last executing test programs: 48m56.996676695s ago: executing program 4 (id=5): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) 48m56.579437329s ago: executing program 4 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x7, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x2000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x3, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x24, 0x2, 0x8d00, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48m56.157926693s ago: executing program 4 (id=10): r0 = socket$inet6(0xa, 0x6, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xcc844, &(0x7f0000000000)={0xa, 0x4e22, 0xa19, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) 48m54.946201552s ago: executing program 32 (id=10): r0 = socket$inet6(0xa, 0x6, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0xcc844, &(0x7f0000000000)={0xa, 0x4e22, 0xa19, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) 48m25.992635163s ago: executing program 3 (id=142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)='%', 0x1, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b0001000003000904000001"], 0x0) sendto$inet(r0, &(0x7f0000000100)="fd", 0x1, 0x404c801, 0x0, 0x0) 48m24.236960026s ago: executing program 3 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xd313}, [@generic={0x91, 0x1, 0x1, 0x5e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xa, 0x9, 0x0, 0x5, 0x8, 0x3, 0x7, 0x0, 0x8, 0x25, 0x8b, 0x0, 0x2, 0x7, 0x1, 0x8, 0x4, 0x8a, '\x00', 0x8e, 0x100000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48m23.784313101s ago: executing program 3 (id=154): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x5, 0x8}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 48m23.532404552s ago: executing program 3 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 48m23.301406518s ago: executing program 3 (id=160): userfaultfd(0x0) unshare(0x20000600) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r1, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 48m22.650129591s ago: executing program 3 (id=163): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000100001000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb0000000000000000", @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000001c0000000000000000000000000000000a"], 0xec}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48m21.651989733s ago: executing program 33 (id=163): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000100001000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb0000000000000000", @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000001c0000000000000000000000000000000a"], 0xec}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 45m2.96805615s ago: executing program 5 (id=985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_create_resource$binfmt(0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 45m1.652731864s ago: executing program 5 (id=988): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x9) 45m0.538656525s ago: executing program 5 (id=992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8", 0x1}], 0x1}, 0x0, 0x24000890, 0x1}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x41, 0x0, 0x0) 44m58.509037079s ago: executing program 5 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 44m57.296065127s ago: executing program 5 (id=1007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2d, 0xc0, 0x5, 0x7, 0x7f, 0x5, 0xf, 0x9, 0x3, 0x41, 0x7, 0x5c, 0x5, 0x15, 0xdf, 0x7f}}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 44m57.100278822s ago: executing program 5 (id=1008): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r3, &(0x7f00000000c0)="8f2a", 0x2) 44m56.73153563s ago: executing program 34 (id=1008): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r3, &(0x7f00000000c0)="8f2a", 0x2) 44m52.200060899s ago: executing program 6 (id=1027): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x11, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r1 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 44m52.089220992s ago: executing program 6 (id=1028): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2bc, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xa, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000d00)="c5", 0x1, 0x400d0, &(0x7f0000000300)={0xa, 0x0, 0x1, @private0, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x9, 0xc}, 0x100, './file0\x00'}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x8) 44m51.03763264s ago: executing program 6 (id=1032): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000001c0)={0x0, 0x707c, 0x10, 0x3, 0x28b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 44m48.910287209s ago: executing program 6 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 44m47.495617492s ago: executing program 6 (id=1043): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000100001000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb0000000000000000", @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000001c0000000000000000000000000000000a"], 0xec}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44m46.904303137s ago: executing program 6 (id=1045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2d, 0xc0, 0x5, 0x7, 0x7f, 0x5, 0xf, 0x9, 0x3, 0x41, 0x7, 0x5c, 0x5, 0x15, 0xdf, 0x7f}}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 44m46.194411819s ago: executing program 35 (id=1045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2d, 0xc0, 0x5, 0x7, 0x7f, 0x5, 0xf, 0x9, 0x3, 0x41, 0x7, 0x5c, 0x5, 0x15, 0xdf, 0x7f}}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m52.991523922s ago: executing program 1 (id=7714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x48000000, &(0x7f00000000c0)="4ae4fdba50545a27b3ef8bed225d5b91a2bf", 0x12, &(0x7f0000000140), 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) waitid(0x2, r6, 0x0, 0x4, 0x0) 6m50.643749289s ago: executing program 1 (id=7717): setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000003c0)={0x2, @vbi={0x455eb137, 0x5, 0x7, 0x20343059, [0x5], [0x52ab, 0xd], 0x13a}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) syz_io_uring_setup(0xc7a, &(0x7f0000000780)={0x0, 0x5473, 0x4000, 0x2, 0x281}, &(0x7f0000000800), &(0x7f0000000840)) 6m49.098278977s ago: executing program 1 (id=7730): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01", 0x6b}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 6m47.740160388s ago: executing program 1 (id=7722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0x490, 0x12, r3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,usey_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xe}]}, 0x30}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) r9 = syz_io_uring_setup(0x234, &(0x7f00000001c0)={0x0, 0x2804, 0x10100, 0x0, 0x362}, &(0x7f0000000540), &(0x7f0000000100)) io_uring_enter(r9, 0x7898, 0x0, 0x8, 0x0, 0x0) 6m47.588441619s ago: executing program 1 (id=7723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) lseek(r3, 0x0, 0x4) ftruncate(r0, 0xfffffd83) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGPHYS(r6, 0x80404812, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') 6m46.916112736s ago: executing program 1 (id=7725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x48000000, &(0x7f00000000c0)="4ae4fdba50545a27b3ef8bed225d5b91a2bf", 0x12, &(0x7f0000000140), 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) setpgid(r6, r6) waitid(0x2, r6, 0x0, 0x4, 0x0) 6m46.851450141s ago: executing program 36 (id=7725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x48000000, &(0x7f00000000c0)="4ae4fdba50545a27b3ef8bed225d5b91a2bf", 0x12, &(0x7f0000000140), 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) setpgid(r6, r6) waitid(0x2, r6, 0x0, 0x4, 0x0) 20.196773991s ago: executing program 7 (id=8539): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100fff}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0xfe44, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x48000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000040)=0x20004, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r5, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x4000000000002f5, 0x1, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="87ffaa0100000000000000000085f52f"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) 16.851284837s ago: executing program 7 (id=8546): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000140)='A', 0x1, 0x340c8890, &(0x7f000005ffe4)={0xa, 0x0, 0x9, @loopback, 0x1}, 0x1c) r3 = socket$pptp(0x18, 0x1, 0x2) connect(r3, &(0x7f0000000940)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80) recvmmsg(r2, &(0x7f0000000840), 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) unshare(0x26020480) r7 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') execveat$binfmt(r6, r7, &(0x7f0000000240)={[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/kvm\x00']}, &(0x7f0000000480)={[&(0x7f0000000280)='\xad\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000340)='-\x00', &(0x7f0000000380)='^,\x00', &(0x7f00000003c0)='net/ip6_flowlabel\x00', &(0x7f0000000400)='net/ip6_flowlabel\x00', &(0x7f0000000440)='\x00']}, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 15.35308701s ago: executing program 7 (id=8553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)={0x1cc, 0x37, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747a83c3f4f21536bc0082d6e2653d94aae67c9c176725914eecb2d0ffe519dc120aacb94665f574baf67d8e55c94e48e231285ba4dcff618558f4c328d3052bc3a426bf9f2583a791c10aa9164f16189d647e2694e87acb8c62b4973a7831c9f545047748c5852baa5e0ef820a8e7caec980a2c822d114217bacc75a485d9ba8ebc0a0b9fe9e0a1720e00d85fd304011ccd8", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b94b7c2d8194caa2619f3ecd0d319d3b1306a84b0ebbae2abec4d16b24fcb93f1e1cedbd6dcb31777a7b83df23b2217ecd7095689d45c4e64827c526f6a3ba0b81a516bb3b0ef690b9eb27f72d7ed0b8c", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x24}]}, @typed={0x8, 0xf6, 0x0, 0x0, @uid}, @generic="fd57eaabc453f25452ef57006cc8e52741e52fde82a193", @nested={0x35, 0x33, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xeb}, @generic="67ff172d2e5e6d8970e6658c503f8085b8e9b43039e9ec980e722e1b3ff6835146e08e1ef917a1b662"]}]}, 0x1cc}, {&(0x7f0000000780)={0xd4, 0x42, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @generic="c0a846330416858d7c62415ba676a363047facd88c2f5b5c5ebcec2a763789db9e19f0e268c2ae4238c12f5f673c902dfc4fc2f42cd2e1c21a3170db6fa9e3c7dc3bf5e620b010996a671cbb166415e7183e398fbaf922fe6ca75821cce0ef4182d466769877845bdb78b6857f682bf42f4c969bb2ec967c8270d1c50e16a7cde6722b9a4d5563c913af7e754f1c9e8dc97cf72430ad30bdc74e02edb187fb20df63d2f17e001dce"]}, 0xd4}], 0x3, 0x0, 0x0, 0x44011}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3fe}, 0x20) getsockname$l2tp6(r3, 0x0, &(0x7f0000000100)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x60044884) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003800010325bd7000fadbdb2504000000d5b3f482f98800ac2e658dc0a35487c88562033f8f1313d05b472530e01bb9ecd937894885c7ace627476d72701bd49f57929c0393c91fce7a7e8580239e25bb671a22ef0c620662e6d816"], 0x14}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) 14.255906616s ago: executing program 2 (id=8556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)={0x10c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0xf8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf4, 0x3, "6e59801731c985b52cf18563b0e8099b744dcd98f8eb934c6c6daef64073b81f8010f11a3713bb8c361b9d2a1cf670fc08f7726b7f566bf6f397e0d5ce981420bb56a0e04cc04d98d7c6711d8ad4321fefa2623716334d94a810380becece593d3f16ff6260cbad1bf5bad081ba17696cb23a4f3830e641a6cfa6cfc0d8f078ba51e9e3ce4aedbec5be92b10a68d59f8431c4960072abd9004cd66a0a63d9d41e41df634a3b21378cfa11f5f0595a2f5b935c2bbe257e8777ad544081bea2c6f41a8fcf967e150f61f7a01ad04553062adf0523467076784cae57e42276a6e5dc0a06c1ec3b48a37ece1329d171fbe70"}]}]]}, 0x10c}}, 0x0) 13.661468119s ago: executing program 0 (id=8557): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x9f, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) r8 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 13.66104434s ago: executing program 2 (id=8558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_clone(0x48000000, &(0x7f00000000c0)="4ae4fdba50545a27b3ef8bed225d5b91a2bf", 0x12, &(0x7f0000000140), 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000280)) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) waitid(0x2, r6, 0x0, 0x4, 0x0) 11.391779679s ago: executing program 0 (id=8572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r8, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 9.929654652s ago: executing program 7 (id=8562): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[{0xc, 0x109, 0x8}, {0xc, 0x118, 0x8}, {0xc, 0x10a, 0x5}], 0x24}, 0x0, 0x4000001, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) timerfd_create(0x0, 0x800) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000100)={0x1}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r6 = msgget(0x0, 0x2c4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) msgctl$IPC_RMID(r6, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) socket(0x2, 0x3, 0x1) 9.721053236s ago: executing program 0 (id=8564): syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r2, 0x0, &(0x7f0000000040)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'vlan0\x00', {}, 0x5}) sched_setattr(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_setup(0x6408, &(0x7f0000000180)={0x0, 0x7c70, 0x0, 0x2, 0x2ba}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000200)={'\x00', 0xff4a, 0x8, 0x4, 0x7, 0xfffffffffffffffb, 0xffffffffffffffff}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2000775) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 9.119102702s ago: executing program 9 (id=8565): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x44044) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, 0x0, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, 0x0, 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000100)) 7.508087936s ago: executing program 7 (id=8567): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}], 0x3}, 0x2}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r3 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_GET_FPEXC(0x45, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"]) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r8 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 7.506626596s ago: executing program 2 (id=8578): unshare(0x22020600) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)='a', 0x1, 0x5}]) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) listen(0xffffffffffffffff, 0x2455d399) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001d5315100120021aeebb010203010902240001000000000904ff0002404d3f0009050402100000fa000905820240123e00000014ef3c7795642b2907e65329da1cab65c498af939d9b49d0564a3ac50f34cae2df680599a7b72fe32fffec64d68c70a4447754e9d9b36d1090947677921226b388319ae679a605d74add8056d50fa0b972a8e28cf3ca864ab3db702dd53ac4105c6d7fa12cf25133ee5125a4e35b"], 0x0) shutdown(0xffffffffffffffff, 0x1) r9 = socket$inet6(0xa, 0x80003, 0xff) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r9) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) 7.504646717s ago: executing program 0 (id=8568): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0x7ffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) getpgid(0x0) ioctl$KVM_SET_CLOCK(r5, 0x4048aec9, &(0x7f0000000040)={0x6, 0x0, 0x80000000, 0x0, 0x40004}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000000600)=""/4099, 0x1003, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x40) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000001640)=ANY=[@ANYBLOB]) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r8, &(0x7f0000000000)=0x8, r8, 0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) ioctl$NBD_SET_SOCK(r7, 0xab00, 0xffffffffffffffff) 7.504215211s ago: executing program 8 (id=8569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)={0x10c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0xf8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf4, 0x3, "6e59801731c985b52cf18563b0e8099b744dcd98f8eb934c6c6daef64073b81f8010f11a3713bb8c361b9d2a1cf670fc08f7726b7f566bf6f397e0d5ce981420bb56a0e04cc04d98d7c6711d8ad4321fefa2623716334d94a810380becece593d3f16ff6260cbad1bf5bad081ba17696cb23a4f3830e641a6cfa6cfc0d8f078ba51e9e3ce4aedbec5be92b10a68d59f8431c4960072abd9004cd66a0a63d9d41e41df634a3b21378cfa11f5f0595a2f5b935c2bbe257e8777ad544081bea2c6f41a8fcf967e150f61f7a01ad04553062adf0523467076784cae57e42276a6e5dc0a06c1ec3b48a37ece1329d171fbe70"}]}]]}, 0x10c}}, 0x0) 7.430498133s ago: executing program 8 (id=8570): syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r2, 0x0, &(0x7f0000000040)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'vlan0\x00', {}, 0x5}) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) r6 = io_uring_setup(0x6408, &(0x7f0000000180)={0x0, 0x7c70, 0x0, 0x2, 0x2ba}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000200)={'\x00', 0xff4a, 0x8, 0x4, 0x7, 0xfffffffffffffffb, 0xffffffffffffffff}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2000775) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000040)={0x6, r3, 0x24, {0x3, 0x5}, 0x4}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 