last executing test programs: 15m8.217276962s ago: executing program 2 (id=357): r0 = gettid() add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m8.045534883s ago: executing program 2 (id=360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x1000025}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x0, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 15m7.951661712s ago: executing program 2 (id=361): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r3, 0x0, 0x8000000005, 0x100000101) 15m7.796306407s ago: executing program 2 (id=362): mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 15m7.586486179s ago: executing program 2 (id=364): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xf58) 15m6.996635877s ago: executing program 2 (id=368): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = syz_io_uring_setup(0xd4, &(0x7f0000000480)={0x0, 0x3ea4, 0x8, 0x0, 0x2f7}, &(0x7f0000000380)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 15m6.522283186s ago: executing program 32 (id=368): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = syz_io_uring_setup(0xd4, &(0x7f0000000480)={0x0, 0x3ea4, 0x8, 0x0, 0x2f7}, &(0x7f0000000380)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12m59.804790772s ago: executing program 4 (id=1022): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r3, 0x0, &(0x7f0000000380)="f3", 0x1, 0xfffffffffffffc01}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r1, 0x0, &(0x7f0000000300)='O', 0x1, 0xff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000280)='}', 0x1, 0x7ff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f00000003c0)="de", 0x1, 0xd372}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, r1, 0xc2, 0xffffffff}) 12m59.746818315s ago: executing program 4 (id=1023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12m58.679447736s ago: executing program 4 (id=1027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014f00000000107d1e38310000e10000010902240001000000000904000002030000000921000000"], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) 12m55.406640988s ago: executing program 4 (id=1043): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000200)={0x3, 0xfffffffa, 0x9, 0x1, 0x2, 0x10000}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) 12m54.982933102s ago: executing program 4 (id=1046): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, @in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e24, 0xfffffffd, @local, 0x8}, @in={0x2, 0x4e23, @multicast2}]}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0xcc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0x0, &(0x7f0000000040)="a96bc4ec5c564d3258044ee2303cd10dcb8e4337e539bc1c73055fcac9b9cda60d9021167564726d258149968f3c83c67d32090a494add64276eca289d8478", 0x3f, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0xc0cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m54.62045314s ago: executing program 4 (id=1048): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1af0, 0x100, 0x2, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 12m54.03241069s ago: executing program 33 (id=1048): r0 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x1af0, 0x100, 0x2, 0xbfdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 15.599774602s ago: executing program 1 (id=3424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000140003007866726d2f"], 0x58}}, 0xc0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000000c0)={@val={0x0, 0x88f8}, @val={0x1, 0x1, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@generic={0x2, 0x6, "164577", 0x77, 0x1d, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x33, 0x2, 0x4, 0x1, 0x9, 0x30, 0x9, [@dev={0xfe, 0x80, '\x00', 0x30}]}, @hopopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}], "dd3e9adad1133929309d40d35c0c0b33bfdfaa9d8af3c359733a07549643d8ea5ac7f775278ca63f3ade73a0fc27dd328904b97ee84849c6c82f00df37a304919785bf3f4362e714553cdd9602c554"}}}}, 0xad) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 12.605344521s ago: executing program 6 (id=3430): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12.47610948s ago: executing program 1 (id=3432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 12.328143967s ago: executing program 0 (id=3433): r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x7, {{0xa, 0x4e21, 0x8, @mcast1, 0x200}}}, 0x88) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd1490bb2c8f5e6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r4, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000001640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffd, 0x0, 0x0, {[@timestamp={0x8, 0xfffffffffffffd6f, 0x6, 0x40}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f00000001c0)) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xd0, 0x80c40, 0x23456}) io_uring_enter(r7, 0x47f4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbc, 0xbe, 0x64, 0x20, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x48, 0x38}}]}}]}}, 0x0) 10.512245864s ago: executing program 0 (id=3436): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_dev$vim2m(0x0, 0x7, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001700)=""/217, 0xdc}, {0x0}], 0x1}, 0x4}], 0x1, 0x600100a2, 0x0) mmap(&(0x7f0000c4b000/0x1000)=nil, 0x1000, 0x0, 0x20010, r1, 0x41995000) io_setup(0x8, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001814010000fb"], 0x20}}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x8, 0x2}, 0x8) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1) close_range(r5, r6, 0x0) 10.02682233s ago: executing program 6 (id=3438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.452388669s ago: executing program 1 (id=3440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'hsr0\x00'}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'}}}]}, 0x48}}, 0x0) 8.157179268s ago: executing program 5 (id=3441): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r2, &(0x7f0000000200), 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r5) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) 8.156889326s ago: executing program 3 (id=3442): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4b7093ff931a8458, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 8.009542099s ago: executing program 6 (id=3443): socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x2a, 0x3, 0x80020038) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYRES32=0x0], 0x6c}, 0x1, 0xba01}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3e67, 0x7207, 0x10, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0a80) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0x0) 7.087913269s ago: executing program 0 (id=3444): r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) wait4(0x0, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x102}, 0x1c) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x4040080) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.833735522s ago: executing program 3 (id=3445): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e220000040012000800040000080000"], 0x54}}, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd8}, "017cac080f91a39588b9d334787f5bbede229bc710bfe84064342d50f819dcb3aacea8d5edf5ea5dc0fd5600a511a5e8ca030aca7a388754e1e02bcff7b497547fc8bb7df3f74cce86d58cf83087e2f8fe8b0f402f20c34766cfcad832505ebf89ffffc06ad94754c4d7617f5aaddfb0d59a2360fa73bae23d0c06e28d607c329f69f510e9c4fd76397fc031359c8e2489509fc1000efa30dd276ab58825ece31b8f1e8299b592f14a93bdff16d99c4238988216503e9f86324e6b98a616ff87413eabb3859aea66deab6b929dcf9b857cf78b32b6f4c4a1"}, 0xdc) write$6lowpan_enable(r8, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f00000cd000/0x1000)=nil, 0x1000, 0x100000f, 0x11, r3, 0x0) 6.35233025s ago: executing program 1 (id=3446): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r6, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0xf28, 0xe7, {"6dcab0e3d68f00000000459dba1dbe10"}, 0x7, 0xb, 0x4}, @ib={0x1b, 0x7ac, 0x0, {"b2000000000000d24d93cfe66ee5a001"}, 0x9, 0x0, 0x400000000}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r6, 0x2}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.259665267s ago: executing program 5 (id=3447): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700", 0x12) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xbf5, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x8, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x78c], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5.69552862s ago: executing program 0 (id=3448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) 5.335206799s ago: executing program 3 (id=3449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.676400162s ago: executing program 5 (id=3450): socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r1, 0x0, 0x0, 0x80000) socket(0x27, 0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0xa8840) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f00000003c0)=0x2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 4.404097274s ago: executing program 5 (id=3451): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff3115"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.183471399s ago: executing program 6 (id=3452): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x8a, &(0x7f0000000580)=@req={0x472e, 0xfffffffb, 0x7, 0x200}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) r4 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xc0202, 0x1c0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 3.95349631s ago: executing program 3 (id=3453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.840231553s ago: executing program 5 (id=3454): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x1000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) getdents64(r0, &(0x7f0000000000)=""/48, 0x30) 3.239169971s ago: executing program 1 (id=3455): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x1c, r2, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.524236123s ago: executing program 3 (id=3456): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x0, 0x7fffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 2.422019468s ago: executing program 5 (id=3457): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x20000804) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x9, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1.890406263s ago: executing program 0 (id=3458): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) timer_settime(r4, 0x1, 0x0, 0x0) mkdir(0x0, 0x101) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, 0x0) 1.782583096s ago: executing program 6 (id=3459): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x80000) socket$alg(0x26, 0x5, 0x0) eventfd2(0x400, 0x80800) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x3ff) eventfd2(0x1, 0x801) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="ed"], 0x20) 1.580023238s ago: executing program 6 (id=3460): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr(r4, 0x0, 0x0, 0x0, 0x2) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f0000000d40)="01", 0x1) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.168502804s ago: executing program 3 (id=3461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 131.043748ms ago: executing program 0 (id=3462): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r4, 0x0, 0x58) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=3463): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x440c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) kernel console output (not intermixed with test programs): sg+0x805/0xb30 [ 709.370612][T14835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.370635][T14835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 709.370655][T14835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 709.370673][T14835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.370694][T14835] __sock_sendmsg+0x21c/0x270 [ 709.370723][T14835] ____sys_sendmsg+0x505/0x830 [ 709.370752][T14835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.370784][T14835] ? import_iovec+0x74/0xa0 [ 709.370811][T14835] ___sys_sendmsg+0x21f/0x2a0 [ 709.370836][T14835] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.370897][T14835] ? __fget_files+0x2a/0x420 [ 709.370913][T14835] ? __fget_files+0x3a0/0x420 [ 709.370941][T14835] __x64_sys_sendmsg+0x19b/0x260 [ 709.370965][T14835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.371004][T14835] ? do_syscall_64+0xbe/0x3b0 [ 709.371030][T14835] do_syscall_64+0xfa/0x3b0 [ 709.371048][T14835] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.371066][T14835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.371084][T14835] ? clear_bhb_loop+0x60/0xb0 [ 709.371107][T14835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.371125][T14835] RIP: 0033:0x7f486f78ec29 [ 709.371142][T14835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.371159][T14835] RSP: 002b:00007f486d9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.371178][T14835] RAX: ffffffffffffffda RBX: 00007f486f9d5fa0 RCX: 00007f486f78ec29 [ 709.371192][T14835] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 709.371204][T14835] RBP: 00007f486f811e41 R08: 0000000000000000 R09: 0000000000000000 [ 709.371222][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.371234][T14835] R13: 00007f486f9d6038 R14: 00007f486f9d5fa0 R15: 00007f486faffa28 [ 709.371265][T14835] [ 710.343323][T14835] Mem-Info: [ 710.364713][T14835] active_anon:10109 inactive_anon:0 isolated_anon:0 [ 710.364713][T14835] active_file:2162 inactive_file:3849 isolated_file:0 [ 710.364713][T14835] unevictable:1052 dirty:228 writeback:0 [ 710.364713][T14835] slab_reclaimable:11531 slab_unreclaimable:105038 [ 710.364713][T14835] mapped:33353 shmem:2768 pagetables:1630 [ 710.364713][T14835] sec_pagetables:0 bounce:0 [ 710.364713][T14835] kernel_misc_reclaimable:0 [ 710.364713][T14835] free:1352538 free_pcp:11218 free_cma:0 [ 710.422360][T14835] Node 0 active_anon:40436kB inactive_anon:0kB active_file:8576kB inactive_file:15268kB unevictable:2672kB isolated(anon):0kB isolated(file):0kB mapped:133340kB dirty:908kB writeback:0kB shmem:9536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12884kB pagetables:6376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 710.514501][T14835] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 710.629088][T14835] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.778350][T14835] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 710.838698][T14835] Node 0 DMA32 free:1504648kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42640kB inactive_anon:0kB active_file:8460kB inactive_file:14032kB unevictable:9728kB writepending:972kB present:3129332kB managed:2557412kB mlocked:8192kB bounce:0kB free_pcp:24944kB local_pcp:11020kB free_cma:0kB [ 710.929137][T14835] lowmem_reserve[]: 0 0 1 1 1 [ 710.941413][T14835] Node 0 Normal free:4kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:228kB inactive_anon:0kB active_file:116kB inactive_file:1236kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:12kB free_cma:0kB [ 711.018266][T14835] lowmem_reserve[]: 0 0 0 0 0 [ 711.023176][T14835] Node 1 Normal free:3885604kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:128kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16576kB local_pcp:5344kB free_cma:0kB [ 711.087425][T14835] lowmem_reserve[]: 0 0 0 0 0 [ 711.102394][T14835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 711.117796][T14835] Node 0 DMA32: 4*4kB (UME) 3*8kB (ME) 379*16kB (UME) 899*32kB (UME) 432*64kB (UME) 159*128kB (UME) 136*256kB (UM) 85*512kB (UM) 65*1024kB (UM) 16*2048kB (UM) 303*4096kB (M) = 1501624kB [ 711.138944][T14835] Node 0 Normal: 