last executing test programs: 29m26.326183504s ago: executing program 2 (id=896): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x586c, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x7, {0x7, 0x29, "9652c5ae90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x20000000, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)='D', 0x1, 0x805, &(0x7f0000000300)={0x11, 0x9, r5, 0x1, 0xf7}, 0x14) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x6, 0x40, 0x6560, 0x0, 0xd, 0x8, 0x9, [0xfffffffa, 0x7]}}) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000010000000000000000000a808000000000000000001e9322aa1cfe7882bb38ab5ff7069f770000000000000008000000000000000000587a3cde0d9cbcef294c3478c384a39771cdf2c104f10e9b172dde9bb1d970a0dec41952f62d084a9b0cc76d5268d6c348acdd978868f36ff6c36215000000000000000000000000dd00"/144], 0x44}, 0x1, 0x0, 0x0, 0x4044801}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"a2e3ad21ed0d09f91b5f090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f09006d090890e0878f0e1ac6e7049b336c959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3c2b802181acfc90c41bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e74130d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b12d94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efca9b6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14007693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 29m22.201034137s ago: executing program 2 (id=905): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) 29m21.815859969s ago: executing program 2 (id=907): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) getsockname$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000040)=0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 29m19.892637608s ago: executing program 2 (id=914): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) r5 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r4, 0x4c05, r4) dup2(r3, r1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x1000000}) 29m18.636348493s ago: executing program 2 (id=917): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) unshare(0x22020400) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x20048810) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000040)={{}, {r6, r7+60000000}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r8, 0x1, 0x0) 29m18.090626494s ago: executing program 2 (id=920): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x200600, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8004) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r5, 0x1, 0xfffffffe, 0x10000}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic="b5"]}, 0x18}}, 0x0) 29m17.221853873s ago: executing program 32 (id=920): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x200600, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8004) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r5, 0x1, 0xfffffffe, 0x10000}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic="b5"]}, 0x18}}, 0x0) 12.829697926s ago: executing program 1 (id=5113): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0xffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 10.876911917s ago: executing program 4 (id=5118): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000", 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 9.801639045s ago: executing program 5 (id=5120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 9.765568689s ago: executing program 4 (id=5121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5, r9}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x10}}, 0x0) 8.360006767s ago: executing program 5 (id=5123): syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000407, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xb34e, 0x10, 0x3, 0x801, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r6, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) 8.213770389s ago: executing program 1 (id=5124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 7.935425086s ago: executing program 4 (id=5125): r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$clear(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb", 0xae, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r5, r4}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r7 = dup(r6) fallocate(r7, 0x10, 0x0, 0x72000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)={0x28, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) 7.609547787s ago: executing program 0 (id=5126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 6.311114953s ago: executing program 1 (id=5127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 6.197797177s ago: executing program 0 (id=5128): flock(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000180)=0x400000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) syz_open_dev$loop(0x0, 0xd03b, 0x410000) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r6, &(0x7f0000003780)={0x2020}, 0x2020) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x894b, &(0x7f0000000040)) 6.105725156s ago: executing program 4 (id=5129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0xdb1e11e678f3b5dc}) io_uring_enter(r3, 0x5370, 0x0, 0x0, 0x0, 0x4e) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0), 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x9, 0x67}, {@remote, 0x4623, 0x4, 0x100000ca, 0x12d5f, 0x3}}, 0x44) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x0, 0x1) fchdir(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008880) openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$char_usb(0xc, 0xb4, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) 5.42026441s ago: executing program 3 (id=5130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x20040014) 5.203603838s ago: executing program 5 (id=5131): syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040004) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000340)={0x1, 0x0, 0x9, 0x3}) 4.852770072s ago: executing program 0 (id=5132): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x40789440, &(0x7f00000001c0)={"0019de9537eb902b39b36eedeed6a200", 0x0, 0x0, {}, {0x8003}}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES16=r2, @ANYBLOB="010013bd70100400000005000000080009000200000008000c00a80a0000060001000700000008000b"], 0x34}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4.717148909s ago: executing program 0 (id=5133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 4.255251312s ago: executing program 3 (id=5134): r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$clear(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb", 0xae, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r5, r4}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r7 = dup(r6) fallocate(r7, 0x10, 0x0, 0x72000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)={0x28, r9, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) 4.145529884s ago: executing program 1 (id=5135): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="669262cebaf77f3c170903bac28ad5c6643d", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000280)={0x29, 0x6, 0x0, {0x1, 0x200000000000, 0x0, 0x2, '', 0x8}}, 0x29) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r2, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r4, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.00977246s ago: executing program 4 (id=5136): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 3.100498834s ago: executing program 3 (id=5137): syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r1, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x4, 0x5, 0x2, 0x0, 0xa, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fd00000001003c00", "d78c59af22b85f6c12ff0bff", "0000efffffffffffbfff00"]}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r6, 0x4020ae76, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)={0x5}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0xffffffffffffffff, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x34, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)={0x14, 0x2e, 0x301, 0x70bd26, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001892}, 0x400c090) syz_open_dev$hidraw(0x0, 0x7, 0x141) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x100, 0x8, 0x2, 0x8400, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x8}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, 0x0) 3.099298715s ago: executing program 5 (id=5147): syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040004) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000340)={0x1, 0x0, 0x9, 0x3}) 2.87319262s ago: executing program 0 (id=5138): socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x80803, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0xf9e, 0x3, 0x4}, 0x4d, [0x8, 0x6, 0x9, 0xfffffff7, 0x2, 0xfffffffc, 0x7fffffff, 0x80000001, 0x6, 0x1, 0xfd, 0x0, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x5, 0x8, 0xffff, 0x11, 0xe, 0x14, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x7fffffff, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x40000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x1, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x81, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x100000, 0xd, 0x2, 0xfffffffe, 0x6e38, 0x0, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x80, 0xfff, 0x1000004, 0x0, 0x40000040, 0x1, 0x8, 0x1, 0x8, 0xb, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x17, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x56, 0xcfb9], [0x3, 0xdb8, 0x9, 0xf, 0x2, 0x200006, 0x4000005, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000007, 0x9, 0x4, 0x800, 0x7, 0x9, 0x10000, 0xfffffffd, 0x1, 0xfffffffe, 0x2, 0x0, 0x4, 0x8be, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x400, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x10002, 0xa, 0x6, 0x2, 0xfffffefe, 0xda15, 0xa, 0xffffffff, 0x10], [0x0, 0x5, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0x5, 0x6, 0x606, 0x1, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x6, 0x2, 0x0, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x10000006, 0x7, 0x101, 0x9, 0x3000000, 0x9, 0x4000006, 0x7, 0xfffffffd, 0x0, 0x1, 0x4, 0x10000b, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x1, 0x2015, 0x8000, 0x7, 0x7d, 0x8, 0x7, 0xfffdfffc, 0xb, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0), 0xc) r4 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b3, 0x13500}, &(0x7f0000000280), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) 2.08059062s ago: executing program 3 (id=5139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x3, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 2.009642582s ago: executing program 1 (id=5140): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b", 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 1.996624559s ago: executing program 4 (id=5141): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000020c0)=ANY=[@ANYRES8=0x0]) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000023c0)=[0x0]}) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) 1.552934875s ago: executing program 5 (id=5142): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x412, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x6, 0x9, 0x20, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40001c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x1000003, 0x0, 0x1, 0x1ff]}, 0x45c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@empty, 0x3b}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0x3) syz_open_dev$midi(&(0x7f0000000140), 0x8000003, 0xa8502) syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700002d00000000000a000000060201009f"], 0x1c}}, 0x20000080) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '/dev/uinput\x00'}], 0xa, "946ac22791098f0c2356457a6ebcd737045bb9aa4c233cdef6c94a43931420310ef2527baf1f4a7074599d6fdfecc97aa3c18248acfbaee6589e7cc0bae6da92afb67611fa76266c68d426ebe932b83c24253b801a0de0ae8ce84650afb9b586e1923f0ffadd005f2a"}, 0x81) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.323262931s ago: executing program 0 (id=5143): flock(0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000180)=0x400000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) syz_open_dev$loop(0x0, 0xd03b, 0x410000) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r6, &(0x7f0000003780)={0x2020}, 0x2020) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x894b, &(0x7f0000000040)) 1.036812788s ago: executing program 3 (id=5144): r0 = syz_io_uring_setup(0x186, &(0x7f0000000580)={0x0, 0xbc0d}, &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x10001}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e22, @empty}}, 0x10000000, 0x2, 0x0, 0x4, 0xa17433da3c5d69a5, 0x80000002, 0x81}, 0x9c) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c01000016008502000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000457800000c00080008001a000000000014"], 0x11c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="9110bf00000000009500000000000000ac773a7000a09b53722e7161abea6284b7a584bbb910284dd59b2bd09e4000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x4]}]}]}]}, 0x2c}}, 0x4004000) r12 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r12, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0x20000850) 902.617152ms ago: executing program 3 (id=5145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 1.055113ms ago: executing program 5 (id=5146): r0 = memfd_secret(0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) io_setup(0x7, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 0s ago: executing program 1 (id=5157): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24040800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x4a) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(0x0, 0x6) io_uring_enter(0xffffffffffffffff, 0x6f4d, 0xb29d, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x408d3) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x1f, 0x6, 0x0}) kernel console output (not intermixed with test programs): rt1: attempt power cycle [ 1982.075734][T16098] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1982.105545][T16098] usb 6-1: device descriptor read/8, error -71 [ 1982.147700][T29146] loop6: detected capacity change from 0 to 524288000 [ 1982.298993][T29148] support for the xor transformation has been removed. [ 1982.345223][T16098] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1982.370664][T16098] usb 6-1: device descriptor read/8, error -71 [ 1982.485653][T16098] usb usb6-port1: unable to enumerate USB device [ 1983.358487][T29157] usb usb8: usbfs: process 29157 (syz.0.4512) did not claim interface 0 before use [ 1984.004521][T29180] loop6: detected capacity change from 0 to 524288000 [ 1984.245299][T29183] support for the xor transformation has been removed. [ 1985.219377][T29196] program syz.3.4520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1985.253285][T29196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1985.267619][T29196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1985.318599][T29201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1985.423442][T29205] loop6: detected capacity change from 0 to 524288000 [ 1985.467405][T29207] batadv_slave_0: entered promiscuous mode [ 1985.532049][T29205] support for the xor transformation has been removed. [ 1986.681389][T29217] loop6: detected capacity change from 0 to 524288000 [ 1986.795839][T29218] support for the xor transformation has been removed. [ 1987.848167][T17341] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1987.936078][T17341] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1988.415145][T16098] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1988.565159][T16098] usb 6-1: Using ep0 maxpacket: 32 [ 1988.571936][T16098] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1988.580235][T16098] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.593608][T16098] usb 6-1: config 0 has no interface number 0 [ 1988.603026][T16098] usb 