 5-1: USB disconnect, device number 45 [ 1662.488887][T23375] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1662.661265][T23375] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1662.674761][T23375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1662.870188][T23375] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1662.893383][T23375] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1662.956097][T23375] usb 4-1: Product: syz [ 1662.966227][T23375] usb 4-1: Manufacturer: syz [ 1662.988268][T23375] usb 4-1: SerialNumber: syz [ 1663.021422][T23375] usb 4-1: config 0 descriptor?? [ 1663.045024][T23375] usb 4-1: selecting invalid altsetting 0 [ 1663.638782][T22398] usb 4-1: USB disconnect, device number 59 [ 1666.963830][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1666.963851][ T30] audit: type=1326 audit(1757325811.501:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1667.028724][ T30] audit: type=1326 audit(1757325811.501:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1667.069990][ T30] audit: type=1326 audit(1757325811.501:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1667.524423][ T30] audit: type=1326 audit(1757325811.501:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1667.762042][T24053] syz.2.3588 (24053): drop_caches: 2 [ 1667.769889][T24053] syz.2.3588 (24053): drop_caches: 2 [ 1667.963609][ T30] audit: type=1326 audit(1757325811.511:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1667.985792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.086727][ T30] audit: type=1326 audit(1757325811.601:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1668.208928][ T30] audit: type=1326 audit(1757325811.601:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1668.258914][T23372] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1668.333636][ T30] audit: type=1326 audit(1757325811.601:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1668.355742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1668.438838][T23372] usb 4-1: Using ep0 maxpacket: 16 [ 1668.576084][ T30] audit: type=1326 audit(1757325811.641:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1668.897867][ T30] audit: type=1326 audit(1757325811.641:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.1.3596" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1668.920054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.190035][T24084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.389320][T24092] syz.2.3595 (24092): drop_caches: 2 [ 1671.400409][T24092] syz.2.3595 (24092): drop_caches: 2 [ 1671.534342][T23372] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1671.542307][T23372] usb 4-1: no configurations [ 1671.563382][T23372] usb 4-1: can't read configurations, error -22 [ 1672.678848][T23375] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1672.864972][T23375] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1672.878708][T23372] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1672.899042][T23375] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1672.945862][T23375] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1672.955368][T23375] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1672.968074][T23375] usb 2-1: Product: syz [ 1673.064863][T23375] usb 2-1: Manufacturer: syz [ 1673.078547][T23375] usb 2-1: SerialNumber: syz [ 1673.100651][T23372] usb 4-1: Using ep0 maxpacket: 8 [ 1673.137401][T23372] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1673.148971][T23375] usb 2-1: config 0 descriptor?? [ 1673.155016][T23372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.177284][T24098] usb usb8: usbfs: process 24098 (syz.0.3600) did not claim interface 0 before use [ 1673.298803][T23371] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1673.362263][T23375] usb 2-1: selecting invalid altsetting 0 [ 1673.381573][T23372] usb 4-1: Product: syz [ 1673.388787][T23372] usb 4-1: Manufacturer: syz [ 1673.470149][T23372] usb 4-1: SerialNumber: syz [ 1673.479647][T23371] usb 3-1: Using ep0 maxpacket: 8 [ 1673.591511][T23372] usb 4-1: config 0 descriptor?? [ 1673.671186][T23371] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1673.681742][T23375] usb 2-1: USB disconnect, device number 67 [ 1673.700724][T23372] gspca_main: se401-2.14.0 probing 047d:5003 [ 1673.776975][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1673.947439][T23371] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1674.047000][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1674.105286][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1674.270680][T23371] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1674.278209][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.284737][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.301054][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1674.355246][T23371] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1674.419151][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1674.460621][T23372] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 1674.469017][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1674.507887][T23371] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1674.526127][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1674.562953][T23371] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1674.613825][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1674.696150][T23371] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1674.743663][T23371] usb 3-1: string descriptor 0 read error: -22 [ 1674.773390][T23371] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1674.808380][T23371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.953408][T23371] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1675.633075][T22398] usb 3-1: USB disconnect, device number 58 [ 1676.597869][T23371] usb 4-1: USB disconnect, device number 62 [ 1677.108788][T22398] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1678.224876][T22398] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1678.244707][T22398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.307841][T22398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1678.481366][T22398] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1678.648354][T22398] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1678.662624][T22398] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1678.691434][T22398] usb 