7*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 711.151851][T14835] Node 1 Normal: 235*4kB (UME) 51*8kB (UME) 40*16kB (UME) 181*32kB (UME) 75*64kB (UME) 14*128kB (UME) 6*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 942*4096kB (M) = 3885604kB [ 711.176531][T14835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.188381][T14835] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 711.199313][T14835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.211390][T14835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 711.223197][T14835] 8911 total pagecache pages [ 711.229897][T14835] 10 pages in swap cache [ 711.241289][T14835] Free swap = 124844kB [ 711.248833][T14835] Total swap = 124996kB [ 711.259907][T14835] 2097051 pages RAM [ 711.268072][T14835] 0 pages HighMem/MovableOnly [ 711.277186][T14835] 425672 pages reserved [ 711.281818][T14835] 0 pages cma reserved [ 713.177027][T14880] vlan0: entered promiscuous mode [ 713.194589][T14880] vlan0: entered allmulticast mode [ 713.203281][T14880] hsr_slave_1: entered allmulticast mode [ 713.337298][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 713.807724][T14891] usb usb8: usbfs: process 14891 (syz.6.2612) did not claim interface 0 before use [ 717.518542][T14923] tipc: Enabled bearer , priority 0 [ 717.528048][T14923] syzkaller0: entered promiscuous mode [ 717.533595][T14923] syzkaller0: entered allmulticast mode [ 717.602396][T14923] tipc: Resetting bearer [ 717.636903][T14922] tipc: Resetting bearer [ 717.678953][T14922] tipc: Disabling bearer [ 717.914438][ T5963] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 718.034813][T14934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 718.071315][T14934] block device autoloading is deprecated and will be removed. [ 718.087934][ T5963] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 718.135056][ T5963] usb 7-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.220036][ T5963] usb 7-1: config 1 interface 0 has no altsetting 0 [ 718.280478][ T5963] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 718.329911][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.367433][ T5963] usb 7-1: Product: syz [ 718.391723][ T5963] usb 7-1: Manufacturer: syz [ 718.410606][ T5963] usb 7-1: SerialNumber: syz [ 721.184832][ T5963] usb 7-1: USB disconnect, device number 35 [ 721.607813][T14962] kvm: kvm [14960]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 721.694213][ T5993] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 721.866729][ T5993] usb 4-1: config 5 has an invalid interface number: 3 but max is 0 [ 721.879130][ T5993] usb 4-1: config 5 has no interface number 0 [ 721.888227][ T5993] usb 4-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 721.908410][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.940849][ T5993] usb 4-1: Product: syz [ 721.953050][ T5993] usb 4-1: Manufacturer: syz [ 721.968722][ T5993] usb 4-1: SerialNumber: syz [ 722.016580][ T5993] ftdi_sio 4-1:5.3: FTDI USB Serial Device converter detected [ 722.057419][ T5993] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 722.281061][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2630'. [ 722.339805][T14963] macvtap1: entered promiscuous mode [ 722.350621][T14963] bond0: entered promiscuous mode [ 722.356959][T14963] bond_slave_0: entered promiscuous mode [ 722.362868][T14963] bond_slave_1: entered promiscuous mode [ 722.371292][T14963] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 722.381379][T14963] macvtap1: entered allmulticast mode [ 722.388377][T14963] bond0: entered allmulticast mode [ 722.393818][T14963] bond_slave_0: entered allmulticast mode [ 722.441471][T14963] bond_slave_1: entered allmulticast mode [ 722.450513][T14963] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 722.481276][T14966] bond0: left allmulticast mode [ 722.494116][ T5963] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 722.503457][T14966] bond_slave_0: left allmulticast mode [ 722.516374][T14966] bond_slave_1: left allmulticast mode [ 722.522283][T14966] bond0: left promiscuous mode [ 722.528124][T14966] bond_slave_0: left promiscuous mode [ 722.534430][T14966] bond_slave_1: left promiscuous mode [ 722.540121][T14966] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 722.575425][ T5938] usb 4-1: USB disconnect, device number 55 [ 722.590213][ T5938] ftdi_sio 4-1:5.3: device disconnected [ 722.648058][ T5963] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 722.674799][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.686182][ T5963] usb 6-1: Product: syz [ 722.690374][ T5963] usb 6-1: Manufacturer: syz [ 722.704348][ T5963] usb 6-1: SerialNumber: syz [ 722.744901][ T5963] usb 6-1: config 0 descriptor?? [ 723.000318][ T5963] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 723.036848][T14979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.444385][ T5938] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 723.606556][ T5938] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 723.615706][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.638205][ T5938] usb 4-1: config 0 descriptor?? [ 724.064402][T14983] tipc: Enabled bearer , priority 0 [ 724.073029][T14983] syzkaller0: entered promiscuous mode [ 724.079185][T14983] syzkaller0: entered allmulticast mode [ 724.100737][T14983] tipc: Resetting bearer [ 724.118163][T14982] tipc: Resetting bearer [ 724.140812][T14982] tipc: Disabling bearer [ 724.197127][ T5938] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 724.239426][ T5938] asix 4-1:0.0: probe with driver asix failed with error -71 [ 724.331786][ T5938] usb 4-1: USB disconnect, device number 56 [ 724.434302][ T5993] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 724.447615][ T5963] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 724.464940][ T5963] usb 6-1: USB disconnect, device number 43 [ 724.624137][ T5993] usb 7-1: device descriptor read/64, error -71 [ 724.864170][ T5993] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 725.008676][ T5993] usb 7-1: device descriptor read/64, error -71 [ 725.035875][ T5951] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 725.137051][ T5993] usb usb7-port1: attempt power cycle [ 725.203808][ T5951] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 725.223403][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.243593][ T5951] usb 4-1: Product: syz [ 725.253796][ T5951] usb 4-1: Manufacturer: syz [ 725.277065][ T5951] usb 4-1: SerialNumber: syz [ 725.284874][ T5951] usb 4-1: config 0 descriptor?? [ 725.503575][T15001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.513592][ T5993] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 725.562355][ T5993] usb 7-1: device descriptor read/8, error -71 [ 725.562652][T15001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.741249][ T5951] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 725.765096][ T5951] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 725.810000][ T5951] usb 4-1: USB disconnect, device number 57 [ 725.834795][ T5993] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 726.004863][ T5993] usb 7-1: device descriptor read/8, error -71 [ 726.197863][ T5993] usb usb7-port1: unable to enumerate USB device [ 728.620681][T15048] netlink: 'syz.3.2651': attribute type 5 has an invalid length. [ 728.690622][T15048] bridge0: port 3(macsec0) entered blocking state [ 728.706368][T15048] bridge0: port 3(macsec0) entered disabled state [ 728.722731][T15048] macsec0: entered allmulticast mode [ 728.779060][T15048] macsec0: entered promiscuous mode [ 738.492991][T15142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2675'. [ 739.764097][ T5951] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 739.932652][ T5951] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 739.942612][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.952522][ T5951] usb 7-1: Product: syz [ 739.958839][ T5951] usb 7-1: Manufacturer: syz [ 739.964547][ T5951] usb 7-1: SerialNumber: syz [ 740.404482][T15157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.454551][T15157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.563755][ T5951] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 740.598236][ T5951] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 740.608752][ T5951] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 740.766629][ T5951] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 741.177970][T15171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2681'. [ 741.187437][T15171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2681'. [ 741.272402][T15171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2681'. [ 741.285325][T15171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2681'. [ 741.556440][ T5963] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 741.727329][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 741.736766][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.781341][ T5963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 741.810344][ T5963] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 741.832951][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.912972][ T5963] usb 4-1: config 0 descriptor?? [ 741.976382][T15183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2685'. [ 741.986209][T15183] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2685'. [ 742.000535][T15171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2681'. [ 742.018337][T15183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2685'. [ 742.028750][T15171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2681'. [ 742.535481][ T5951] usb 7-1: USB disconnect, device number 40 [ 743.299728][T15190] loop7: detected capacity change from 2049 to 0 [ 743.974125][ T5938] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 744.184202][ T5938] usb 7-1: Using ep0 maxpacket: 16 [ 744.204144][ T5951] usb 4-1: USB disconnect, device number 58 [ 744.254820][ T5938] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 744.299269][ T5938] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 744.334333][ T5938] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 744.404968][ T5938] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 744.418962][ T5938] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 744.437632][ T5938] usb 7-1: config 0 has no interface number 0 [ 744.453757][ T5938] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 744.479306][ T5938] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 744.504886][ T5938] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 744.535494][ T5938] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 744.570238][ T5938] usb 7-1: config 0 interface 125 has no altsetting 0 [ 744.636862][ T5938] usb 7-1: config 0 interface 125 has no altsetting 2 [ 744.662997][ T5938] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 744.681144][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.703725][ T5938] usb 7-1: Product: syz [ 744.716820][ T5938] usb 7-1: Manufacturer: syz [ 744.727009][ T5938] usb 7-1: SerialNumber: syz [ 744.739816][ T5938] usb 7-1: config 0 descriptor?? [ 744.757549][ T5938] usb 7-1: selecting invalid altsetting 2 [ 745.441558][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.500488][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.514778][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.523357][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.539692][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.557459][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.603657][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.628704][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.664556][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.685964][ T5951] hid-generic 00A0:0006:0003.0026: unknown main item tag 0x0 [ 745.746415][ T5951] hid-generic 00A0:0006:0003.0026: hidraw0: HID v0.05 Device [syz1] on syz0 [ 745.756160][ T5993] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 745.894878][T15205] __nla_validate_parse: 1 callbacks suppressed [ 745.894891][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2691'. [ 745.973636][ T5938] usb 7-1: USB disconnect, device number 41 [ 746.394274][ T5963] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 746.421473][ T5993] usb 1-1: config 0 has no interfaces? [ 746.434114][ T5993] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 746.472958][ T30] audit: type=1326 audit(1758491913.956:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15226 comm="syz.5.2697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17c978ec29 code=0x0 [ 746.495229][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.525496][ T5993] usb 1-1: config 0 descriptor?? [ 746.578432][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.594125][ T5963] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 746.623760][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.675286][ T5963] usb 4-1: config 0 descriptor?? [ 746.694660][ T5963] pwc: Askey VC010 type 2 USB webcam detected. [ 746.898764][T15234] kvm: pic: non byte write [ 747.094230][ T5963] pwc: recv_control_msg error -32 req 02 val 2b00 [ 747.127807][ T5963] pwc: recv_control_msg error -32 req 02 val 2700 [ 747.147969][ T5963] pwc: recv_control_msg error -32 req 02 val 2c00 [ 747.173531][ T5963] pwc: recv_control_msg error -32 req 04 val 1000 [ 747.210851][ T5963] pwc: recv_control_msg error -32 req 04 val 1300 [ 747.237654][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.246724][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.278777][ T5963] pwc: recv_control_msg error -32 req 04 val 1400 [ 747.358931][ T5963] pwc: recv_control_msg error -32 req 02 val 2000 [ 747.386804][ T5963] pwc: recv_control_msg error -32 req 02 val 2100 [ 747.404076][ T5963] pwc: recv_control_msg error -32 req 04 val 1500 [ 747.411406][ T5963] pwc: recv_control_msg error -32 req 02 val 2500 [ 747.419426][ T5963] pwc: recv_control_msg error -32 req 02 val 2400 [ 747.428682][ T5963] pwc: recv_control_msg error -32 req 02 val 2600 [ 747.641889][ T5963] pwc: recv_control_msg error -71 req 02 val 2800 [ 747.655011][ T5963] pwc: recv_control_msg error -71 req 04 val 1100 [ 747.680410][ T5963] pwc: recv_control_msg error -71 req 04 val 1200 [ 747.708199][ T5963] pwc: Registered as video103. [ 747.739248][ T5963] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 747.822826][ T5963] usb 4-1: USB disconnect, device number 59 [ 748.191253][T15243] tipc: Enabled bearer , priority 0 [ 748.246810][T15243] syzkaller0: entered promiscuous mode [ 748.274710][T15243] syzkaller0: entered allmulticast mode [ 748.320900][T15243] tipc: Resetting bearer [ 748.389759][T15242] tipc: Resetting bearer [ 748.485733][ T5963] usb 1-1: USB disconnect, device number 59 [ 748.530180][T15242] tipc: Disabling bearer [ 750.294152][ T5963] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 750.396540][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 750.474205][ T5963] usb 6-1: Using ep0 maxpacket: 8 [ 750.577325][ T5963] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 750.586769][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.595038][ T5963] usb 6-1: Product: syz [ 750.604335][ T5963] usb 6-1: Manufacturer: syz [ 750.619006][ T5963] usb 6-1: SerialNumber: syz [ 750.642446][ T5963] usb 6-1: config 0 descriptor?? [ 750.913898][ T5963] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 751.086280][ T5993] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 751.264048][ T5993] usb 1-1: Using ep0 maxpacket: 32 [ 751.275947][ T5993] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.286710][ T5993] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 751.299663][ T5993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 751.312175][ T5993] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 751.321605][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.340881][ T5993] usb 1-1: config 0 descriptor?? [ 751.571659][T15278] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 751.663563][ T5993] usbhid 1-1:0.0: can't add hid device: -71 [ 751.670135][ T5993] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 751.702935][ T5993] usb 1-1: USB disconnect, device number 60 [ 752.336064][ T5963] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 752.390314][ T5963] usb 6-1: USB disconnect, device number 44 [ 753.457167][T15300] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 753.463704][T15300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 753.493434][T15300] vhci_hcd vhci_hcd.0: Device attached [ 753.594175][ T5993] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 753.674556][ T5951] vhci_hcd: vhci_device speed not set [ 753.755786][ T5993] usb 7-1: config 5 has an invalid interface number: 3 but max is 0 [ 753.781144][ T5951] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 753.795732][ T5993] usb 7-1: config 5 has no interface number 0 [ 753.813724][ T5993] usb 7-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 753.823148][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.848243][ T5993] usb 7-1: Product: syz [ 753.868962][ T5993] usb 7-1: Manufacturer: syz [ 753.891798][ T5993] usb 7-1: SerialNumber: syz [ 753.934199][ T5929] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 753.954688][ T5993] ftdi_sio 7-1:5.3: FTDI USB Serial Device converter detected [ 753.975849][ T5993] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 754.135862][ T5929] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 754.153357][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.214942][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2716'. [ 754.250661][ T5929] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 754.299592][T15296] macvtap1: entered promiscuous mode [ 754.311146][ T5929] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 754.339075][T15296] dummy0: entered promiscuous mode [ 754.376000][ T5929] usb 1-1: Manufacturer: syz [ 754.387085][T15296] macvtap1: entered allmulticast mode [ 754.464697][ T5929] usb 1-1: config 0 descriptor?? [ 754.545520][T15313] dummy0: left promiscuous mode [ 754.568012][ T5963] usb 7-1: USB disconnect, device number 42 [ 754.602271][ T5963] ftdi_sio 7-1:5.3: device disconnected [ 754.758408][ T5929] rc_core: IR keymap rc-hauppauge not found [ 754.814408][ T5929] Registered IR keymap rc-empty [ 754.845400][ T5929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 754.904504][ T5929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47 [ 755.014952][ T5929] usb 1-1: USB disconnect, device number 61 [ 755.048184][T15302] vhci_hcd: connection reset by peer [ 755.075063][ T7128] vhci_hcd: stop threads [ 755.086565][ T7128] vhci_hcd: release socket [ 755.119466][ T7128] vhci_hcd: disconnect device [ 755.349063][T15321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2721'. [ 755.422786][T15321] netlink: 'syz.3.2721': attribute type 4 has an invalid length. [ 755.437804][T15321] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2721'. [ 755.451319][T15321] wlan1: mtu less than device minimum [ 757.927013][T15348] tipc: Enabled bearer , priority 0 [ 757.956458][T15348] syzkaller0: entered promiscuous mode [ 757.962048][T15348] syzkaller0: entered allmulticast mode [ 758.047528][T15348] tipc: Resetting bearer [ 758.195126][T15347] tipc: Resetting bearer [ 758.294707][T15347] tipc: Disabling bearer [ 758.915833][ T5951] vhci_hcd: vhci_device speed not set [ 760.096354][T15378] program syz.3.2735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 762.021884][T15406] ptrace attach of "./syz-executor exec"[5886] was attempted by "./syz-executor exec"[15406] [ 762.082256][T15406] input: syz1 as /devices/virtual/input/input48 [ 762.980581][ T30] audit: type=1326 audit(1758491930.466:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.194037][ T30] audit: type=1326 audit(1758491930.466:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.279399][ T30] audit: type=1326 audit(1758491930.466:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.412487][ T30] audit: type=1326 audit(1758491930.466:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.534429][ T30] audit: type=1326 audit(1758491930.466:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.581110][ T30] audit: type=1326 audit(1758491930.466:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.717386][ T30] audit: type=1326 audit(1758491930.466:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.820978][ T30] audit: type=1326 audit(1758491930.466:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.847601][T15418] kvm: kvm [15417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3900000080 [ 763.889093][T15418] kvm: kvm [15417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x3800000000 [ 763.929647][ T30] audit: type=1326 audit(1758491930.486:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 763.930712][T15418] kvm: kvm [15417]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 763.983063][ T30] audit: type=1326 audit(1758491930.506:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15407 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 764.017721][T15418] kvm: kvm [15417]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3800000000 [ 764.844220][ T5951] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 765.392954][ T5951] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 765.407579][ T5951] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 765.436525][ T5951] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.457351][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.953413][T15459] gtp0: entered promiscuous mode [ 768.018139][T15459] gtp0: entered allmulticast mode [ 769.230828][ T5963] usb 1-1: USB disconnect, device number 62 [ 769.944305][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 772.026119][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 773.130351][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 773.130368][ T30] audit: type=1326 audit(1758491940.616:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 773.290267][ T30] audit: type=1326 audit(1758491940.666:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 773.382336][ T30] audit: type=1326 audit(1758491940.666:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 773.492219][ T30] audit: type=1326 audit(1758491940.686:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 773.514605][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.523359][ T30] audit: type=1326 audit(1758491940.686:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 773.545705][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.556485][T15527] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2768'. [ 773.571602][T15527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.587564][ T30] audit: type=1326 audit(1758491940.706:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 773.612383][ T30] audit: type=1326 audit(1758491940.706:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 773.637888][ T30] audit: type=1326 audit(1758491940.706:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f852ef8d590 code=0x7ffc0000 [ 773.660239][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.672059][ T30] audit: type=1326 audit(1758491940.706:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f852ef8d590 code=0x7ffc0000 [ 773.694423][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.703783][ T30] audit: type=1326 audit(1758491940.706:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852ef8ec29 code=0x7ffc0000 [ 776.199513][T15563] netlink: 'syz.6.2780': attribute type 1 has an invalid length. [ 776.220424][T15563] netlink: 'syz.6.2780': attribute type 1 has an invalid length. [ 776.279841][T15563] netlink: 'syz.6.2780': attribute type 1 has an invalid length. [ 777.576455][T15579] pim6reg: entered allmulticast mode [ 779.897793][T15599] netlink: 'syz.0.2788': attribute type 2 has an invalid length. [ 783.154195][T15632] program syz.3.2797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 784.623524][T15653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 785.020503][T15659] netlink: 'syz.5.2803': attribute type 10 has an invalid length. [ 785.104130][T15659] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 786.016281][T15663] kvm: kvm [15662]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000022 [ 786.052599][T15663] kvm: kvm [15662]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x100004022 [ 789.637895][T15702] tipc: Enabled bearer , priority 0 [ 789.645423][T15702] syzkaller0: entered promiscuous mode [ 789.650898][T15702] syzkaller0: entered allmulticast mode [ 789.818523][T15702] tipc: Resetting bearer [ 789.829976][T15701] tipc: Resetting bearer [ 789.990216][T15701] tipc: Disabling bearer [ 791.248977][T15726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2819'. [ 791.574171][ T5929] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 791.960845][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 792.124344][ T5929] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 792.166700][ T5929] usb 4-1: config 0 has no interface number 0 [ 792.187094][ T5929] usb 4-1: config 0 interface 184 has no altsetting 0 [ 792.269631][ T5929] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 792.287453][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.323083][ T5929] usb 4-1: Product: syz [ 792.330906][ T5929] usb 4-1: Manufacturer: syz [ 792.336496][ T5929] usb 4-1: SerialNumber: syz [ 792.348833][ T5929] usb 4-1: config 0 descriptor?? [ 792.432682][ T5929] smsc75xx v1.0.0 [ 792.440485][ T5929] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 792.461696][ T5929] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 794.320951][ T5929] usb 4-1: USB disconnect, device number 60 [ 796.469065][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2831'. [ 798.902411][T15791] kvm: kvm [15790]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x890000fdb1 [ 798.919790][T15791] kvm: kvm [15790]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x890000bdb1 [ 799.384380][ T5938] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 799.559399][ T5938] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 799.575325][ T5938] usb 1-1: config 8 has no interface number 0 [ 799.592789][ T5938] usb 1-1: config 8 interface 101 has no altsetting 0 [ 799.612340][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 799.655981][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.904456][T15797] syzkaller0: entered promiscuous mode [ 799.910150][T15797] syzkaller0: entered allmulticast mode [ 799.925847][T15797] tipc: Enabled bearer , priority 0 [ 799.939621][T15797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 799.970864][T15797] tipc: Resetting bearer [ 799.982655][T15796] tipc: Resetting bearer [ 800.004286][T15796] tipc: Disabling bearer [ 800.051721][ T5938] usb 1-1: string descriptor 0 read error: -71 [ 800.078354][ T5938] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 800.092703][ T5938] gspca_sunplus: reg_w_riv err -71 [ 800.105688][ T5938] sunplus 1-1:8.101: probe with driver sunplus failed with error -71 [ 800.128792][ T5938] usb 1-1: USB disconnect, device number 63 [ 808.379572][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2861'. [ 808.421524][T15899] veth0: entered promiscuous mode [ 808.453858][T15899] veth0: left promiscuous mode [ 808.673217][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.679561][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.077134][T15919] overlayfs: missing 'lowerdir' [ 812.044446][ T5938] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 812.064824][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 812.076420][T15957] ip6tnl2: entered promiscuous mode [ 812.081664][T15957] ip6tnl2: entered allmulticast mode [ 812.214224][ T5938] usb 6-1: device descriptor read/64, error -32 [ 812.454172][ T5938] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 812.462145][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 812.604367][ T5938] usb 6-1: device descriptor read/64, error -32 [ 812.714742][ T5938] usb usb6-port1: attempt power cycle [ 813.075005][ T5938] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 813.094939][ C1] raw-gadget.0 gadget.5: failed to queue control event [ 813.101919][ T5938] usb 6-1: device descriptor read/8, error -32 [ 813.229106][ T5938] raw-gadget.0 gadget.5: failed to queue suspend event [ 813.236663][ T5938] raw-gadget.0 gadget.5: failed to queue reset event [ 813.314721][ T5938] raw-gadget.0 gadget.5: failed to queue resume event [ 813.395050][ T5938] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 813.427562][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 813.437423][ T5938] usb 6-1: device descriptor read/8, error -32 [ 813.566815][ T5938] raw-gadget.0 gadget.5: failed to queue suspend event [ 813.593665][ T5938] usb usb6-port1: unable to enumerate USB device [ 814.574910][T15937] raw-gadget.0 gadget.5: failed to queue disconnect event [ 816.986251][T15997] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 820.254160][ T5938] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 820.416683][ T5938] usb 4-1: not running at top speed; connect to a high speed hub [ 820.433322][ T5938] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 820.462675][ T5938] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 820.482963][ T5938] usb 4-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 820.510982][ T5938] usb 4-1: config 1 interface 0 has no altsetting 0 [ 820.522432][ T5938] usb 4-1: string descriptor 0 read error: -22 [ 820.531209][ T5938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.541861][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.655498][T16037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.697809][T16037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.714116][ T5929] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 820.754045][T16037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 820.824366][ T5938] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 820.927186][ T5929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 820.938316][ T5929] usb 6-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 820.951033][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 820.969948][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.002880][T16037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.024511][T16037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.114188][ T5938] usb 4-1: USB disconnect, device number 61 [ 821.372407][ T5929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 821.380417][ T5929] usb 6-1: invalid MIDI out EP 0 [ 821.458023][ T5929] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 821.949375][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 821.949387][ T30] audit: type=1326 audit(1758491989.426:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.090623][ T30] audit: type=1326 audit(1758491989.426:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.120578][ T30] audit: type=1326 audit(1758491989.426:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.142975][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.169422][ T30] audit: type=1326 audit(1758491989.426:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.191796][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.209878][ T30] audit: type=1326 audit(1758491989.426:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.252938][ T30] audit: type=1326 audit(1758491989.426:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.275317][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.352772][ T30] audit: type=1326 audit(1758491989.426:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.375149][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.439155][ T30] audit: type=1326 audit(1758491989.426:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70c558d590 code=0x7ffc0000 [ 822.512257][ T30] audit: type=1326 audit(1758491989.426:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 822.643672][ T30] audit: type=1326 audit(1758491989.426:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16048 comm="syz.3.