last executing test programs: 19.552772625s ago: executing program 4 (id=3714): socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, 0x0, 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92df8") statx(r3, 0x0, 0x400, 0x7ff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = socket(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0xd, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000f00015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) 17.516332342s ago: executing program 0 (id=3718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4014850, r0, 0xde39e000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) write$P9_RLOCK(r1, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x2}, 0x8) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80800, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x2, 0x3, 0x802}}, 0x2e) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000280)) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$amidi(&(0x7f0000000040), 0x437d, 0x109000) 16.078634544s ago: executing program 1 (id=3719): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r2, 0x400454dc, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffff0000000002000000000000000000ec6f5e5644fdffbf7476d995725b672b82067c3675f9d0fd9b107888d2fd265749898c130ed9a2fbf2cc777809cc16bc071d0d89e0b13dce49487466b252c680febfca61d6f382648e256ef1"], 0x2a) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41c", 0x25}], 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) write$tcp_mem(r4, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x4}) 14.458322201s ago: executing program 1 (id=3721): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x9, 0x101d00) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x3a, 0xd, 0x4, 0xd643, 0xa, 0x7, 0x100000000, 0x1fe, 0x7, 0x58, 0x8000000000000001, 0x3, 0x7fff, 0x101, 0x392ad71c, 0x1], 0xdddd1000, 0x141a54}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd30, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcc0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000044) socket(0x10, 0x3, 0x0) 14.274934067s ago: executing program 0 (id=3722): socket$kcm(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$igmp6(0xa, 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x2000000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r6}}, 0x20) 14.206414089s ago: executing program 4 (id=3723): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000005b80)={0x2020}, 0x2020) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="7a140010"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 12.948818217s ago: executing program 3 (id=3725): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r4 = dup(r3) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x0) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000540)={0x0, r5, r5}, &(0x7f0000001480)=""/78, 0x4e, &(0x7f0000000400)={&(0x7f00000002c0)={'crc32c\x00'}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24008044) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x19bc69f7ba77a797) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe64b3000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x1}) 12.474793767s ago: executing program 2 (id=3726): socket$kcm(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$igmp6(0xa, 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x624, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x11c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r6}}, 0x20) 11.478427848s ago: executing program 1 (id=3727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0xffffffffffffffff) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="01032757c38d085641a7260000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) wait4(r4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x1, 0x0, 0x0) mincore(&(0x7f00001b0000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/153) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) 11.47657078s ago: executing program 0 (id=3737): socket$kcm(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$igmp6(0xa, 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x624, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x11c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r6}}, 0x20) 10.804497573s ago: executing program 3 (id=3728): sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x358, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x30}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x98, 0xfa, "ef46f809296ab80426fc9db50b38c36eb30a862e50683fc573ea870b40054adc092c4c1742b02312dffcda2dea4a8211fe8713b5c11fadacc1b382afd86fa654d0b85f5d5cdf11600e17769d5c7c9e2a92409feedce793276a2938e8ffa101e621af363cd66651955386dbcbca99d93dbdfb382508f5be68286e39d4aac1bf077911a1efeff5f4c4295a095ab53a5d9499909f1b"}, @NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, "e6"}, @NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "6ef8fa6f9e6549bf85c0c3d1fe7bb3d8cc2b6d91ae03ecfad69ae92318c6a1dd1bd45afd5c568e0497a34593572b7f901db4e825e69cb6e2620394dc0bc2d0fa44e62f940b1bdd38df80797699f32adff71c2e7446dbe36b88519960bd1ec21fca89b739e0297b7157f3633f55f041af4f7ea35008421766770aa8b41de0283a9bf0727e3167907404970e3a6f52028621de34b3a0246b20b4e973f9173e5b9b000ee854a7d488365f792680a086c1f53708a4c7e67b47cd8ead07b644df1d857b80a16dd7052c9907d46d28077d049312321bb9d9"}, @NL80211_ATTR_FILS_ERP_REALM={0xfa, 0xfa, "e4e0ec2d869fe2d94e21be10b8070022573407386f38b2d2a0847a61c7338f6be1dd97528d963dab3338ee6fe6060934645f684da6f096c76d3993ab1c62757e5d0f88e9a69eddd846c02b0b619398309a455e9212995f83e6656d9a1bdd49fbf3cbd9377e8cd0d16ce4f07d73c2efafedb516bf57e2c4f946bc09cfea7dbb87d0e477a17170508b5debe618c120fc41a2104c42fd941c67d115d9e4599946e3a9d4883cee1012d28ab665682318f434797cff59c104a4695d37e0dae77cb7d778326cf29335593f53f6a57c64b62c00c116babe8495183626fe7ac92c77d083198742f399559ca01997249708000000000000000000"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x72, 