6-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1988.627449][T16098] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1988.639899][T16098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.653200][T16098] usb 6-1: Product: syz [ 1988.657626][T16098] usb 6-1: Manufacturer: syz [ 1988.664230][T16098] usb 6-1: SerialNumber: syz [ 1988.674778][T16098] usb 6-1: config 0 descriptor?? [ 1988.689812][T16098] hub 6-1:0.89: bad descriptor, ignoring hub [ 1988.696023][T16098] hub 6-1:0.89: probe with driver hub failed with error -5 [ 1988.703838][T16098] option 6-1:0.89: GSM modem (1-port) converter detected [ 1989.105342][T16098] usb 6-1: USB disconnect, device number 117 [ 1989.112274][T16098] option 6-1:0.89: device disconnected [ 1990.358114][T29266] xt_bpf: check failed: parse error [ 1991.802233][T29278] loop6: detected capacity change from 0 to 524288000 [ 1991.865920][T29278] support for the xor transformation has been removed. [ 1992.386287][T29283] support for the xor transformation has been removed. [ 1992.889483][T29292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1992.904328][T29292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1997.702155][T29354] loop6: detected capacity change from 0 to 524288000 [ 1997.805203][T29354] support for the xor transformation has been removed. [ 1998.459024][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1998.459041][ T30] audit: type=1326 audit(1767608539.667:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.515092][ T30] audit: type=1326 audit(1767608539.667:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.548920][ T30] audit: type=1326 audit(1767608539.677:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.585096][ T30] audit: type=1326 audit(1767608539.677:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.615114][ T30] audit: type=1326 audit(1767608539.677:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.645150][ T30] audit: type=1326 audit(1767608539.677:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.695185][ T30] audit: type=1326 audit(1767608539.677:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.765132][ T30] audit: type=1326 audit(1767608539.677:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.795220][ T30] audit: type=1326 audit(1767608539.677:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1998.835556][ T30] audit: type=1326 audit(1767608539.677:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29355 comm="syz.0.4555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 1999.052868][T29373] x_tables: duplicate underflow at hook 3 [ 2000.676414][T29376] pim6reg: entered allmulticast mode [ 2000.724896][T29376] pim6reg: left allmulticast mode [ 2001.889978][T29401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4563'. [ 2002.633762][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4575'. [ 2002.676776][T29410] hsr0: entered promiscuous mode [ 2002.684866][T29410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4565'. [ 2002.731706][T29410] hsr_slave_0: left promiscuous mode [ 2002.766442][T29410] hsr_slave_1: left promiscuous mode [ 2002.827870][T29410] hsr0 (unregistering): left promiscuous mode [ 2003.496053][T17341] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2003.658460][T17341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2003.676413][T17341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2003.687515][T17341] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2003.697498][T17341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.771117][T17341] usb 2-1: config 0 descriptor?? [ 2003.792204][T29436] loop6: detected capacity change from 0 to 524288000 [ 2003.895150][T29437] support for the xor transformation has been removed. [ 2004.215866][T17341] steelseries 0003:1038:12B6.0043: unknown main item tag 0x0 [ 2004.245103][T17341] steelseries 0003:1038:12B6.0043: unknown main item tag 0x0 [ 2004.254673][T17341] steelseries 0003:1038:12B6.0043: unknown main item tag 0x6 [ 2004.267543][T17341] steelseries 0003:1038:12B6.0043: item fetching failed at offset 4/7 [ 2004.285624][T17341] steelseries 0003:1038:12B6.0043: probe with driver steelseries failed with error -22 [ 2004.730840][T29443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.744453][T29443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.830849][T29446] lo: Caught tx_queue_len zero misconfig [ 2005.191835][T29448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4570'. [ 2005.203043][T29448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4570'. [ 2005.220325][T29448] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4570'. [ 2005.231726][T29448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'. [ 2005.954109][T29458] netlink: 320 bytes leftover after parsing attributes in process `syz.4.4574'. [ 2006.053302][T17341] usb 2-1: USB disconnect, device number 10 [ 2006.127669][T29457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4574'. [ 2007.850564][T29486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4581'. [ 2008.059878][T29488] loop6: detected capacity change from 0 to 524288000 [ 2008.145581][T29489] support for the xor transformation has been removed. [ 2008.738155][T29492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4593'. [ 2009.022775][T29496] program syz.4.4583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2009.069858][T29496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 2009.107363][T29496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4583'. [ 2009.261759][T29501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2009.625101][T17341] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2009.803713][T17341] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.833442][T17341] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2009.865069][T17341] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2009.875247][T17341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.929963][T17341] usb 1-1: config 0 descriptor?? [ 2010.312131][T29518] loop6: detected capacity change from 0 to 524288000 [ 2010.400857][T29518] support for the xor transformation has been removed. [ 2011.502242][T29524] binder: 29520:29524 ioctl c018620c 80000380 returned -22 [ 2011.644357][T29530] loop6: detected capacity change from 0 to 524288000 [ 2011.777892][T29532] support for the xor transformation has been removed. [ 2012.012562][T29535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4590'. [ 2012.289486][T22731] usb 1-1: USB disconnect, device number 110 [ 2012.328727][T29538] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4590'. [ 2012.812845][T29550] loop6: detected capacity change from 0 to 524288000 [ 2012.895986][T29550] support for the xor transformation has been removed. [ 2012.995094][T22731] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2013.157369][T22731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.173169][T22731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2013.184576][T22731] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2013.205316][T22731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.217604][T22731] usb 2-1: config 0 descriptor?? [ 2013.708363][T22731] steelseries 0003:1038:12B6.0044: unknown main item tag 0x0 [ 2013.724816][T22731] steelseries 0003:1038:12B6.0044: unknown main item tag 0x0 [ 2013.735115][T22731] steelseries 0003:1038:12B6.0044: unknown main item tag 0x6 [ 2013.742517][T22731] steelseries 0003:1038:12B6.0044: item fetching failed at offset 4/7 [ 2013.755711][T22731] steelseries 0003:1038:12B6.0044: probe with driver steelseries failed with error -22 [ 2013.947338][T29561] vlan1: entered promiscuous mode [ 2013.986753][T29558] loop6: detected capacity change from 0 to 524288000 [ 2014.023273][T29560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'. [ 2014.105642][T29562] support for the xor transformation has been removed. [ 2014.616877][T29570] support for the xor transformation has been removed. [ 2015.227955][T22731] usb 2-1: USB disconnect, device number 11 [ 2015.492239][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 2016.057385][T29584] loop6: detected capacity change from 0 to 524287999 [ 2016.155980][T29591] support for the xor transformation has been removed. [ 2016.974055][T29602] random: crng reseeded on system resumption [ 2018.045346][T22731] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2018.208678][T22731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2018.236046][T22731] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2018.291775][T22731] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 2018.307580][T22731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.321675][T22731] usb 1-1: config 0 descriptor?? [ 2018.589336][T29616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 2018.601708][T29616] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4608'. [ 2018.788675][T22731] maltron 0003:058F:9410.0045: item fetching failed at offset 0/7 [ 2018.797502][T22731] maltron 0003:058F:9410.0045: probe with driver maltron failed with error -22 [ 2019.488423][T29625] loop6: detected capacity change from 0 to 524288000 [ 2019.655939][T29626] support for the xor transformation has been removed. [ 2020.085613][T22731] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2020.235542][T22731] usb 2-1: Using ep0 maxpacket: 32 [ 2020.242800][T22731] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2020.251513][T22731] usb 2-1: config 0 has no interface number 0 [ 2020.260212][T22731] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2020.269567][T22731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.277803][T22731] usb 2-1: Product: syz [ 2020.285228][T22731] usb 2-1: Manufacturer: syz [ 2020.289830][T22731] usb 2-1: SerialNumber: syz [ 2020.296136][T22731] usb 2-1: config 0 descriptor?? [ 2020.328227][T22731] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2020.349182][T17339] usb 1-1: USB disconnect, device number 111 [ 2020.530196][T29639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 2020.549700][T22731] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2020.561823][T22731] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2020.957166][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2020.957649][T17341] usb 2-1: USB disconnect, device number 12 [ 2020.974148][T17341] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2020.993319][T17341] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2021.007322][T17341] quatech2 2-1:0.51: device disconnected [ 2021.573212][T29657] loop6: detected capacity change from 0 to 524288000 [ 2021.639096][T29659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4617'. [ 2021.657034][T29657] support for the xor transformation has been removed. [ 2021.957154][T29658] vlan0: entered promiscuous mode [ 2022.061285][T29659] bridge0: port 3(team0) entered disabled state [ 2022.211616][T29659] bridge_slave_1: left allmulticast mode [ 2022.245157][T29659] bridge_slave_1: left promiscuous mode [ 2022.251054][T29659] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.376776][T29659] bridge_slave_0: left allmulticast mode [ 2022.411423][T29659] bridge_slave_0: left promiscuous mode [ 2022.448031][T29659] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.635201][T29677] input: syz1 as /devices/virtual/input/input143 [ 2024.871988][T29659] bond0: (slave bridge0): Releasing backup interface [ 2024.895550][T29659] bridge0 (unregistering): left allmulticast mode [ 2025.632130][T29693] program syz.1.4626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2025.754608][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4626'. [ 2025.797598][T29693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4626'. [ 2026.186275][T17341] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2026.352171][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.376411][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2026.400913][T17341] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2026.427047][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.457836][T17341] usb 6-1: config 0 descriptor?? [ 2026.912978][T17341] steelseries 0003:1038:12B6.0046: unknown main item tag 0x0 [ 2026.927993][T17341] steelseries 0003:1038:12B6.0046: unknown main item tag 0x0 [ 2026.935926][T17341] steelseries 0003:1038:12B6.0046: unknown main item tag 0x6 [ 2026.945167][T17341] steelseries 0003:1038:12B6.0046: item fetching failed at offset 4/7 [ 2026.955539][T17341] steelseries 0003:1038:12B6.0046: probe with driver steelseries failed with error -22 [ 2027.202818][T17341] usb 6-1: USB disconnect, device number 118 [ 2027.355133][T22731] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2027.507147][T22731] usb 1-1: config 0 has no interfaces? [ 2027.512665][T22731] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2027.522046][T22731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.532077][T22731] usb 1-1: config 0 descriptor?? [ 2027.565554][T17341] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2027.715117][T17341] usb 2-1: Using ep0 maxpacket: 32 [ 2027.725751][T17341] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2027.740748][T17341] usb 2-1: config 0 has no interface number 0 [ 2027.778433][T17341] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2027.795117][T17341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.803220][T17341] usb 2-1: Product: syz [ 2027.807907][T17341] usb 2-1: Manufacturer: syz [ 2027.812485][T17341] usb 2-1: SerialNumber: syz [ 2027.820890][T17341] usb 2-1: config 0 descriptor?? [ 2027.838099][T17341] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2028.069172][T17341] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2028.084752][T17341] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2028.482611][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2028.482982][T22731] usb 2-1: USB disconnect, device number 13 [ 2028.502301][T22731] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2028.548712][T22731] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2028.581646][T22731] quatech2 2-1:0.51: device disconnected [ 2028.910447][T29732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4636'. [ 2029.295343][T29738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4637'. [ 2030.028160][T21524] usb 1-1: USB disconnect, device number 112 [ 2031.935777][T29759] loop6: detected capacity change from 0 to 524288000 [ 2032.045502][T29759] support for the xor transformation has been removed. [ 2033.292524][T29775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4643'. [ 2034.006324][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4645'. [ 2035.053346][T29801] loop6: detected capacity change from 0 to 524288000 [ 2035.115865][T29801] support for the xor transformation has been removed. [ 2035.642468][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2035.642485][ T30] audit: type=1326 audit(1767608576.857:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2035.735170][ T30] audit: type=1326 audit(1767608576.897:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2035.809021][ T30] audit: type=1326 audit(1767608576.897:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2035.836274][ T30] audit: type=1326 audit(1767608576.897:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2035.936188][ T30] audit: type=1326 audit(1767608576.917:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2036.004289][ T30] audit: type=1326 audit(1767608576.917:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2036.037714][ T30] audit: type=1326 audit(1767608576.927:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29811 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2036.065116][ T30] audit: type=1326 audit(1767608576.937:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2036.107399][ T30] audit: type=1326 audit(1767608576.937:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2036.133288][ T30] audit: type=1326 audit(1767608576.937:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29802 comm="syz.3.4652" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 2036.253490][T29817] loop6: detected capacity change from 0 to 524288000 [ 2036.385386][T29819] support for the xor transformation has been removed. [ 2036.635263][T21524] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2036.801118][T21524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.815130][T21524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.826096][T21524] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2036.837254][T21524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.847018][T21524] usb 6-1: config 0 descriptor?? [ 2037.267075][T21524] steelseries 0003:1038:12B6.0047: unknown main item tag 0x0 [ 2037.275795][T21524] steelseries 0003:1038:12B6.0047: unknown main item tag 0x0 [ 2037.283243][T21524] steelseries 0003:1038:12B6.0047: unknown main item tag 0x6 [ 2037.291037][T21524] steelseries 0003:1038:12B6.0047: item fetching failed at offset 4/7 [ 2037.301509][T21524] steelseries 0003:1038:12B6.0047: probe with driver steelseries failed with error -22 [ 2037.368061][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.374420][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.506776][T21524] usb 6-1: USB disconnect, device number 119 [ 2037.900005][T29830] loop6: detected capacity change from 0 to 524288000 [ 2038.444134][T29829] support for the xor transformation has been removed. [ 2039.846360][T29862] bond0: Caught tx_queue_len zero misconfig [ 2040.215164][T22731] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2040.451794][T22731] usb 6-1: config 0 has no interfaces? [ 2040.470846][T22731] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2040.480067][T22731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.489973][T22731] usb 6-1: Product: syz [ 2040.497916][T22731] usb 6-1: Manufacturer: syz [ 2040.504419][T22731] usb 6-1: SerialNumber: syz [ 2040.525096][T22731] usb 6-1: config 0 descriptor?? [ 2040.819103][T29870] loop6: detected capacity change from 0 to 524288000 [ 2040.906386][T29862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.931466][T29862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2041.275337][T29870] support for the xor transformation has been removed. [ 2041.495768][T21524] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2041.529628][T29880] loop6: detected capacity change from 0 to 524288000 [ 2041.585463][T29880] support for the xor transformation has been removed. [ 2041.655328][T21524] usb 1-1: Using ep0 maxpacket: 32 [ 2041.662931][T21524] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2041.684667][T21524] usb 1-1: config 0 has no interface number 0 [ 2041.716459][T21524] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2041.745724][T21524] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2041.772850][T21524] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2041.791948][T21524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.822776][T21524] usb 1-1: config 0 descriptor?? [ 2042.527200][T21524] uclogic 0003:28BD:0094.0048: pen parameters not found [ 2042.536430][T21524] uclogic 0003:28BD:0094.0048: interface is invalid, ignoring [ 2042.673458][T29890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.686916][T29890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.770585][T29875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.787886][T29875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.818220][T21524] usb 1-1: USB disconnect, device number 113 [ 2043.608288][T29905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4672'. [ 2044.366234][T21524] usb 6-1: USB disconnect, device number 120 [ 2044.586865][T29924] loop6: detected capacity change from 0 to 524288000 [ 2044.765481][T29928] support for the xor transformation has been removed. [ 2045.766036][T29937] loop6: detected capacity change from 0 to 524288000 [ 2045.957234][T29938] support for the xor transformation has been removed. [ 2047.123252][T29950] loop6: detected capacity change from 0 to 524288000 [ 2047.165866][T29953] support for the xor transformation has been removed. [ 2047.485498][T29956] support for the xor transformation has been removed. [ 2048.928941][T29979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'. [ 2049.047955][T29981] EXT4-fs: Conflicting test_dummy_encryption options [ 2050.308807][T29997] openvswitch: netlink: Message has 1 unknown bytes. [ 2050.319866][T29997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2051.064640][T30005] loop6: detected capacity change from 0 to 524288000 [ 2051.856809][T30013] input: syz1 as /devices/virtual/input/input144 [ 2051.877186][T30005] support for the xor transformation has been removed. [ 2052.119191][T21524] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2052.169152][T30015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4693'. [ 2052.276972][T21524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2052.296404][T21524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2052.358908][T21524] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 2052.389099][T21524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.413877][T21524] usb 2-1: config 0 descriptor?? [ 2052.472754][T30023] wireguard0: entered promiscuous mode [ 2052.478687][T30023] wireguard0: entered allmulticast mode [ 2052.605855][T22731] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2052.775687][T22731] usb 6-1: Using ep0 maxpacket: 32 [ 2052.807748][T22731] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2052.825568][T22731] usb 6-1: config 0 has no interface number 0 [ 2052.836109][T22731] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2052.856058][T22731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.875584][T22731] usb 6-1: Product: syz [ 2052.879825][T22731] usb 6-1: Manufacturer: syz [ 2052.884496][T22731] usb 6-1: SerialNumber: syz [ 2052.892663][T22731] usb 6-1: config 0 descriptor?? [ 2052.903025][T22731] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2052.912533][T21524] itetech 0003:06CB:73F5.0049: collection stack underflow [ 2052.932309][T21524] itetech 0003:06CB:73F5.0049: item 0 0 0 12 parsing failed [ 2052.948881][T21524] itetech 0003:06CB:73F5.0049: probe with driver itetech failed with error -22 [ 2053.146711][T22731] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2053.168045][T22731] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2053.280592][T21524] usb 2-1: USB disconnect, device number 14 [ 2053.545196][T17341] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2053.668078][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2053.678271][T22731] usb 6-1: USB disconnect, device number 121 [ 2053.693147][T22731] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2053.739842][T22731] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2053.773976][T22731] quatech2 6-1:0.51: device disconnected [ 2053.786384][T17341] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2053.808417][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2053.819427][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2053.831495][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2053.839944][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2053.849320][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2053.860449][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2053.869877][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2053.879352][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2053.891442][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2053.902578][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2053.911845][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2053.926186][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2053.937087][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2053.946438][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2053.957965][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2053.966960][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2053.981576][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2053.995080][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2054.005435][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2054.014566][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2054.026596][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2054.036203][T17341] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2054.047569][T17341] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2054.065063][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2054.076507][T17341] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2054.087890][T17341] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2054.101767][T17341] usb 1-1: Product: syz [ 2054.107418][T17341] usb 1-1: Manufacturer: syz [ 2054.112008][T17341] usb 1-1: SerialNumber: syz [ 2054.120702][T17341] usb 1-1: config 0 descriptor?? [ 2054.133028][T30032] loop6: detected capacity change from 0 to 524288000 [ 2054.142205][T17341] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 2054.251600][T30035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 2054.305767][T30032] support for the xor transformation has been removed. [ 2054.534383][T17339] usb 1-1: USB disconnect, device number 114 [ 2054.543081][T17339] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 2054.615654][T22731] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2054.765182][T22731] usb 6-1: Using ep0 maxpacket: 8 [ 2054.779811][T22731] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2054.789480][T22731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.804083][T22731] usb 6-1: config 0 has no interface number 0 [ 2054.810823][T22731] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2054.822764][T22731] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2054.832525][T22731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.848423][T22731] usb 6-1: config 0 descriptor?? [ 2054.862394][T22731] ldusb 6-1:0.55: Interrupt in endpoint not found [ 2055.093438][T17341] usb 6-1: USB disconnect, device number 122 [ 2055.608910][T22731] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2055.807134][T22731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2055.818434][T22731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2055.829043][T22731] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2055.839568][T22731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.863619][T22731] usb 2-1: config 0 descriptor?? [ 2055.938727][T30054] loop6: detected capacity change from 0 to 524288000 [ 2055.995697][T30054] support for the xor transformation has been removed. [ 2056.279043][T22731] steelseries 0003:1038:12B6.004A: unknown main item tag 0x0 [ 2056.287059][T22731] steelseries 0003:1038:12B6.004A: unknown main item tag 0x0 [ 2056.294751][T22731] steelseries 0003:1038:12B6.004A: unknown main item tag 0x6 [ 2056.310178][T22731] steelseries 0003:1038:12B6.004A: item fetching failed at offset 4/7 [ 2056.331023][T22731] steelseries 0003:1038:12B6.004A: probe with driver steelseries failed with error -22 [ 2056.533841][T22731] usb 2-1: USB disconnect, device number 15 [ 2057.479491][T30071] loop6: detected capacity change from 0 to 524288000 [ 2057.616957][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2057.616974][ T30] audit: type=1326 audit(1767608598.837:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2057.690238][ T30] audit: type=1326 audit(1767608598.907:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2057.741471][ T30] audit: type=1326 audit(1767608598.907:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2057.767269][ T30] audit: type=1326 audit(1767608598.907:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2057.804727][ T30] audit: type=1326 audit(1767608598.907:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2057.876205][T30078] support for the xor transformation has been removed. [ 2057.932647][ T30] audit: type=1326 audit(1767608598.937:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2057.961709][ T30] audit: type=1326 audit(1767608598.947:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2057.991308][ T30] audit: type=1326 audit(1767608599.067:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2058.083052][ T30] audit: type=1326 audit(1767608599.067:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2058.139301][ T30] audit: type=1326 audit(1767608599.067:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30069 comm="syz.1.4706" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2058.288090][T30073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4707'. [ 2058.352956][T30073] usb usb8: usbfs: process 30073 (syz.5.4707) did not claim interface 0 before use [ 2059.043466][T30099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4710'. [ 2060.139878][T30120] hub 9-0:1.0: USB hub found [ 2060.150499][T30120] hub 9-0:1.0: 1 port detected [ 2060.191254][T30124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2060.197816][T30124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2060.211636][T30124] vhci_hcd vhci_hcd.0: Device attached [ 2060.687798][T30125] vhci_hcd: connection closed [ 2060.688006][T11664] vhci_hcd vhci_hcd.3: stop threads [ 2060.705795][T11664] vhci_hcd vhci_hcd.3: release socket [ 2060.723276][T11664] vhci_hcd vhci_hcd.3: disconnect device [ 2061.169380][T30134] loop6: detected capacity change from 0 to 524288000 [ 2061.411978][T30135] support for the xor transformation has been removed. [ 2061.706520][T30143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.736510][T30143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2061.762618][T30144] usb usb8: usbfs: process 30144 (syz.5.4718) did not claim interface 0 before use [ 2062.324417][T30149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.344875][T30149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.254124][T30168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4723'. [ 2064.253522][T30167] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4721'. [ 2064.264674][T30167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4721'. [ 2064.447999][T30167] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4721'. [ 2064.459152][T30167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4721'. [ 2065.327839][T30181] netlink: 'syz.3.4727': attribute type 2 has an invalid length. [ 2065.360450][T30181] !: entered promiscuous mode [ 2065.420787][T30181] netlink: 'syz.3.4727': attribute type 2 has an invalid length. [ 2065.450724][T30181] !: left promiscuous mode [ 2066.901646][T30213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2066.914647][T30213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.972298][T30212] loop6: detected capacity change from 0 to 524288000 [ 2067.157398][T30218] support for the xor transformation has been removed. [ 2067.275115][T21524] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2067.486385][T21524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.501258][T21524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.529077][T21524] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2067.540892][T21524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.577670][T21524] usb 1-1: config 0 descriptor?? [ 2067.800256][T30222] usb usb8: usbfs: process 30222 (syz.3.4734) did not claim interface 0 before use [ 2068.015805][T21524] steelseries 0003:1038:12B6.004B: unknown main item tag 0x0 [ 2068.023727][T21524] steelseries 0003:1038:12B6.004B: unknown main item tag 0x0 [ 2068.042176][T21524] steelseries 0003:1038:12B6.004B: unknown main item tag 0x6 [ 2068.050381][T21524] steelseries 0003:1038:12B6.004B: item fetching failed at offset 4/7 [ 2068.070216][T21524] steelseries 0003:1038:12B6.004B: probe with driver steelseries failed with error -22 [ 2068.592212][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2068.592226][ T30] audit: type=1326 audit(1767608609.807:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2068.633864][ T30] audit: type=1326 audit(1767608609.847:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2068.657055][ T30] audit: type=1326 audit(1767608609.877:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2068.683558][ T30] audit: type=1326 audit(1767608609.897:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2068.789211][ T30] audit: type=1326 audit(1767608610.007:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2068.831287][ T30] audit: type=1326 audit(1767608610.007:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2068.901752][ T30] audit: type=1326 audit(1767608610.037:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2068.972933][ T30] audit: type=1326 audit(1767608610.187:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30232 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2069.003916][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4736'. [ 2069.020296][T30233] netlink: 'syz.3.4736': attribute type 13 has an invalid length. [ 2069.163629][T30233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2069.180679][ T30] audit: type=1326 audit(1767608610.397:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2069.257359][ T30] audit: type=1326 audit(1767608610.397:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30223 comm="syz.5.4735" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 2069.564979][T16098] usb 1-1: USB disconnect, device number 115 [ 2070.500681][T30250] loop6: detected capacity change from 0 to 524288000 [ 2070.575688][T30250] support for the xor transformation has been removed. [ 2071.869469][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4740'. [ 2071.885975][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4740'. [ 2071.897004][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4740'. [ 2071.947178][T30263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.956513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2072.951306][T30267] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2073.232800][T30288] loop6: detected capacity change from 0 to 524288000 [ 2073.275380][T21524] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2073.407085][T30289] support for the xor transformation has been removed. [ 2073.442861][T21524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.462562][T21524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.476431][T21524] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2073.498251][T21524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.523221][T21524] usb 1-1: config 0 descriptor?? [ 2073.939239][T21524] steelseries 0003:1038:12B6.004C: unknown main item tag 0x0 [ 2073.947087][T21524] steelseries 0003:1038:12B6.004C: unknown main item tag 0x0 [ 2073.954546][T21524] steelseries 0003:1038:12B6.004C: unknown main item tag 0x6 [ 2074.016710][T21524] steelseries 0003:1038:12B6.004C: item fetching failed at offset 4/7 [ 2074.081980][T21524] steelseries 0003:1038:12B6.004C: probe with driver steelseries failed with error -22 [ 2074.144136][T30295] usb usb8: usbfs: process 30295 (syz.3.4746) did not claim interface 0 before use [ 2074.224164][T21524] usb 1-1: USB disconnect, device number 116 [ 2075.111247][T30300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2075.150065][T30300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.237507][T30304] loop6: detected capacity change from 0 to 524288000 [ 2075.365789][T30305] support for the xor transformation has been removed. [ 2075.935636][T30316] support for the xor transformation has been removed. [ 2077.323172][T30331] xt_policy: output policy not valid in PREROUTING and INPUT [ 2077.337762][T30338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4756'. [ 2078.100644][T30345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.110580][T30345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.702605][T30362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.721381][T30362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.761398][T30363] loop6: detected capacity change from 0 to 524288000 [ 2078.836909][T30363] support for the xor transformation has been removed. [ 2078.912949][T30364] usb usb8: usbfs: process 30364 (syz.5.4760) did not claim interface 0 before use [ 2079.432605][T30367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.447065][T30367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.070480][T30374] hub 9-0:1.0: USB hub found [ 2080.090315][T30374] hub 9-0:1.0: 1 port detected [ 2080.688478][T30382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4765'. [ 2080.801799][T30391] input: syz1 as /devices/virtual/input/input145 [ 2080.876530][T30382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.885850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.991476][T30382] usb usb8: usbfs: process 30382 (syz.3.4765) did not claim interface 0 before use [ 2081.721783][T30403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4769'. [ 2082.025110][T30399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.034975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.580582][T30424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4783'. [ 2084.427158][T30427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4773'. [ 2084.571873][T30427] netlink: 'syz.4.4773': attribute type 13 has an invalid length. [ 2084.645516][T30434] loop6: detected capacity change from 0 to 524288000 [ 2085.419417][T30434] support for the xor transformation has been removed. [ 2085.667874][T30443] loop6: detected capacity change from 0 to 524288000 [ 2086.005768][T16098] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2086.178430][T30427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2086.223244][T30450] support for the xor transformation has been removed. [ 2086.305702][T30440] support for the xor transformation has been removed. [ 2086.382952][T16098] usb 1-1: config 0 has no interfaces? [ 2086.451085][T16098] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2086.479802][T16098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.513273][T16098] usb 1-1: Product: syz [ 2086.517924][T16098] usb 1-1: Manufacturer: syz [ 2086.522649][T16098] usb 1-1: SerialNumber: syz [ 2086.538887][T16098] usb 1-1: config 0 descriptor?? [ 2086.685931][T30458] support for the xor transformation has been removed. [ 2086.938665][T30445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.982213][T30445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.741227][T30462] loop6: detected capacity change from 0 to 524288000 [ 2087.835423][T30462] support for the xor transformation has been removed. [ 2088.246536][T30472] support for the xor transformation has been removed. [ 2089.158494][T16098] usb 1-1: USB disconnect, device number 117 [ 2091.229552][T30510] loop6: detected capacity change from 0 to 524288000 [ 2091.402433][T30512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4791'. [ 2091.546492][T30513] support for the xor transformation has been removed. [ 2092.172928][T30519] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2092.179485][T30519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2092.190523][T30521] loop6: detected capacity change from 0 to 524288000 [ 2092.261786][T30521] support for the xor transformation has been removed. [ 2092.396653][T30519] vhci_hcd vhci_hcd.0: Device attached [ 2092.665915][T16098] usb 44-1: SetAddress Request (10) to port 0 [ 2092.672173][T16098] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2092.834829][T30529] loop6: detected capacity change from 0 to 524288000 [ 2093.046559][T30530] support for the xor transformation has been removed. [ 2093.066377][T30520] vhci_hcd: connection reset by peer [ 2093.084665][T20655] vhci_hcd vhci_hcd.5: stop threads [ 2093.099246][T20655] vhci_hcd vhci_hcd.5: release socket [ 2093.117497][T20655] vhci_hcd vhci_hcd.5: disconnect device [ 2093.862246][T30541] loop6: detected capacity change from 0 to 524288000 [ 2093.976154][T30543] support for the xor transformation has been removed. [ 2094.264661][T30546] sctp: [Deprecated]: syz.4.4797 (pid 30546) Use of int in maxseg socket option. [ 2094.264661][T30546] Use struct sctp_assoc_value instead [ 2095.117479][T30563] loop6: detected capacity change from 0 to 524288000 [ 2095.256935][T30565] support for the xor transformation has been removed. [ 2095.766002][T30569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.789734][T30569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2096.576401][T17341] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2096.756799][T17341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2096.770609][T17341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2096.808159][T17341] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2096.855415][T17341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.910295][T17341] usb 2-1: config 0 descriptor?? [ 2097.075783][T17339] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2097.227563][T17339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.242367][T17339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2097.271949][T17339] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2097.287446][T30592] netlink: 'syz.5.4814': attribute type 13 has an invalid length. [ 2097.309917][T30597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4804'. [ 2097.327081][T17339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.343352][T17339] usb 1-1: config 0 descriptor?? [ 2097.359469][T30592] netlink: 'syz.5.4814': attribute type 27 has an invalid length. [ 2097.426792][T17341] steelseries 0003:1038:12B6.004D: unknown main item tag 0x0 [ 2097.444740][T17341] steelseries 0003:1038:12B6.004D: unknown main item tag 0x0 [ 2097.458921][T30598] usb usb8: usbfs: process 30598 (syz.4.4804) did not claim interface 0 before use [ 2097.479260][T17341] steelseries 0003:1038:12B6.004D: unknown main item tag 0x6 [ 2097.499417][T17341] steelseries 0003:1038:12B6.004D: item fetching failed at offset 4/7 [ 2097.521520][T17341] steelseries 0003:1038:12B6.004D: probe with driver steelseries failed with error -22 [ 2097.792619][T16098] usb 44-1: device descriptor read/8, error -110 [ 2097.800819][T17339] usbhid 1-1:0.0: can't add hid device: -71 [ 2097.814419][T17339] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2097.816123][T17341] usb 2-1: USB disconnect, device number 16 [ 2097.847209][T17339] usb 1-1: USB disconnect, device number 118 [ 2098.021159][T30606] loop6: detected capacity change from 0 to 524288000 [ 2098.067834][T30606] support for the xor transformation has been removed. [ 2098.187046][T16098] usb usb44-port1: attempt power cycle [ 2098.609618][T30608] fuse: Bad value for 'fd' [ 2098.748294][T16098] usb usb44-port1: unable to enumerate USB device [ 2098.809291][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.826501][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.915127][T21524] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2099.076986][T21524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.091144][T21524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.101242][T21524] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2099.117595][T21524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.135505][T21524] usb 1-1: config 0 descriptor?? [ 2099.200206][T30612] usb usb8: usbfs: process 30612 (syz.1.4808) did not claim interface 0 before use [ 2099.564723][T21524] steelseries 0003:1038:12B6.004E: unknown main item tag 0x0 [ 2099.580308][T21524] steelseries 0003:1038:12B6.004E: unknown main item tag 0x0 [ 2099.593255][T21524] steelseries 0003:1038:12B6.004E: unknown main item tag 0x6 [ 2099.593392][T21524] steelseries 0003:1038:12B6.004E: item fetching failed at offset 4/7 [ 2099.594335][T21524] steelseries 0003:1038:12B6.004E: probe with driver steelseries failed with error -22 [ 2099.834580][T30621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4820'. [ 2099.862650][T21524] usb 1-1: USB disconnect, device number 119 [ 2100.079734][T30625] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2100.086292][T30625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2100.139240][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2100.139258][ T30] audit: type=1800 audit(1767608641.357:3859): pid=30628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4809" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2100.275179][T21524] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2100.473739][T30625] vhci_hcd vhci_hcd.0: Device attached [ 2100.480991][T21524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2100.492490][T21524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.507980][T21524] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2100.523930][T21524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.544399][T21524] usb 6-1: config 0 descriptor?? [ 2100.625803][T16098] usb 42-1: SetAddress Request (14) to port 0 [ 2100.632791][T16098] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 2100.806533][T30635] hub 9-0:1.0: USB hub found [ 2100.811587][T30635] hub 9-0:1.0: 1 port detected [ 2100.928925][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.937610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.986999][T30626] vhci_hcd: connection reset by peer [ 2101.018811][T30006] vhci_hcd vhci_hcd.4: stop threads [ 2101.022726][T21524] steelseries 0003:1038:12B6.004F: unknown main item tag 0x0 [ 2101.033264][T30006] vhci_hcd vhci_hcd.4: release socket [ 2101.041751][T30006] vhci_hcd vhci_hcd.4: disconnect device [ 2101.060186][T21524] steelseries 0003:1038:12B6.004F: unknown main item tag 0x0 [ 2101.068585][T21524] steelseries 0003:1038:12B6.004F: unknown main item tag 0x6 [ 2101.081232][T21524] steelseries 0003:1038:12B6.004F: item fetching failed at offset 4/7 [ 2101.092954][T21524] steelseries 0003:1038:12B6.004F: probe with driver steelseries failed with error -22 [ 2101.222027][T17339] usb 6-1: USB disconnect, device number 123 [ 2101.629934][T30644] loop6: detected capacity change from 0 to 524288000 [ 2101.866883][T30645] support for the xor transformation has been removed. [ 2101.899022][T30648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4813'. [ 2102.354253][T30660] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4817'. [ 2102.381162][T30659] sctp: [Deprecated]: syz.0.4815 (pid 30659) Use of int in maxseg socket option. [ 2102.381162][T30659] Use struct sctp_assoc_value instead [ 2102.496546][T30661] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4816'. [ 2103.233399][T30673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4819'. [ 2103.427113][T30675] loop6: detected capacity change from 0 to 524288000 [ 2103.536393][T30678] support for the xor transformation has been removed. [ 2104.046658][T30684] support for the xor transformation has been removed. [ 2104.788263][T30688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4824'. [ 2104.831784][T30691] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4825'. [ 2105.098100][T30697] usb usb8: usbfs: process 30697 (syz.5.4826) did not claim interface 0 before use [ 2105.235628][T17339] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2105.405641][T17339] usb 2-1: Using ep0 maxpacket: 8 [ 2105.424256][T17339] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2105.432733][T17339] usb 2-1: config 0 has no interface number 0 [ 2105.445609][T17339] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2105.461566][T17339] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2105.477392][T17339] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2105.495600][T17339] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2105.513509][T17339] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2105.535661][T17339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.579827][T17339] usb 2-1: config 0 descriptor?? [ 2105.600963][T17339] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2105.685787][T16098] usb 42-1: device descriptor read/8, error -110 [ 2105.802056][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4829'. [ 2105.824227][T17341] usb 2-1: USB disconnect, device number 17 [ 2105.834286][T17341] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 