3-1: Product: syz [ 1678.697974][T22398] usb 3-1: Manufacturer: syz [ 1678.861049][T22398] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1678.901204][T24148] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 1678.950968][T24148] netlink: 'syz.1.3610': attribute type 2 has an invalid length. [ 1679.924670][T24163] syz.4.3611 (24163): drop_caches: 2 [ 1679.953592][T24163] syz.4.3611 (24163): drop_caches: 2 [ 1681.357717][T22398] usb 3-1: USB disconnect, device number 59 [ 1681.392688][T24171] syz.0.3613 (24171): drop_caches: 2 [ 1681.398473][T24171] syz.0.3613 (24171): drop_caches: 2 [ 1681.472662][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1685.018983][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1686.087614][T23372] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1686.240483][T23372] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1686.345935][T23372] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1686.361392][T23372] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1686.433516][T23372] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1686.463474][T23372] usb 3-1: Product: syz [ 1686.788939][T24226] netlink: 'syz.4.3626': attribute type 10 has an invalid length. [ 1686.807376][T24226] team0: Device ipvlan1 failed to register rx_handler [ 1686.843055][T23372] usb 3-1: Manufacturer: syz [ 1686.887536][T23372] usb 3-1: SerialNumber: syz [ 1686.910959][T23372] usb 3-1: config 0 descriptor?? [ 1687.000990][T23372] usb 3-1: selecting invalid altsetting 0 [ 1687.869535][T23372] usb 3-1: USB disconnect, device number 60 [ 1688.907603][T24234] netlink: 'syz.3.3627': attribute type 1 has an invalid length. [ 1688.916568][T24234] netlink: 'syz.3.3627': attribute type 2 has an invalid length. [ 1689.555879][T24246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 1691.742626][T24260] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1691.752539][T24260] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 1691.766375][T24260] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1691.775954][T24260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1691.809582][T24260] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 1693.260058][T22398] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1693.418905][T22398] usb 5-1: Using ep0 maxpacket: 8 [ 1693.458281][T22398] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1693.946537][T22398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.148887][T22398] usb 5-1: Product: syz [ 1694.248468][T22398] usb 5-1: Manufacturer: syz [ 1694.273715][T22398] usb 5-1: SerialNumber: syz [ 1694.335580][T22398] usb 5-1: config 0 descriptor?? [ 1694.399554][T23371] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1694.431550][T22398] gspca_main: se401-2.14.0 probing 047d:5003 [ 1694.561996][T23371] usb 4-1: Using ep0 maxpacket: 8 [ 1694.581007][T23371] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1694.603488][T23371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.644361][T23371] usb 4-1: Product: syz [ 1694.648561][T23371] usb 4-1: Manufacturer: syz [ 1694.661481][T23371] usb 4-1: SerialNumber: syz [ 1694.726727][T24297] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1694.784171][T23371] usb 4-1: config 0 descriptor?? [ 1694.802953][T23372] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1695.044265][T23372] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.088151][T22398] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 1695.107253][T23371] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1695.137160][T23372] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1695.173591][T23372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.191017][T23372] usb 3-1: Product: syz [ 1695.590184][T23372] usb 3-1: Manufacturer: syz [ 1695.766576][T23372] usb 3-1: SerialNumber: syz [ 1695.846673][T23372] usb 3-1: config 0 descriptor?? [ 1697.236946][T23372] usb 5-1: USB disconnect, device number 46 [ 1697.466978][T23371] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1697.491886][T23371] usb 4-1: USB disconnect, device number 63 [ 1697.986283][T22398] usb 3-1: USB disconnect, device number 61 [ 1698.205875][T24321] syz.1.3645 (24321): drop_caches: 2 [ 1705.248704][T24372] syz.0.3655 (24372): drop_caches: 2 [ 1705.262082][T24372] syz.0.3655 (24372): drop_caches: 2 [ 1705.838979][T23371] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1706.039224][T23371] usb 3-1: Using ep0 maxpacket: 8 [ 1706.059808][T23371] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1706.069227][T23371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.090601][T23371] usb 3-1: Product: syz [ 1706.096176][T23371] usb 3-1: Manufacturer: syz [ 1706.118849][T23371] usb 3-1: SerialNumber: syz [ 1706.226471][T23371] usb 3-1: config 0 descriptor?? [ 1706.262719][T23371] gspca_main: se401-2.14.0 probing 047d:5003 [ 1706.396527][T24379] loop2: detected capacity change from 0 to 7 [ 1706.477993][T24379] Dev loop2: unable to read RDB block 7 [ 1706.534908][T24379] loop2: unable to read partition table [ 1706.541533][T24379] loop2: partition table beyond EOD, truncated [ 1706.548485][T24379] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1707.198410][T23371] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 1709.449290][T23371] usb 3-1: USB disconnect, device number 62 [ 1709.892945][T24423] syz.2.3665 (24423): drop_caches: 2 [ 1709.900116][T24423] syz.2.3665 (24423): drop_caches: 2 [ 1713.440524][T24457] netlink: 'syz.1.3671': attribute type 10 has an invalid length. [ 1714.339502][T24461] loop2: detected capacity change from 0 to 7 [ 1714.348851][T24461] Dev loop2: unable to read RDB block 7 [ 1714.371607][T24461] loop2: unable to read partition table [ 1714.403923][T24461] loop2: partition table beyond EOD, truncated [ 1714.470851][T24461] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1714.902686][T24466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3675'. [ 1715.704778][T24477] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1718.726099][T24502] syz.1.3679 (24502): drop_caches: 2 [ 1718.754160][T24502] syz.1.3679 (24502): drop_caches: 2 [ 1719.307078][T24503] futex_wake_op: syz.0.3688 tries to shift op by -33; fix this program [ 1719.417557][T24503] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1719.629386][T24509] syz.4.3682 (24509): drop_caches: 