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 823.434114][ T5938] usb 6-1: USB disconnect, device number 49 [ 824.342414][T16077] bond0: (slave wlan1): Releasing backup interface [ 824.352356][T16077] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 824.362976][T16077] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 824.394411][ T5963] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 824.452071][T16077] bond2: (slave ip6gretap1): Releasing backup interface [ 824.469884][T16077] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 8e:54:59:6d:d2:7c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 824.606271][T16077] bond2: (slave veth3): Releasing backup interface [ 824.671561][ T5963] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 824.774506][ T5963] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.783702][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.802249][ T5963] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.830055][ T5963] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 824.865033][T15315] udevd[15315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.250915][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 825.331982][T16085] delete_channel: no stack [ 825.341318][ T5963] usb 6-1: USB disconnect, device number 50 [ 828.294063][ T5929] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 828.456156][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.468173][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.481092][ T5929] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 828.501381][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.527517][ T5929] usb 1-1: config 0 descriptor?? [ 830.214142][ T5963] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 830.474240][ T5963] usb 6-1: Using ep0 maxpacket: 32 [ 830.511568][ T5963] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 830.543258][ T5963] usb 6-1: config 0 has no interface number 0 [ 830.553448][ T5963] usb 6-1: config 0 interface 184 has no altsetting 0 [ 830.636677][ T5963] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 830.670388][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.688703][ T5963] usb 6-1: Product: syz [ 830.698744][ T5963] usb 6-1: Manufacturer: syz [ 830.710669][ T5963] usb 6-1: SerialNumber: syz [ 830.757993][ T5963] usb 6-1: config 0 descriptor?? [ 830.862414][ T5963] smsc75xx v1.0.0 [ 830.893032][ T5963] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 830.934030][ T5963] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 831.710949][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 831.718292][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 831.733495][ T5929] usb 1-1: USB disconnect, device number 64 [ 832.534052][ T5929] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 832.684066][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 832.691078][ T5929] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 832.700577][ T5929] usb 1-1: config 0 has no interface number 0 [ 832.707689][ T5929] usb 1-1: config 0 interface 161 has no altsetting 0 [ 832.718594][ T5929] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 832.730408][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.738940][ T5929] usb 1-1: Product: syz [ 832.743234][ T5929] usb 1-1: Manufacturer: syz [ 832.748984][ T5929] usb 1-1: SerialNumber: syz [ 832.757891][ T5929] usb 1-1: config 0 descriptor?? [ 832.774698][ T5929] ums-jumpshot 1-1:0.161: USB Mass Storage device detected [ 832.791448][ T5929] ums-jumpshot 1-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 833.314474][T16163] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2923'. [ 833.363155][ T5929] usb 6-1: USB disconnect, device number 51 [ 833.442642][T16163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.817472][ T5963] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 834.948397][ T5938] usb 1-1: USB disconnect, device number 65 [ 834.986748][ T5963] usb 6-1: Using ep0 maxpacket: 32 [ 834.997637][ T5963] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.014113][ T5963] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 835.040123][ T5963] usb 6-1: config 0 interface 0 has no altsetting 0 [ 835.060329][ T5963] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 835.074197][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.088489][ T5963] usb 6-1: config 0 descriptor?? [ 835.894252][ T5938] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 836.077305][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 836.084964][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 836.099467][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.117206][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 836.129448][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 836.146649][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 836.175406][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 836.186358][T14997] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 836.197169][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.209665][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 836.223988][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 836.246486][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 836.257107][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 836.281823][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.295252][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 836.309947][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 836.341029][ T5938] usb 7-1: string descriptor 0 read error: -22 [ 836.353368][ T5938] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 836.363132][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.418746][ T5938] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 837.697412][ T5963] usbhid 6-1:0.0: can't add hid device: -71 [ 837.724305][ T5929] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 837.739825][ T5963] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 837.790087][ T5963] usb 6-1: USB disconnect, device number 52 [ 837.935347][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 837.960823][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 838.018330][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 838.062288][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 838.108280][ T5929] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 838.152484][ T5929] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 838.196582][ T5929] usb 4-1: Product: syz [ 838.219000][ T5929] usb 4-1: Manufacturer: syz [ 838.231999][ T5929] usb 4-1: SerialNumber: syz [ 838.284181][ T5929] usb 4-1: config 0 descriptor?? [ 838.303106][ T5929] smsusb:smsusb_probe: board id=2, interface number 0 [ 838.333303][ T5929] smsusb:smsusb_probe: Device initialized with return code -19 [ 839.150836][T16212] fuse: root generation should be zero [ 839.703288][T14997] usb 7-1: USB disconnect, device number 43 [ 840.423484][T14997] usb 4-1: USB disconnect, device number 62 [ 843.874280][ T5929] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 844.049651][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.072778][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.082851][ T5929] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 844.097400][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.122505][ T5929] usb 6-1: config 0 descriptor?? [ 846.112101][ T5929] usbhid 6-1:0.0: can't add hid device: -71 [ 846.118298][ T5929] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 846.137930][ T5929] usb 6-1: USB disconnect, device number 53 [ 848.139186][T16296] rtc_cmos 00:00: Alarms can be up to one day in the future [ 848.379839][T14997] rtc_cmos 00:00: Alarms can be up to one day in the future [ 848.387434][T14997] rtc_cmos 00:00: Alarms can be up to one day in the future [ 848.400197][T14997] rtc_cmos 00:00: Alarms can be up to one day in the future [ 848.413104][T14997] rtc_cmos 00:00: Alarms can be up to one day in the future [ 848.421673][T14997] rtc rtc0: __rtc_set_alarm: err=-22 [ 848.532478][T16305] netlink: 'syz.0.2960': attribute type 12 has an invalid length. [ 849.324140][T14997] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 849.484220][T14997] usb 4-1: Using ep0 maxpacket: 8 [ 849.498794][T14997] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 849.515416][T14997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.526101][T14997] usb 4-1: Product: syz [ 849.532542][T14997] usb 4-1: Manufacturer: syz [ 849.541958][T14997] usb 4-1: SerialNumber: syz [ 849.552007][T14997] usb 4-1: config 0 descriptor?? [ 849.664039][ T5963] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 849.844131][ T5963] usb 6-1: Using ep0 maxpacket: 32 [ 849.849725][T14997] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 849.862853][ T5963] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 849.877810][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.900725][ T5963] usb 6-1: config 0 descriptor?? [ 850.207919][ T5963] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 850.228459][ T5963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.249531][ T5963] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 850.258748][ T5963] usb 6-1: media controller created [ 850.291601][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.462997][ T5963] az6027: usb out operation failed. (-71) [ 850.479457][ T5963] az6027: usb out operation failed. (-71) [ 850.486076][ T5963] stb0899_attach: Driver disabled by Kconfig [ 850.492178][ T5963] az6027: no front-end attached [ 850.492178][ T5963] [ 850.522182][ T5963] az6027: usb out operation failed. (-71) [ 850.532804][ T5963] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 850.561332][ T5963] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 850.593398][ T5963] dvb-usb: schedule remote query interval to 400 msecs. [ 850.610867][ T5963] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 850.621586][ T5963] usb 6-1: USB disconnect, device number 54 [ 850.693836][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.733987][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.843804][ T5963] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 851.286539][T14997] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 851.318841][T14997] usb 4-1: USB disconnect, device number 63 [ 853.529419][T16342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'. [ 853.694053][ T5929] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 853.864981][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 853.892442][ T5929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.904014][ T5929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.918467][ T5929] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 853.931069][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.942207][ T5929] usb 6-1: Product: syz [ 853.947810][ T5929] usb 6-1: Manufacturer: syz [ 853.952712][ T5929] usb 6-1: SerialNumber: syz [ 854.173400][ T5929] usb 6-1: 0:2 : does not exist [ 854.180050][ T5929] usb 6-1: unit 6 not found! [ 854.212822][ T5929] usb 6-1: USB disconnect, device number 55 [ 854.364144][ T5951] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 854.534058][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 854.556326][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 854.556342][ T30] audit: type=1326 audit(1758492022.046:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.594170][ T30] audit: type=1326 audit(1758492022.076:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.617250][ T30] audit: type=1326 audit(1758492022.076:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.640775][ T30] audit: type=1326 audit(1758492022.076:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.674341][ T30] audit: type=1326 audit(1758492022.076:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.704255][ T30] audit: type=1326 audit(1758492022.076:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.734027][ T30] audit: type=1326 audit(1758492022.076:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.772147][ T5951] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 854.787017][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.820867][ T5951] usb 1-1: config 0 has no interfaces? [ 854.830375][ T5951] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 854.842712][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.852517][ T5951] usb 1-1: Product: syz [ 854.870948][ T30] audit: type=1326 audit(1758492022.076:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 854.903761][ T5951] usb 1-1: Manufacturer: syz [ 854.913755][ T5951] usb 1-1: SerialNumber: syz [ 854.927016][ T5951] usb 1-1: config 0 descriptor?? [ 854.972520][ T30] audit: type=1326 audit(1758492022.076:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70c558d590 code=0x7ffc0000 [ 855.027325][ T30] audit: type=1326 audit(1758492022.076:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16366 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 856.419586][T16385] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 857.490406][T14997] usb 1-1: USB disconnect, device number 67 [ 858.204069][T14997] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 858.594126][T14997] usb 4-1: Using ep0 maxpacket: 32 [ 858.826552][T14997] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 858.845646][T14997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.865435][T14997] usb 4-1: config 0 has no interface number 0 [ 858.871689][T14997] usb 4-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.907632][T14997] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 858.938542][T14997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.974066][T14997] usb 4-1: Product: syz [ 858.999263][T14997] usb 4-1: Manufacturer: syz [ 859.023351][T14997] usb 4-1: SerialNumber: syz [ 859.084100][T14997] usb 4-1: config 0 descriptor?? [ 859.969013][T16428] netlink: 'syz.5.2987': attribute type 15 has an invalid length. [ 859.980573][T16428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2987'. [ 861.674061][ T5963] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 861.834124][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 861.913468][T14997] usb 4-1: USB disconnect, device number 64 [ 861.921441][ T5963] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 861.932699][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.946775][T15315] udevd[15315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.988192][ T5963] usb 1-1: Product: syz [ 862.046797][ T5963] usb 1-1: Manufacturer: syz [ 862.068668][ T5963] usb 1-1: SerialNumber: syz [ 862.081020][ T5963] usb 1-1: config 0 descriptor?? [ 862.362097][ T5963] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 