7.261549729s ago: executing program 9 (id=8571): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a", 0xbd}], 0x1}, 0x48002) 6.538827201s ago: executing program 8 (id=8573): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = gettid() ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xf78, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0xd96, 0x12, {{'morus640-sse2\x00'}, 0x6a50, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0xf78}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x27) r7 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 6.535132782s ago: executing program 9 (id=8584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x7, 0x8, 0x20008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(r5, 0x0, 0xd40, 0x80) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r6, 0xc040128b, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002b2000/0x1000)=nil, &(0x7f00005ce000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000922000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) name_to_handle_at(r5, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="ed3d150a8b5a16bc3a05000000281e4beb5a2ce4cf4489623580a94cd44541ce1ae6b77df120e7abca95ee9b6f160a4f6fca2a62c6d074e49f93a86da2"], &(0x7f0000000200), 0x400) 5.067786266s ago: executing program 9 (id=8574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)={0x1cc, 0x37, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747a83c3f4f21536bc0082d6e2653d94aae67c9c176725914eecb2d0ffe519dc120aacb94665f574baf67d8e55c94e48e231285ba4dcff618558f4c328d3052bc3a426bf9f2583a791c10aa9164f16189d647e2694e87acb8c62b4973a7831c9f545047748c5852baa5e0ef820a8e7caec980a2c822d114217bacc75a485d9ba8ebc0a0b9fe9e0a1720e00d85fd304011ccd8", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b94b7c2d8194caa2619f3ecd0d319d3b1306a84b0ebbae2abec4d16b24fcb93f1e1cedbd6dcb31777a7b83df23b2217ecd7095689d45c4e64827c526f6a3ba0b81a516bb3b0ef690b9eb27f72d7ed0b8c", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x24}]}, @typed={0x8, 0xf6, 0x0, 0x0, @uid}, @generic="fd57eaabc453f25452ef57006cc8e52741e52fde82a193", @nested={0x35, 0x33, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xeb}, @generic="67ff172d2e5e6d8970e6658c503f8085b8e9b43039e9ec980e722e1b3ff6835146e08e1ef917a1b662"]}]}, 0x1cc}, {&(0x7f0000000780)={0xd4, 0x42, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @generic="c0a846330416858d7c62415ba676a363047facd88c2f5b5c5ebcec2a763789db9e19f0e268c2ae4238c12f5f673c902dfc4fc2f42cd2e1c21a3170db6fa9e3c7dc3bf5e620b010996a671cbb166415e7183e398fbaf922fe6ca75821cce0ef4182d466769877845bdb78b6857f682bf42f4c969bb2ec967c8270d1c50e16a7cde6722b9a4d5563c913af7e754f1c9e8dc97cf72430ad30bdc74e02edb187fb20df63d2f17e001dce"]}, 0xd4}], 0x3, 0x0, 0x0, 0x44011}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000240)={0xa, 0x0, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3fe}, 0x20) getsockname$l2tp6(r3, 0x0, &(0x7f0000000100)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x60044884) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003800010325bd7000fadbdb2504000000d5b3f482f98800ac2e658dc0a35487c88562033f8f1313d05b472530e01bb9ecd937894885c7ace627476d72701bd49f57929c0393c91fce7a7e8580239e25bb671a22ef0c620662e6d816"], 0x14}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) 4.996502884s ago: executing program 8 (id=8575): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r7, &(0x7f0000000200)=""/123, 0x9e, 0xc8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x1, 0x2000}}) socket$netlink(0x10, 0x3, 0x0) 4.928513942s ago: executing program 2 (id=8576): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x503301) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000200)=0x2) syz_open_procfs(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xfffffffffffffecc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000ff08000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.858326136s ago: executing program 0 (id=8577): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_clone(0x48000000, &(0x7f00000000c0)="4ae4fdba50545a27b3ef8bed225d5b91a2bf", 0x12, &(0x7f0000000140), 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000280)) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) waitid(0x2, r6, 0x0, 0x4, 0x0) 3.301867386s ago: executing program 2 (id=8579): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$I2C_FUNCS(r2, 0x705, &(0x7f0000000040)=0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)={0x14}) r7 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r6, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r6, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b018000000109021b0001000001000904f7000176246700090582020002"], 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4080000}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x41) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x0, 0x201, 0x80, 0x7, 0x2, 0x9, 0x10000, r8}, 0x20) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x100, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, r10}}, 0x30) ioctl$FS_IOC_GETFLAGS(r0, 0x4008af14, &(0x7f0000000040)) 3.225780706s ago: executing program 8 (id=8580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r2, 0xfffffffffffffffc, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x4, 0x0, 0x0, 0x0, 0x431]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc00c6419, &(0x7f00000005c0)={0x4, &(0x7f00000002c0)=""/202, &(0x7f00000004c0)=[{0x6, 0x87, 0x5, &(0x7f00000003c0)=""/135}, {0xd2bd, 0x38, 0xfffffff9, &(0x7f0000000480)=""/56}, {0xb3, 0xc5, 0x6, &(0x7f0000000980)=""/197}, {0x6, 0x1000, 0x200, &(0x7f0000001e00)=""/4096}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) connect$inet(r6, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x82401) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r10, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) socket$kcm(0x2, 0x5, 0x84) 1.766185421s ago: executing program 8 (id=8581): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000240), 0x0, 0x1000, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x113800, 0x2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r6 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300", @ANYRESOCT=0x0], 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000008000000d5000000200004809500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) syz_usb_control_io(r6, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000c40)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x50, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bdd7c3", 0x0, 0x33, 0x0, @loopback, @empty, [@hopopts={0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}]}}}}}}}, 0x0) 1.74692281s ago: executing program 9 (id=8592): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)}, {&(0x7f0000000580)="31f0d4c66457d9307a15e215afd4605ce89537a192075f1ebe9efbbd1688979008d4f00bee5ea15fb807bf3c06ff569af86609e1770409219df1733712feb4c831ec6eba653320f7bc41f19e0026848977645402a745fc8f139a372d1b6bd350f1bfd6aaba330693d97cd5e7451d5fcfe9fa0f7429e9e992fe49ac6943edccfe5fd1a7fa358e99c02787d7395ce99f6058b84f6b0adb4add8139917be234ac6dc7f830f53e69b072b72d01a413990b2cf0ecd889b326c29648620d8ab485709d285ce888d059559e6bdf263e58c4f56845eded560813e55dea7deed326c8c0fcc655dd08a3", 0xe5}, {&(0x7f0000000700)="f0dfa9181a0efa87220da32ef758a4f55ab3afaff26a34214c037c07ee2f00a299d6b9887cd764b1618c98762c97132800c3fd0f9a3ec8ebf788dc33a887e41bf352778854e8fb6574f0504c32be00445d1402235e939d2e6c44ad4e86445f76459df885715fabbed9c118d480c701fcdaec6884520f026ed4b46aa7b545008f6db54e80ad4f", 0x86}, {&(0x7f0000000280)="1679e1a337eb67ad9c507f80", 0xc}], 0x4, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x0, 0x2, 0x3f7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xa}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1}}], 0xa0}}], 0x1, 0x40080c0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101c8553d2099040c5049330102030109022c0001000010000904a9020146662700092402020600040000082402010701ea0835fd7fc9acee78acb3"], 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = socket(0x1, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ed95a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x23, 0x3}}) r7 = open(0x0, 0x0, 0x0) mkdirat(r7, 0x0, 0x0) r8 = socket(0x1e, 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x10f, 0x4, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000ddffffff0000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800c00010062697477697365001c00028008000340000000040800014000000014080002400000010b0900010073797a30"], 0x100}}, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 1.460030705s ago: executing program 0 (id=8582): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$kcm(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e00000000a0dc4d663b"], 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) inotify_init() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, 0x0) 1.336797812s ago: executing program 7 (id=8583): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') pread64(r3, 0x0, 0x0, 0x3c) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_clone(0x48000000, &(0x7f00000000c0)="4ae4fdba50545a27b3ef8bed225d5b91a2bf", 0x12, &(0x7f0000000140), 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000280)) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) waitid(0x2, r6, 0x0, 0x4, 0x0) 42.833133ms ago: executing program 9 (id=8585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_TIMEOUT(r3, 0x702, 0x800066a2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000400), &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, &(0x7f00000002c0), 0x40f00, 0x10, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0xbd4a, 0x2, 0x7eab, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x8850) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x200300) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb8}}, 0x20050800) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x191c) io_setup(0x8, &(0x7f0000000600)) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0x3, @sliced={0x3, [0xfff8, 0xc, 0x1, 0x9, 0x101, 0x5, 0x2, 0x9, 0x3, 0x5, 0xffff, 0xb, 0x3, 0xa, 0x7, 0xa, 0x7fff, 0x1, 0x5, 0xdca7, 0x9, 0x8, 0xfffb, 0x9, 0x0, 0x5, 0x3, 0xa2b, 0x6e5c, 0x386, 0x693, 0x7, 0x80, 0x8001, 0x6, 0x634d, 0x6, 0x1, 0xff, 0x2, 0x9, 0xefe8, 0x3a, 0xf73f, 0x2, 0x80, 0x100, 0x100], 0x9}}) 0s ago: executing program 2 (id=8586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_map={0x2c, 0x114, 0x3, {{0x0}, 0x0, 0x1}}], 0x2c}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x28, 0x0, 0xffffffffffff6260, {{0x40000, 0x6c2, 0x2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="28eb22000000005e804641308e64859fa703c2dee697ebaf9a6fbd8c31072f7c576464cfa06589ff4e565a7a9775145835d4a1f377859c3c3589f08145acaab913adc672f14912e8ff5ff8ec5b21812bb7568c14d0d15d1a1b2312faa7328faf41b81cab05d5a8518cbb97583204e14a285b36338322e200790c29312607c0cd490ca53157cf006354adbec6a0776dcbe8017328cca3be1c5c9e10c68de365580764bff744c7d9deefacded905ec89bf772a900f04b2c9cee5fee2e92009464a62dde13bd7b45e1cd50e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a74c0", 0x2c}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000480)={0x18, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) kernel console output (not intermixed with test programs): rrun [ 2639.512977][ T30] audit: type=1326 audit(1763244104.101:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2639.535076][ C0] vkms_vblank_simulate: vblank timer overrun [ 2639.562726][ T30] audit: type=1326 audit(1763244104.151:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2639.584883][ C0] vkms_vblank_simulate: vblank timer overrun [ 2639.645880][ T30] audit: type=1326 audit(1763244104.151:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2639.668025][ C0] vkms_vblank_simulate: vblank timer overrun [ 2639.994998][ T30] audit: type=1326 audit(1763244104.571:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2640.017227][ C0] vkms_vblank_simulate: vblank timer overrun [ 2640.037204][ T30] audit: type=1326 audit(1763244104.571:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2640.123632][ T30] audit: type=1326 audit(1763244104.711:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2640.529699][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2640.637866][ T30] audit: type=1326 audit(1763244105.221:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2640.679008][ T30] audit: type=1326 audit(1763244105.221:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12085 comm="syz.7.7794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2640.690064][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 2640.701158][ C0] vkms_vblank_simulate: vblank timer overrun [ 2640.775881][ T24] usb 10-1: config 0 has an invalid interface number: 133 but max is 0 [ 2640.791992][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2640.804440][ T24] usb 10-1: config 0 has no interface number 0 [ 2640.811516][ T24] usb 10-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2640.822388][ T24] usb 10-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2640.841166][ T24] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2640.851035][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.861132][ T24] usb 10-1: Product: syz [ 2640.889589][ T24] usb 10-1: Manufacturer: syz [ 2640.898604][ T24] usb 10-1: SerialNumber: syz [ 2640.917860][ T24] usb 10-1: config 0 descriptor?? [ 2641.155865][ T24] usb 10-1: probing VID:PID(0424:012C) [ 2641.180043][ T24] usb 10-1: vub300 testing UNKNOWN EndPoint(0) 0B [ 2641.219220][ T24] usb 10-1: vub300 ignoring EndPoint(0) 0B [ 2641.232175][ T24] usb 10-1: Could not find two sets of bulk-in/out endpoint pairs [ 2641.249381][ T24] vub300 10-1:0.133: probe with driver vub300 failed with error -22 [ 2641.272803][ T24] usb 10-1: USB disconnect, device number 2 [ 2643.016721][T12138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2643.024714][T12138] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2643.154508][T12138] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2645.059928][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 2646.216086][T12184] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2646.216086][T12184] program syz.2.7811 not setting count and/or reply_len properly [ 2647.139554][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 2647.694762][T12204] x_tables: duplicate underflow at hook 3 [ 2648.659029][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7818'. [ 2649.231778][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 2649.839468][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7814'. [ 2650.042615][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2650.042632][ T30] audit: type=1800 audit(1763244114.631:4614): pid=12243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.7822" name="nullb0" dev="devtmpfs" ino=4199 res=0 errno=0 [ 2651.947486][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.950625][T12270] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2651.950625][T12270] program syz.2.7826 not setting count and/or reply_len properly [ 2651.954992][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.389095][ T9622] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2653.554710][ T9622] usb 9-1: config 160 has an invalid interface number: 200 but max is 0 [ 2653.563657][ T9622] usb 9-1: config 160 has no interface number 0 [ 2653.573564][ T9622] usb 9-1: config 160 interface 200 has no altsetting 0 [ 2653.606464][ T9622] usb 9-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 2653.616225][ T9622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2653.648820][ T9622] usb 9-1: Product: syz [ 2653.656357][ T9622] usb 9-1: Manufacturer: syz [ 2653.681660][ T9622] usb 9-1: SerialNumber: syz [ 2655.698444][ T9622] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2655.708430][ T9622] usb 9-1: MIDIStreaming interface descriptor not found [ 2655.742512][ T9622] usb 9-1: USB disconnect, device number 31 [ 2655.827557][T12296] udevd[12296]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2657.473080][T12329] delete_channel: no stack [ 2658.728736][T12338] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2658.728736][T12338] program syz.9.7838 not setting count and/or reply_len properly [ 2660.087666][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7842'. [ 2660.920747][T12365] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7843'. [ 2661.083985][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7841'. [ 2664.931729][T12421] loop9: detected capacity change from 0 to 7 [ 2665.112975][T12421] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 2665.121277][T12421] loop9: partition table partially beyond EOD, truncated [ 2665.144967][T12421] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 2665.922197][T12432] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2665.922197][T12432] program syz.8.7857 not setting count and/or reply_len properly [ 2666.511077][T12442] tipc: Failed to remove unknown binding: 66,1,1/2635159476:3774323126/3774323128 [ 2666.525197][T12442] tipc: Failed to remove unknown binding: 66,1,1/2635159476:3774323126/3774323128 [ 2666.535221][T12442] tipc: Failed to remove unknown binding: 66,1,1/2635159476:3774323126/3774323128 [ 2667.814278][ T30] audit: type=1800 