2105.909905][T30706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.919203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.076886][T16098] usb usb42-port1: attempt power cycle [ 2106.428742][T30713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4831'. [ 2106.636929][T16098] usb usb42-port1: unable to enumerate USB device [ 2106.743643][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4832'. [ 2107.072401][T30719] loop6: detected capacity change from 0 to 524288000 [ 2107.215969][T30720] support for the xor transformation has been removed. [ 2107.458367][T30726] sctp: [Deprecated]: syz.3.4835 (pid 30726) Use of int in maxseg socket option. [ 2107.458367][T30726] Use struct sctp_assoc_value instead [ 2107.719851][T30735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4836'. [ 2107.795850][T30735] ip6tnl0: Caught tx_queue_len zero misconfig [ 2107.817259][T30732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4834'. [ 2107.829888][T30732] netlink: 'syz.0.4834': attribute type 13 has an invalid length. [ 2108.678942][T30743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2108.699589][T30743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2108.733807][T30732] 8021q: adding VLAN 0 to HW filter on device team0 [ 2108.785437][T30744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4837'. [ 2108.802242][T30732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2108.916614][T30744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4837'. [ 2108.977463][T30744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4837'. [ 2109.513609][T30756] loop6: detected capacity change from 0 to 524288000 [ 2109.622363][T30756] support for the xor transformation has been removed. [ 2111.095893][T30770] loop6: detected capacity change from 0 to 524288000 [ 2111.143236][T30774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4844'. [ 2111.616800][T30770] support for the xor transformation has been removed. [ 2112.023322][T30787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.032960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.495892][T30796] hub 9-0:1.0: USB hub found [ 2112.529157][T30796] hub 9-0:1.0: 1 port detected [ 2113.634732][T30804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4850'. [ 2114.567058][T30829] loop6: detected capacity change from 0 to 524288000 [ 2114.595113][T16098] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2114.665173][T30830] support for the xor transformation has been removed. [ 2114.765629][T16098] usb 6-1: Using ep0 maxpacket: 16 [ 2114.774573][T16098] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2114.793520][T16098] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2114.824549][T16098] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2114.917639][T16098] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2114.960164][T16098] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2114.969628][T16098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.975424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.978142][T16098] usb 6-1: Product: syz [ 2114.991139][T16098] usb 6-1: Manufacturer: syz [ 2114.998180][T16098] usb 6-1: SerialNumber: syz [ 2115.363290][T16098] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 124 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2115.706620][T30840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.721282][T30840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.971845][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 2115.986786][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 2116.032254][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 2116.400153][T30845] loop6: detected capacity change from 0 to 524288000 [ 2116.496904][T30846] support for the xor transformation has been removed. [ 2116.945163][T17341] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 2117.048485][T30854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.105742][T30855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4862'. [ 2117.125332][T17341] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2117.138912][T17341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.154689][T30855] hub 9-0:1.0: USB hub found [ 2117.163070][T17341] usb 1-1: Product: syz [ 2117.164339][T30855] hub 9-0:1.0: 1 port detected [ 2117.208318][T17341] usb 1-1: Manufacturer: syz [ 2117.226209][T17341] usb 1-1: SerialNumber: syz [ 2117.245294][T17341] usb 1-1: config 0 descriptor?? [ 2117.347051][T16098] usb 6-1: USB disconnect, device number 124 [ 2117.356033][T16098] usblp1: removed [ 2117.476732][T17341] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2117.805743][T16098] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2117.955605][T16098] usb 6-1: Using ep0 maxpacket: 32 [ 2117.962569][T16098] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2117.973169][T16098] usb 6-1: config 0 has no interface number 0 [ 2118.004628][T16098] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2118.018444][T16098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.038615][T16098] usb 6-1: Product: syz [ 2118.042792][T16098] usb 6-1: Manufacturer: syz [ 2118.054032][T16098] usb 6-1: SerialNumber: syz [ 2118.096792][T16098] usb 6-1: config 0 descriptor?? [ 2118.108506][T16098] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2118.320127][T16098] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2118.350295][T16098] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2118.762484][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2118.770765][T16098] usb 6-1: USB disconnect, device number 125 [ 2118.780339][T16098] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2118.795724][T16098] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2118.808573][T16098] quatech2 6-1:0.51: device disconnected [ 2119.578015][T30883] fuse: Bad value for 'fd' [ 2119.653424][T30885] loop6: detected capacity change from 0 to 524288000 [ 2119.833083][T30887] support for the xor transformation has been removed. [ 2119.875199][T16098] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2120.028321][T16098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.042990][T16098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2120.063702][T16098] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2120.074051][T16098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.138260][T16098] usb 2-1: config 0 descriptor?? [ 2120.201062][T17341] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2120.212868][T17341] usb 1-1: USB disconnect, device number 120 [ 2120.587747][T16098] steelseries 0003:1038:12B6.0050: unknown main item tag 0x0 [ 2120.608023][T16098] steelseries 0003:1038:12B6.0050: unknown main item tag 0x0 [ 2120.618150][T16098] steelseries 0003:1038:12B6.0050: unknown main item tag 0x6 [ 2120.638385][T16098] steelseries 0003:1038:12B6.0050: item fetching failed at offset 4/7 [ 2120.659038][T16098] steelseries 0003:1038:12B6.0050: probe with driver steelseries failed with error -22 [ 2120.792943][T17341] usb 2-1: USB disconnect, device number 18 [ 2121.038273][T30893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4871'. [ 2121.056110][T30900] loop6: detected capacity change from 0 to 524288000 [ 2121.125543][T17341] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2121.164627][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 2121.198718][T30902] support for the xor transformation has been removed. [ 2121.295235][T17341] usb 6-1: Using ep0 maxpacket: 8 [ 2121.318958][T17341] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2121.334922][T17341] usb 6-1: config 0 has no interface number 0 [ 2121.350274][T17341] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2121.379289][T17341] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2121.410195][T17341] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2121.441139][T17341] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2121.505765][T17341] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2121.523877][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.536104][T17341] usb 6-1: config 0 descriptor?? [ 2121.692250][T17341] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2122.012153][T17341] usb 6-1: USB disconnect, device number 126 [ 2122.032615][T17341] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 2123.206376][T30923] loop6: detected capacity change from 0 to 524288000 [ 2123.695827][T30924] support for the xor transformation has been removed. [ 2124.384349][T17339] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2124.509394][T30936] loop6: detected capacity change from 0 to 524288000 [ 2124.578843][T17339] usb 2-1: Using ep0 maxpacket: 32 [ 2124.589278][T17339] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2124.598093][T17339] usb 2-1: config 0 has no interface number 0 [ 2124.605239][T30936] support for the xor transformation has been removed. [ 2124.613376][T17339] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2124.622914][T17339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.633052][T17339] usb 2-1: Product: syz [ 2124.640552][T17339] usb 2-1: Manufacturer: syz [ 2124.647096][T17339] usb 2-1: SerialNumber: syz [ 2124.698321][T17339] usb 2-1: config 0 descriptor?? [ 2124.723746][T17339] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2124.919430][T17339] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2124.931814][T17339] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2125.383145][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2125.392687][T17339] usb 2-1: USB disconnect, device number 19 [ 2125.402968][T17339] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2125.421503][T17339] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2125.436552][T17339] quatech2 2-1:0.51: device disconnected [ 2126.060266][T30943] support for the xor transformation has been removed. [ 2126.707041][T17339] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2126.828736][T30959] vivid-008: disconnect [ 2126.884523][T17339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.902911][T17339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.913109][T17339] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2126.922468][T17339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.961765][T17339] usb 1-1: config 0 descriptor?? [ 2127.049538][T30962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4888'. [ 2127.466518][T17339] steelseries 0003:1038:12B6.0051: unknown main item tag 0x0 [ 2127.475615][T17339] steelseries 0003:1038:12B6.0051: unknown main item tag 0x0 [ 2127.502127][T17339] steelseries 0003:1038:12B6.0051: unknown main item tag 0x6 [ 2127.510454][T17339] steelseries 0003:1038:12B6.0051: item fetching failed at offset 4/7 [ 2127.521371][T17339] steelseries 0003:1038:12B6.0051: probe with driver steelseries failed with error -22 [ 2127.581792][T21524] usb 1-1: USB disconnect, device number 121 [ 2127.650106][T30956] vivid-008: reconnect [ 2127.961423][T30977] binder: BINDER_SET_CONTEXT_MGR already set [ 2127.976129][T30977] binder: 30966:30977 ioctl 4018620d 80000040 returned -16 [ 2128.673381][T30987] picdev_read: 77 callbacks suppressed [ 2128.673404][T30987] kvm: pic: non byte read [ 2128.762836][T30987] kvm: pic: non byte read [ 2128.772439][T30987] kvm: pic: non byte read [ 2128.820928][T30987] kvm: pic: non byte read [ 2128.866152][T30987] kvm: pic: non byte read [ 2128.894024][T30987] kvm: pic: non byte read [ 2128.908823][T30987] kvm: pic: non byte read [ 2128.918820][T30987] kvm: pic: non byte read [ 2128.940000][T30987] kvm: pic: non byte read [ 2128.955655][T30987] kvm: pic: non byte read [ 2129.614200][T30996] tipc: Enabling of bearer rejected, failed to enable media [ 2129.715497][T31003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2129.727372][T31003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2129.897066][T31006] hub 9-0:1.0: USB hub found [ 2130.033222][T31006] hub 9-0:1.0: 1 port detected [ 2130.066499][T31013] loop6: detected capacity change from 0 to 524288000 [ 2130.161218][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4898'. [ 2130.175835][T31013] support for the xor transformation has been removed. [ 2131.802794][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4903'. [ 2131.845211][T17341] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2132.002314][T17341] usb 1-1: Using ep0 maxpacket: 8 [ 2132.052102][T17341] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2132.061859][T17341] usb 1-1: config 0 has no interface number 0 [ 2132.070496][T17341] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2132.092566][T17341] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2132.105852][T17341] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2132.118636][T17341] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2132.132090][T17341] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2132.141308][T17341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.154410][T17341] usb 1-1: config 0 descriptor?? [ 2132.177358][T17341] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2132.267858][T31041] loop6: detected capacity change from 0 to 524288000 [ 2132.375969][T31042] support for the xor transformation has been removed. [ 2132.406250][T17341] usb 1-1: USB disconnect, device number 122 [ 2132.414139][T17341] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 2134.127410][T31067] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4912'. [ 2134.186232][T17339] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2134.421206][T17339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.456072][T17339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2134.478178][T17339] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2134.487815][T17339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.516336][T17339] usb 2-1: config 0 descriptor?? [ 2135.168538][T17339] usbhid 2-1:0.0: can't add hid device: -71 [ 2135.174575][T17339] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2135.190281][T17339] usb 2-1: USB disconnect, device number 20 [ 2136.690635][T31096] binder: 31093:31096 ioctl c0306201 0 returned -14 [ 2136.708608][T31096] binder: 31093:31096 ioctl c0306201 0 returned -14 [ 2137.020433][T31102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.125221][T17341] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2137.275215][T17341] usb 6-1: Using ep0 maxpacket: 8 [ 2137.284183][T17341] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2137.325415][T17341] usb 6-1: config 0 has no interface number 0 [ 2137.331540][T17341] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2137.365642][T17341] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2137.397841][T17341] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2137.409166][T17341] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2137.445181][T17341] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2137.460340][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.487586][T17341] usb 6-1: config 0 descriptor?? [ 2137.527998][T17341] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2137.863395][T17339] usb 6-1: USB disconnect, device number 127 [ 2137.874438][T17339] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 2137.879440][T31104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.890170][T31104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.181216][T31115] loop6: detected capacity change from 0 to 524288000 [ 2138.221667][T31117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.230077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.305918][T31119] support for the xor transformation has been removed. [ 2138.542451][T31123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.555300][T31123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.572110][T31123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.651276][T31121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.666510][T31121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2140.579912][T31153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4928'. [ 