2 [ 1719.635551][T24509] syz.4.3682 (24509): drop_caches: 2 [ 1720.478058][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3684'. [ 1722.371950][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3687'. [ 1723.126821][T24550] netlink: 'syz.0.3691': attribute type 10 has an invalid length. [ 1726.478098][T24582] syz.1.3705 (24582): drop_caches: 2 [ 1726.485169][T24582] syz.1.3705 (24582): drop_caches: 2 [ 1729.166981][T24603] syz.3.3698 (24603): drop_caches: 2 [ 1729.177556][T24603] syz.3.3698 (24603): drop_caches: 2 [ 1729.275541][T24607] syz.2.3708 (24607): drop_caches: 2 [ 1729.281789][T24607] syz.2.3708 (24607): drop_caches: 2 [ 1729.732914][T23348] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1730.099017][T23348] usb 2-1: Using ep0 maxpacket: 8 [ 1730.119471][T23348] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1730.141281][T23348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.171262][T23348] usb 2-1: Product: syz [ 1730.185804][T23348] usb 2-1: Manufacturer: syz [ 1730.206130][T23348] usb 2-1: SerialNumber: syz [ 1730.242227][T23348] usb 2-1: config 0 descriptor?? [ 1730.271675][T23348] gspca_main: se401-2.14.0 probing 047d:5003 [ 1730.936356][T23348] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 1732.815530][T24634] tipc: Enabling of bearer rejected, already enabled [ 1732.880683][T24635] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1732.907985][T24635] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1732.909905][T23372] usb 2-1: USB disconnect, device number 68 [ 1733.015055][T24635] tipc: Resetting bearer [ 1733.545486][T24655] dvmrp0: entered allmulticast mode [ 1735.703672][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.710708][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.310687][T24677] syz.1.3714 (24677): drop_caches: 2 [ 1736.338768][T24677] syz.1.3714 (24677): drop_caches: 2 [ 1738.472957][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1738.472996][ T30] audit: type=1326 audit(1757325882.991:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1738.548352][ T30] audit: type=1326 audit(1757325882.991:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1738.581491][ T30] audit: type=1326 audit(1757325882.991:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1738.909227][ T30] audit: type=1326 audit(1757325882.991:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1739.010202][ T30] audit: type=1326 audit(1757325882.991:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1739.318646][ T30] audit: type=1326 audit(1757325882.991:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1739.378732][ T30] audit: type=1326 audit(1757325882.991:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1739.617267][ T30] audit: type=1326 audit(1757325882.991:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1739.778942][ T30] audit: type=1326 audit(1757325882.991:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1739.877218][ T30] audit: type=1326 audit(1757325882.991:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24697 comm="syz.3.3719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1744.923768][T24755] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 1745.260172][T23371] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1745.353780][T24760] netlink: 'syz.3.3731': attribute type 9 has an invalid length. [ 1745.353822][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1745.496864][T23371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.502087][T23371] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1745.502118][T23371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.502140][T23371] usb 2-1: Product: syz [ 1745.502155][T23371] usb 2-1: Manufacturer: syz [ 1745.502171][T23371] usb 2-1: SerialNumber: syz [ 1745.504842][T23371] usb 2-1: config 0 descriptor?? [ 1747.395059][T24778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3735'. [ 1747.448151][T24780] netlink: 'syz.0.3736': attribute type 10 has an invalid length. [ 1747.687668][T23372] usb 2-1: USB disconnect, device number 69 [ 1748.198298][T24789] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1750.955165][T24812] syz.0.3740 (24812): drop_caches: 2 [ 1750.963791][T24812] syz.0.3740 (24812): drop_caches: 2 [ 1753.974986][T24845] netlink: 'syz.2.3746': attribute type 10 has an invalid length. [ 1754.977821][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1754.977840][ T30] audit: type=1326 audit(1757325899.501:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1755.053032][ T30] audit: type=1326 audit(1757325899.501:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1755.166555][ T30] audit: type=1326 audit(1757325899.501:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1755.833489][ T30] audit: type=1326 audit(1757325899.501:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1755.997239][ T30] audit: type=1326 audit(1757325899.501:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1756.107206][ T30] audit: type=1326 audit(1757325899.501:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1756.253775][ T30] audit: type=1326 audit(1757325899.501:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1756.518675][ T30] audit: type=1326 audit(1757325899.501:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1756.563144][ T30] audit: type=1326 audit(1757325899.501:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1756.700275][ T30] audit: type=1326 audit(1757325899.571:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24853 comm="syz.4.3750" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1762.758842][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1762.758857][ T30] audit: type=1326 audit(1757325907.101:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1762.804508][T24924] debugfs: '!' already exists in 'ieee80211' [ 1762.925652][ T30] audit: type=1326 audit(1757325907.101:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1762.965863][ T30] audit: type=1326 audit(1757325907.101:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1762.994212][ T30] audit: type=1326 audit(1757325907.101:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1763.027914][ T30] audit: type=1326 audit(1757325907.341:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1763.175224][ T30] audit: type=1326 audit(1757325907.341:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1763.448833][ T30] audit: type=1326 audit(1757325907.341:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1763.478770][ T30] audit: type=1326 audit(1757325907.341:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1763.659670][ T30] audit: type=1326 audit(1757325907.341:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1763.706429][ T30] audit: type=1326 audit(1757325907.511:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.2.3762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 1764.861271][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1764.884824][T24935] netlink: 'syz.0.3775': attribute type 10 has an invalid length. [ 1764.919075][T24935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.938493][T24937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1764.962536][T24935] team0: Port device bond0 added [ 1765.465597][T24943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1766.117033][T24937] team0 (unregistering): Port device team_slave_0 removed [ 1766.774782][T24937] team0 (unregistering): Port device team_slave_1 removed [ 1766.818146][T24937] team0 (unregistering): Port device bond0 removed [ 1768.093017][T24965] futex_wake_op: syz.4.3764 tries to shift op by -33; fix this program [ 1768.104078][T24965] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1768.499148][T24967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1770.502351][T24984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3773'. [ 1770.637918][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1770.702068][T24994] binder: 24985:24994 ioctl c0306201 80000080 returned -14 [ 1770.922499][T24984] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1772.013910][T25002] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1773.880799][T25013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3780'. [ 1775.553718][T25038] syz.3.3783 (25038): drop_caches: 2 [ 1775.698781][T23348] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1775.717366][T25038] syz.3.3783 (25038): drop_caches: 2 [ 1775.991292][T23348] usb 2-1: Using ep0 maxpacket: 16 [ 1776.001441][T23348] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.012476][T23348] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1776.050099][T23348] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1776.078661][T23348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.140479][T23348] usb 2-1: config 0 descriptor?? [ 1776.247010][T23348] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1778.159967][T23371] usb 2-1: USB disconnect, device number 70 [ 1779.293284][T25058] futex_wake_op: syz.2.3786 tries to shift op by -33; fix this program [ 1779.314884][T25058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1787.653534][T25129] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 1787.663959][T25132] tipc: Enabled bearer , priority 0 [ 1787.723017][T25132] syzkaller0: entered promiscuous mode [ 1787.731040][T25132] syzkaller0: entered allmulticast mode [ 1787.877933][T25132] tipc: Resetting bearer [ 1787.917563][T25132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.981393][T25130] tipc: Resetting bearer [ 1788.094359][T25130] tipc: Disabling bearer [ 1790.875457][T25164] futex_wake_op: syz.1.3806 tries to shift op by -33; fix this program [ 1790.889499][T25164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1794.536695][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3816'. [ 1794.593074][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1794.783006][T25205] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 1794.792977][T25205] PKCS7: Only support pkcs7_signedData type [ 1797.209154][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.215537][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.800451][T25247] vivid-000: ================= START STATUS ================= [ 1798.808673][T25247] vivid-000: Test Pattern: 75% Colorbar [ 1798.815716][T25247] vivid-000: Fill Percentage of Frame: 100 [ 1798.822764][T25247] vivid-000: Horizontal Movement: Move Left Slow [ 1798.834174][T25247] vivid-000: Vertical Movement: Move Up [ 1798.841379][T25247] vivid-000: OSD Text Mode: All [ 1798.848615][T25247] vivid-000: Show Border: true [ 1798.883350][T25247] vivid-000: Show Square: false [ 1798.890098][T25247] vivid-000: Sensor Flipped Horizontally: false [ 1798.898753][T25247] vivid-000: Sensor Flipped Vertically: true [ 1798.906339][T25247] vivid-000: Insert SAV Code in Image: false [ 1798.913802][T25247] vivid-000: Insert EAV Code in Image: false [ 1798.930345][T25247] vivid-000: Insert Video Guard Band: false [ 1798.939611][T25247] vivid-000: Reduced Framerate: false [ 1798.945884][T25247] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1798.960260][T25247] vivid-000: S-Video 000-0 Is Connected To: None [ 1798.968849][T25247] vivid-000: Enable Capture Cropping: true grabbed [ 1798.976818][T25247] vivid-000: Enable Capture Composing: false grabbed [ 1798.986239][T25247] vivid-000: Enable Capture Scaler: true grabbed [ 1798.994521][T25247] vivid-000: Timestamp Source: End of Frame [ 1799.002115][T25247] vivid-000: Colorspace: sRGB [ 1799.008642][T25247] vivid-000: Transfer Function: None [ 1799.015665][T25247] vivid-000: Y'CbCr Encoding: Default [ 1799.022833][T25247] vivid-000: HSV Encoding: Hue 0-256 [ 1799.028594][T25247] vivid-000: Quantization: Default [ 1799.036357][T25247] vivid-000: Apply Alpha To Red Only: false [ 1799.046014][T25247] vivid-000: Standard Aspect Ratio: 4x3 [ 1799.052078][T25247] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1799.061756][T25247] vivid-000: DV Timings: 640x480p59 inactive [ 1799.069257][T25247] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1799.089268][T25247] vivid-000: Maximum EDID Blocks: 1 [ 1799.097880][T25247] vivid-000: Limited RGB Range (16-235): false [ 1799.105701][T25247] vivid-000: Rx RGB Quantization Range: Automatic [ 1799.114254][T25247] vivid-000: Power Present: 0x00000001 [ 1799.114683][T25247] tpg source WxH: 320x180 (R'G'B) [ 1799.114705][T25247] tpg field: 1 [ 1799.114716][T25247] tpg crop: (0,0)/320x180 [ 1799.117214][T25247] tpg compose: (0,0)/320x180 [ 1799.117233][T25247] tpg colorspace: 8 [ 1799.117351][T25247] tpg transfer function: 5/5 [ 1799.117365][T25247] tpg quantization: 0/1 [ 1799.117377][T25247] tpg RGB range: 0/2 [ 1799.119699][T25247] vivid-000: ================== END STATUS ================== [ 