audit(1763244132.381:4615): pid=12451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7861" name="nullb0" dev="devtmpfs" ino=4199 res=0 errno=0 [ 2668.103879][T12465] xfrm0: entered promiscuous mode [ 2668.195395][T12465] xfrm0: entered allmulticast mode [ 2670.781272][T12493] syz.2.7869 (12493): drop_caches: 2 [ 2670.928398][T12502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2671.019861][T12502] netlink: 188 bytes leftover after parsing attributes in process `syz.8.7871'. [ 2672.125886][T12516] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2672.125886][T12516] program syz.2.7874 not setting count and/or reply_len properly [ 2673.974829][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7880'. [ 2674.036709][T12550] hub 9-0:1.0: USB hub found [ 2674.043421][T12550] hub 9-0:1.0: 1 port detected [ 2674.913703][T12557] program syz.7.7881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2677.154248][T12585] netlink: 188 bytes leftover after parsing attributes in process `syz.8.7886'. [ 2677.166995][T12585] IPv6: Can't replace route, no match found [ 2677.229142][T12586] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2677.229142][T12586] program syz.2.7887 not setting count and/or reply_len properly [ 2683.149780][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2683.310825][ T24] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2683.322052][ T24] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2683.340807][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2683.350645][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2683.682180][ T30] audit: type=1326 audit(1763244148.271:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.725113][ T30] audit: type=1326 audit(1763244148.271:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.755070][ T30] audit: type=1326 audit(1763244148.291:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.791672][ T30] audit: type=1326 audit(1763244148.291:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.815176][ T30] audit: type=1326 audit(1763244148.301:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.857914][ T30] audit: type=1326 audit(1763244148.301:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.884121][ T30] audit: type=1326 audit(1763244148.301:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.911216][ T30] audit: type=1326 audit(1763244148.301:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.942910][ T30] audit: type=1326 audit(1763244148.301:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2683.969072][ T30] audit: type=1326 audit(1763244148.301:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.9.7898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2684.030960][T12645] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7898'. [ 2684.273001][T12648] binder: 12647:12648 ioctl c018620c 80000100 returned -1 [ 2685.891770][T12680] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2685.891770][T12680] program syz.7.7902 not setting count and/or reply_len properly [ 2687.845971][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7907'. [ 2687.917623][T12712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2687.918447][T12716] bond9: option resend_igmp: invalid value (511) [ 2687.934388][T12716] bond9: option resend_igmp: allowed values 0 - 255 [ 2687.982900][T29249] usb 10-1: USB disconnect, device number 3 [ 2688.000591][T12716] bond9 (unregistering): Released all slaves [ 2688.995540][T12732] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7912'. [ 2689.005112][T12732] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7912'. [ 2689.016159][T12732] netlink: 'syz.8.7912': attribute type 3 has an invalid length. [ 2689.025803][T12732] netlink: 11 bytes leftover after parsing attributes in process `syz.8.7912'. [ 2689.088110][T12733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2689.097062][T12733] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7911'. [ 2689.164146][T12734] : renamed from bridge_slave_0 [ 2689.948958][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 2690.349834][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2690.480785][T12747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2692.322968][T12761] futex_wake_op: syz.9.7917 tries to shift op by 32; fix this program [ 2692.988942][T29249] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2693.169375][T29249] usb 3-1: Using ep0 maxpacket: 8 [ 2693.179509][T29249] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2693.189229][T29249] usb 3-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 2693.213022][T29249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.230556][T29249] usb 3-1: Product: syz [ 2693.240722][T29249] usb 3-1: SerialNumber: syz [ 2693.488352][T29249] usbhid 3-1:1.0: can't add hid device: -71 [ 2693.495813][T29249] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2693.531020][T29249] usb 3-1: USB disconnect, device number 50 [ 2695.795139][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7925'. [ 2696.790028][T12814] hub 9-0:1.0: USB hub found [ 2696.795464][T12814] hub 9-0:1.0: 1 port detected [ 2697.994623][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7931'. [ 2698.329255][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2698.513039][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2698.522710][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.533077][ T24] usb 3-1: Product: syz [ 2698.543334][ T24] usb 3-1: Manufacturer: syz [ 2698.555164][ T24] usb 3-1: SerialNumber: syz [ 2698.951975][ T24] rtl8150 3-1:1.0: couldn't reset the device [ 2698.961126][ T24] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 2699.039874][ T24] usb 3-1: USB disconnect, device number 51 [ 2699.953562][T12849] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.7936'. [ 2700.756076][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7938'. [ 2701.010699][T12871] IPv6: NLM_F_CREATE should be specified when creating new route [ 2701.102931][T12871] openvswitch: netlink: IP tunnel dst address not specified [ 2701.144746][T12860] support for the xor transformation has been removed. [ 2701.835064][T12878] program syz.9.7941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2702.238832][T21164] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2702.424912][T21164] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2702.424937][T21164] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2702.424949][T21164] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2702.424974][T21164] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2702.424987][T21164] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2702.426911][T21164] usb 10-1: config 0 descriptor?? [ 2702.473945][T21164] hdpvr 10-1:0.0: Could not find bulk-in endpoint [ 2702.474918][T21164] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 2704.441462][T12902] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 2705.252638][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7946'. [ 2705.927581][T21164] usb 10-1: USB disconnect, device number 4 [ 2706.074387][ T5199] Dev loop6: unable to read RDB block 7 [ 2706.080764][ T5199] loop6: AHDI p1 p2 p3 [ 2706.085106][ T5199] loop6: partition table partially beyond EOD, truncated [ 2706.093942][ T5199] loop6: p1 start 926365495 is beyond EOD, truncated [ 2706.102155][ T5199] loop6: p2 size 116 extends beyond EOD, truncated [ 2706.630598][T12921] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2706.637127][T12921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2706.645920][T12921] vhci_hcd vhci_hcd.0: Device attached [ 2706.939115][ T9622] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 2707.522355][T12930] VFS: Lookup of 'syz1' in fuse fuse would have caused loop [ 2709.423626][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2709.989657][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.062727][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.104935][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.139380][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.147242][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.156717][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.272552][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7957'. [ 2710.314600][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.475256][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2710.483805][T12959] netlink: 'syz.0.7954': attribute type 3 has an invalid length. [ 2712.626586][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 2712.626599][ T30] audit: type=1400 audit(1763244177.211:4687): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="@" pid=12987 comm="syz.0.7960" [ 2713.318567][T12998] fuse: Bad value for 'fd' [ 2713.403042][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.409790][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.891453][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7966'. [ 2718.310103][T21165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2718.398826][T21164] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2718.537038][T13060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2718.554397][T21164] usb 9-1: Using ep0 maxpacket: 16 [ 2718.588005][T21164] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2718.646753][T21164] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.680088][T21164] usb 9-1: Product: syz [ 2718.695129][T21164] usb 9-1: Manufacturer: syz [ 2718.751096][T13060] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2718.949729][T21165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2718.979040][T21164] usb 9-1: SerialNumber: syz [ 2719.070041][T21164] usb 9-1: config 0 descriptor?? [ 2719.094692][T21164] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2719.421577][T21164] ssu100 9-1:0.0: probe with driver ssu100 failed with error -110 [ 2721.117525][ T7697] usb 9-1: USB disconnect, device number 32 [ 2721.568319][T13082] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2721.568319][T13082] program syz.2.7976 not setting count and/or reply_len properly [ 2721.939190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2723.189071][ T7697] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2723.352201][ T7697] usb 10-1: Using ep0 maxpacket: 16 [ 2723.409687][ T7697] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2723.424479][ T7697] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2723.436691][ T7697] usb 10-1: Product: syz [ 2723.443163][ T7697] usb 10-1: Manufacturer: syz [ 2723.450414][ T7697] usb 10-1: SerialNumber: syz [ 2723.463940][ T7697] usb 10-1: config 0 descriptor?? [ 2723.479437][ T7697] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 2723.689833][ T7697] usb 10-1: clie_3_5_startup: get config number bad return length: 0 [ 2723.701165][ T7697] visor 10-1:0.0: probe with driver visor failed with error -5 [ 2723.942944][ T30] audit: type=1326 audit(1763244188.521:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.9.7980" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 2724.336708][T13115] pim6reg1: entered promiscuous mode [ 2724.343358][T13115] pim6reg1: entered allmulticast mode [ 2724.393985][T13115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2724.404743][T13115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2724.626416][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7982'. [ 2725.544432][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7983'. [ 2725.614392][ T30] audit: type=1800 audit(1763244190.181:4689): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7983" name="nullb0" dev="devtmpfs" ino=4199 res=0 errno=0 [ 2725.956471][T26123] usb 10-1: USB disconnect, device number 5 [ 2726.992750][T13149] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2726.992750][T13149] program syz.2.7989 not setting count and/or reply_len properly [ 2728.856961][ T5199] Dev loop6: unable to read RDB block 7 [ 2728.856986][ T5199] loop6: AHDI p1 p2 p3 [ 2728.857001][ T5199] loop6: partition table partially beyond EOD, truncated [ 2728.857112][ T5199] loop6: p1 start 926365495 is beyond EOD, truncated [ 2728.857122][ T5199] loop6: p2 size 116 extends beyond EOD, truncated [ 2728.955837][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7993'. [ 2731.459351][T13170] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2731.493141][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 2732.085556][T13208] fuse: Unknown parameter '0x0000000000000008' [ 2732.668036][T13217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8000'. [ 2733.163140][T13221] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 2733.190743][T13221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2736.523088][T13238] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2737.031935][T13254] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2737.031935][T13254] program syz.9.8008 not setting count and/or reply_len properly [ 2737.055636][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8007'. [ 2737.909036][ T30] audit: type=1800 audit(1763244202.491:4690): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8009" name="nullb0" dev="devtmpfs" ino=4199 res=0 errno=0 [ 2739.479171][T13287] validate_nla: 4 callbacks suppressed [ 2739.500925][T13287] netlink: 'syz.8.8013': attribute type 3 has an invalid length. [ 2742.697942][T13334] Failed to get privilege flags for destination (handle=0x2:0x25) [ 2742.716374][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2742.939152][ T24] usb 10-1: device descriptor read/64, error -71 [ 2743.189229][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2743.339066][ T24] usb 10-1: device descriptor read/64, error -71 [ 2743.459940][ T24] usb usb10-port1: attempt power cycle [ 2743.839111][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2743.860058][ T24] usb 10-1: device descriptor read/8, error -71 [ 2744.100272][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2744.173115][ T24] usb 10-1: device descriptor read/8, error -71 [ 2744.319599][ T24] usb usb10-port1: unable to enumerate USB device [ 2744.704911][T13342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2745.839208][T13364] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[13364] [ 2745.878937][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 2746.501126][T13375] netlink: 188 bytes leftover after parsing attributes in process `syz.9.8030'. [ 2746.516400][T13375] IPv6: Can't replace route, no match found [ 2747.749487][T26123] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2747.790190][T13392] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2747.929453][T26123] usb 10-1: Using ep0 maxpacket: 8 [ 2747.940653][T26123] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 2747.956621][T26123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2747.979195][T26123] usb 10-1: Product: syz [ 2747.988270][T26123] usb 10-1: Manufacturer: syz [ 2748.001155][T26123] usb 10-1: SerialNumber: syz [ 2748.016369][T26123] usb 10-1: config 0 descriptor?? [ 2748.059207][T26123] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 2748.086966][T26123] dvb-usb: bulk message failed: -22 (2/0) [ 2748.106273][T26123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2748.132377][T26123] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 2748.154957][T26123] usb 10-1: media controller created [ 2748.216850][T26123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2748.402612][T13398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2748.414216][T13398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2750.228132][ T30] audit: type=1326 audit(1763244214.811:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.278737][ T30] audit: type=1326 audit(1763244214.811:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.308463][ T30] audit: type=1326 audit(1763244214.841:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.333400][ T30] audit: type=1326 audit(1763244214.841:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.359258][ T30] audit: type=1326 audit(1763244214.841:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.382165][ T30] audit: type=1326 audit(1763244214.841:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.511984][T26123] cxusb: set interface failed [ 2750.517219][T26123] dvb-usb: bulk message failed: -22 (1/0) [ 2750.556883][ T30] audit: type=1326 audit(1763244214.841:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.598800][ T30] audit: type=1326 audit(1763244214.841:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.662620][T26123] DVB: Unable to find symbol mt352_attach() [ 2750.672980][T26123] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 2750.698267][ T30] audit: type=1326 audit(1763244214.841:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.767056][ T30] audit: type=1326 audit(1763244214.841:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.8.8039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2750.828966][T26123] rc_core: IR keymap rc-dvico-portable not found [ 2750.835444][T26123] Registered IR keymap rc-empty [ 2750.862651][T26123] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 2750.902775][T26123] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input231 [ 2750.932130][T26123] dvb-usb: schedule remote query interval to 