2140.665852][T17339] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2140.828917][T17339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2140.841074][T17339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2140.863007][T17339] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2140.873096][T17339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.887035][T17339] usb 6-1: config 0 descriptor?? [ 2141.329711][T17339] steelseries 0003:1038:12B6.0052: unknown main item tag 0x0 [ 2141.346930][T17339] steelseries 0003:1038:12B6.0052: unknown main item tag 0x0 [ 2141.361006][T17339] steelseries 0003:1038:12B6.0052: unknown main item tag 0x6 [ 2141.374605][T17339] steelseries 0003:1038:12B6.0052: item fetching failed at offset 4/7 [ 2141.394296][T17339] steelseries 0003:1038:12B6.0052: probe with driver steelseries failed with error -22 [ 2141.527231][T17341] usb 6-1: USB disconnect, device number 2 [ 2141.581894][T31165] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2141.651733][T31168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.670725][T31168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.860674][T31171] loop6: detected capacity change from 0 to 524288000 [ 2141.946099][T31171] support for the xor transformation has been removed. [ 2142.405186][T17341] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2142.606129][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2142.617294][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2142.646129][T17341] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2142.665666][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.686426][T17341] usb 6-1: config 0 descriptor?? [ 2143.104435][T17341] steelseries 0003:1038:12B6.0053: unknown main item tag 0x0 [ 2143.112109][T17341] steelseries 0003:1038:12B6.0053: unknown main item tag 0x0 [ 2143.119591][T17341] steelseries 0003:1038:12B6.0053: unknown main item tag 0x6 [ 2143.127030][T17341] steelseries 0003:1038:12B6.0053: item fetching failed at offset 4/7 [ 2143.136029][T17341] steelseries 0003:1038:12B6.0053: probe with driver steelseries failed with error -22 [ 2143.358732][T17339] usb 6-1: USB disconnect, device number 3 [ 2143.692254][T31192] loop6: detected capacity change from 0 to 524288000 [ 2143.865187][T31196] support for the xor transformation has been removed. [ 2144.415118][T17341] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2144.568835][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2144.585735][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2144.595891][T17341] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2144.604946][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.618377][T17341] usb 6-1: config 0 descriptor?? [ 2144.757340][T31204] loop6: detected capacity change from 0 to 524288000 [ 2144.805692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.814622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.822927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.831244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.839495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.847745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.855977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.864234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.872540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.880812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.083052][T31206] support for the xor transformation has been removed. [ 2145.320562][T17341] usbhid 6-1:0.0: can't add hid device: -71 [ 2145.367673][T17341] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2145.387993][T17341] usb 6-1: USB disconnect, device number 4 [ 2145.816282][T31226] fuse: Bad value for 'fd' [ 2145.871329][T31225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4945'. [ 2145.919854][T31226] nvme_fabrics: missing parameter 'transport=%s' [ 2145.967307][T31226] nvme_fabrics: missing parameter 'nqn=%s' [ 2146.575761][T17339] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2146.758595][T17339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.775375][T17339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2146.799182][T17339] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2146.831945][T17339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.867941][T17339] usb 6-1: config 0 descriptor?? [ 2147.100827][T31243] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2147.348303][T17339] steelseries 0003:1038:12B6.0054: unknown main item tag 0x0 [ 2147.357733][T17339] steelseries 0003:1038:12B6.0054: unknown main item tag 0x0 [ 2147.373446][T17339] steelseries 0003:1038:12B6.0054: unknown main item tag 0x6 [ 2147.396010][T17339] steelseries 0003:1038:12B6.0054: item fetching failed at offset 4/7 [ 2147.404729][T17339] steelseries 0003:1038:12B6.0054: probe with driver steelseries failed with error -22 [ 2147.606654][T17341] usb 6-1: USB disconnect, device number 5 [ 2148.305599][T31249] loop6: detected capacity change from 0 to 524288000 [ 2148.440235][T31248] support for the xor transformation has been removed. [ 2149.525670][T17339] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2149.675466][T17339] usb 1-1: Using ep0 maxpacket: 8 [ 2149.681808][T17339] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2149.690963][T17339] usb 1-1: config 0 has no interface number 0 [ 2149.697854][T17339] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2149.709299][T17339] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2149.727914][T17339] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2149.750008][T17339] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2149.766442][T17339] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2149.778936][T17339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.802195][T17339] usb 1-1: config 0 descriptor?? [ 2149.826843][T17339] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2150.086739][T17339] usb 1-1: USB disconnect, device number 123 [ 2150.104905][T17339] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 2150.208426][T31279] loop6: detected capacity change from 0 to 524288000 [ 2150.255708][T16098] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2150.285172][T31279] support for the xor transformation has been removed. [ 2150.447894][T16098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.459214][T16098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.469791][T16098] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2150.483201][T16098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.496533][T16098] usb 6-1: config 0 descriptor?? [ 2150.536570][T31278] usb usb8: usbfs: process 31278 (syz.1.4954) did not claim interface 0 before use [ 2151.158420][T16098] usbhid 6-1:0.0: can't add hid device: -71 [ 2151.215433][T16098] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2151.234429][T31285] loop6: detected capacity change from 0 to 524288000 [ 2151.244750][T16098] usb 6-1: USB disconnect, device number 6 [ 2151.312207][T31285] support for the xor transformation has been removed. [ 2151.370009][ T30] audit: type=1326 audit(1767608692.587:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2151.394045][ T30] audit: type=1326 audit(1767608692.607:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2151.466549][ T30] audit: type=1326 audit(1767608692.647:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2151.509904][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4958'. [ 2151.539880][ T30] audit: type=1326 audit(1767608692.647:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2151.640844][ T30] audit: type=1326 audit(1767608692.647:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2151.713110][ T30] audit: type=1326 audit(1767608692.647:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2151.872730][ T30] audit: type=1326 audit(1767608692.717:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2151.948929][ T30] audit: type=1326 audit(1767608692.717:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2152.002588][ T30] audit: type=1326 audit(1767608692.717:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2152.057981][ T30] audit: type=1326 audit(1767608692.737:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2152.082252][ C0] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 2152.092430][T31293] loop7: detected capacity change from 16384 to 0 [ 2152.099171][ C0] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2152.099193][ C0] Buffer I/O error on dev loop7, logical block 608, async page read [ 2152.462952][T31304] fuse: Bad value for 'fd' [ 2152.554264][T31308] net_ratelimit: 36 callbacks suppressed [ 2152.554287][T31308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.569511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.578996][T31308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.589611][T31205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.598506][T21524] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 2152.605853][T31307] fuse: Bad value for 'fd' [ 2152.655464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.668914][T31311] loop6: detected capacity change from 0 to 524288000 [ 2152.815770][T31312] support for the xor transformation has been removed. [ 2152.888882][T21524] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2152.897317][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2152.915507][T17341] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2152.925837][T21524] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2152.952525][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2152.979430][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2153.032694][T21524] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2153.086835][T17341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.098388][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2153.110319][T17341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.121107][T17341] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2153.130324][T21524] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2153.142936][T17341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.150987][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2153.171825][T17341] usb 2-1: config 0 descriptor?? [ 2153.183274][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2153.307961][T21524] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2153.315858][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2153.357242][T21524] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2153.405635][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2153.462335][T21524] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2153.599672][T17341] steelseries 0003:1038:12B6.0055: unknown main item tag 0x0 [ 2153.611770][T17341] steelseries 0003:1038:12B6.0055: unknown main item tag 0x0 [ 2153.620429][T31301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.629986][T17341] steelseries 0003:1038:12B6.0055: unknown main item tag 0x6 [ 2153.630272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.646747][T17341] steelseries 0003:1038:12B6.0055: item fetching failed at offset 4/7 [ 2153.665882][T17341] steelseries 0003:1038:12B6.0055: probe with driver steelseries failed with error -22 [ 2153.711511][T21524] usb 6-1: string descriptor 0 read error: -22 [ 2153.727633][T21524] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2153.745732][T21524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.822616][T17341] usb 2-1: USB disconnect, device number 21 [ 2153.878469][T21524] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2154.169365][T31321] loop6: detected capacity change from 0 to 524288000 [ 2154.204852][T31300] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2154.265633][T16098] usb 6-1: USB disconnect, device number 7 [ 2154.596442][T31321] support for the xor transformation has been removed. [ 2155.046147][T17341] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2155.119305][T31334] loop6: detected capacity change from 0 to 524288000 [ 2155.165777][T31334] support for the xor transformation has been removed. [ 2155.186902][T31337] fuse: Unknown parameter 'mGN8oad' [ 2155.215120][T17341] usb 2-1: Using ep0 maxpacket: 8 [ 2155.233825][T17341] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2155.243261][T17341] usb 2-1: config 0 has no interface number 0 [ 2155.251038][T17341] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2155.263375][T17341] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2155.286537][T17341] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2155.299687][T17341] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2155.313626][T17341] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2155.399908][T17341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.411885][T17341] usb 2-1: config 0 descriptor?? [ 2155.424044][T17341] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2155.803147][T17339] usb 2-1: USB disconnect, device number 22 [ 2155.818659][T17339] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 2156.106915][T31338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.115530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.133978][T31349] bond7: option mode: unable to set because the bond device has slaves [ 2156.519815][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4972'. [ 2157.617919][T31364] loop6: detected capacity change from 0 to 524288000 [ 2157.736190][T31366] support for the xor transformation has been removed. [ 2158.050043][T31371] support for the xor transformation has been removed. [ 2158.840480][T31383] can: request_module (can-proto-3) failed. [ 2159.638083][T31402] loop6: detected capacity change from 0 to 524288000 [ 2159.748259][T31402] support for the xor transformation has been removed. [ 2159.911785][T31403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.924376][T31403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.259488][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.266521][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.218349][T31424] loop6: detected capacity change from 0 to 524288000 [ 2161.337009][T31425] support for the xor transformation has been removed. [ 2161.878991][T31432] delete_channel: no stack [ 2162.375774][T17339] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2162.526907][T17339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.538486][T17339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.549512][T17339] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2162.562619][T17339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.583797][T17339] usb 6-1: config 0 descriptor?? [ 2162.903505][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4989'. [ 2163.019156][T17339] steelseries 0003:1038:12B6.0056: unknown main item tag 0x0 [ 2163.037976][T17339] steelseries 0003:1038:12B6.0056: unknown main item tag 0x0 [ 2163.058239][T17339] steelseries 0003:1038:12B6.0056: unknown main item tag 0x6 [ 2163.076146][T17339] steelseries 0003:1038:12B6.0056: item fetching failed at offset 4/7 [ 2163.097119][T17339] steelseries 0003:1038:12B6.0056: probe with driver steelseries failed with error -22 [ 2163.226186][T17339] usb 6-1: USB disconnect, device number 8 [ 2163.678383][T31457] netlink: 'syz.1.4992': attribute type 12 has an invalid length. [ 2163.703337][T31456] loop6: detected capacity change from 0 to 524288000 [ 2163.761266][T31457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4992'. [ 2163.821875][T17341] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 2163.829524][T17341] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 2163.842609][T17341] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 2163.864834][T17341] hid-generic 0003:0004:0000.0057: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2163.964646][T31461] fido_id[31461]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2164.032822][T31459] support for the xor transformation has been removed. [ 2164.735322][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4993'. [ 