1800.001461][T25261] syz.0.3829 (25261): drop_caches: 2 [ 1800.007515][T25261] syz.0.3829 (25261): drop_caches: 2 [ 1803.576624][T25289] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1804.012722][T25294] syz.0.3836 (25294): drop_caches: 2 [ 1804.025139][T25294] syz.0.3836 (25294): drop_caches: 2 [ 1804.940604][T25304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3838'. [ 1805.197547][T25307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1806.821952][T24511] syz_tun (unregistering): left allmulticast mode [ 1807.663471][T20878] bridge_slave_1: left allmulticast mode [ 1807.698240][T20878] bridge_slave_1: left promiscuous mode [ 1807.716009][T20878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.757503][T20878] bridge_slave_0: left allmulticast mode [ 1807.763540][T20878] bridge_slave_0: left promiscuous mode [ 1807.783066][T20878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.483637][T25330] syz.2.3844 (25330): drop_caches: 2 [ 1808.495983][T25330] syz.2.3844 (25330): drop_caches: 2 [ 1809.628045][T20878] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1809.833793][T19617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1809.857052][T19617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1809.866351][T19617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1809.874876][T19617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1809.887676][T19617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1810.611099][T20878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1811.142093][T20878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1811.152966][T20878] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1811.162926][T20878] bond0 (unregistering): Released all slaves [ 1811.707733][T20878] bond1 (unregistering): Released all slaves [ 1811.938728][T19617] Bluetooth: hci4: command tx timeout [ 1812.265811][T20878] tipc: Left network mode [ 1812.856167][T25367] PKCS7: Unknown OID: [5] (bad) [ 1812.861333][T25367] PKCS7: Only support pkcs7_signedData type [ 1813.192766][T25337] chnl_net:caif_netlink_parms(): no params data found [ 1813.972722][T20878] hsr_slave_0: left promiscuous mode [ 1814.023258][T19617] Bluetooth: hci4: command tx timeout [ 1814.023500][T20878] hsr_slave_1: left promiscuous mode [ 1814.129434][T20878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1814.179783][T20878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1816.118744][T19617] Bluetooth: hci4: command tx timeout [ 1818.226136][T19617] Bluetooth: hci4: command tx timeout [ 1818.348301][T20878] team0 (unregistering): Port device team_slave_1 removed [ 1818.653074][T20878] team0 (unregistering): Port device team_slave_0 removed [ 1818.804676][T25422] syz.0.3858 (25422): drop_caches: 2 [ 1818.814436][T25422] syz.0.3858 (25422): drop_caches: 2 [ 1819.290286][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3860'. [ 1822.595557][T25337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.615170][T25337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.642995][T25337] bridge_slave_0: entered allmulticast mode [ 1822.739558][T23348] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1822.849362][T25337] bridge_slave_0: entered promiscuous mode [ 1822.900955][T25337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.943817][T25337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.953692][T25337] bridge_slave_1: entered allmulticast mode [ 1822.966003][T25337] bridge_slave_1: entered promiscuous mode [ 1823.000717][T23348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.102259][T23348] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1823.112628][T23348] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1823.180638][T23348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.293172][T23348] usb 5-1: config 0 descriptor?? [ 1823.317960][T25337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1823.319914][T23348] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1823.390698][T23348] dvb-usb: bulk message failed: -22 (3/0) [ 1823.409953][T25337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1823.526588][T25460] netlink: 'syz.4.3864': attribute type 7 has an invalid length. [ 1823.546098][T25460] netlink: 'syz.4.3864': attribute type 8 has an invalid length. [ 1823.870422][T23348] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1823.912853][T23348] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1823.938657][T23348] usb 5-1: media controller created [ 1823.973738][T25337] team0: Port device team_slave_0 added [ 1823.975572][T23348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1824.053540][T25337] team0: Port device team_slave_1 added [ 1824.330466][T23348] dvb-usb: bulk message failed: -22 (6/0) [ 1824.636924][T23348] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1824.674349][T23348] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52 [ 1824.719486][T23348] dvb-usb: schedule remote query interval to 150 msecs. [ 1824.733881][T23348] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1824.902242][T22398] dvb-usb: bulk message failed: -22 (1/0) [ 1824.908209][T22398] dvb-usb: error while querying for an remote control event. [ 1825.033794][T25337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1825.045377][T20878] IPVS: stop unused estimator thread 0... [ 1825.069189][T25337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1825.098977][T23348] dvb-usb: bulk message failed: -22 (1/0) [ 1825.104770][T23348] dvb-usb: error while querying for an remote control event. [ 1825.231293][T25337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1825.262723][T25337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1825.303588][T25337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1825.308906][T23348] dvb-usb: bulk message failed: -22 (1/0) [ 1825.370272][T23348] dvb-usb: error while querying for an remote control event. [ 1825.486082][T25337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1825.555831][T23348] dvb-usb: bulk message failed: -22 (1/0) [ 1825.555868][T23348] dvb-usb: error while querying for an remote control event. [ 1825.753666][T23348] dvb-usb: bulk message failed: -22 (1/0) [ 1825.753704][T23348] dvb-usb: error while querying for an remote control event. [ 1825.918918][T23348] dvb-usb: bulk message failed: -22 (1/0) [ 1825.919024][T23348] dvb-usb: error while querying for an