100 msecs. [ 2750.946752][T26123] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 2751.005149][T26123] usb 10-1: USB disconnect, device number 10 [ 2751.188532][T13436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8040'. [ 2751.200630][T26123] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 2751.529268][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2751.678896][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 2751.697999][ T24] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 2751.710282][ T24] usb 3-1: config 0 has no interface number 0 [ 2751.739855][ T24] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 2751.749477][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.757463][ T24] usb 3-1: Product: syz [ 2751.780618][ T24] usb 3-1: Manufacturer: syz [ 2751.791939][ T24] usb 3-1: SerialNumber: syz [ 2751.843587][ T24] usb 3-1: config 0 descriptor?? [ 2752.343697][T13448] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8044'. [ 2752.509508][T26123] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2752.650123][T13448] IPv6: Can't replace route, no match found [ 2752.697957][T26123] usb 10-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2752.721387][T26123] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2752.785695][T26123] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2752.795491][T26123] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2752.819065][T26123] usb 10-1: Product: syz [ 2752.823405][T26123] usb 10-1: Manufacturer: syz [ 2752.857202][T26123] usb 10-1: SerialNumber: syz [ 2752.895409][T26123] usb 10-1: config 0 descriptor?? [ 2752.934992][T26123] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2752.978396][ T8735] udevd[8735]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2753.913765][T21165] usb 10-1: USB disconnect, device number 11 [ 2754.109264][ T24] cp210x 3-1:0.79: cp210x converter detected [ 2754.117806][ T24] cp210x 3-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 2754.132972][ T24] cp210x 3-1:0.79: querying part number failed [ 2754.245565][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2754.260648][ T24] usb 3-1: USB disconnect, device number 52 [ 2754.279533][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2754.297466][ T24] cp210x 3-1:0.79: device disconnected [ 2754.748864][T26123] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2754.959065][T26123] usb 3-1: Using ep0 maxpacket: 32 [ 2754.968348][T26123] usb 3-1: config 0 has an invalid interface number: 169 but max is 0 [ 2754.983758][T26123] usb 3-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 2755.030392][T26123] usb 3-1: config 0 has no interface number 0 [ 2755.047306][T26123] usb 3-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2755.073250][T26123] usb 3-1: config 0 interface 169 has no altsetting 0 [ 2755.094067][T26123] usb 3-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 2755.111612][T26123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.128766][T26123] usb 3-1: Product: syz [ 2755.137514][T26123] usb 3-1: Manufacturer: syz [ 2755.148184][T26123] usb 3-1: SerialNumber: syz [ 2755.162497][T26123] usb 3-1: config 0 descriptor?? [ 2755.177296][T26123] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2755.237948][T26123] snd-usb-audio 3-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 2755.302125][T12296] udevd[12296]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2755.509109][T13473] netlink: 'syz.2.8048': attribute type 21 has an invalid length. [ 2755.595724][T13473] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8048'. [ 2755.750551][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8048'. [ 2756.109848][T29249] usb 3-1: USB disconnect, device number 53 [ 2756.362309][T13488] netlink: 256 bytes leftover after parsing attributes in process `syz.9.8051'. [ 2756.739645][T21165] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2756.863365][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2756.863379][ T30] audit: type=1326 audit(1763244221.441:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2756.900569][ T30] audit: type=1326 audit(1763244221.441:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2756.928729][ T30] audit: type=1326 audit(1763244221.441:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2756.958815][ T30] audit: type=1326 audit(1763244221.441:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2756.989521][ T30] audit: type=1326 audit(1763244221.441:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2757.019857][ T30] audit: type=1326 audit(1763244221.441:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2757.062378][T21165] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 2757.093891][ T30] audit: type=1326 audit(1763244221.441:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2757.116557][T21165] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2757.173839][ T30] audit: type=1326 audit(1763244221.441:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2757.235556][ T30] audit: type=1326 audit(1763244221.441:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2757.293112][ T30] audit: type=1326 audit(1763244221.441:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.8053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2757.470183][T21165] usb 10-1: config 0 has no interface number 0 [ 2757.529286][T21165] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 2757.557300][T21165] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2757.579523][T21165] usb 10-1: Product: syz [ 2757.588032][T21165] usb 10-1: Manufacturer: syz [ 2757.597576][T21165] usb 10-1: SerialNumber: syz [ 2757.639024][T21165] usb 10-1: config 0 descriptor?? [ 2757.653751][T21165] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22 [ 2758.749553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2759.517589][T26123] usb 10-1: USB disconnect, device number 12 [ 2760.962987][ T5199] Dev loop6: unable to read RDB block 7 [ 2760.963010][ T5199] loop6: AHDI p1 p2 p3 [ 2760.963027][ T5199] loop6: partition table partially beyond EOD, truncated [ 2760.963149][ T5199] loop6: p1 start 926365495 is beyond EOD, truncated [ 2760.963164][ T5199] loop6: p2 size 116 extends beyond EOD, truncated [ 2761.739509][T13538] vivid-006: disconnect [ 2763.050976][T13552] IPVS: ip_vs_add_dest(): server weight less than zero [ 2763.517708][T13538] vivid-006: reconnect [ 2764.329214][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2764.629157][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 2764.641914][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2764.652291][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2764.672432][ T24] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 2764.683871][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2764.694680][ T24] usb 3-1: Product: syz [ 2764.699343][ T24] usb 3-1: Manufacturer: syz [ 2764.703972][ T24] usb 3-1: SerialNumber: syz [ 2764.765633][ T24] usb 3-1: config 0 descriptor?? [ 2765.111460][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2765.124709][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2765.554575][T13584] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2765.554575][T13584] program syz.9.8072 not setting count and/or reply_len properly [ 2766.694565][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2766.694583][ T30] audit: type=1326 audit(1763244231.281:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2766.802954][ T30] audit: type=1326 audit(1763244231.281:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2766.852377][ T30] audit: type=1326 audit(1763244231.281:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2766.898866][ T30] audit: type=1326 audit(1763244231.281:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2766.929752][ T30] audit: type=1326 audit(1763244231.281:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2766.972881][ T30] audit: type=1326 audit(1763244231.311:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2767.015134][ T30] audit: type=1326 audit(1763244231.311:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2767.063625][ T30] audit: type=1326 audit(1763244231.311:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2767.136385][T26123] usb 3-1: USB disconnect, device number 54 [ 2767.193820][ T30] audit: type=1326 audit(1763244231.311:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2767.253206][ T30] audit: type=1326 audit(1763244231.311:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.8.8075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2767.926355][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2767.941605][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2767.951922][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2767.966588][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2767.976427][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.011786][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.079625][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.088412][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.149080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.408925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.418459][T26123] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2768.653291][T26123] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2768.673190][T26123] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2768.753105][T26123] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2768.774690][T26123] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2768.805383][T26123] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2768.824365][T26123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2768.856274][T26123] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2768.879140][T26123] usb 3-1: invalid MIDI out EP 0 [ 2769.412544][T26123] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2770.925302][T26123] usb 3-1: USB disconnect, device number 55 [ 2772.589699][T13653] IPv6: Can't replace route, no match found [ 2773.470744][T13652] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2773.470744][T13652] program syz.7.8086 not setting count and/or reply_len properly [ 2773.652432][T13659] net_ratelimit: 7 callbacks suppressed [ 2773.652446][T13659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2773.853814][T13667] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8091'. [ 2774.824724][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.831705][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.297292][T13679] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8093'. [ 2775.331910][T13679] bond9: option resend_igmp: invalid value (511) [ 2775.338280][T13679] bond9: option resend_igmp: allowed values 0 - 255 [ 2775.348102][T13679] bond9 (unregistering): Released all slaves [ 2775.382069][T13677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2776.275816][T13689] netlink: 'syz.8.8095': attribute type 4 has an invalid length. [ 2776.284052][T13689] netlink: 17 bytes leftover after parsing attributes in process `syz.8.8095'. [ 2776.310820][T13689] delete_channel: no stack [ 2776.694109][T13695] tipc: Started in network mode [ 2776.707150][T13695] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 2776.733057][T13695] tipc: Enabling of bearer rejected, failed to enable media [ 2777.018286][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 2777.018302][ T30] audit: type=1326 audit(1763244241.601:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.066150][ T30] audit: type=1326 audit(1763244241.641:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.115887][ T30] audit: type=1326 audit(1763244241.651:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.161360][T13703] netlink: 'syz.9.8099': attribute type 1 has an invalid length. [ 2777.190625][ T30] audit: type=1326 audit(1763244241.651:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.214087][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8099'. [ 2777.265561][ T30] audit: type=1326 audit(1763244241.651:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.297533][ T30] audit: type=1326 audit(1763244241.651:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.332531][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 2777.436834][ T30] audit: type=1326 audit(1763244241.651:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.469701][ T30] audit: type=1326 audit(1763244241.651:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.498294][T13708] IPv6: Can't replace route, no match found [ 2777.572389][ T30] audit: type=1326 audit(1763244241.651:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2777.681647][ T30] audit: type=1326 audit(1763244241.651:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.0.8098" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2778.109220][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2778.470839][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 2778.750136][ T24] usb 3-1: config 5 has an invalid interface number: 233 but max is 1 [ 2778.763088][ T24] usb 3-1: config 5 has an invalid interface number: 64 but max is 1 [ 2778.773306][ T24] usb 3-1: config 5 has no interface number 0 [ 2778.780004][ T24] usb 3-1: config 5 has no interface number 1 [ 2778.789343][ T24] usb 3-1: config 5 interface 233 altsetting 10 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 2778.803591][ T24] usb 3-1: config 5 interface 233 has no altsetting 0 [ 2778.810917][ T24] usb 3-1: config 5 interface 64 has no altsetting 0 [ 2778.864668][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=d854, bcdDevice=ff.3a [ 2778.915271][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2778.923468][ T24] usb 3-1: Product: syz [ 2778.929792][ T24] usb 3-1: Manufacturer: syz [ 2778.934443][ T24] usb 3-1: SerialNumber: syz [ 2779.401580][T13716] geneve2: entered promiscuous mode [ 2779.407001][T13716] geneve2: entered allmulticast mode [ 2779.962085][T21165] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2780.137546][T21165] usb 9-1: Using ep0 maxpacket: 16 [ 2780.153209][T21165] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 2780.164904][T21165] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024 [ 2780.189901][T21165] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2780.213324][T21165] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.241528][T21165] usb 9-1: config 0 descriptor?? [ 2780.658568][T21165] bigben 0003:146B:0902.002B: unexpected rdesc, please submit for review [ 2780.674016][T21165] hid_parser_main: 91 callbacks suppressed [ 2780.674031][T21165] bigben 0003:146B:0902.002B: unknown main item tag 0x0 [ 2780.689408][T21165] bigben 0003:146B:0902.002B: unknown main item tag 0x0 [ 2780.696502][T21165] bigben 0003:146B:0902.002B: unknown main item tag 0x0 [ 2780.705412][T21165] bigben 0003:146B:0902.002B: unknown main item tag 0x0 [ 2780.713185][T21165] bigben 0003:146B:0902.002B: item fetching failed at offset 4/5 [ 2780.725586][T21165] bigben 0003:146B:0902.002B: parse failed [ 2780.735590][T21165] bigben 0003:146B:0902.002B: probe with driver bigben failed with error -22 [ 2780.834599][ T24] usb 3-1: USB disconnect, device number 56 [ 2780.895203][T26123] usb 9-1: USB disconnect, device number 33 [ 2781.178089][T13738] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2781.178089][T13738] program syz.2.8107 not setting count and/or reply_len properly [ 2782.081190][T13749] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8110'. [ 2782.090444][T13749] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8110'. [ 2783.857859][T13770] IPv6: Can't replace route, no match found [ 2783.984293][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8115'. [ 2784.107741][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8116'. [ 2784.409767][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.423267][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.432967][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.445056][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.454866][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.464756][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.513809][T13785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.549808][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.562530][T13785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.582854][T13784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2787.906203][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8123'. [ 2787.922449][T13816] vlan0: entered promiscuous mode [ 2787.927579][T13816] dummy0: entered promiscuous mode [ 2788.965361][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8127'. [ 2789.848817][T13853] IPv6: Can't replace route, no match found [ 2790.350824][T13842] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8126'. [ 2790.684730][T21165] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2790.899596][T21165] usb 9-1: Using ep0 maxpacket: 8 [ 2790.998015][T21165] usb 9-1: config 6 has an invalid interface number: 2 but max is 0 [ 2791.017831][T21165] usb 9-1: config 6 has no interface number 0 [ 2791.063746][T21165] usb 9-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2791.089415][T21165] usb 9-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2791.113878][T21165] usb 