0xfc, "17251f9d1e1a923a44ef372a4ec732a9f9229cdfe0362f3fc9ef5e9ff9827987e958f92d1b7b7f93a015f2d49fa624b828054906984b34762b1320ebb17567d73edd0bdd7046b08628054f01ca4f0a9517a40f144eaa4a0031c0a6d19dff6354bc0a969e59ad8a8735a18f612e83"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "16b8e3bc81"}, @NL80211_ATTR_FILS_ERP_REALM={0x1d, 0xfa, "3fd1b536b5e57ae1fc7821f936ee5a1e6eefa806d610b54d0f"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x24040041}, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) r5 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000000)=0x102, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) r9 = dup2(r8, r8) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5) fcntl$setstatus(r8, 0x4, 0x42800) read$FUSE(r9, &(0x7f0000004d80)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x0, @stepwise={0xfffffffd, 0x400, 0x0, 0x0, 0x0, 0x6}}) syz_fuse_handle_req(r1, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0x1ffff, 0x7, 0x8, {0x4, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x4, 0x2000, 0x7f, r3, r4, 0xcb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000083c0)=ANY=[@ANYBLOB="1201000000000040cb06f57300000000000109022400010000000009040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000008780)=ANY=[@ANYBLOB="00220f000000c0"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.21398214s ago: executing program 2 (id=3729): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 9.447533785s ago: executing program 0 (id=3730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 8.316138787s ago: executing program 3 (id=3731): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400002, 0x104) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6083) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r6, &(0x7f0000000140)=""/108, 0xffffffa0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000100)={0x2, 0xba}, 0x2) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0xc56d6d1c59985f37, 0x8, 0x21, 0x81}}]}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x3}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000004c0)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000740)="e81618952ab130700698138171a56e4b4835e276669a836a16e81e32a7424f0a88779619f89ef24ef3b44c8f3a52315ef11c596ca9f4ac32efba95ce0930cef4b1b317d2ededdc7b15d55ceb36cd3b2f5d23fb9e6b", 0x55}, {&(0x7f0000001680)="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", 0x13b}], 0x2}], 0x1, 0xc050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x8}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) syz_usb_connect(0x5, 0xd84, &(0x7f00000017c0)=ANY=[], &(0x7f0000000700)={0x0, 0x0, 0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f4a00050c100a0080b0000000f002001410040275e991de4bfee8b1bb070747b086f6000710023c640b000a1003d63410c47f9d000e0010022c0014100a03a20000000f0f38000f00"]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x330, 0x0, 0x298, 0x0, 0x298, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@empty, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000440)=""/84) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r9}) 8.211032484s ago: executing program 2 (id=3732): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x20040044) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x40040) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x800, 0x7, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/152, 0x98}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x0, 0x4]}, 0x20) 8.030678636s ago: executing program 1 (id=3733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0xe8}}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc008aeba, 0x0) 7.213247388s ago: executing program 4 (id=3734): eventfd2(0xe5c, 0x100000) r0 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfeffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x2040400) r3 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="c0010000250009012dbd7000f9ffffff020000009c013d80980122809301298038d1ee53e90bf01b90ad89c7d4385d00f0d71c7d2ec227cf1663983490c37414d622a60e4d3fd4866a23dcc64b4e967089ee5202a2180025801400f600000000000000000000000000000000018acc109017336399b22397fd312aa00e0b3eb75621a1f23d2d297c96670f727dd3800f08e90d8af7d940199c2e3e55d0c6d9d9f6364d6b4d8464948433d519b547dd429accacd17a89eff036e712c3b8b9b6506f9d3e130d63ff9f9c4f3d017635ce56a27183c37aa768d1ecf3bf659151", @ANYRES32=0x0, @ANYBLOB="0c00b800060000000000000039fa73cdd531c58062d7f4090e5a4280af8ca3b833bebeeb486913656c96d657b16946e7726a140a47144925e50e9e58b9be393bb55842e127d65153667089dabcef1b91e2476b5e35d42c154bb18175fd779fcba65712e549c927e2c49048cfae9ef69e93e03f7e9fe5ffb67ecdb08ba6c82eda194bc1643fea9f0850642a25606592853b03759f01efceff42ff6776f298e796afbe14fea54f57455618d95ef8c270c10152274800050020004700000008004000", @ANYRES32, @ANYBLOB], 0x1c0}, 0x1, 0x0, 0x0, 0xc14b}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000140)=0x80, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) unshare(0x2000400) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000808000/0x14000)=nil, 0x14000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) sendmsg$key(r0, 0x0, 0x40408c0) 5.939504673s ago: executing program 0 (id=3735): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x6d0, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x668, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x584, 0x9, 0x0, 0x1, [@m_xt={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x80, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.170549356s ago: executing program 1 (id=3736): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000100000000007c00"/28], 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/19, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7040000080000008500000095000000950000000000000080ad75a112853728497e276e8eecc050d6709b8be4de6684633444adabe821780088869504d20c4a69857a34f97dae001b6f0f5c8ec3a84ecaa2722b6058a133b2032f6f1730472f6ad9192f35c327f45f65ab9567968d17b0389936d02f4077"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$char_usb(r5, &(0x7f0000000100)=""/240, 