863.542255][T16449] usb usb8: usbfs: process 16449 (syz.3.2993) did not claim interface 0 before use [ 864.121144][ T5963] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 864.135668][ T5963] usb 1-1: USB disconnect, device number 68 [ 865.284105][ T5929] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 865.809598][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 866.275013][ T5929] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 866.283273][ T5929] usb 1-1: config 0 has no interface number 0 [ 866.290653][ T5929] usb 1-1: config 0 interface 184 has no altsetting 0 [ 866.306130][ T5929] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 866.317579][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.447586][ T5929] usb 1-1: Product: syz [ 866.474059][ T5929] usb 1-1: Manufacturer: syz [ 866.486107][ T5929] usb 1-1: SerialNumber: syz [ 866.528977][ T5929] usb 1-1: config 0 descriptor?? [ 866.631655][ T5929] smsc75xx v1.0.0 [ 866.637756][ T5929] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 866.652218][ T5929] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 866.976366][T16480] netlink: 'syz.5.3000': attribute type 12 has an invalid length. [ 867.939221][T16491] fuse: Bad value for 'fd' [ 868.761403][T16499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.992385][ T5963] usb 1-1: USB disconnect, device number 69 [ 869.973610][T16516] netlink: 'syz.6.3008': attribute type 10 has an invalid length. [ 870.023602][T16516] dummy0: left allmulticast mode [ 870.108659][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.115150][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.254032][ T5929] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 872.413419][ T5929] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 872.453352][ T5929] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 872.484128][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.532509][ T5929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.653522][ T5929] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 873.143528][ T5963] usb 7-1: USB disconnect, device number 44 [ 873.180539][T16532] delete_channel: no stack [ 874.504065][ T5929] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 874.707297][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.718548][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.736424][ T5929] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 874.762040][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3018'. [ 874.817410][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.845353][ T5929] usb 4-1: config 0 descriptor?? [ 877.417760][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 877.424524][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 877.444505][ T5929] usb 4-1: USB disconnect, device number 65 [ 881.388783][T16616] ptrace attach of "./syz-executor exec"[9431] was attempted by "./syz-executor exec"[16616] [ 881.608694][T16618] ptrace attach of "./syz-executor exec"[5883] was attempted by "./syz-executor exec"[16618] [ 883.601782][T16643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.459087][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3041'. [ 884.998240][ T1312] bond0: (slave netdevsim0): Releasing backup interface [ 885.319475][ T1312] macvlan2: left allmulticast mode [ 885.324864][ T1312] team0: left allmulticast mode [ 885.333156][ T1312] team_slave_0: left allmulticast mode [ 885.390592][ T1312] team_slave_1: left allmulticast mode [ 885.419999][ T1312] macvlan2: left promiscuous mode [ 885.435526][ T1312] bridge0: port 4(macvlan2) entered disabled state [ 885.458878][ T1312] vxlan0: left allmulticast mode [ 885.465511][ T1312] vxlan0: left promiscuous mode [ 885.482200][ T1312] bridge0: port 3(vxlan0) entered disabled state [ 885.509729][ T1312] bridge_slave_1: left allmulticast mode [ 885.521144][ T1312] bridge_slave_1: left promiscuous mode [ 885.539298][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.572405][ T1312] bridge_slave_0: left allmulticast mode [ 885.586803][ T1312] bridge_slave_0: left promiscuous mode [ 885.609608][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.950155][T16670] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.961118][T16670] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.971459][T16670] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.981810][T16670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.989525][T16670] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 886.194858][ T1312] bond1 (unregistering): (slave gretap1): Releasing active interface [ 886.205734][ T1312] gretap1 (unregistering): left allmulticast mode [ 886.262464][ T1312] bond3 (unregistering): (slave gretap2): Releasing active interface [ 886.392731][ T5963] hid_parser_main: 4 callbacks suppressed [ 886.392750][ T5963] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 886.474908][ T5963] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 887.660394][ T1312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.714875][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.764571][ T1312] bond0 (unregistering): Released all slaves [ 887.955781][ T1312] bond1 (unregistering): Released all slaves [ 888.118878][ T1312] bond2 (unregistering): Released all slaves [ 888.134492][ T5867] Bluetooth: hci1: command tx timeout [ 888.212095][ T1312] bond3 (unregistering): Released all slaves [ 888.506569][ T1312] : left promiscuous mode [ 888.750279][ T1312] tipc: Disabling bearer [ 888.776369][ T1312] tipc: Left network mode [ 889.241110][ T1312] hsr_slave_0: left promiscuous mode [ 889.286799][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.401840][ T1312] team0: left promiscuous mode [ 889.454423][ T1312] team_slave_0: left promiscuous mode [ 889.462767][ T1312] team_slave_1: left promiscuous mode [ 890.184228][ T5867] Bluetooth: hci1: command tx timeout [ 890.259174][ T1312] team0 (unregistering): Port device team_slave_1 removed [ 890.445512][ T1312] team0 (unregistering): Port device team_slave_0 removed [ 890.603654][T16741] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 892.018990][T16741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.038725][T16741] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 892.216423][T16673] chnl_net:caif_netlink_parms(): no params data found [ 892.265101][ T5867] Bluetooth: hci1: command tx timeout [ 893.149973][T16673] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.194170][T16673] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.201431][T16673] bridge_slave_0: entered allmulticast mode [ 893.281635][T16673] bridge_slave_0: entered promiscuous mode [ 893.337464][T16673] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.352896][T16673] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.360562][T16673] bridge_slave_1: entered allmulticast mode [ 893.381787][T16673] bridge_slave_1: entered promiscuous mode [ 893.435942][ T1312] IPVS: stop unused estimator thread 0... [ 893.509144][T16673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.556708][T16673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.643663][T16673] team0: Port device team_slave_0 added [ 893.656491][T16673] team0: Port device team_slave_1 added [ 893.761514][T16673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.769481][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.826310][T16673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.848675][T16673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.868313][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.905868][T16673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.076844][T16673] hsr_slave_0: entered promiscuous mode [ 894.088748][T16673] hsr_slave_1: entered promiscuous mode [ 894.344193][ T5867] Bluetooth: hci1: command tx timeout [ 895.354098][ T5951] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 895.503429][T16673] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 895.570813][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.583423][T16673] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 895.606454][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.621332][ T5951] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 895.643291][T16673] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 895.672424][T16673] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 895.702762][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.735255][ T5951] usb 7-1: config 0 descriptor?? [ 895.767440][T16814] binder: 16812:16814 unknown command 0 [ 895.778773][T16814] binder: 16812:16814 ioctl c0306201 200000000080 returned -22 [ 896.019337][T16673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.084144][ T5929] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 896.095614][T16673] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.198411][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.205585][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.251473][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.258626][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.266636][ T5929] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 896.295615][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.313798][ T5929] usb 4-1: Product: syz [ 896.344270][ T5929] usb 4-1: Manufacturer: syz [ 896.352453][ T5929] usb 4-1: SerialNumber: syz [ 896.553165][T16673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.625973][T16673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.718551][T16673] veth0_vlan: entered promiscuous mode [ 896.739031][T16673] veth1_vlan: entered promiscuous mode [ 896.813280][T16673] veth0_macvtap: entered promiscuous mode [ 896.831971][T16673] veth1_macvtap: entered promiscuous mode [ 896.886637][T16673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.918577][T16673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.941120][ T1312] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.970904][ T1312] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.026137][ T1312] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.047925][ T1312] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.098237][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.116598][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.223776][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.257830][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.293257][ T5929] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 897.324165][ T5929] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 897.345651][ T5929] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 897.376952][ T5929] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 897.747158][T16849] netlink: 'syz.0.3063': attribute type 10 has an invalid length. [ 897.966959][T16849] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 897.995346][T16849] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 898.139662][ T5951] usbhid 7-1:0.0: can't add hid device: -71 [ 898.154448][ T5951] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 898.182238][ T5951] usb 7-1: USB disconnect, device number 45 [ 898.790475][ T5951] usb 4-1: USB disconnect, device number 66 [ 900.927934][T16907] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 902.426939][ T5951] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 902.680384][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 902.743277][ T5951] usb 4-1: config 0 has no interfaces? [ 902.773287][ T5951] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 902.843999][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.894503][ T5951] usb 4-1: config 0 descriptor?? [ 903.503986][ T5963] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 903.654046][ T5963] usb 6-1: Using ep0 maxpacket: 32 [ 903.686249][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.696859][ T5963] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 903.742324][ T5963] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 903.751609][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.770126][ T5963] usb 6-1: Product: syz [ 903.783698][ T5963] usb 6-1: Manufacturer: syz [ 903.791794][ T5963] usb 6-1: SerialNumber: syz [ 903.798633][ T5963] usb 6-1: config 0 descriptor?? [ 905.301863][ T5951] usb 4-1: USB disconnect, device number 67 [ 905.804020][ T5951] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 906.048216][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 906.088830][ T5951] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 906.157380][ T5951] usb 4-1: config 2 has no interface number 0 [ 906.174124][ T5951] usb 4-1: config 2 interface 31 has no altsetting 0 [ 906.372260][ T5993] usb 6-1: USB disconnect, device number 56 [ 906.407898][ T5951] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 906.417228][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.427068][ T5951] usb 4-1: Product: syz [ 906.431426][ T5951] usb 4-1: Manufacturer: syz [ 906.446469][ T5951] usb 4-1: SerialNumber: syz [ 906.477428][ T5951] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 907.494190][ T5963] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 907.644083][ T5963] usb 1-1: device descriptor read/64, error -71 [ 907.991679][ T5963] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 908.144575][ T5963] usb 1-1: device descriptor read/64, error -71 [ 908.254580][ T5963] usb usb1-port1: attempt power cycle [ 908.606291][ T5963] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 908.634890][ T5963] usb 1-1: device descriptor read/8, error -71 [ 908.874146][ T5963] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 908.906651][ T5963] usb 1-1: device descriptor read/8, error -71 [ 909.026642][ T5963] usb usb1-port1: unable to enumerate USB device [ 909.419776][ T5938] usb 4-1: USB disconnect, device number 68 [ 910.329095][T17011] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 910.335644][T17011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 910.348995][T17011] vhci_hcd vhci_hcd.0: Device attached [ 910.402162][T17011] netdevsim netdevsim0: Direct firmware load for x failed with error -2 [ 910.411371][T17011] netdevsim netdevsim0: Falling back to sysfs fallback for: x [ 910.644426][ T5963] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 910.782089][T17013] vhci_hcd: connection reset by peer [ 910.795903][ T1312] vhci_hcd: stop threads [ 910.808639][ T1312] vhci_hcd: release socket [ 910.832441][ T1312] vhci_hcd: disconnect device [ 911.694069][ T5938] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 911.849268][ T5938] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 911.868443][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.893608][ T5938] usb 7-1: config 0 descriptor?? [ 911.922266][ T5938] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 912.152345][T17024] program syz.6.3093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.175769][T17024] netlink: 'syz.6.3093': attribute type 11 has an invalid length. [ 912.587140][T17035] netlink: 'syz.0.3094': attribute type 2 has an invalid length. [ 912.609244][T17035] : entered promiscuous mode [ 912.688614][ T5938] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 912.700078][ T5938] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 912.990216][ T5938] usb 7-1: USB disconnect, device number 46 [ 913.503398][T17040] tipc: Started in network mode [ 913.510513][T17040] tipc: Node identity 86eecd307dcd, cluster identity 4711 [ 913.519115][T17040] tipc: Enabled bearer , priority 0 [ 913.526941][T17040] syzkaller0: entered promiscuous mode [ 913.532614][T17040] syzkaller0: entered