9-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2791.163307][T21165] usb 9-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2791.190366][T21165] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 2791.200288][T21165] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2791.210440][T21165] usb 9-1: Product: syz [ 2791.222802][T21165] usb 9-1: Manufacturer: syz [ 2791.232989][T21165] usb 9-1: SerialNumber: syz [ 2791.290656][T21165] hso 9-1:6.2: Failed to find BULK IN ep [ 2792.766124][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8126'. [ 2792.942989][T13866] tipc: Resetting bearer [ 2793.280861][T13884] random: crng reseeded on system resumption [ 2794.979777][T13917] fuse: Unknown parameter 'fsmagic' [ 2796.431227][T13936] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8142'. [ 2796.796669][T21165] usb 9-1: USB disconnect, device number 34 [ 2797.423928][T13942] program syz.0.8141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2798.823592][T26123] IPVS: starting estimator thread 0... [ 2798.928572][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8147'. [ 2798.948873][T13964] IPVS: using max 28 ests per chain, 67200 per kthread [ 2801.652005][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8150'. [ 2802.218497][T14012] netlink: 'syz.9.8154': attribute type 16 has an invalid length. [ 2802.239233][T14012] netlink: 'syz.9.8154': attribute type 17 has an invalid length. [ 2803.348787][T14012] net_ratelimit: 5 callbacks suppressed [ 2803.348798][T14012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2805.971731][T14059] openvswitch: netlink: Message has 1 unknown bytes. [ 2806.619268][T14059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2811.712534][T14145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2811.826582][T14152] program syz.9.8176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2812.594712][T14159] hub 9-0:1.0: USB hub found [ 2812.618888][T14159] hub 9-0:1.0: 1 port detected [ 2813.163897][T14164] netlink: 'syz.8.8179': attribute type 1 has an invalid length. [ 2813.277265][T14152] program syz.9.8176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2814.931826][T14192] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 2815.149560][T14194] tipc: New replicast peer: 255.255.255.255 [ 2815.231823][T14194] tipc: Enabled bearer , priority 10 [ 2815.403530][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8183'. [ 2815.459188][T14195] tipc: Disabling bearer [ 2815.986151][T14188] syz.9.8185 (14188): drop_caches: 1 [ 2815.998247][T14184] syz.9.8185 (14184): drop_caches: 1 [ 2816.100232][T14184] syz.9.8185 (14184): drop_caches: 1 [ 2817.363864][T14216] No memory to map [ 2820.829270][T29249] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2821.012427][T29249] usb 9-1: Using ep0 maxpacket: 8 [ 2821.105072][T29249] usb 9-1: config 150 has an invalid interface number: 204 but max is 1 [ 2821.114047][T29249] usb 9-1: config 150 has no interface number 0 [ 2821.121099][T29249] usb 9-1: config 150 interface 204 has no altsetting 0 [ 2821.128378][T29249] usb 9-1: config 150 interface 1 has no altsetting 0 [ 2821.139851][T29249] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2821.150477][T29249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2821.162731][T29249] usb 9-1: Product: syz [ 2821.167029][T29249] usb 9-1: Manufacturer: syz [ 2821.175248][T29249] usb 9-1: SerialNumber: syz [ 2821.415303][T29249] xr_serial 9-1:150.204: xr_serial converter detected [ 2821.426571][T29249] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2821.435602][T29249] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2821.450798][T29249] usb 9-1: USB disconnect, device number 35 [ 2821.465746][T29249] xr_serial 9-1:150.204: device disconnected [ 2821.901764][T14262] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8196'. [ 2822.716251][T14282] netlink: 304 bytes leftover after parsing attributes in process `syz.2.8199'. [ 2822.795651][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8199'. [ 2823.094533][T14278] tipc: Failed to remove unknown binding: 66,1,1/3890588394:2284848455/2284848457 [ 2823.106761][T14278] tipc: Failed to remove unknown binding: 66,1,1/3890588394:2284848455/2284848457 [ 2823.120774][T14278] tipc: Failed to remove unknown binding: 66,1,1/3890588394:2284848455/2284848457 [ 2823.700810][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2823.700828][ T30] audit: type=1326 audit(1763244288.291:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.9.8201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2823.737898][ T30] audit: type=1326 audit(1763244288.321:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.9.8201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2823.770573][ T30] audit: type=1326 audit(1763244288.321:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.9.8201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2824.073429][T14306] binder: 14296:14306 ioctl c018620c 80000380 returned -22 [ 2825.107372][T14324] EXT4-fs: Conflicting test_dummy_encryption options [ 2825.173953][T14327] netlink: 148 bytes leftover after parsing attributes in process `syz.8.8206'. [ 2825.284364][T14327] syz.8.8206 (14327): drop_caches: 2 [ 2827.775351][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8210'. [ 2827.792949][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8210'. [ 2828.041438][T14365] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8212'. [ 2831.368835][T26123] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2831.551667][T26123] usb 9-1: Using ep0 maxpacket: 16 [ 2831.565936][T26123] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2831.576434][T26123] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2831.588713][T26123] usb 9-1: Product: syz [ 2831.592955][T26123] usb 9-1: Manufacturer: syz [ 2831.597763][T26123] usb 9-1: SerialNumber: syz [ 2831.675998][T26123] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2831.683375][T26123] r8152-cfgselector 9-1: config 0 descriptor?? [ 2831.780221][T14398] IPv6: Can't replace route, no match found [ 2831.895987][T26123] r8152-cfgselector 9-1: Needed 1 retries to read version [ 2831.904984][T26123] r8152-cfgselector 9-1: Unknown version 0x2460 [ 2831.912487][T26123] r8152-cfgselector 9-1: bad CDC descriptors [ 2832.101899][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8218'. [ 2832.249087][T26123] r8152-cfgselector 9-1: USB disconnect, device number 36 [ 2832.369858][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8220'. [ 2833.009287][ T7697] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2834.411683][T14423] netlink: 'syz.7.8223': attribute type 10 has an invalid length. [ 2834.421617][T14423] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8223'. [ 2836.262969][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.270743][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.785669][T14448] binder: BINDER_SET_CONTEXT_MGR already set [ 2836.791947][T14448] binder: 14439:14448 ioctl 4018620d 80000040 returned -16 [ 2836.894697][T14448] syz.0.8228 (14448): drop_caches: 2 [ 2836.927481][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8227'. [ 2837.673960][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8230'. [ 2838.911792][T14472] IPv6: Can't replace route, no match found [ 2840.399107][T26123] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2840.531752][T26123] usb 10-1: device descriptor read/64, error -71 [ 2840.821508][T26123] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2840.958949][T26123] usb 10-1: device descriptor read/64, error -71 [ 2841.069473][T26123] usb usb10-port1: attempt power cycle [ 2841.408884][T26123] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2841.438188][T26123] usb 10-1: device descriptor read/8, error -71 [ 2841.576380][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8237'. [ 2841.709051][T26123] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2841.729736][T26123] usb 10-1: device descriptor read/8, error -71 [ 2841.857682][T26123] usb usb10-port1: unable to enumerate USB device [ 2844.491695][T14548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2845.647770][T14565] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8249'. [ 2846.617908][T14573] delete_channel: no stack [ 2847.069456][T21164] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2847.232102][T21164] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2847.243562][T21164] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2847.264433][T21164] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2847.289083][T21164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.331226][T14575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2847.361371][T21164] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2847.910447][T14575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2848.089589][T14575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2848.396294][T29249] usb 3-1: USB disconnect, device number 57 [ 2848.439287][T21165] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2848.524055][ T30] audit: type=1326 audit(1763244313.111:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.584231][ T30] audit: type=1326 audit(1763244313.141:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.608118][T21165] usb 9-1: Using ep0 maxpacket: 8 [ 2848.633115][T21165] usb 9-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2848.649681][ T30] audit: type=1326 audit(1763244313.171:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.676065][T21165] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2848.694368][T14604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2848.751466][ T30] audit: type=1326 audit(1763244313.171:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.780752][ T30] audit: type=1326 audit(1763244313.171:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.806708][T21165] usb 9-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 2848.819917][T21165] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2848.829695][T21165] usb 9-1: Product: syz [ 2848.834440][ T30] audit: type=1326 audit(1763244313.221:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.860056][T21165] usb 9-1: Manufacturer: syz [ 2848.865353][T21165] usb 9-1: SerialNumber: syz [ 2848.879552][ T30] audit: type=1326 audit(1763244313.221:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.919110][ T30] audit: type=1326 audit(1763244313.221:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.943598][ T30] audit: type=1326 audit(1763244313.231:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2848.966692][ C0] vkms_vblank_simulate: vblank timer overrun [ 2848.986525][ T30] audit: type=1326 audit(1763244313.231:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.0.8255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2849.580438][T21165] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input234 [ 2849.601879][ T5184] bcm5974 9-1:1.0: could not read from device [ 2849.651650][ T5184] bcm5974 9-1:1.0: could not read from device [ 2849.683095][T21165] usb 9-1: USB disconnect, device number 37 [ 2850.189028][T29249] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2850.398873][T29249] usb 3-1: Using ep0 maxpacket: 8 [ 2850.445951][T29249] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2850.461469][T29249] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 2850.473263][T29249] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 2851.397657][ T5659] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2851.407094][ T5659] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2851.434749][ T5659] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2851.887846][T14631] netlink: 'syz.8.8261': attribute type 4 has an invalid length. [ 2851.905269][T14631] netlink: 'syz.8.8261': attribute type 4 has an invalid length. [ 2853.144456][T29249] usb 3-1: string descriptor 0 read error: -71 [ 2853.151604][T29249] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2853.171940][T29249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2853.240348][T29249] usb 3-1: can't set config #1, error -71 [ 2853.257132][T29249] usb 3-1: USB disconnect, device number 58 [ 2853.712332][T14646] fuse: Bad value for 'fd' [ 2855.629777][T21165] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 2855.839693][T21165] usb 9-1: device descriptor read/64, error -71 [ 2856.109345][T21165] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 2856.140023][T14675] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2856.146668][T14675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2856.161726][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8268'. [ 2856.260732][T14675] vhci_hcd vhci_hcd.0: Device attached [ 2856.319192][T21165] usb 9-1: device descriptor read/64, error -71 [ 2856.458813][T14676] vhci_hcd: connection closed [ 2856.463224][ T4503] vhci_hcd: stop threads [ 2856.479291][ T4503] vhci_hcd: release socket [ 2856.484037][ T4503] vhci_hcd: disconnect device [ 2856.490047][T21165] usb usb9-port1: attempt power cycle [ 2856.919262][T21165] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 2856.950357][T21165] usb 9-1: device descriptor read/8, error -71 [ 2857.189704][T21165] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 2857.277098][T21165] usb 9-1: device descriptor read/8, error -71 [ 2857.409677][T21165] usb usb9-port1: unable to enumerate USB device [ 2859.321180][T14713] input: syz1 as /devices/virtual/input/input235 [ 2859.707072][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 2859.769858][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 2859.830553][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'. [ 2861.511614][T14735] input: syz0 as /devices/virtual/input/input236 [ 2862.409547][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2862.409564][ T30] audit: type=1800 audit(1763244327.001:4908): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8280" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2862.792655][T14764] netlink: 'syz.9.8281': attribute type 10 has an invalid length. [ 2865.376580][T14783] program syz.2.8284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2865.726828][T14790] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2866.048056][T14777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2867.995679][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8288'. [ 2869.118252][T14828] 8021q: adding VLAN 0 to HW filter on device team0 [ 2869.216947][T14828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2870.471924][ T30] audit: type=1326 audit(1763244335.051:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.516567][ T30] audit: type=1326 audit(1763244335.051:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.554524][ T30] audit: type=1326 audit(1763244335.051:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.592378][ T30] audit: type=1326 audit(1763244335.051:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.644204][ T30] audit: type=1326 audit(1763244335.051:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.683547][ T30] audit: type=1326 audit(1763244335.051:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.723683][ T30] audit: type=1326 audit(1763244335.051:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.771908][ T30] audit: type=1326 audit(1763244335.061:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.821490][ T30] audit: type=1326 audit(1763244335.061:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.882879][ T30] audit: type=1326 audit(1763244335.061:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.7.8291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 2870.938003][T14850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8295'. [ 2873.535941][T30125] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2873.762885][T30125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2873.778161][T30125] usb 3-1: config 0 has no interfaces? [ 2873.788163][T30125] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2873.803739][T30125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2873.903339][T30125] usb 3-1: config 0 descriptor?? [ 2874.993029][T26123] usb 3-1: USB disconnect, device number 59 [ 2877.071180][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2877.071197][ T30] audit: type=1326 audit(1763244341.661:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2877.171620][T14919] xfrm0: entered promiscuous mode [ 2877.177249][T14919] xfrm0: entered allmulticast mode [ 2877.225357][ T30] audit: type=1326 audit(1763244341.661:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2877.271936][ T30] audit: type=1326 audit(1763244341.701:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2877.596061][ T30] audit: type=1326 audit(1763244342.181:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2877.682100][ T30] audit: type=1326 audit(1763244342.271:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2877.708990][ C1] vkms_vblank_simulate: vblank timer overrun [ 2877.849259][ T30] audit: type=1326 audit(1763244342.331:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2877.873210][ C1] vkms_vblank_simulate: vblank timer overrun [ 2878.026353][ T30] audit: type=1326 audit(1763244342.331:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14909 