remote control event. [ 1826.081760][T23348] dvb-usb: bulk message failed: -22 (1/0) [ 1826.087799][T23348] dvb-usb: error while querying for an remote control event. [ 1826.111031][T23348] usb 5-1: USB disconnect, device number 47 [ 1826.278651][T23346] dvb-usb: bulk message failed: -22 (1/0) [ 1826.284651][T23346] dvb-usb: error while querying for an remote control event. [ 1826.468424][T23348] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1826.611859][T25337] hsr_slave_0: entered promiscuous mode [ 1826.625456][T25337] hsr_slave_1: entered promiscuous mode [ 1826.637627][T25337] debugfs: 'hsr0' already exists in 'hsr' [ 1826.666808][T25337] Cannot create hsr debugfs directory [ 1826.848626][T25501] vivid-000: ================= START STATUS ================= [ 1826.858656][T25501] vivid-000: Test Pattern: 75% Colorbar [ 1826.868306][T25501] vivid-000: Fill Percentage of Frame: 100 [ 1826.876675][T25501] vivid-000: Horizontal Movement: Move Left Slow [ 1826.886104][T25501] vivid-000: Vertical Movement: Move Up [ 1826.900077][T25501] vivid-000: OSD Text Mode: All [ 1826.905645][T25501] vivid-000: Show Border: true [ 1826.918963][T25501] vivid-000: Show Square: false [ 1826.924078][T25501] vivid-000: Sensor Flipped Horizontally: false [ 1826.972686][T25501] vivid-000: Sensor Flipped Vertically: true [ 1827.054403][T25501] vivid-000: Insert SAV Code in Image: false [ 1827.348833][T25501] vivid-000: Insert EAV Code in Image: false [ 1827.354911][T25501] vivid-000: Insert Video Guard Band: false [ 1827.532714][T25501] vivid-000: Reduced Framerate: false [ 1827.597907][T25501] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1827.658795][T25501] vivid-000: S-Video 000-0 Is Connected To: None [ 1827.723471][T25501] vivid-000: Enable Capture Cropping: true grabbed [ 1827.900380][T25501] vivid-000: Enable Capture Composing: false grabbed [ 1827.907275][T25501] vivid-000: Enable Capture Scaler: true grabbed [ 1827.914050][T25501] vivid-000: Timestamp Source: End of Frame [ 1827.920316][T25501] vivid-000: Colorspace: sRGB [ 1827.925324][T25501] vivid-000: Transfer Function: None [ 1827.930904][T25501] vivid-000: Y'CbCr Encoding: Default [ 1827.936485][T25501] vivid-000: HSV Encoding: Hue 0-256 [ 1827.942575][T25501] vivid-000: Quantization: Default [ 1827.947901][T25501] vivid-000: Apply Alpha To Red Only: false [ 1827.954091][T25501] vivid-000: Standard Aspect Ratio: 4x3 [ 1827.959855][T25501] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1827.967844][T25501] vivid-000: DV Timings: 640x480p59 inactive [ 1827.974178][T25501] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1827.981896][T25501] vivid-000: Maximum EDID Blocks: 1 [ 1827.987303][T25501] vivid-000: Limited RGB Range (16-235): false [ 1827.993716][T25501] vivid-000: Rx RGB Quantization Range: Automatic [ 1828.000373][T25501] vivid-000: Power Present: 0x00000001 [ 1828.006034][T25501] tpg source WxH: 320x180 (R'G'B) [ 1828.011286][T25501] tpg field: 1 [ 1828.014773][T25501] tpg crop: (0,0)/320x180 [ 1828.019560][T25501] tpg compose: (0,0)/320x180 [ 1828.024361][T25501] tpg colorspace: 8 [ 1828.028285][T25501] tpg transfer function: 5/5 [ 1828.033077][T25501] tpg quantization: 0/1 [ 1828.037369][T25501] tpg RGB range: 0/2 [ 1828.041526][T25501] vivid-000: ================== END STATUS ================== [ 1829.048877][T23372] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1829.232073][T23372] usb 3-1: Using ep0 maxpacket: 8 [ 1829.252267][T23372] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 1829.459400][T23372] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.494152][T23372] usb 3-1: config 135 has no interface number 0 [ 1829.507847][T23372] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1829.539209][T23372] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1829.568628][T23372] usb 3-1: config 135 interface 230 has no altsetting 0 [ 1829.581769][T23372] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1829.591871][T23372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.609775][T23372] usb 3-1: Product: syz [ 1829.626795][T23372] usb 3-1: Manufacturer: syz [ 1829.648780][T23372] usb 3-1: SerialNumber: syz [ 1829.688396][T23372] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 1829.720079][T23372] usb 3-1: No valid video chain found. [ 1830.381901][T25337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1830.435418][T25337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1830.599846][T25337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1830.626635][T25337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1831.849888][T23348] usb 3-1: USB disconnect, device number 63 [ 1831.940889][T25337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.296984][T25552] random: crng reseeded on system resumption [ 1832.409882][T25337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.567592][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.574792][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.795551][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.802758][ T6599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.923105][T25575] ptrace attach of "./syz-executor exec"[5880] was attempted by "./syz-executor exec"[25575] [ 1834.779323][T19640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1834.813839][T19640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1834.832599][T19640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1834.863376][T19640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1834.878898][T19640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1835.336352][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1835.554101][ T12] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1835.857631][ T12] dvmrp1 (unregistering): left allmulticast mode [ 1836.258678][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1836.979352][T19640] Bluetooth: hci3: command tx timeout [ 1837.542260][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1837.555258][ T12] bond_slave_0: left promiscuous mode [ 1837.566295][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1837.580323][ T12] bond_slave_1: left promiscuous mode [ 1837.596819][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1837.627328][ T12] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1837.657764][ T12] bond0 (unregistering): Released all slaves [ 1838.179707][ T12] bond1 (unregistering): Released all slaves [ 1838.759695][ T12] bond2 (unregistering): Released all slaves [ 1839.073074][T19640] Bluetooth: hci3: command 0x041b tx timeout [ 1839.117083][ T12] bond3 (unregistering): Released all slaves [ 1839.737352][ T12] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1839.754256][ T12] bond4 (unregistering): Released all slaves [ 1840.299890][ T12] bond5 (unregistering): Released all slaves [ 1840.589620][ T12] tipc: Disabling bearer [ 1840.596047][ T12] tipc: Left network mode [ 1840.788152][T25337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1841.140086][T19640] Bluetooth: hci3: command 0x041b tx timeout [ 1841.860812][T25337] veth0_vlan: entered promiscuous mode [ 1842.238654][T23348] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1842.516992][T25691] syz.4.3890 (25691): drop_caches: 2 [ 1842.533712][T25691] syz.4.3890 (25691): drop_caches: 2 [ 1842.558660][T23348] usb 3-1: Using ep0 maxpacket: 16 [ 1843.228936][T19640] Bluetooth: hci3: command 0x041b tx timeout [ 1843.736430][T25337] veth1_vlan: entered promiscuous mode [ 1844.286774][T25582] chnl_net:caif_netlink_parms(): no params data found [ 1844.472735][ T12] hsr_slave_0: left promiscuous mode [ 1844.490510][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.604311][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1844.793844][ T12] pim6reg (unregistering): left allmulticast mode [ 1845.003923][T23348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1845.041313][T23348] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1845.049812][T23348] usb 3-1: can't read configurations, error -71 [ 1845.298857][T19640] Bluetooth: hci3: command 0x041b tx timeout [ 1847.135391][T25719] usb usb8: usbfs: process 25719 (syz.2.3893) did not claim interface 0 before use [ 1847.691434][T25337] veth0_macvtap: entered promiscuous mode [ 1847.704297][T25337] veth1_macvtap: entered promiscuous mode [ 1848.274090][T25582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.288217][T25582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.301411][T25582] bridge_slave_0: entered allmulticast mode [ 1848.410008][T25582] bridge_slave_0: entered promiscuous mode [ 1848.438092][T25582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.456301][T25582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.469338][T25582] bridge_slave_1: entered allmulticast mode [ 1848.487231][T25582] bridge_slave_1: entered promiscuous mode [ 1848.526625][T25337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1848.597109][T25337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1848.713488][T25582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.838008][T25582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.895807][T25741] tipc: Enabling of bearer rejected, already enabled [ 1848.910126][T25741] tipc: Enabling of bearer rejected, failed to enable media [ 1849.090930][T25694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.111876][T25694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.333894][T25582] team0: Port device team_slave_0 added [ 1849.372089][T25582] team0: Port device team_slave_1 added [ 1849.378137][T25694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.440405][T25694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.563046][T25582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1849.584446][T25582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.709121][T25582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1849.950471][T25582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1849.987630][T25582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.299991][T25582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.209469][T20878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.354856][T20878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.604696][T25582] hsr_slave_0: entered promiscuous mode [ 1851.615235][T25582] hsr_slave_1: entered promiscuous mode [ 1851.732818][T25582] debugfs: 'hsr0' already exists in 'hsr' [ 1851.769489][T25582] Cannot create hsr debugfs directory [ 1852.451645][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1852.462720][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1852.762838][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1852.762859][ T30] audit: type=1326 audit(1757325997.301:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1852.901017][ T30] audit: type=1326 audit(1757325997.301:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1853.051806][T25779] debugfs: '!' already exists in 'ieee80211' [ 1853.408807][ T30] audit: type=1326 audit(1757325997.301:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1853.431856][ T30] audit: type=1326 audit(1757325997.301:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1853.454774][ T30] audit: type=1326 audit(1757325997.301:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1853.554687][T25582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1853.622483][T25582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1853.677726][ T30] audit: type=1326 audit(1757325997.301:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1853.725290][T25582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1853.791609][ T30] audit: type=1326 audit(1757325997.301:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1853.835502][T25582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1853.855244][ T30] audit: type=1326 audit(1757325997.301:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1854.097697][ T30] audit: type=1326 audit(1757325997.301:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1854.326244][ T30] audit: type=1326 audit(1757325997.791:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25773 comm="syz.1.