2165.642134][T31490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.678108][T31490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.704417][T31490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.717059][T31490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.788874][T31490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.810393][T31490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.819299][T31490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.303093][T31493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4998'. [ 2166.360785][T31498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4999'. [ 2166.393856][T31493] : entered promiscuous mode [ 2167.135975][T17339] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2167.295637][T17339] usb 2-1: Using ep0 maxpacket: 8 [ 2167.315506][T17339] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2167.334608][T17339] usb 2-1: config 0 has no interface number 0 [ 2167.351377][T17339] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2167.382234][T17339] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2167.408611][T17339] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2167.433701][T17339] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2167.466637][T17339] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2167.491538][T17339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.531504][T17339] usb 2-1: config 0 descriptor?? [ 2167.563527][T17339] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2168.067623][T17339] usb 2-1: USB disconnect, device number 23 [ 2168.076189][T17339] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 2168.226582][T31521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 2169.075405][T17339] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2169.230169][T17339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2169.246552][T17339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2169.267804][T17339] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2169.288995][T17339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.314574][T17339] usb 2-1: config 0 descriptor?? [ 2169.772477][T17339] steelseries 0003:1038:12B6.0058: unknown main item tag 0x0 [ 2169.790593][T17339] steelseries 0003:1038:12B6.0058: unknown main item tag 0x0 [ 2169.812417][T17339] steelseries 0003:1038:12B6.0058: unknown main item tag 0x6 [ 2169.825607][T17339] steelseries 0003:1038:12B6.0058: item fetching failed at offset 4/7 [ 2169.846847][T17339] steelseries 0003:1038:12B6.0058: probe with driver steelseries failed with error -22 [ 2169.932459][T31517] loop6: detected capacity change from 0 to 524288000 [ 2170.094740][T17339] usb 2-1: USB disconnect, device number 24 [ 2172.085374][T17341] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2172.136525][T31570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5013'. [ 2172.285120][T17341] usb 1-1: Using ep0 maxpacket: 32 [ 2172.294395][T17341] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2172.308343][T17341] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2172.317651][T17341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.327208][T17341] usb 1-1: Product: syz [ 2172.333717][T17341] usb 1-1: Manufacturer: syz [ 2172.342799][T17341] usb 1-1: SerialNumber: syz [ 2172.353078][T17341] usb 1-1: config 0 descriptor?? [ 2173.145834][T31588] usb usb8: usbfs: process 31588 (syz.1.5014) did not claim interface 0 before use [ 2173.215604][T17339] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2173.416388][T17339] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 2173.424674][T17339] usb 6-1: config 0 has no interface number 0 [ 2173.439232][T17339] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2173.508154][T17339] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2173.524578][T17339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.547468][T17339] usb 6-1: Product: syz [ 2173.575471][T17339] usb 6-1: Manufacturer: syz [ 2173.581558][T17339] usb 6-1: SerialNumber: syz [ 2173.605718][T17341] gs_usb 1-1:0.0: Couldn't get device config: (err=-110) [ 2173.613730][T17341] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 2173.633356][T17339] usb 6-1: config 0 descriptor?? [ 2173.714253][T17339] yurex 6-1:0.50: USB YUREX device now attached to Yurex #1 [ 2174.068955][T31592] usb 1-1: USB disconnect, device number 124 [ 2174.118215][T31592] usb usb1: check_ctrlrecip: process 31592 (syz.3.5018) requesting ep 01 but needs 81 [ 2174.174340][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.187028][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.196104][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.208111][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.227415][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.237986][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.256201][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.264697][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.285200][T31592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.293646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.320795][T31594] input: syz1 as /devices/virtual/input/input146 [ 2175.184640][T31600] loop6: detected capacity change from 0 to 524288000 [ 2175.355921][T31601] support for the xor transformation has been removed. [ 2176.124916][T31614] loop6: detected capacity change from 0 to 524288000 [ 2176.266927][T31615] support for the xor transformation has been removed. [ 2176.557497][T17341] usb 6-1: USB disconnect, device number 9 [ 2176.605871][T17341] yurex 6-1:0.50: USB YUREX #1 now disconnected [ 2178.167553][T31639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2178.227511][T31644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5029'. [ 2178.263203][T31646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2178.278024][T31639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2178.435497][T17339] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2178.587565][T17339] usb 6-1: device descriptor read/64, error -71 [ 2178.828779][T17339] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2178.975720][T17339] usb 6-1: device descriptor read/64, error -71 [ 2179.086022][T17339] usb usb6-port1: attempt power cycle [ 2179.435365][T17339] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2179.457473][T17339] usb 6-1: device descriptor read/8, error -71 [ 2179.665893][T31656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5031'. [ 2179.695858][T17339] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2179.716318][T17339] usb 6-1: device descriptor read/8, error -71 [ 2179.732886][T31661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5033'. [ 2179.825635][T17339] usb usb6-port1: unable to enumerate USB device [ 2179.927454][T31665] net_ratelimit: 3861 callbacks suppressed [ 2179.927466][T31665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.942421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2180.470273][T31668] loop6: detected capacity change from 0 to 524288000 [ 2180.671187][T31671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2180.681252][T31671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2180.715762][T31669] support for the xor transformation has been removed. [ 2180.920429][T31677] fuse: Bad value for 'fd' [ 2181.511819][T31686] loop6: detected capacity change from 0 to 524288000 [ 2181.586966][T31686] support for the xor transformation has been removed. [ 2181.705291][T17341] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2181.901447][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.946758][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.979043][T17341] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2182.010938][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.042760][T17341] usb 6-1: config 0 descriptor?? [ 2182.670837][ T1091] tipc: Subscription rejected, illegal request [ 2182.850229][T31684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5040'. [ 2182.921313][T17341] usbhid 6-1:0.0: can't add hid device: -71 [ 2182.950394][T17341] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2182.977660][T17341] usb 6-1: USB disconnect, device number 14 [ 2183.875162][T17341] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2183.989843][T31717] usb usb8: usbfs: process 31717 (syz.4.5046) did not claim interface 0 before use [ 2184.095972][T31718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5047'. [ 2184.116349][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2184.127352][T17341] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2184.137255][T17341] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2184.146427][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.161930][T17341] usb 6-1: config 0 descriptor?? [ 2184.572625][T17341] steelseries 0003:1038:12B6.0059: unknown main item tag 0x0 [ 2184.582007][T17341] steelseries 0003:1038:12B6.0059: unknown main item tag 0x0 [ 2184.589669][T17341] steelseries 0003:1038:12B6.0059: unknown main item tag 0x6 [ 2184.597219][T17341] steelseries 0003:1038:12B6.0059: item fetching failed at offset 4/7 [ 2184.606129][T17341] steelseries 0003:1038:12B6.0059: probe with driver steelseries failed with error -22 [ 2184.730267][T31720] loop6: detected capacity change from 0 to 524288000 [ 2184.778345][T17341] usb 6-1: USB disconnect, device number 15 [ 2184.796080][T31720] support for the xor transformation has been removed. [ 2184.995732][T31723] loop6: detected capacity change from 0 to 524288000 [ 2185.076565][T31723] support for the xor transformation has been removed. [ 2185.187030][T31731] support for the xor transformation has been removed. [ 2185.206439][T17339] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2185.377921][T17339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.395766][T17339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.419804][T17339] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2185.442326][T17339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.466112][T17339] usb 2-1: config 0 descriptor?? [ 2185.896542][T17339] steelseries 0003:1038:12B6.005A: unknown main item tag 0x0 [ 2185.907628][T17339] steelseries 0003:1038:12B6.005A: unknown main item tag 0x0 [ 2185.922422][T17339] steelseries 0003:1038:12B6.005A: unknown main item tag 0x6 [ 2185.940713][T17339] steelseries 0003:1038:12B6.005A: item fetching failed at offset 4/7 [ 2185.956446][T17339] steelseries 0003:1038:12B6.005A: probe with driver steelseries failed with error -22 [ 2186.138243][T21524] usb 2-1: USB disconnect, device number 25 [ 2186.536341][T31754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5057'. [ 2186.727623][T31754] libceph: resolve '0..' (ret=-3): failed [ 2187.956785][T31770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5060'. [ 2188.405196][T21524] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2188.575191][T21524] usb 2-1: Using ep0 maxpacket: 8 [ 2188.582537][T21524] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2188.591115][T21524] usb 2-1: config 0 has no interface number 0 [ 2188.597697][T21524] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2188.611801][T21524] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2188.626957][T21524] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2188.641005][T21524] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2188.667122][T21524] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2188.676918][T21524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.693877][T21524] usb 2-1: config 0 descriptor?? [ 2188.718152][T21524] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2188.799545][T31784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.813066][T31784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.912588][T21524] usb 2-1: USB disconnect, device number 26 [ 2188.921124][T21524] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 2189.501515][T31793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2189.513005][T31793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.075616][T16098] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2191.235590][T16098] usb 2-1: Using ep0 maxpacket: 8 [ 2191.274917][T16098] usb 2-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 2191.287271][T16098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.304645][T16098] usb 2-1: Product: syz [ 2191.310915][T16098] usb 2-1: Manufacturer: syz [ 2191.318901][T16098] usb 2-1: SerialNumber: syz [ 2191.330618][T16098] usb 2-1: config 0 descriptor?? [ 2191.349514][T16098] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 2191.674749][T31816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5069'. [ 2191.716010][T31808] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5069'. [ 2192.823410][T31830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5073'. [ 2193.144173][T31834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5074'. [ 2193.375306][T31838] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2194.164504][T16098] pwc: send_video_command error -71 [ 2194.169876][T16098] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2194.184225][T16098] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2194.246618][T16098] usb 2-1: USB disconnect, device number 27 [ 2194.765721][T21524] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2194.851816][T31852] futex_wake_op: syz.4.5078 tries to shift op by 32; fix this program [ 2194.915095][T21524] usb 2-1: Using ep0 maxpacket: 8 [ 2194.923519][T21524] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2194.977004][T21524] usb 2-1: config 0 has no interface number 0 [ 2194.990924][T21524] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2195.019811][T21524] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2195.031646][T21524] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2195.042748][T21524] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2195.058838][T31858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.067181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.078762][T21524] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2195.145126][T21524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.175732][T21524] usb 2-1: config 0 descriptor?? [ 2195.258015][T21524] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2195.349089][T31862] loop6: detected capacity change from 0 to 524288000 [ 2195.429466][T16098] usb 2-1: USB disconnect, device number 28 [ 2195.437965][T16098] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 2195.461617][T31863] support for the xor transformation has been removed. [ 2196.070716][T31872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5083'. [ 2196.102154][T31872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.141792][T31872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.203305][T31872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.227597][T31872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.260107][T31876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.286904][T31876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.304832][T31876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.330192][T31876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.348139][T31879] loop6: detected capacity change from 0 to 524288000 [ 2196.579838][T31877] support for the xor transformation has been removed. [ 2198.022367][T31897] fuse: Unknown parameter 'ԉFfd' [ 2198.333321][T31902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5089'. [ 2198.582695][T31914] loop6: detected capacity change from 0 to 524288000 [ 2198.655748][T31914] support for the xor transformation has been removed. [ 2198.995645][T31920] support for the xor transformation has been removed. [ 2199.647537][T31925] loop6: detected capacity change from 0 to 524288000 [ 2199.795306][T31927] support for the xor transformation has been removed. [ 2200.039445][T31925] Dev loop6: unable to read RDB block 8 [ 2200.045245][T31925] loop6: unable to read partition table [ 2200.096072][T31925] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 