comm="syz.0.8306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 2879.796285][T14949] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8312'. [ 2879.815176][T14949] tipc: Enabling of bearer rejected, failed to enable media [ 2880.138298][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8313'. [ 2880.172306][T14958] trusted_key: encrypted_key: keylen parameter is missing [ 2881.338892][T14972] IPVS: stopping backup sync thread 21028 ... [ 2883.915964][T15004] bridge11: entered promiscuous mode [ 2884.904562][ T30] audit: type=1326 audit(1763244349.491:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2884.959477][ T30] audit: type=1326 audit(1763244349.491:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.042416][ T30] audit: type=1326 audit(1763244349.531:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.090396][ T30] audit: type=1326 audit(1763244349.531:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.118079][ T30] audit: type=1326 audit(1763244349.531:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.167999][ T30] audit: type=1326 audit(1763244349.531:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.195827][ T30] audit: type=1326 audit(1763244349.531:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.233041][ T30] audit: type=1326 audit(1763244349.531:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.262563][ T30] audit: type=1326 audit(1763244349.531:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.311486][ T30] audit: type=1326 audit(1763244349.541:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.2.8322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2885.361719][T15017] syz.2.8322(15017): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2887.230671][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8325'. [ 2891.117532][T15076] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8329'. [ 2891.134916][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8329'. [ 2892.656552][T15089] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2892.656552][T15089] program syz.8.8333 not setting count and/or reply_len properly [ 2894.059212][T14627] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2894.187755][T15111] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2894.277922][T14627] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2894.300095][T14627] usb 10-1: config 0 has no interfaces? [ 2894.307011][T14627] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2894.337825][T14627] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2894.361438][T14627] usb 10-1: config 0 descriptor?? [ 2894.817463][T11767] usb 10-1: USB disconnect, device number 18 [ 2896.073152][T15129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2897.779900][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.786815][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.249287][T15139] input: syz0 as /devices/virtual/input/input238 [ 2899.000788][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2899.000800][ T30] audit: type=1326 audit(1763244363.591:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.053091][ T30] audit: type=1326 audit(1763244363.591:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.093153][ T30] audit: type=1326 audit(1763244363.621:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.151540][ T30] audit: type=1326 audit(1763244363.621:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.223484][ T30] audit: type=1326 audit(1763244363.621:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.248443][ T30] audit: type=1326 audit(1763244363.631:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.273331][ T30] audit: type=1326 audit(1763244363.631:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.363434][ T30] audit: type=1326 audit(1763244363.631:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.410642][ T30] audit: type=1326 audit(1763244363.631:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.466534][ T30] audit: type=1326 audit(1763244363.641:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15147 comm="syz.9.8343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2899.904289][T15157] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2899.904289][T15157] program syz.8.8346 not setting count and/or reply_len properly [ 2899.940873][T15159] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8344'. [ 2900.029424][T15160] syz.2.8344 (15160): drop_caches: 2 [ 2900.369643][T11767] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2900.721249][T11767] usb 10-1: config 160 has an invalid interface number: 200 but max is 0 [ 2900.739355][T11767] usb 10-1: config 160 has no interface number 0 [ 2900.745836][T11767] usb 10-1: config 160 interface 200 has no altsetting 0 [ 2900.813120][T11767] usb 10-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 2900.841050][T11767] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.870950][T11767] usb 10-1: Product: syz [ 2900.888044][T11767] usb 10-1: Manufacturer: syz [ 2900.918507][T11767] usb 10-1: SerialNumber: syz [ 2902.835503][T11767] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2902.843928][T11767] usb 10-1: MIDIStreaming interface descriptor not found [ 2902.884174][T11767] usb 10-1: USB disconnect, device number 19 [ 2902.988047][T15190] udevd[15190]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2903.294975][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8351'. [ 2905.137475][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2905.137492][ T30] audit: type=1800 audit(1763244369.721:5046): pid=15208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8352" name="nullb0" dev="devtmpfs" ino=4199 res=0 errno=0 [ 2905.914889][T15228] x_tables: duplicate underflow at hook 3 [ 2906.841730][T15236] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2906.841730][T15236] program syz.8.8357 not setting count and/or reply_len properly [ 2906.859483][ C1] vkms_vblank_simulate: vblank timer overrun [ 2907.297937][T15248] syzkaller1: entered promiscuous mode [ 2907.304960][T15248] syzkaller1: entered allmulticast mode [ 2908.956996][T15266] netlink: 148 bytes leftover after parsing attributes in process `syz.8.8363'. [ 2909.011645][T15266] syz.8.8363 (15266): drop_caches: 2 [ 2909.038730][T15266] IPv6: Can't replace route, no match found [ 2911.080604][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8367'. [ 2913.569117][T15309] delete_channel: no stack [ 2915.581800][T15322] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2915.581800][T15322] program syz.8.8374 not setting count and/or reply_len properly [ 2916.581396][T15344] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8377'. [ 2918.768434][T15379] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 2920.171694][T15394] fuse: Bad value for 'fd' [ 2921.032576][T15415] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2921.032576][T15415] program syz.9.8389 not setting count and/or reply_len properly [ 2921.117350][T15418] syzkaller1: entered promiscuous mode [ 2921.124471][T15418] syzkaller1: entered allmulticast mode [ 2922.720452][T15429] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2925.182279][T15458] program syz.9.8397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2926.544201][T15480] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8409'. [ 2927.471737][T15480] syz.0.8409 (15480): drop_caches: 2 [ 2928.166506][T15494] xfrm0: entered promiscuous mode [ 2928.173150][T15494] xfrm0: entered allmulticast mode [ 2928.499206][T15507] syz.9.8403 (15507): drop_caches: 2 [ 2928.526180][T15507] syz.9.8403 (15507): drop_caches: 2 [ 2929.028041][T15517] veth9: entered promiscuous mode [ 2929.081097][T15517] veth9: entered allmulticast mode [ 2938.138979][T26123] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2938.157746][T15606] netlink: 188 bytes leftover after parsing attributes in process `syz.9.8425'. [ 2938.229616][T15606] syz.9.8425 (15606): drop_caches: 2 [ 2938.364231][T26123] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2938.389527][T26123] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2938.402886][T26123] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2938.413889][T26123] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2938.687687][ T30] audit: type=1326 audit(1763244403.271:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2938.779405][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8424'. [ 2938.804882][ T30] audit: type=1326 audit(1763244403.271:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2938.909892][ T30] audit: type=1326 audit(1763244403.321:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2938.993821][ T30] audit: type=1326 audit(1763244403.321:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2939.041384][ C1] vkms_vblank_simulate: vblank timer overrun [ 2939.159733][ T30] audit: type=1326 audit(1763244403.321:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2939.185939][ C1] vkms_vblank_simulate: vblank timer overrun [ 2939.238593][ T30] audit: type=1326 audit(1763244403.321:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2939.408929][ T30] audit: type=1326 audit(1763244403.321:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2939.484660][ T30] audit: type=1326 audit(1763244403.321:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2939.629699][ T30] audit: type=1326 audit(1763244403.331:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2939.655729][ T30] audit: type=1326 audit(1763244403.331:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.8.8424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000 [ 2940.687066][T15631] syzkaller1: entered promiscuous mode [ 2940.692897][T15631] syzkaller1: entered allmulticast mode [ 2941.139130][T26123] usb 9-1: USB disconnect, device number 42 [ 2942.155121][T15650] trusted_key: encrypted_key: keylen parameter is missing [ 2942.533907][T15652] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2942.594836][T15652] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8442'. [ 2942.712466][T15652] bond1: option resend_igmp: invalid value (511) [ 2942.729742][T15652] bond1: option resend_igmp: allowed values 0 - 255 [ 2942.761942][T15652] bond1 (unregistering): Released all slaves [ 2943.319213][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.331599][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.341680][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.359590][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.402466][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.420204][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.480027][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.497134][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.514438][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.722184][T15667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2944.579261][T27890] Bluetooth: hci3: command 0x0c1a tx timeout [ 2945.276049][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2945.276099][ T30] audit: type=1800 audit(1763244409.841:5103): pid=15685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.8448" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 2945.490193][T15691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2945.791047][T15693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2947.417898][T15700] netlink: 'syz.9.8452': attribute type 10 has an invalid length. [ 2947.473717][T15700] syz_tun: entered promiscuous mode [ 2947.507989][T15700] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2947.614150][ T30] audit: type=1326 audit(1763244412.201:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2947.672910][ T30] audit: type=1326 audit(1763244412.201:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2947.695390][ C0] vkms_vblank_simulate: vblank timer overrun [ 2947.761581][ T30] audit: type=1326 audit(1763244412.201:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2947.790120][ T30] audit: type=1326 audit(1763244412.201:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2947.812619][ C0] vkms_vblank_simulate: vblank timer overrun [ 2947.958930][ T30] audit: type=1326 audit(1763244412.201:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2947.982456][ C0] vkms_vblank_simulate: vblank timer overrun [ 2948.007697][ T30] audit: type=1326 audit(1763244412.201:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2948.030028][ C0] vkms_vblank_simulate: vblank timer overrun [ 2948.099830][ T30] audit: type=1326 audit(1763244412.201:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2948.099875][ T30] audit: type=1326 audit(1763244412.201:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2948.099911][ T30] audit: type=1326 audit(1763244412.201:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15708 comm="syz.2.8441" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2950.220909][T15734] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8445'. [ 2950.253707][T15734] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8445'. [ 2950.310781][T15734] netlink: 'syz.9.8445': attribute type 3 has an invalid length. [ 2950.346349][T15734] netlink: 11 bytes leftover after parsing attributes in process `syz.9.8445'. [ 2950.483874][T15736] : renamed from bridge_slave_0 (while UP) [ 2952.808869][T14627] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2952.963651][T14627] usb 9-1: Using ep0 maxpacket: 8 [ 2953.028858][T14627] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2953.041514][T14627] usb 9-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 2953.065280][T14627] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2953.104429][T14627] usb 9-1: Product: syz [ 2953.119890][T14627] usb 9-1: SerialNumber: syz [ 2953.475438][T14627] usbhid 9-1:1.0: can't add hid device: -71 [ 2953.492070][T14627] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 2953.514533][T14627] usb 9-1: USB disconnect, device number 43 [ 2954.160424][T15777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8456'. [ 2954.375423][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8457'. [ 2954.405610][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8457'. [ 2954.447155][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8457'. [ 2954.868920][T26123] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 2955.042920][T15794] binder: 15789:15794 ioctl c018620c 800002c0 returned -1 [ 2955.059275][T26123] usb 9-1: Using ep0 maxpacket: 8 [ 2955.078755][T26123] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2955.096001][T26123] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2955.108152][T26123] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2955.119040][T26123] usb 9-1: Product: syz [ 2955.125446][T26123] usb 9-1: Manufacturer: syz [ 2955.131409][T26123] usb 9-1: SerialNumber: syz [ 2955.261085][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8461'. [ 2955.273186][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8461'. [ 2955.450411][T26123] usb 9-1: Invalid connection information received from device [ 2955.676994][T26123] usb 9-1: USB disconnect, device number 44 [ 2955.731082][T15806] futex_wake_op: syz.9.8464 tries to shift op by -1; fix this program [ 2955.753787][T15806] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8464'. [ 2958.156915][T15834] net_ratelimit: 1259 callbacks suppressed [ 2958.156933][T15834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2958.173476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2958.750777][T15816] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 2959.169794][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.176786][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2962.550157][T15892] netlink: 'syz.9.8476': attribute type 4 has an invalid length. [ 2962.558422][T15892] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8476'. [ 2962.781055][T15880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2962.791203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2962.995810][T29249] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 2963.216809][T29249] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2963.226920][T29249] usb 10-1: config 0 has no interface number 0 [ 2963.237136][T29249] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2963.278027][T29249] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2963.301364][T29249] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2963.331917][T29249] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2963.341364][T29249] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2963.359914][T29249] usb 10-1: Product: syz [ 2963.374914][T29249] usb 10-1: SerialNumber: syz [ 2963.382756][T29249] usb 10-1: config 0 descriptor?? [ 2963.394264][T29249] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 2963.501437][T29249] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input240 [ 2964.247026][T15892] : renamed from bond0 (while UP) [ 2964.443735][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.451233][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.458475][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.466200][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.473960][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.481369][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.488772][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.496120][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.504140][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.511497][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2964.520942][T26123] usb 