allmulticast mode [ 913.562320][T17040] tipc: Resetting bearer [ 913.571470][T17039] tipc: Resetting bearer [ 913.626766][T17039] tipc: Disabling bearer [ 914.980314][T17066] fuse: Bad value for 'fd' [ 915.774699][ T5963] vhci_hcd: vhci_device speed not set [ 916.264056][ T5993] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 916.730900][ T5993] usb 4-1: config 0 has no interfaces? [ 916.741910][ T5993] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 916.755485][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.765241][ T5993] usb 4-1: Product: syz [ 916.770189][ T5993] usb 4-1: Manufacturer: syz [ 916.776903][ T5993] usb 4-1: SerialNumber: syz [ 916.791213][ T5993] usb 4-1: config 0 descriptor?? [ 917.203243][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3106'. [ 917.287725][T17082] vlan2: entered allmulticast mode [ 917.293193][T17082] vlan0: entered allmulticast mode [ 917.300888][T17082] veth0_vlan: entered allmulticast mode [ 917.434233][ T5993] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 917.594395][ T5993] usb 7-1: Using ep0 maxpacket: 32 [ 917.605741][ T5993] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 917.648624][ T5993] usb 7-1: config 0 has no interface number 0 [ 917.657398][ T5993] usb 7-1: config 0 interface 184 has no altsetting 0 [ 917.677960][ T5993] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 917.694069][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.718570][ T5993] usb 7-1: Product: syz [ 917.726296][ T5993] usb 7-1: Manufacturer: syz [ 917.737346][ T5993] usb 7-1: SerialNumber: syz [ 917.758914][ T5993] usb 7-1: config 0 descriptor?? [ 917.805130][ T5993] smsc75xx v1.0.0 [ 918.318337][ T5993] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 918.359961][ T5993] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 918.413052][ T5993] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 918.443171][ T5993] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 918.467334][ T5993] usb 7-1: USB disconnect, device number 47 [ 919.136782][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 919.136796][ T30] audit: type=1326 audit(1758492086.626:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.168843][ T30] audit: type=1326 audit(1758492086.656:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.192976][ T30] audit: type=1326 audit(1758492086.656:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.217037][ T30] audit: type=1326 audit(1758492086.656:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.244372][ T30] audit: type=1326 audit(1758492086.656:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.271556][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3111'. [ 919.281119][ T30] audit: type=1326 audit(1758492086.656:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.308676][ T30] audit: type=1326 audit(1758492086.656:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.337379][ T30] audit: type=1326 audit(1758492086.656:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.363018][ T30] audit: type=1326 audit(1758492086.816:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 919.388615][ T30] audit: type=1326 audit(1758492086.826:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.6.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486f78ec29 code=0x7ffc0000 [ 920.391103][ T5963] usb 4-1: USB disconnect, device number 69 [ 920.506169][T17106] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 920.551195][T17108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3114'. [ 922.091575][T17125] binder: 17119:17125 ioctl 4018620d 0 returned -22 [ 923.464450][ T5963] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 923.658800][ T5963] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 923.676416][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.712689][ T5963] usb 6-1: Product: syz [ 923.736754][ T5963] usb 6-1: Manufacturer: syz [ 923.757981][ T5963] usb 6-1: SerialNumber: syz [ 923.786224][ T5963] usb 6-1: config 0 descriptor?? [ 924.241306][ T5963] airspy 6-1:0.0: Board ID: 00 [ 924.256174][ T5963] airspy 6-1:0.0: Firmware version: [ 924.908143][T17150] input: syz1 as /devices/virtual/input/input51 [ 924.957849][T17150] program syz.3.3126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 925.206030][ T5963] airspy 6-1:0.0: usb_control_msg() failed -71 request 0e [ 925.246549][ T5963] airspy 6-1:0.0: Registered as swradio24 [ 925.259931][ T5963] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 925.344513][ T5963] usb 6-1: USB disconnect, device number 57 [ 927.164064][ T5963] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 927.314309][ T5963] usb 7-1: Using ep0 maxpacket: 8 [ 927.327032][ T5963] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 927.363813][ T5963] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 927.381498][ T5963] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 927.412598][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 927.412603][ T5963] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 927.412617][ T30] audit: type=1400 audit(1758492094.896:521): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17178 comm="syz.0.3136" [ 927.539754][ T5963] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.539791][ T5963] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 927.539803][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.944101][ T5963] usb 7-1: GET_CAPABILITIES returned 0 [ 927.949682][ T5963] usbtmc 7-1:16.0: can't read capabilities [ 928.195722][T17190] No buffer was provided with the request [ 928.214872][ T5963] usb 7-1: USB disconnect, device number 48 [ 928.236982][T17190] trusted_key: encrypted_key: insufficient parameters specified [ 929.344073][ T5938] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 929.496356][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 929.509714][ T5938] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.524033][ T5993] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 929.528792][ T5938] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.541892][ T5938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 929.556504][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 929.566012][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.594227][ T5938] usb 1-1: config 0 descriptor?? [ 929.704115][ T5993] usb 7-1: Using ep0 maxpacket: 16 [ 929.712876][ T5993] usb 7-1: config 0 has an invalid interface number: 115 but max is 0 [ 929.732868][ T5993] usb 7-1: config 0 has no interface number 0 [ 929.744124][ T5993] usb 7-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 929.768996][ T5993] usb 7-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 929.812139][ T5993] usb 7-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 929.846748][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.873222][ T5993] usb 7-1: Product: syz [ 929.887491][ T5993] usb 7-1: Manufacturer: syz [ 929.899493][ T5993] usb 7-1: SerialNumber: syz [ 929.920540][ T5993] usb 7-1: config 0 descriptor?? [ 930.242222][T17201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 930.289066][ T5938] usb 1-1: USB disconnect, device number 74 [ 931.236296][ T5993] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 931.423962][ T5993] usb 4-1: Using ep0 maxpacket: 8 [ 931.442052][ T5993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.493120][ T5993] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 931.518619][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.548713][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.555270][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.621429][ T5993] usb 4-1: config 0 descriptor?? [ 932.105112][T17224] could not allocate digest TFM handle poly1305-simd [ 932.346029][ T5993] usb 7-1: USB disconnect, device number 49 [ 932.569429][T17238] netlink: 'syz.5.3149': attribute type 2 has an invalid length. [ 932.774029][ T5993] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 932.931936][ T5993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.040829][ T5993] usb 7-1: config 0 has no interfaces? [ 933.078728][ T30] audit: type=1326 audit(1758492100.566:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17247 comm="syz.0.3152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f852ef8ec29 code=0x0 [ 933.104056][ T5993] usb 7-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 933.169719][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.193297][ T5993] usb 7-1: config 0 descriptor?? [ 934.469392][T17265] netlink: 'syz.5.3156': attribute type 1 has an invalid length. [ 934.521391][T17265] bond1: entered promiscuous mode [ 934.533348][T17265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 934.626726][T17267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 934.644947][T17267] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 934.659629][T17267] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 934.691846][T17267] bond1: (slave ip6gre1): making interface the new active one [ 934.703211][T17267] ip6gre1: entered promiscuous mode [ 934.724633][T17267] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 934.911584][T14997] usb 4-1: USB disconnect, device number 70 [ 935.658203][T14997] usb 7-1: USB disconnect, device number 50 [ 938.268134][T17308] syzkaller1: entered promiscuous mode [ 938.359125][T17308] syzkaller1: entered allmulticast mode [ 938.764040][ T5929] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 938.944376][ T5929] usb 7-1: device descriptor read/64, error -71 [ 939.094030][ T5993] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 939.184214][ T5929] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 939.411120][ T5929] usb 7-1: device descriptor read/64, error -71 [ 939.518899][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.541849][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.574271][ T5929] usb usb7-port1: attempt power cycle [ 939.599226][T17329] netlink: 'syz.3.3170': attribute type 12 has an invalid length. [ 939.634263][ T5993] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 939.643349][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.743935][ T5993] usb 6-1: config 0 descriptor?? [ 940.003988][ T5929] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 940.024799][ T5929] usb 7-1: device descriptor read/8, error -71 [ 940.274031][ T5929] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 940.340612][ T5929] usb 7-1: device descriptor read/8, error -71 [ 940.465679][ T5929] usb usb7-port1: unable to enumerate USB device [ 941.724327][ T5993] usbhid 6-1:0.0: can't add hid device: -71 [ 941.730364][ T5993] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 941.879558][ T5993] usb 6-1: USB disconnect, device number 58 [ 942.383984][T14997] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 942.572612][T14997] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 942.704682][T14997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 942.726111][T14997] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 942.762345][T14997] usb 6-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 942.781764][T14997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.879321][T14997] usb 6-1: config 0 descriptor?? [ 942.895773][T17348] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 943.161475][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3174'. [ 944.764375][ T5951] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 944.964062][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 945.187594][ T5951] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 945.234754][T14997] usbhid 6-1:0.0: can't add hid device: -71 [ 945.247136][T14997] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 945.269564][T14997] usb 6-1: USB disconnect, device number 59 [ 945.289413][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.454219][ T5951] usb 4-1: config 0 has no interfaces? [ 945.502143][ T5951] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 945.542804][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.561440][ T5951] usb 4-1: Product: syz [ 945.570157][ T5951] usb 4-1: Manufacturer: syz [ 945.608038][ T5951] usb 4-1: SerialNumber: syz [ 945.625498][ T5951] usb 4-1: config 0 descriptor?? [ 946.181956][T17377] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 946.856765][T17383] netlink: 'syz.5.3181': attribute type 10 has an invalid length. [ 946.891644][T17383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.922301][T17383] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 947.933720][ T5963] usb 4-1: USB disconnect, device number 71 [ 950.274593][T17411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 950.281137][T17411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 950.297580][T17411] vhci_hcd vhci_hcd.0: Device attached [ 950.338341][T17412] vhci_hcd: connection closed [ 950.339761][ T7128] vhci_hcd: stop threads [ 950.349114][ T7128] vhci_hcd: release socket [ 950.355004][ T7128] vhci_hcd: disconnect device [ 950.753524][T17419] random: crng reseeded on system resumption [ 951.551306][ T5993] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 952.576779][ T5993] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 952.631439][ T5993] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 952.661767][ T5993] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 952.673086][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.810744][T17430] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 952.846042][ T5993] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 953.168748][ T5993] usb 4-1: USB disconnect, device number 72 [ 953.431578][T17451] binder: 17441:17451 ioctl 4018620d 0 returned -22 [ 955.376811][T17469] trusted_key: encrypted_key: key user:syz not found [ 956.070054][T17473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3201'. [ 956.219539][T17476] netlink: 'syz.3.3202': attribute type 4 has an invalid length. [ 956.287789][T17475] netlink: 'syz.3.3202': attribute type 4 has an invalid length. [ 958.602847][T17502] : entered promiscuous mode [ 959.049524][T17512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.215490][T17512] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 960.994168][ T30] audit: type=1804 audit(1758492128.456:523): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3214" name="file0" dev="ramfs" ino=94854 res=1 errno=0 [ 962.826260][ T30] audit: type=1326 audit(1758492130.316:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 962.897764][ T30] audit: type=1326 audit(1758492130.336:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 962.961805][ T30] audit: type=1326 audit(1758492130.336:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 963.094080][ T30] audit: type=1326 audit(1758492130.336:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 963.120547][ T30] audit: type=1326 audit(1758492130.336:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 963.146981][ T30] audit: type=1326 audit(1758492130.336:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 963.180438][ T30] audit: type=1326 audit(1758492130.336:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 963.219385][ T30] audit: type=1326 audit(1758492130.336:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 963.328426][ T30] audit: type=1326 audit(1758492130.336:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17552 comm="syz.5.