2201.730979][T31951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.740697][T31951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.932859][T17341] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2202.135435][T17341] usb 2-1: Using ep0 maxpacket: 32 [ 2202.185668][T17341] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2202.198906][T17341] usb 2-1: config 0 has no interfaces? [ 2202.238006][T17341] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2202.247800][T17341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.257032][T17341] usb 2-1: Product: syz [ 2202.268457][T17341] usb 2-1: Manufacturer: syz [ 2202.277629][T17341] usb 2-1: SerialNumber: syz [ 2202.326274][T17341] usb 2-1: config 0 descriptor?? [ 2202.649670][T31964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.660084][T31964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.722461][T31979] loop6: detected capacity change from 0 to 524288000 [ 2203.829564][T31982] usb usb8: usbfs: process 31982 (syz.5.5105) did not claim interface 0 before use [ 2203.841641][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5103'. [ 2203.996109][T31983] support for the xor transformation has been removed. [ 2204.466926][T31988] loop6: detected capacity change from 0 to 524288000 [ 2204.725991][T16098] usb 2-1: USB disconnect, device number 29 [ 2205.658401][T31987] support for the xor transformation has been removed. [ 2205.845496][T16098] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2206.047212][T16098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2206.060429][T16098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2206.074065][T16098] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2206.083734][T16098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.094083][T16098] usb 6-1: config 0 descriptor?? [ 2206.480576][T32010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5112'. [ 2206.512538][T16098] steelseries 0003:1038:12B6.005B: unknown main item tag 0x0 [ 2206.531684][T16098] steelseries 0003:1038:12B6.005B: unknown main item tag 0x0 [ 2206.545570][T16098] steelseries 0003:1038:12B6.005B: unknown main item tag 0x6 [ 2206.558146][T16098] steelseries 0003:1038:12B6.005B: item fetching failed at offset 4/7 [ 2206.567760][T16098] steelseries 0003:1038:12B6.005B: probe with driver steelseries failed with error -22 [ 2206.640174][T32017] netlink: 'syz.1.5113': attribute type 4 has an invalid length. [ 2206.648861][T32017] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5113'. [ 2206.707390][T32017] delete_channel: no stack [ 2206.794146][T21524] usb 6-1: USB disconnect, device number 16 [ 2207.568277][T32033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5117'. [ 2208.370592][T32035] loop6: detected capacity change from 0 to 524288000 [ 2208.527006][T32038] support for the xor transformation has been removed. [ 2208.603641][T32040] usb usb8: usbfs: process 32040 (syz.5.5119) did not claim interface 0 before use [ 2209.572883][T32049] loop6: detected capacity change from 0 to 524288000 [ 2210.676131][T32053] support for the xor transformation has been removed. [ 2211.272380][T32068] loop6: detected capacity change from 0 to 524288000 [ 2211.436386][T32068] support for the xor transformation has been removed. [ 2212.426092][T32076] support for the xor transformation has been removed. [ 2213.119521][T32086] loop6: detected capacity change from 0 to 524288000 [ 2213.252004][T32089] tipc: New replicast peer: 0.0.0.0 [ 2213.275328][T32086] support for the xor transformation has been removed. [ 2213.321341][T32090] net_ratelimit: 107 callbacks suppressed [ 2213.321360][T32090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.335659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.344107][T32089] tipc: Enabled bearer , priority 10 [ 2214.140295][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5130'. [ 2214.365262][T17341] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2214.525447][T17341] usb 6-1: Using ep0 maxpacket: 8 [ 2214.534482][T17341] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2214.544174][T17341] usb 6-1: config 0 has no interface number 0 [ 2214.551581][T17341] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2214.566711][T17341] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2214.599068][T17341] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2214.637628][T17341] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2214.657848][T17341] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2214.667776][T17341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.715551][T17341] usb 6-1: config 0 descriptor?? [ 2214.735709][T17341] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2214.903825][T32105] loop6: detected capacity change from 0 to 524288000 [ 2214.973884][T17341] usb 6-1: USB disconnect, device number 17 [ 2215.006013][T17341] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 2215.036079][T32105] support for the xor transformation has been removed. [ 2215.663547][T32121] loop6: detected capacity change from 0 to 524288000 [ 2215.896595][T32122] support for the xor transformation has been removed. [ 2216.177817][T32127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 2216.426055][T17339] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2216.479433][T32134] input: syz1 as /devices/virtual/input/input147 [ 2216.575674][T17339] usb 6-1: Using ep0 maxpacket: 8 [ 2216.582563][T17339] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2216.592658][T17339] usb 6-1: config 0 has no interface number 0 [ 2216.604241][T17339] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2216.624516][T17339] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2216.642864][T17339] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2216.664557][T17339] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2216.687836][T17339] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2216.710221][T17339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.721512][T17339] usb 6-1: config 0 descriptor?? [ 2216.745730][T17339] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2216.941035][T17341] usb 6-1: USB disconnect, device number 18 [ 2216.954354][T17341] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 2217.261581][T32140] loop6: detected capacity change from 0 to 524288000 [ 2217.325676][T32140] support for the xor transformation has been removed. [ 2217.565802][T32144] support for the xor transformation has been removed. [ 2217.603678][T32147] program syz.4.5141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2217.751253][T32149] input: syz0 as /devices/virtual/input/input148 [ 2218.169670][T32157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5144'. [ 2218.200427][T32150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5142'. [ 2218.301505][T32158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.310056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.669709][T32163] loop6: detected capacity change from 0 to 524288000 [ 2218.725852][T32164] support for the xor transformation has been removed. [ 2219.125889][ T31] INFO: task kworker/0:0:22731 blocked for more than 143 seconds. [ 2219.140339][ T31] Tainted: G L syzkaller #0 [ 2219.156365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2219.197387][ T31] task:kworker/0:0 state:D stack:22200 pid:22731 tgid:22731 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2219.228910][ T31] Workqueue: usb_hub_wq hub_event [ 2219.240050][ T31] Call Trace: [ 2219.248143][ T31] [ 2219.289930][ T31] __schedule+0x149b/0x4fd0 [ 2219.312439][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 2219.325627][ T31] ? __pfx___schedule+0x10/0x10 [ 2219.332327][ T31] ? schedule+0x91/0x360 [ 2219.341299][ T31] schedule+0x165/0x360 [ 2219.347961][ T31] schedule_preempt_disabled+0x13/0x30 [ 2219.355136][ T31] __mutex_lock+0x7e6/0x1350 [ 2219.362357][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2219.371220][ T31] ? hub_event+0x2182/0x4ef0 [ 2219.379036][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2219.385816][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2219.398955][ T31] hub_event+0x2182/0x4ef0 [ 2219.406758][ T31] ? __perf_event_task_sched_in+0xec/0x17e0 [ 2219.414535][ T31] ? __pfx_hub_event+0x10/0x10 [ 2219.421402][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2219.429032][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2219.436785][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2219.447965][ T31] process_scheduled_works+0xad1/0x1770 [ 2219.455881][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2219.471113][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2219.476375][ T31] worker_thread+0x8a0/0xda0 [ 2219.482119][ T31] ? __kthread_parkme+0x7b/0x200 [ 2219.487953][ T31] kthread+0x711/0x8a0 [ 2219.493503][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2219.500138][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.504755][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2219.511225][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.516781][ T31] ret_from_fork+0x510/0xa50 [ 2219.522368][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2219.529000][ T31] ? __switch_to+0xc9e/0x1480 [ 2219.534016][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.541207][ T31] ret_from_fork_asm+0x1a/0x30 [ 2219.547837][ T31] [ 2219.547904][ T31] [ 2219.547904][ T31] Showing all locks held in the system: [ 2219.547918][ T31] 1 lock held by khungtaskd/31: [ 2219.547932][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2219.548022][ T31] 1 lock held by syslogd/5184: [ 2219.548035][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2219.548088][ T31] 1 lock held by klogd/5191: [ 2219.548103][ T31] 2 locks held by getty/5597: [ 2219.548115][ T31] #0: ffff88814d8840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2219.548176][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2219.548240][ T31] 5 locks held by kworker/0:6/5917: [ 2219.548253][ T31] #0: ffff888140ad5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2219.548306][ T31] #1: ffffc9000468fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2219.548358][ T31] #2: ffff8880295be198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2219.548412][ T31] #3: ffff8880295d9518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2219.548465][ T31] #4: ffff888029368768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2219.548539][ T31] 5 locks held by kworker/0:0/22731: [ 2219.548552][ T31] #0: ffff888140ad5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2219.548597][ T31] #1: ffffc9000bc6fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2219.548645][ T31] #2: ffff88802962a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2219.548694][ T31] #3: ffff88802962d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2219.548744][ T31] #4: ffff888029368768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2219.548792][ T31] 5 locks held by kworker/1:2/25228: [ 2219.548804][ T31] #0: ffff888140ad5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2219.548851][ T31] #1: ffffc90004a2fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2219.548899][ T31] #2: ffff888144f71198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2219.548950][ T31] #3: ffff888144f73518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2219.548985][ T31] #4: ffff888144f14768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2219.549021][ T31] 1 lock held by syz.4.5141/32145: [ 2219.549028][ T31] 2 locks held by syz.1.5157/32168: [ 2219.549035][ T31] 1 lock held by syz.5.5146/32169: [ 2219.549042][ T31] [ 2219.549046][ T31] ============================================= [ 2219.549046][ T31] [ 2219.549058][ T31] NMI backtrace for cpu 1 [ 2219.549068][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2219.549083][ T31] Tainted: [L]=SOFTLOCKUP [ 2219.549087][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2219.549093][ T31] Call Trace: [ 2219.549098][ T31] [ 2219.549102][ T31] dump_stack_lvl+0xe8/0x150 [ 2219.549116][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2219.549131][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2219.549149][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2219.549164][ T31] sys_info+0x135/0x170 [ 2219.549176][ T31] watchdog+0xf95/0xfe0 [ 2219.549192][ T31] ? watchdog+0x20a/0xfe0 [ 2219.549208][ T31] kthread+0x711/0x8a0 [ 2219.549225][ T31] ? __pfx_watchdog+0x10/0x10 [ 2219.549239][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.549253][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2219.549268][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.549281][ T31] ret_from_fork+0x510/0xa50 [ 2219.549292][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2219.549301][ T31] ? __switch_to+0xc9e/0x1480 [ 2219.549317][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.549330][ T31] ret_from_fork_asm+0x1a/0x30 [ 2219.549351][ T31] [ 2219.549355][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2219.549389][ C0] NMI backtrace for cpu 0 [ 2219.549403][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2219.549426][ C0] Tainted: [L]=SOFTLOCKUP [ 2219.549432][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2219.549443][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2219.549461][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b1 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2219.549475][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 2219.549491][ C0] RAX: 000000000319674d RBX: ffffffff819713ee RCX: 0000000080000001 [ 2219.549503][ C0] RDX: 0000000000000001 RSI: ffffffff8d792134 RDI: ffffffff8bc083e0 [ 2219.549516][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2219.549529][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822570 [ 2219.549542][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 2219.549554][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 2219.549568][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2219.549580][ C0] CR2: 00000000801a8018 CR3: 000000007580e000 CR4: 00000000003526f0 [ 2219.549595][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2219.549606][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2219.549617][ C0] Call Trace: [ 2219.549623][ C0] [ 2219.549629][ C0] default_idle+0x13/0x20 [ 2219.549648][ C0] default_idle_call+0x73/0xb0 [ 2219.549667][ C0] do_idle+0x1be/0x4d0 [ 2219.549687][ C0] ? __pfx_do_idle+0x10/0x10 [ 2219.549706][ C0] ? do_idle+0xa/0x4d0 [ 2219.549724][ C0] cpu_startup_entry+0x44/0x60 [ 2219.549741][ C0] rest_init+0x2de/0x300 [ 2219.549762][ C0] start_kernel+0x381/0x3d0 [ 2219.549781][ C0] x86_64_start_reservations+0x24/0x30 [ 2219.549802][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2219.549823][ C0] common_startup_64+0x13e/0x147 [ 2219.549851][ C0] [ 2219.550385][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2219.550396][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2219.550410][ T31] Tainted: [L]=SOFTLOCKUP [ 2219.550415][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2219.550421][ T31] Call Trace: [ 2219.550426][ T31] [ 2219.550431][ T31] vpanic+0x1e0/0x670 [ 2219.550446][ T31] panic+0xb9/0xc0 [ 2219.550459][ T31] ? __pfx_panic+0x10/0x10 [ 2219.550478][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2219.550490][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2219.550506][ T31] watchdog+0xfdf/0xfe0 [ 2219.550523][ T31] ? watchdog+0x20a/0xfe0 [ 2219.550540][ T31] kthread+0x711/0x8a0 [ 2219.550554][ T31] ? __pfx_watchdog+0x10/0x10 [ 2219.550568][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.550582][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2219.550598][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.550611][ T31] ret_from_fork+0x510/0xa50 [ 2219.550623][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2219.550632][ T31] ? __switch_to+0xc9e/0x1480 [ 2219.550648][ T31] ? __pfx_kthread+0x10/0x10 [ 2219.550661][ T31] ret_from_fork_asm+0x1a/0x30 [ 2219.550682][ T31] [ 2219.551022][ T31] Kernel Offset: disabled