10-1: USB disconnect, device number 20 [ 2964.527118][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2965.165928][T26123] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2965.858213][T15911] syz.9.8480 (15911): drop_caches: 2 [ 2965.970284][T15912] syz.0.8479 (15912): drop_caches: 2 [ 2966.232916][T15927] fuse: Bad value for 'fd' [ 2967.427874][T15938] netlink: 'syz.9.8486': attribute type 4 has an invalid length. [ 2967.444826][T15938] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8486'. [ 2967.708840][T14627] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 2968.050183][T14627] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2968.059261][T14627] usb 10-1: config 0 has no interface number 0 [ 2968.066551][T14627] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2968.080394][T14627] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2968.092225][T14627] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2968.106166][T14627] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2968.120294][T14627] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2968.129139][T14627] usb 10-1: Product: syz [ 2968.133774][T14627] usb 10-1: SerialNumber: syz [ 2968.147259][T14627] usb 10-1: config 0 descriptor?? [ 2968.162476][T14627] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 2968.175970][T14627] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input241 [ 2968.368185][T14627] usb 10-1: USB disconnect, device number 21 [ 2968.375033][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2968.399740][T14627] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2970.350462][T15971] netlink: 'syz.8.8492': attribute type 4 has an invalid length. [ 2970.367534][T15971] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8492'. [ 2970.628857][T29249] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 2970.787649][T29249] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 2970.796996][T29249] usb 9-1: config 0 has no interface number 0 [ 2970.825470][T29249] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2970.865257][T29249] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2970.878449][T29249] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2970.894595][T29249] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2970.905430][T29249] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2970.916486][T29249] usb 9-1: Product: syz [ 2970.922904][T29249] usb 9-1: SerialNumber: syz [ 2970.942290][T29249] usb 9-1: config 0 descriptor?? [ 2970.956527][T29249] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 2970.991058][T29249] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input242 [ 2971.185137][ C0] cm109_urb_ctl_callback: 18 callbacks suppressed [ 2971.185158][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.199178][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.206516][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.214157][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.221963][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.229245][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.236414][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.243625][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.251379][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.259074][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2971.283915][T29249] usb 9-1: USB disconnect, device number 45 [ 2971.291699][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2971.405168][T29249] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2972.503074][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8505'. [ 2972.586188][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2972.586205][ T30] audit: type=1800 audit(1763244437.171:5124): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8505" name="nullb0" dev="devtmpfs" ino=4199 res=0 errno=0 [ 2973.147040][T16005] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2973.489750][T16003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2975.230621][T16007] syz.9.8497 (16007): drop_caches: 2 [ 2975.509372][T16015] netlink: 'syz.8.8500': attribute type 4 has an invalid length. [ 2975.517332][T16015] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8500'. [ 2975.858915][T14627] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 2976.021680][T14627] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 2976.030645][T14627] usb 9-1: config 0 has no interface number 0 [ 2976.040404][T14627] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2976.088354][T14627] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2976.114368][T14627] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2976.144814][T14627] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2976.157600][T14627] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2976.174806][T14627] usb 9-1: Product: syz [ 2976.184919][T14627] usb 9-1: SerialNumber: syz [ 2976.199770][T14627] usb 9-1: config 0 descriptor?? [ 2976.214234][T14627] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 2976.232252][T14627] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input243 [ 2976.421295][ C0] cm109_urb_ctl_callback: 101 callbacks suppressed [ 2976.421326][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2976.435489][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2976.443438][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2976.452075][T29249] usb 9-1: USB disconnect, device number 46 [ 2976.458493][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2976.458513][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2976.536913][T29249] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2977.393184][T16041] netlink: 'syz.8.8506': attribute type 4 has an invalid length. [ 2977.402226][T16041] netlink: 152 bytes leftover after parsing attributes in process `syz.8.8506'. [ 2977.807902][T30125] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 2978.132422][T30125] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 2978.140954][T30125] usb 9-1: config 0 has no interface number 0 [ 2978.147070][T30125] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2978.159564][T30125] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2978.179254][T30125] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2978.210333][T30125] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2978.226939][T30125] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2978.248076][T30125] usb 9-1: Product: syz [ 2978.259744][T30125] usb 9-1: SerialNumber: syz [ 2978.294736][T30125] usb 9-1: config 0 descriptor?? [ 2978.315023][T30125] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 2978.338437][T30125] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input244 [ 2978.518528][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2978.526138][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2978.533872][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2978.541555][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2978.549297][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2978.556433][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2978.568175][T30125] usb 9-1: USB disconnect, device number 47 [ 2978.568219][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2978.810532][T30125] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2979.940636][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8511'. [ 2981.417547][ T5199] Dev loop6: unable to read RDB block 7 [ 2981.417576][ T5199] loop6: AHDI p1 p2 p3 [ 2981.417595][ T5199] loop6: partition table partially beyond EOD, truncated [ 2981.417739][ T5199] loop6: p1 start 926365495 is beyond EOD, truncated [ 2981.417751][ T5199] loop6: p2 size 116 extends beyond EOD, truncated [ 2982.907104][T16103] netlink: 'syz.2.8516': attribute type 4 has an invalid length. [ 2982.916539][T16103] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8516'. [ 2983.189119][T29249] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 2983.411401][T29249] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2983.440703][T29249] usb 3-1: config 0 has no interface number 0 [ 2983.479407][T29249] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2983.529852][T29249] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2983.552703][T29249] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2983.575327][T29249] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2983.598726][T29249] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2983.607027][T29249] usb 3-1: Product: syz [ 2983.627371][T29249] usb 3-1: SerialNumber: syz [ 2983.635215][T29249] usb 3-1: config 0 descriptor?? [ 2983.661665][T29249] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 2983.671997][T29249] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input245 [ 2983.865434][ C0] cm109_urb_ctl_callback: 25 callbacks suppressed [ 2983.865466][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2983.880417][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2983.887671][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2983.895194][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2983.902496][T29249] usb 3-1: USB disconnect, device number 60 [ 2983.908512][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2983.908532][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2984.002937][T29249] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2984.057021][T16108] netlink: 188 bytes leftover after parsing attributes in process `syz.8.8517'. [ 2984.113179][T16108] syz.8.8517 (16108): drop_caches: 2 [ 2984.123287][T16108] IPv6: Can't replace route, no match found [ 2985.130321][T16119] netlink: 'syz.9.8521': attribute type 4 has an invalid length. [ 2985.150348][T16119] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8521'. [ 2985.434627][T30125] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 2985.690840][T30125] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2985.699789][T30125] usb 10-1: config 0 has no interface number 0 [ 2985.706227][T30125] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2985.718361][T30125] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2985.730025][T30125] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2985.742532][T30125] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2985.752298][T30125] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2985.761262][T30125] usb 10-1: Product: syz [ 2985.765533][T30125] usb 10-1: SerialNumber: syz [ 2985.781613][T30125] usb 10-1: config 0 descriptor?? [ 2985.793465][T30125] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 2985.806675][T30125] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input246 [ 2986.017072][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2986.025429][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2986.029475][T26123] usb 10-1: USB disconnect, device number 22 [ 2986.032750][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2986.090173][T26123] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2986.722507][T16150] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8523'. [ 2987.604510][T16134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2988.432338][T16163] netlink: 'syz.2.8527': attribute type 10 has an invalid length. [ 2988.498910][T27890] Bluetooth: hci3: command 0x0c1a tx timeout [ 2988.894441][T16173] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 2988.894441][T16173] program syz.2.8528 not setting count and/or reply_len properly [ 2990.034868][T16193] netlink: 'syz.2.8531': attribute type 4 has an invalid length. [ 2990.048841][T16193] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8531'. [ 2990.215523][T16188] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8530'. [ 2990.320151][T26123] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 2990.421131][T16204] netlink: 'syz.9.8535': attribute type 4 has an invalid length. [ 2990.431983][T16204] netlink: 152 bytes leftover after parsing attributes in process `syz.9.8535'. [ 2990.630807][T26123] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2990.639226][T26123] usb 3-1: config 0 has no interface number 0 [ 2990.646115][T26123] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2990.658697][T26123] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2990.711414][T26123] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2990.739362][T26123] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2990.757497][T26123] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2990.782982][T26123] usb 3-1: Product: syz [ 2990.792194][T26123] usb 3-1: SerialNumber: syz [ 2990.811735][T26123] usb 3-1: config 0 descriptor?? [ 2990.834947][T26123] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 2990.846786][T15117] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 2990.852569][T26123] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input247 [ 2991.076140][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.084624][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.092425][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.100157][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.107344][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.115197][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.122778][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.130300][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.137539][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.144977][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2991.153144][T26123] usb 3-1: USB disconnect, device number 61 [ 2991.159290][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2991.169711][T15117] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2991.177912][T15117] usb 10-1: config 0 has no interface number 0 [ 2991.185109][T15117] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2991.197533][T15117] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2991.210010][T15117] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2991.223202][T15117] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 2991.233514][T15117] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2991.242553][T15117] usb 10-1: Product: syz [ 2991.246926][T15117] usb 10-1: SerialNumber: syz [ 2991.272325][T15117] usb 10-1: config 0 descriptor?? [ 2991.283480][T15117] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 2991.293033][T15117] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input248 [ 2991.440283][T26123] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2991.504216][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2991.513423][T30125] usb 10-1: USB disconnect, device number 23 [ 2991.526074][T30125] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2994.011307][T16234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2994.751038][T16259] netlink: 'syz.9.8541': attribute type 3 has an invalid length. [ 2995.779654][T29249] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 2995.952130][T29249] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2995.962708][T29249] usb 10-1: config 0 has no interfaces? [ 2995.968334][T29249] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2995.978538][T29249] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.080208][T29249] usb 10-1: config 0 descriptor?? [ 2996.110688][T16268] fuse: Unknown parameter '0x0000000000000007' [ 2998.041922][T16296] Failed to get privilege flags for destination (handle=0x2:0x25) [ 2998.549410][T14627] usb 10-1: USB disconnect, device number 24 [ 3002.666852][T16347] tipc: Enabled bearer , priority 0 [ 3004.499084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.884810][T16377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.893585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3005.266061][T16388] random: crng reseeded on system resumption [ 3006.136337][T16384] ALSA: mixer_oss: invalid OSS volume '' [ 3007.000058][T15117] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3007.159234][T15117] usb 3-1: Using ep0 maxpacket: 16 [ 3007.177873][T15117] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 3007.187583][T15117] usb 3-1: config 0 has no interface number 0 [ 3007.196250][T15117] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 3007.210017][T15117] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 3007.229471][T15117] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3007.262362][T15117] usb 3-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 3007.272431][T15117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3007.283652][T15117] usb 3-1: Product: syz [ 3007.287973][T15117] usb 3-1: Manufacturer: syz [ 3007.297225][T15117] usb 3-1: SerialNumber: syz [ 3007.306925][T15117] usb 3-1: config 0 descriptor?? [ 3007.320521][T16399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3007.328430][T16399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3007.742354][T15117] asix 3-1:0.255: probe with driver asix failed with error -71 [ 3007.778153][T15117] usb 3-1: USB disconnect, device