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc94558ec29 code=0x7ffc0000 [ 963.844226][T14997] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 963.986689][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3220'. [ 964.041257][T14997] usb 7-1: Using ep0 maxpacket: 8 [ 964.199945][T14997] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 964.218257][T14997] usb 7-1: config 0 has no interface number 0 [ 964.230937][T14997] usb 7-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 964.240402][T14997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.249198][T14997] usb 7-1: Product: syz [ 964.253637][T14997] usb 7-1: Manufacturer: syz [ 964.263620][T14997] usb 7-1: SerialNumber: syz [ 964.277514][T14997] usb 7-1: config 0 descriptor?? [ 964.308158][T14997] redrat3 7-1:0.31: Couldn't find all endpoints [ 965.176601][T17587] PKCS7: Unknown OID: [5] (bad) [ 965.181760][T17587] PKCS7: Only support pkcs7_signedData type [ 967.346838][ T5951] usb 7-1: USB disconnect, device number 55 [ 971.039723][T17668] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 971.066800][T17668] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 971.098566][T17668] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 971.118196][T17668] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 971.128070][T17668] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 971.137974][T17668] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 971.150278][T17668] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 971.169912][T17668] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 971.198415][T17668] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 971.210617][T17668] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 971.384266][ T5938] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 971.566319][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.581442][ T5938] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 971.596000][ T5938] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 971.611761][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.629744][ T5938] usb 1-1: config 0 descriptor?? [ 971.848405][ T5993] usb 1-1: USB disconnect, device number 75 [ 973.358199][T17695] input: syz0 as /devices/virtual/input/input53 [ 973.612155][T17701] kvm: pic: non byte write [ 973.936174][T17708] netlink: 'syz.3.3254': attribute type 75 has an invalid length. [ 974.024578][T17709] overlayfs: missing 'lowerdir' [ 974.533992][ T5993] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 974.760093][ T5993] usb 7-1: config 0 has no interfaces? [ 974.817341][ T5993] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 974.826779][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.834907][ T5993] usb 7-1: Product: syz [ 974.839281][ T5993] usb 7-1: Manufacturer: syz [ 974.844054][ T5993] usb 7-1: SerialNumber: syz [ 974.858621][ T5993] usb 7-1: config 0 descriptor?? [ 975.488701][T17726] netlink: 'syz.3.3258': attribute type 4 has an invalid length. [ 977.892962][ T5938] usb 7-1: USB disconnect, device number 56 [ 978.336994][T17756] program syz.3.3265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 979.638079][T17775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 981.072056][T17793] netlink: 'syz.6.3272': attribute type 1 has an invalid length. [ 981.079944][T17793] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3272'. [ 981.615738][T17807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 981.628138][T17807] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 983.514130][ T5963] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 983.673988][ T5963] usb 7-1: Using ep0 maxpacket: 8 [ 983.687520][ T5963] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 983.713264][ T5963] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 983.738952][ T5963] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 983.790764][ T5963] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.891409][ T5963] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 983.900543][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.933737][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 983.933755][ T30] audit: type=1326 audit(1758492151.416:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17831 comm="syz.3.3284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70c558ec29 code=0x0 [ 984.165874][ T5963] usb 7-1: GET_CAPABILITIES returned 0 [ 984.171706][ T5963] usbtmc 7-1:16.0: can't read capabilities [ 985.465345][T17858] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 985.594755][ T5938] usb 7-1: USB disconnect, device number 57 [ 987.912874][T17885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.958259][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3295'. [ 989.553967][ T5993] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 989.707032][ T5993] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 989.729778][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.789061][ T5993] usb 1-1: Product: syz [ 989.801642][ T5993] usb 1-1: Manufacturer: syz [ 989.832771][ T5993] usb 1-1: SerialNumber: syz [ 989.925360][ T5993] usb 1-1: config 0 descriptor?? [ 989.980101][T17911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3303'. [ 990.082750][T17911] bond0: (slave batadv0): Releasing backup interface [ 990.106552][T17911] bridge_slave_0: left allmulticast mode [ 990.112839][T17911] bridge_slave_0: left promiscuous mode [ 990.121217][T17911] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.138657][ T5993] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.151382][T17911] bridge_slave_1: left allmulticast mode [ 990.167115][T17911] bridge_slave_1: left promiscuous mode [ 990.173214][T17911] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.199473][T17911] bond0: (slave bond_slave_0): Releasing backup interface [ 990.216116][T17911] bond0: (slave bond_slave_1): Releasing backup interface [ 990.254997][T17911] team0: Port device team_slave_0 removed [ 990.272835][T17911] team0: Port device team_slave_1 removed [ 990.289629][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.315068][T17911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.385400][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.401283][T17911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.433565][T17911] bond1: (slave ip6gre1): Releasing backup interface [ 990.443463][T17911] ip6gre1: left promiscuous mode [ 992.236893][ T5993] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 992.256976][ T5993] usb 1-1: USB disconnect, device number 76 [ 992.789957][ T30] audit: type=1326 audit(1758492160.276:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.815840][ T30] audit: type=1326 audit(1758492160.306:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.849960][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3311'. [ 992.860342][ T30] audit: type=1326 audit(1758492160.326:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.885096][ T30] audit: type=1326 audit(1758492160.326:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.908131][ T30] audit: type=1326 audit(1758492160.326:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.941569][ T30] audit: type=1326 audit(1758492160.326:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.966377][ T30] audit: type=1326 audit(1758492160.326:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.992932][ T30] audit: type=1326 audit(1758492160.326:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 992.998136][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.023478][ T30] audit: type=1326 audit(1758492160.326:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 993.023495][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.064673][ T30] audit: type=1326 audit(1758492160.326:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17942 comm="syz.3.3311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70c558ec29 code=0x7ffc0000 [ 996.270764][T17980] vivid-007: ================= START STATUS ================= [ 996.279022][T17980] vivid-007: Enable Output Cropping: true [ 996.293586][T17980] vivid-007: Enable Output Composing: true [ 996.301603][T17980] vivid-007: Enable Output Scaler: true [ 996.307339][T17980] vivid-007: Tx RGB Quantization Range: Automatic [ 996.313826][T17980] vivid-007: Transmit Mode: HDMI [ 996.348036][T17980] vivid-007: Hotplug Present: 0x00000000 [ 996.368430][T17980] vivid-007: RxSense Present: 0x00000000 [ 996.389807][T17980] vivid-007: EDID Present: 0x00000000 [ 996.419027][T17980] vivid-007: ================== END STATUS ================== [ 998.933162][T18016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3328'. [ 998.949822][T18016] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3328'. [ 998.963594][T18016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3328'. [ 998.980272][T18016] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3328'. [ 999.897378][T18037] netlink: 'syz.3.3332': attribute type 21 has an invalid length. [ 999.938119][T18037] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3332'. [ 1002.112597][T18079] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1002.124647][T18079] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1002.134206][ T5929] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1002.297336][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.322365][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.384703][ T5929] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1002.408199][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.446298][ T5929] usb 1-1: config 0 descriptor?? [ 1003.219310][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 1003.228494][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1003.256332][ T5929] usb 1-1: USB disconnect, device number 77 [ 1005.217308][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3351'. [ 1006.217005][ T5963] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1009.579805][ T5963] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1009.596178][ T5963] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1009.603766][ T5963] usb 7-1: can't read configurations, error -71 [ 1010.425744][T16670] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.842339][T18175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.866049][T18166] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1010.980839][T18166] bond0: (slave lo): refused to change device type [ 1011.634018][T18183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1011.964187][ T5963] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1012.063965][ T5929] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1012.125319][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.137262][ T5963] usb 4-1: config 0 has no interfaces? [ 1012.142789][ T5963] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1012.152261][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.170976][ T5963] usb 4-1: config 0 descriptor?? [ 1012.223958][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 1012.230549][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.250757][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.267083][ T5929] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1012.289056][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.310390][ T5929] usb 6-1: config 0 descriptor?? [ 1012.733159][ T5929] ft260 0003:0403:6030.0028: unknown main item tag 0x7 [ 1012.943511][ T5929] ft260 0003:0403:6030.0028: failed to retrieve chip version [ 1012.951618][ T5929] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -5 [ 1013.154261][T18186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.168417][T18186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.514114][ T5963] delete_channel: no stack [ 1013.752306][T18200] cifs: Unknown parameter 'f,' [ 1014.607584][ T5963] usb 4-1: USB disconnect, device number 73 [ 1014.937254][ T5963] usb 6-1: USB disconnect, device number 60 [ 1015.464188][ T5963] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1015.646479][ T5963] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 1015.666771][ T5963] usb 4-1: config 0 has no interface number 0 [ 1015.672913][ T5963] usb 4-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 1015.693995][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.717014][ T5963] usb 4-1: config 0 descriptor?? [ 1015.746932][ T5963] gspca_main: spca500-2.14.0 probing 041e:400a [ 1016.264103][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3377'. [ 1016.508283][T18235] bond_slave_1: mtu less than device minimum [ 1017.781023][ T5951] usb 4-1: USB disconnect, device number 74 [ 1018.443208][T18258] netlink: 'syz.6.3381': attribute type 21 has an invalid length. [ 1018.494106][T18258] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3381'. [ 1018.503472][T18248] netlink: 'syz.6.3381': attribute type 21 has an invalid length. [ 1018.546168][T18248] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3381'. [ 1019.843985][ T5951] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1020.024095][ T5951] usb 7-1: Using ep0 maxpacket: 16 [ 1020.031262][ T5951] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.043976][ T5951] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.067927][ T5951] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1020.079579][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.103366][ T5951] usb 7-1: Product: syz [ 1020.117584][ T5951] usb 7-1: Manufacturer: syz [ 1020.141071][ T5951] usb 7-1: SerialNumber: syz [ 1021.994134][ T5963] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1022.019854][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1022.100457][T18294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1023.240552][ T5951] usb 7-1: 0:2 : does not exist [ 1023.258884][ T5951] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1023.348157][ T5951] usb 7-1: USB disconnect, device number 60 [ 1023.416943][T15315] udevd[15315]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.751229][ T5963] usb 6-1: Using ep0 maxpacket: 16 [ 1023.898593][T18286] ptrace attach of "./syz-executor exec"[16673] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ\x22°h \x07  8  þÿÿÿÿÿÿÿ ÿÿÿÿ wlan1"[18286] [ 1025.209686][ T5963] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1025.221353][ T5963] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1025.238162][ T5963] usb 6-1: can't read configurations, error -71 [ 1028.345211][T18316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1028.351713][T18316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1028.388572][T18316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1028.398573][T18316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1028.412034][T18316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1028.420410][T18316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1028.456942][T18316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1028.477747][T18316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1028.856570][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3401'. [ 1029.150805][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 1029.626499][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3404'. [ 1029.635833][T18356] netlink: 'syz.5.3404': attribute type 13 has an invalid length. [ 1029.643723][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'. [ 1029.671606][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3404'. [ 1029.680842][T18356] netlink: 'syz.5.3404': attribute type 13 has an invalid length. [ 1029.700891][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3404'. [ 1029.803576][ T3591] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.818061][ T3591] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.829690][ T3591] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.995690][ T3591] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.424774][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 1030.430895][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 1030.516276][T16670] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.857183][T18372] fuse: Bad value for 'fd' [ 1031.223973][T16670] Bluetooth: hci0: command 0x0406 tx timeout [ 1032.033438][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3410'. [ 1032.056814][T18379] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1032.503956][T16670] Bluetooth: hci2: command 0x0406 tx timeout [ 1032.503964][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 1032.516214][ T5929] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1032.584775][T16670] Bluetooth: hci1: command 0x0406 tx timeout [ 1032.754205][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 1032.854807][T18393] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 1032.883963][ T5929] usb 4-1: config index 0 descriptor too short (expected 61219, got 36) [ 1032.899015][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.923141][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.944206][ T5929] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1032.964691][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.007630][ T5929] usb 4-1: config 0 descriptor?? [ 1033.033118][T18393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1033.638202][T18403] geneve2: entered promiscuous mode [ 1033.643475][T18403] geneve2: entered allmulticast mode [ 1035.045162][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 1035.059953][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1035.095819][ T5929] usb 4-1: USB disconnect, device number 75 [ 1035.133037][T18407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3416'. [ 1035.385856][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3416'. [ 1035.467619][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 1037.925106][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3422'. [ 1039.562461][T18458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1040.420499][T18465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3428'. [ 1040.478102][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3428'. [ 1041.695079][T18483] netlink: 'syz.0.3433': attribute type 6 has an invalid length. [ 1042.023965][ T5929] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1042.194853][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 1042.204184][ T5929] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1042.220813][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.253399][ T5929] usb 1-1: Product: syz [ 1042.274220][ T5929] usb 1-1: Manufacturer: syz [ 1042.283943][ T5929] usb 1-1: SerialNumber: syz [ 1042.298250][ T5929] usb 1-1: config 0 descriptor?? [ 1042.799587][ T5938] usb 1-1: USB disconnect, device number 78 [ 1044.019036][T18504] sctp: [Deprecated]: syz.3.3437 (pid 18504) Use of int in maxseg socket option. [ 1044.019036][T18504] Use struct sctp_assoc_value instead [ 1044.055958][T18505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3436'. [ 1044.450851][T18514] ptrace attach of "./syz-executor exec"[16673] was attempted by "./syz-executor exec"[18514] [ 1044.554046][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1044.554067][ T30] audit: type=1326 audit(1758492211.986:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.5.3439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc94558ec29 code=0x0 [ 1044.848063][T18515] create_pit_timer: 20 callbacks suppressed [ 1044.848075][T18515] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1045.039009][T18515] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1045.049871][T18515] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1045.058262][T18515] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1045.069604][T18515] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1045.081844][T18515] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1045.097858][T18515] kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 1047.138866][T18530] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3443'. [ 1051.605657][T18594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.800091][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3457'. [ 1052.210512][T18599] team1: entered promiscuous mode [ 1052.566217][T18607] program syz.0.3458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.381678][T18599] team1: entered allmulticast mode [ 1054.268109][T18600] ------------[ cut here ]------------ [ 1054.273942][T18600] WARNING: CPU: 0 PID: 18600 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1054.285640][T18600] Modules linked in: [ 1054.289838][T18600] CPU: 0 UID: 0 PID: 18600 Comm: syz.5.3457 Not tainted syzkaller #0 PREEMPT(full) [ 1054.299228][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1054.309310][T18600] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1054.316555][T18600] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4b ec 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ce 6e c1 f6 e9 ef f8 ff ff e8 c4 6e c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 b6 6e c1 f6 e9 39 07 00 00 48 83 7c 24 [ 1054.336223][T18600] RSP: 0018:ffffc90004bef220 EFLAGS: 00010283 [ 1054.342278][T18600] RAX: ffffffff8afe4712 RBX: 0000000000000000 RCX: 0000000000080000 [ 1054.350415][T18600] RDX: ffffc9001fc00000 RSI: 00000000000243db RDI: 00000000000243dc [ 1054.358459][T18600] RBP: ffffc90004bef3e0 R08: ffff88805f3dd737 R09: 1ffff1100be7bae6 [ 1054.366447][T18600] R10: dffffc0000000000 R11: ffffed100be7bae7 R12: dffffc0000000000 [ 1054.374480][T18600] R13: 0000000000000070 R14: ffff8880784ea8c0 R15: ffff8880784ea8c0 [ 1054.382455][T18600] FS: 00007fc9464456c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 1054.391412][T18600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.398184][T18600] CR2: 00002000001c6030 CR3: 000000007c47c000 CR4: 00000000003526f0 [ 1054.406256][T18600] Call Trace: [ 1054.409530][T18600] [ 1054.412457][T18600] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 1054.419380][T18600] ? __pfx___might_resched+0x10/0x10 [ 1054.424760][T18600] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 1054.428127][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.430853][T18600] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1054.437373][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.443474][T18600] ieee80211_leave_mesh+0xc5/0x130 [ 1054.443501][T18600] cfg80211_leave_mesh+0x290/0x800 [ 1054.443532][T18600] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 1054.466136][T18600] ? __lock_acquire+0xab9/0xd20 [ 1054.470977][T18600] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1054.477509][T18600] ? __lock_acquire+0xab9/0xd20 [ 1054.482354][T18600] ? do_raw_spin_lock+0x121/0x290 [ 1054.487426][T18600] ? inetdev_event+0x464/0x15b0 [ 1054.492291][T18600] ? igmp_netdev_event+0x7c/0x770 [ 1054.497349][T18600] notifier_call_chain+0x1b3/0x3e0 [ 1054.502448][T18600] __dev_close_many+0x106/0x6f0 [ 1054.507303][T18600] ? __lock_acquire+0xab9/0xd20 [ 1054.512139][T18600] ? __pfx___dev_close_many+0x10/0x10 [ 1054.517575][T18600] ? __mutex_trylock_common+0x153/0x260 [ 1054.523144][T18600] netif_close_many+0x225/0x410 [ 1054.528064][T18600] ? __pfx_netif_close_many+0x10/0x10 [ 1054.533443][T18600] ? __mutex_lock+0x335/0x1350 [ 1054.538329][T18600] ? __lock_acquire+0xab9/0xd20 [ 1054.543205][T18600] netif_close+0x158/0x210 [ 1054.547679][T18600] ? __pfx_netif_close+0x10/0x10 [ 1054.552632][T18600] ? __pfx___mutex_lock+0x10/0x10 [ 1054.557721][T18600] dev_close+0x10a/0x220 [ 1054.561979][T18600] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 1054.568224][T18600] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 1054.574442][T18600] cfg80211_rfkill_set_block+0x2d/0x50 [ 1054.579915][T18600] rfkill_set_block+0x1d2/0x440 [ 1054.584984][T18600] rfkill_fop_write+0x44b/0x570 [ 1054.589855][T18600] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1054.595299][T18600] ? __pfx_security_file_permission+0x10/0x10 [ 1054.601394][T18600] ? rw_verify_area+0x255/0x4d0 [ 1054.606306][T18600] ? __lock_acquire+0xab9/0xd20 [ 1054.611170][T18600] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1054.616643][T18600] vfs_write+0x27b/0xb30 [ 1054.620910][T18600] ? __pfx_vfs_write+0x10/0x10 [ 1054.625751][T18600] ? __fget_files+0x2a/0x420 [ 1054.630353][T18600] ? __fget_files+0x2a/0x420 [ 1054.635004][T18600] ? __fget_files+0x3a0/0x420 [ 1054.639685][T18600] ? __fget_files+0x2a/0x420 [ 1054.644319][T18600] ksys_write+0x145/0x250 [ 1054.648754][T18600] ? __pfx_ksys_write+0x10/0x10 [ 1054.653615][T18600] ? rcu_is_watching+0x15/0xb0 [ 1054.658429][T18600] ? do_syscall_64+0xbe/0x3b0 [ 1054.663097][T18600] do_syscall_64+0xfa/0x3b0 [ 1054.667629][T18600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1054.672813][T18600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.678932][T18600] ? clear_bhb_loop+0x60/0xb0 [ 1054.683601][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.689519][T18600] RIP: 0033:0x7fc94558ec29 [ 1054.693964][T18600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.713625][T18600] RSP: 002b:00007fc946445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.722143][T18600] RAX: ffffffffffffffda RBX: 00007fc9457d6360 RCX: 00007fc94558ec29 [ 1054.730154][T18600] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1054.738160][T18600] RBP: 00007fc945611e41 R08: 0000000000000000 R09: 0000000000000000 [ 1054.746146][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.754150][T18600] R13: 00007fc9457d63f8 R14: 00007fc9457d6360 R15: 00007fc9458ffa28 [ 1054.762131][T18600] [ 1054.765170][T18600] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1054.772434][T18600] CPU: 0 UID: 0 PID: 18600 Comm: syz.5.3457 Not tainted syzkaller #0 PREEMPT(full) [ 1054.781784][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1054.791822][T18600] Call Trace: [ 1054.795119][T18600] [ 1054.798035][T18600] dump_stack_lvl+0x99/0x250 [ 1054.802612][T18600] ? __asan_memcpy+0x40/0x70 [ 1054.807189][T18600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.812371][T18600] ? __pfx__printk+0x10/0x10 [ 1054.816970][T18600] vpanic+0x281/0x750 [ 1054.820961][T18600] ? __pfx__printk+0x10/0x10 [ 1054.825546][T18600] ? __pfx_vpanic+0x10/0x10 [ 1054.830039][T18600] ? is_bpf_text_address+0x26/0x2b0 [ 1054.835240][T18600] panic+0xb9/0xc0 [ 1054.838953][T18600] ? __pfx_panic+0x10/0x10 [ 1054.843367][T18600] __warn+0x31b/0x4b0 [ 1054.847336][T18600] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1054.853923][T18600] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1054.860498][T18600] report_bug+0x2be/0x4f0 [ 1054.864811][T18600] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1054.871395][T18600] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1054.877970][T18600] ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0 [ 1054.884547][T18600] handle_bug+0x84/0x160 [ 1054.888780][T18600] exc_invalid_op+0x1a/0x50 [ 1054.893270][T18600] asm_exc_invalid_op+0x1a/0x20 [ 1054.898104][T18600] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 1054.905288][T18600] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4b ec 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ce 6e c1 f6 e9 ef f8 ff ff e8 c4 6e c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 b6 6e c1 f6 e9 39 07 00 00 48 83 7c 24 [ 1054.924878][T18600] RSP: 0018:ffffc90004bef220 EFLAGS: 00010283 [ 1054.930933][T18600] RAX: ffffffff8afe4712 RBX: 0000000000000000 RCX: 0000000000080000 [ 1054.938900][T18600] RDX: ffffc9001fc00000 RSI: 00000000000243db RDI: 00000000000243dc [ 1054.946869][T18600] RBP: ffffc90004bef3e0 R08: ffff88805f3dd737 R09: 1ffff1100be7bae6 [ 1054.954830][T18600] R10: dffffc0000000000 R11: ffffed100be7bae7 R12: dffffc0000000000 [ 1054.962821][T18600] R13: 0000000000000070 R14: ffff8880784ea8c0 R15: ffff8880784ea8c0 [ 1054.970794][T18600] ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0 [ 1054.977483][T18600] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 1054.984328][T18600] ? __pfx___might_resched+0x10/0x10 [ 1054.989614][T18600] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 1054.995593][T18600] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1055.001827][T18600] ieee80211_leave_mesh+0xc5/0x130 [ 1055.006934][T18600] cfg80211_leave_mesh+0x290/0x800 [ 1055.012042][T18600] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 1055.018098][T18600] ? __lock_acquire+0xab9/0xd20 [ 1055.022937][T18600] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1055.029425][T18600] ? __lock_acquire+0xab9/0xd20 [ 1055.034273][T18600] ? do_raw_spin_lock+0x121/0x290 [ 1055.039302][T18600] ? inetdev_event+0x464/0x15b0 [ 1055.044145][T18600] ? igmp_netdev_event+0x7c/0x770 [ 1055.049162][T18600] notifier_call_chain+0x1b3/0x3e0 [ 1055.054264][T18600] __dev_close_many+0x106/0x6f0 [ 1055.059100][T18600] ? __lock_acquire+0xab9/0xd20 [ 1055.063947][T18600] ? __pfx___dev_close_many+0x10/0x10 [ 1055.069313][T18600] ? __mutex_trylock_common+0x153/0x260 [ 1055.074854][T18600] netif_close_many+0x225/0x410 [ 1055.079707][T18600] ? __pfx_netif_close_many+0x10/0x10 [ 1055.085063][T18600] ? __mutex_lock+0x335/0x1350 [ 1055.089813][T18600] ? __lock_acquire+0xab9/0xd20 [ 1055.094661][T18600] netif_close+0x158/0x210 [ 1055.099064][T18600] ? __pfx_netif_close+0x10/0x10 [ 1055.103987][T18600] ? __pfx___mutex_lock+0x10/0x10 [ 1055.109005][T18600] dev_close+0x10a/0x220 [ 1055.113238][T18600] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 1055.119378][T18600] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 1055.125515][T18600] cfg80211_rfkill_set_block+0x2d/0x50 [ 1055.130961][T18600] rfkill_set_block+0x1d2/0x440 [ 1055.135806][T18600] rfkill_fop_write+0x44b/0x570 [ 1055.140652][T18600] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1055.146011][T18600] ? __pfx_security_file_permission+0x10/0x10 [ 1055.152067][T18600] ? rw_verify_area+0x255/0x4d0 [ 1055.156905][T18600] ? __lock_acquire+0xab9/0xd20 [ 1055.161750][T18600] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1055.167110][T18600] vfs_write+0x27b/0xb30 [ 1055.171348][T18600] ? __pfx_vfs_write+0x10/0x10 [ 1055.176101][T18600] ? __fget_files+0x2a/0x420 [ 1055.180681][T18600] ? __fget_files+0x2a/0x420 [ 1055.185256][T18600] ? __fget_files+0x3a0/0x420 [ 1055.189913][T18600] ? __fget_files+0x2a/0x420 [ 1055.194491][T18600] ksys_write+0x145/0x250 [ 1055.198814][T18600] ? __pfx_ksys_write+0x10/0x10 [ 1055.203647][T18600] ? rcu_is_watching+0x15/0xb0 [ 1055.208398][T18600] ? do_syscall_64+0xbe/0x3b0 [ 1055.213065][T18600] do_syscall_64+0xfa/0x3b0 [ 1055.217574][T18600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1055.222759][T18600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.228809][T18600] ? clear_bhb_loop+0x60/0xb0 [ 1055.233474][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.239354][T18600] RIP: 0033:0x7fc94558ec29 [ 1055.243754][T18600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.263348][T18600] RSP: 002b:00007fc946445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1055.271749][T18600] RAX: ffffffffffffffda RBX: 00007fc9457d6360 RCX: 00007fc94558ec29 [ 1055.279705][T18600] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1055.287664][T18600] RBP: 00007fc945611e41 R08: 0000000000000000 R09: 0000000000000000 [ 1055.295621][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.303574][T18600] R13: 00007fc9457d63f8 R14: 00007fc9457d6360 R15: 00007fc9458ffa28 [ 1055.311551][T18600] [ 1055.314828][T18600] Kernel Offset: disabled [ 1055.319134][T18600] Rebooting in 86400 seconds..