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1854.671947][T25582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.810187][T25582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.858856][T14316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.866005][T14316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.916101][T14316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.923278][T14316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.504480][T25582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.927509][T25582] veth0_vlan: entered promiscuous mode [ 1855.977379][T25582] veth1_vlan: entered promiscuous mode [ 1856.163766][T25582] veth0_macvtap: entered promiscuous mode [ 1856.261450][T25582] veth1_macvtap: entered promiscuous mode [ 1856.395901][T25582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1856.466244][T25582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.522582][ T6210] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.540327][ T6210] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.562097][ T6210] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.579697][ T6210] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.810741][T23348] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1856.940868][T25842] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 1857.087925][T23348] usb 3-1: Using ep0 maxpacket: 32 [ 1857.130740][T23348] usb 3-1: config 0 has no interfaces? [ 1857.156426][ T6210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.293219][T23348] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1857.327389][ T6210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.383585][T23348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.469334][T23348] usb 3-1: config 0 descriptor?? [ 1857.525349][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.922370][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.194887][T20870] usb 3-1: USB disconnect, device number 66 [ 1858.589050][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.595417][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.044413][T25877] random: crng reseeded on system resumption [ 1862.398791][T23348] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1862.570391][T23348] usb 2-1: Using ep0 maxpacket: 8 [ 1862.581536][T23348] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1862.605674][T25893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3915'. [ 1862.680721][T23348] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1863.585837][T23348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1863.597533][T23348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1863.608718][T23348] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1863.849452][T23348] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1863.878654][T23348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.886793][T23348] usb 2-1: Product: syz [ 1863.968331][T23348] usb 2-1: Manufacturer: syz [ 1863.990968][T23348] usb 2-1: SerialNumber: syz [ 1864.151894][T23348] usb 2-1: config 0 descriptor?? [ 1864.397631][T23348] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input53 [ 1865.407864][T25915] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1866.220652][T23348] usb 2-1: USB disconnect, device number 71 [ 1867.453326][T25940] hsr0: entered promiscuous mode [ 1867.870851][T25942] PKCS7: Unknown OID: [5] (bad) [ 1867.875778][T25942] PKCS7: Only support pkcs7_signedData type [ 1869.395875][T25952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3925'. [ 1870.272914][T25961] random: crng reseeded on system resumption [ 1870.594586][T25969] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4262885938 (68206175008 ns) > initial count (38369542160 ns). Using initial count to start timer. [ 1870.668921][T20870] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1870.938887][T20870] usb 4-1: Using ep0 maxpacket: 16 [ 1870.947370][T20870] usb 4-1: config 0 has no interfaces? [ 1871.303208][T20870] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1871.312535][T20870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.503516][T20870] usb 4-1: Product: syz [ 1871.533055][T20870] usb 4-1: Manufacturer: syz [ 1871.563071][T20870] usb 4-1: SerialNumber: syz [ 1871.680610][T20870] usb 4-1: config 0 descriptor?? [ 1872.079638][T23372] usb 4-1: USB disconnect, device number 64 [ 1873.014880][T23344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1873.710636][T23344] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1873.739885][T23344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.763293][T23344] usb 6-1: config 0 descriptor?? [ 1873.784236][T25993] netlink: 'syz.1.3933': attribute type 10 has an invalid length. [ 1873.804174][T23344] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1874.339567][T23344] gspca_spca508: reg_read err -110 [ 1874.404904][T23344] gspca_spca508: reg_read err -32 [ 1874.994767][T23344] gspca_spca508: reg_read err -110 [ 1875.178902][T23344] gspca_spca508: reg_read err -32 [ 1875.186813][T23344] gspca_spca508: reg_read err -32 [ 1875.192637][T23344] gspca_spca508: reg write: error -32 [ 1875.198148][T23344] spca508 6-1:0.0: probe with driver spca508 failed with error -32 [ 1876.158738][T26024] binder: 26018:26024 ioctl c0306201 80000080 returned -14 [ 1877.314844][T23348] usb 6-1: USB disconnect, device number 2 [ 1882.021846][T26084] syz.1.3944 (26084): drop_caches: 2 [ 1882.027979][T26084] syz.1.3944 (26084): drop_caches: 2 [ 1882.089733][T26087] netlink: 'syz.4.3945': attribute type 10 has an invalid length. [ 1920.022656][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.030101][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1932.338863][T19617] Bluetooth: hci4: command 0x0406 tx timeout [ 1957.940054][T19617] Bluetooth: hci3: command 0x041b tx timeout [ 1981.462836][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.469701][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1988.838612][ T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1988.848352][ T12] ref_tracker: netdev@ffff888029aa2610 has 1/1 users at [ 1988.848352][ T12] batadv_hard_if_event+0xf0f/0x1730 [ 1988.848352][ T12] notifier_call_chain+0x1b3/0x3e0 [ 1988.848352][ T12] register_netdevice+0x1608/0x1ae0 [ 1988.848352][ T12] veth_newlink+0x5cc/0xa50 [ 1988.848352][ T12] rtnl_newlink_create+0x310/0xb00 [ 1988.848352][ T12] rtnl_newlink+0x16d6/0x1c70 [ 1988.848352][ T12] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1988.848352][ T12] netlink_rcv_skb+0x205/0x470 [ 1988.848352][ T12] netlink_unicast+0x82c/0x9e0 [ 1988.848352][ T12] netlink_sendmsg+0x805/0xb30 [ 1988.848352][ T12] __sock_sendmsg+0x21c/0x270 [ 1988.848352][ T12] __sys_sendto+0x3bd/0x520 [ 1988.848352][ T12] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 1988.848352][ T12] __do_fast_syscall_32+0xb6/0x2b0 [ 1988.848352][ T12] do_fast_syscall_32+0x34/0x80 [ 1988.848352][ T12] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1988.848352][ T12]