number 62 [ 3007.924052][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8573'. [ 3007.938808][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8573'. [ 3007.947381][T16420] netlink: 34 bytes leftover after parsing attributes in process `syz.8.8573'. [ 3008.863708][ T5199] Dev loop6: unable to read RDB block 7 [ 3008.863733][ T5199] loop6: AHDI p1 p2 p3 [ 3008.863749][ T5199] loop6: partition table partially beyond EOD, truncated [ 3008.863859][ T5199] loop6: p1 start 926365495 is beyond EOD, truncated [ 3008.863869][ T5199] loop6: p2 size 116 extends beyond EOD, truncated [ 3009.328901][T26123] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 3009.674398][T26123] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 3009.691518][T26123] usb 10-1: config 0 has no interface number 0 [ 3009.707646][T26123] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3009.735467][T26123] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3009.756966][T26123] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3009.972129][T26123] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 3009.981921][T26123] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3009.990371][T26123] usb 10-1: Product: syz [ 3009.996485][T26123] usb 10-1: SerialNumber: syz [ 3010.019719][T26123] usb 10-1: config 0 descriptor?? [ 3010.037692][T26123] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 3010.067566][T26123] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input249 [ 3010.291791][ C0] cm109_urb_ctl_callback: 9 callbacks suppressed [ 3010.291809][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.306760][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.314036][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.322283][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.329913][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.337137][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.344931][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.352319][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.359615][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.366827][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3010.375712][T26123] usb 10-1: USB disconnect, device number 25 [ 3010.381792][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 3010.404694][T26123] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 3011.478893][T26123] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3011.678880][T26123] usb 3-1: Using ep0 maxpacket: 8 [ 3011.713112][T26123] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 3011.722853][T26123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.731970][T26123] usb 3-1: Product: syz [ 3011.736649][T26123] usb 3-1: Manufacturer: syz [ 3011.743720][T26123] usb 3-1: SerialNumber: syz [ 3011.757366][T26123] usb 3-1: config 0 descriptor?? [ 3011.766298][T26123] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 3011.777913][T26123] dvb-usb: bulk message failed: -22 (2/0) [ 3011.793780][T26123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3011.808105][T26123] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 3011.819566][T26123] usb 3-1: media controller created [ 3011.847018][T26123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3012.262911][T16453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3012.280879][T16453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3012.523820][T16468] netlink: 256 bytes leftover after parsing attributes in process `syz.8.8581'. [ 3012.679199][T29249] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 3012.832192][T29249] usb 10-1: Using ep0 maxpacket: 32 [ 3012.847770][T29249] usb 10-1: config 0 has an invalid interface number: 169 but max is 0 [ 3012.849736][T30125] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 3012.868115][T29249] usb 10-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 3012.895171][T29249] usb 10-1: config 0 has no interface number 0 [ 3012.902358][T29249] usb 10-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3012.916085][T29249] usb 10-1: config 0 interface 169 has no altsetting 0 [ 3012.928411][T29249] usb 10-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 3012.940779][T29249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3012.950151][T29249] usb 10-1: Product: syz [ 3012.954856][T29249] usb 10-1: Manufacturer: syz [ 3012.960225][T29249] usb 10-1: SerialNumber: syz [ 3012.969841][T29249] usb 10-1: config 0 descriptor?? [ 3012.991661][T29249] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 3013.012214][T30125] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 3013.022370][T30125] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 3013.028012][T29249] snd-usb-audio 10-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 3013.102319][T30125] usb 9-1: config 0 has no interface number 0 [ 3013.161738][T30125] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3013.212022][T16020] udevd[16020]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3013.229645][T30125] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3013.237911][T30125] usb 9-1: Product: syz [ 3013.242950][T30125] usb 9-1: Manufacturer: syz [ 3013.248262][T30125] usb 9-1: SerialNumber: syz [ 3013.268206][T30125] usb 9-1: config 0 descriptor?? [ 3013.285632][T30125] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22 [ 3013.360577][T16466] netlink: 'syz.9.8592': attribute type 21 has an invalid length. [ 3013.368522][T16466] netlink: 156 bytes leftover after parsing attributes in process `syz.9.8592'. [ 3013.399671][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8592'. [ 3013.536663][T29249] usb 10-1: USB disconnect, device number 26 [ 3013.865884][T26123] cxusb: set interface failed [ 3013.877223][T26123] dvb-usb: bulk message failed: -22 (1/0) [ 3014.005457][T26123] DVB: Unable to find symbol mt352_attach() [ 3014.050247][T26123] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 3014.169537][T26123] rc_core: IR keymap rc-dvico-portable not found [ 3014.196725][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 3014.204645][T26123] Registered IR keymap rc-empty [ 3014.223723][ T31] Not tainted syzkaller #0 [ 3014.229596][T26123] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 3014.240230][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3014.255844][T26123] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input250 [ 3014.267750][ T31] task:kworker/1:0 state:D stack:20520 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3014.290742][ T31] Workqueue: usb_hub_wq hub_event [ 3014.296600][T26123] dvb-usb: schedule remote query interval to 100 msecs. [ 3014.309785][ T31] Call Trace: [ 3014.321362][ T31] [ 3014.324448][T26123] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 3014.334793][ T31] __schedule+0x1798/0x4cc0 [ 3014.347908][T16481] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 3014.347908][T16481] program syz.2.8586 not setting count and/or reply_len properly [ 3014.365588][ T31] ? __pfx___schedule+0x10/0x10 [ 3014.411010][ T31] ? schedule+0x91/0x360 [ 3014.418461][T26123] usb 3-1: USB disconnect, device number 63 [ 3014.427138][ T31] schedule+0x165/0x360 [ 3014.432800][ T31] schedule_preempt_disabled+0x13/0x30 [ 3014.444613][ T31] __mutex_lock+0x7e6/0x1350 [ 3014.449928][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3014.454845][ T31] ? hub_event+0x21e5/0x4a20 [ 3014.459596][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3014.464802][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3014.471444][ T31] hub_event+0x21e5/0x4a20 [ 3014.475924][ T31] ? do_raw_spin_lock+0x121/0x290 [ 3014.481089][ T31] ? __pfx_hub_event+0x10/0x10 [ 3014.486345][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 3014.492266][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3014.497737][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 3014.503904][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 3014.510222][ T31] process_scheduled_works+0xae1/0x17b0 [ 3014.515960][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3014.522636][ T31] worker_thread+0x8a0/0xda0 [ 3014.530079][ T31] kthread+0x711/0x8a0 [ 3014.537939][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3014.544391][ T31] ? __pfx_kthread+0x10/0x10 [ 3014.549194][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3014.554488][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3014.560269][ T31] ? __pfx_kthread+0x10/0x10 [ 3014.565109][ T31] ret_from_fork+0x4bc/0x870 [ 3014.569837][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3014.575443][ T31] ? __switch_to_asm+0x39/0x70 [ 3014.583377][ T31] ? __switch_to_asm+0x33/0x70 [ 3014.588204][ T31] ? __pfx_kthread+0x10/0x10 [ 3014.592981][ T31] ret_from_fork_asm+0x1a/0x30 [ 3014.598216][ T31] [ 3014.601653][ T31] [ 3014.601653][ T31] Showing all locks held in the system: [ 3014.609764][ T31] 5 locks held by kworker/1:0/24: [ 3014.615360][ T31] #0: ffff888143a8f548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3014.627008][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3014.640361][ T31] #2: ffff888028d86198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 3014.649929][ T31] #3: ffff888146327518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 3014.660560][ T31] #4: ffff888145705868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 3014.670605][ T31] 1 lock held by khungtaskd/31: [ 3014.675945][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3014.686691][ T31] 2 locks held by getty/5594: [ 3014.691663][ T31] #0: ffff88814d63b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3014.702361][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 3014.712809][ T31] 4 locks held by syz-executor/11547: [ 3014.718627][ T31] 7 locks held by kworker/0:0/26123: [ 3014.724422][ T31] #0: ffff888143a8f548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3014.736174][ T31] #1: ffffc9000487fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3014.779740][ T31] #2: ffff888027b4d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 3014.789298][ T31] #3: ffff88805188f198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 3014.799878][ T31] #4: ffff888033279160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 3014.811177][ T31] #5: ffffffff8ed59648 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 3014.845838][ T31] #6: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 3014.864002][ T31] 3 locks held by kworker/0:2/29249: [ 3014.871041][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3014.885514][ T31] #1: ffffc9000e85fba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3014.896967][ T31] #2: ffffffff8df43040 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3014.907369][ T31] 5 locks held by kworker/0:5/9622: [ 3014.912704][ T31] #0: ffff888143a8f548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3014.925168][ T31] #1: ffffc90004a8fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3014.937668][ T31] #2: ffff888146324198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 3014.946728][ T31] #3: ffff888146353518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 3014.956767][ T31] #4: ffff888145705868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 3014.966532][ T31] 4 locks held by udevd/16020: [ 3014.971543][ T31] #0: ffff88805be718b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 3014.980582][ T31] #1: ffff888054fe3088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 3014.994124][ T31] #2: ffff8880375134b8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 3015.004025][ T31] #3: ffff88805188f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 3015.014506][ T31] 1 lock held by syz.0.8582/16472: [ 3015.021324][ T31] 1 lock held by syz.9.8585/16480: [ 3015.026702][ T31] 1 lock held by syz.9.8585/16482: [ 3015.036352][ T31] [ 3015.043152][ T31] ============================================= [ 3015.043152][ T31] [ 3015.070020][ T31] NMI backtrace for cpu 0 [ 3015.070046][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 3015.070065][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3015.070077][ T31] Call Trace: [ 3015.070084][ T31] [ 3015.070093][ T31] dump_stack_lvl+0x189/0x250 [ 3015.070122][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3015.070142][ T31] ? __pfx__printk+0x10/0x10 [ 3015.070171][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3015.070270][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3015.070291][ T31] ? __pfx__printk+0x10/0x10 [ 3015.070315][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3015.070352][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3015.070374][ T31] watchdog+0xf60/0xfa0 [ 3015.070396][ T31] ? watchdog+0x1e2/0xfa0 [ 3015.070416][ T31] kthread+0x711/0x8a0 [ 3015.070441][ T31] ? __pfx_watchdog+0x10/0x10 [ 3015.070457][ T31] ? __pfx_kthread+0x10/0x10 [ 3015.070479][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3015.070500][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3015.070520][ T31] ? __pfx_kthread+0x10/0x10 [ 3015.070543][ T31] ret_from_fork+0x4bc/0x870 [ 3015.070563][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3015.070587][ T31] ? __switch_to_asm+0x39/0x70 [ 3015.070600][ T31] ? __switch_to_asm+0x33/0x70 [ 3015.070613][ T31] ? __pfx_kthread+0x10/0x10 [ 3015.070634][ T31] ret_from_fork_asm+0x1a/0x30 [ 3015.070665][ T31] [ 3015.070692][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3015.218933][ C1] NMI backtrace for cpu 1 [ 3015.218970][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 3015.218988][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3015.219001][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x20/0x70 [ 3015.219031][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 6e 92 65 8b 15 38 4c ae 10 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c 8b 91 58 16 00 [ 3015.219045][ C1] RSP: 0018:ffffc90000a08a88 EFLAGS: 00000206 [ 3015.219060][ C1] RAX: ffffffff895e6369 RBX: 0000000000000000 RCX: ffff88801ce9dac0 [ 3015.219071][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 3015.219081][ C1] RBP: ffffc90024448088 R08: 0000000000000003 R09: 0000000000000004 [ 3015.219091][ C1] R10: dffffc0000000000 R11: fffff52000141154 R12: dffffc0000000000 [ 3015.219103][ C1] R13: ffff8880248d931a R14: 1ffff1100491b263 R15: 0000000000000000 [ 3015.219115][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 3015.219128][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3015.219138][ C1] CR2: 00000000800e7000 CR3: 0000000036d02000 CR4: 00000000003526f0 [ 3015.219152][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3015.219162][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3015.219171][ C1] Call Trace: [ 3015.219178][ C1] [ 3015.219184][ C1] pie_calculate_probability+0x6a9/0x7e0 [ 3015.219326][ C1] fq_pie_timer+0x288/0x5b0 [ 3015.219347][ C1] ? fq_pie_timer+0x4d/0x5b0 [ 3015.219369][ C1] call_timer_fn+0x17e/0x5f0 [ 3015.219384][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 3015.219403][ C1] ? call_timer_fn+0xbe/0x5f0 [ 3015.219416][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 3015.219434][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3015.219454][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 3015.219473][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 3015.219493][ C1] __run_timer_base+0x61a/0x860 [ 3015.219523][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 3015.219542][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 3015.219569][ C1] run_timer_softirq+0xb7/0x180 [ 3015.219590][ C1] handle_softirqs+0x286/0x870 [ 3015.219609][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 3015.219627][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 3015.219644][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3015.219666][ C1] __irq_exit_rcu+0xca/0x1f0 [ 3015.219681][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 3015.219700][ C1] irq_exit_rcu+0x9/0x30 [ 3015.219714][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3015.219734][ C1] [ 3015.219740][ C1] [ 3015.219746][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3015.219763][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3015.219784][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 3015.219796][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 3015.219809][ C1] RAX: d0dcdb2e5da19000 RBX: ffffffff81967b47 RCX: d0dcdb2e5da19000 [ 3015.219821][ C1] RDX: 0000000000000001 RSI: ffffffff8d70e261 RDI: ffffffff8bbf0760 [ 3015.219832][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 3015.219843][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cea70 [ 3015.219856][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 3015.219868][ C1] ? do_idle+0x1e7/0x510 [ 3015.219888][ C1] default_idle+0x13/0x20 [ 3015.219903][ C1] default_idle_call+0x73/0xb0 [ 3015.219917][ C1] do_idle+0x1e7/0x510 [ 3015.219935][ C1] ? __pfx_do_idle+0x10/0x10 [ 3015.219964][ C1] cpu_startup_entry+0x44/0x60 [ 3015.219980][ C1] start_secondary+0x101/0x110 [ 3015.220002][ C1] common_startup_64+0x13e/0x147 [ 3015.220029][ C1] [ 3016.085269][T30125] usb 9-1: USB disconnect, device number 48 [ 3016.126542][T26123] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 3020.581393][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.587776][ T1300] ieee802154 phy1 wpan1: encryption failed: -22