0xf0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000069000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, 0x0, 0x5) close(r5) 4.805318455s ago: executing program 2 (id=3738): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x9, 0x101d00) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x3a, 0xd, 0x4, 0xd643, 0xa, 0x7, 0x100000000, 0x1fe, 0x7, 0x58, 0x8000000000000001, 0x3, 0x7fff, 0x101, 0x392ad71c, 0x1], 0xdddd1000, 0x141a54}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd30, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcc0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000044) socket(0x10, 0x3, 0x0) 4.670257307s ago: executing program 4 (id=3739): bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.318846968s ago: executing program 3 (id=3740): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304a"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x2f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x544, 0x33, 0x6, 0x3, 0x5, 0x200}, &(0x7f0000000180)={0x8, 0x2, 0x401, 0x2, 0x7, 0x7fff, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 4.083252955s ago: executing program 0 (id=3741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\\\\%-,#]*[.'}]}, 0x17) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0x0) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r5, &(0x7f0000000200)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x5, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 3.852935555s ago: executing program 1 (id=3742): syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(0xffffffffffffffff, r2) sendmmsg$unix(r4, 0x0, 0x0, 0x4008890) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb48, 0x6, 0x2, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8916, 0x0) writev(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) 2.748771193s ago: executing program 2 (id=3743): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffc, 0x10033, 0x3, 0x0}) sendfile(r5, r4, 0x0, 0x17) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) 2.213152768s ago: executing program 3 (id=3744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fcntl$lock(r2, 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000980)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x0, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0xa, 0x4, 0x1, 0x1e, 0xa0, 0x67, 0x0, 0x10, 0x11, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0xf6, [@multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}, {0x4e24, 0x4e20, 0x78, 0x0, @wg=@data={0x4, 0x5, 0x1, "85b0df8f2dba92816ba562bf03000000f1b6b7451042d91c1656a4bb1e209551a1a8d0ac778e6c3d77e9c062e32fb984ace1cd38d7e7451fd71ad8dc560550ed1fc9e77ef85a299a9d272106762aa68ad47967ab5a9fd4511d4783b576ec0000"}}}}}, 0xae) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) socket$inet(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 1.854622004s ago: executing program 4 (id=3745): socket$kcm(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$igmp6(0xa, 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x624, 0x0, 0xc8, 0x404, 0x1a8, 0x0, 0x55c, 0x55c, 0x55c, 0x55c, 0x55c, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x11c, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x680) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r5}}, 0x20) 721.796054ms ago: executing program 2 (id=3746): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4b63, 0x3) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r7, 0x5450) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 284.74861ms ago: executing program 3 (id=3747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0xd8, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x2b, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x4c, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000300000000000000000"], 0x0, 0xf}, 0x94) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, 0x0}) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r6, r8, 0x9, 0x7, 0x1}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 0s ago: executing program 4 (id=3748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x9, 0x101d00) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x3a, 0xd, 0x4, 0xd643, 0xa, 0x7, 0x100000000, 0x1fe, 0x7, 0x58, 0x8000000000000001, 0x3, 0x7fff, 0x101, 0x392ad71c, 0x1], 0xdddd1000, 0x141a54}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd30, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcc0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000044) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 1 vid 0x0525 pid 0xA4A8 [ 1543.778801][T20916] UHID_CREATE from different security context by process 2826 (syz.1.2926), this is not allowed. [ 1543.816872][ T933] usb 3-1: USB disconnect, device number 70 [ 1543.840376][ T933] usblp0: removed [ 1543.993769][T20916] input: syz0 as /devices/virtual/input/input54 [ 1544.254053][T12115] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1544.413968][T12115] usb 2-1: Using ep0 maxpacket: 32 [ 1544.425228][T12115] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 1544.436441][T12115] usb 2-1: config 0 has no interface number 0 [ 1544.464298][T12115] usb 2-1: New USB device found, idVendor=2dc8, idProduct=880c, bcdDevice=ef.fc [ 1544.475110][T12115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.489367][T12115] usb 2-1: Product: syz [ 1544.496288][T12115] usb 2-1: Manufacturer: syz [ 1544.503944][T12115] usb 2-1: SerialNumber: syz [ 1544.524089][T12115] usb 2-1: config 0 descriptor?? [ 1544.771432][T12115] usb 2-1: USB disconnect, device number 74 [ 1545.341736][T20929] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2938'. [ 1545.785205][T20931] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1546.083524][T20941] usb usb8: usbfs: process 20941 (syz.0.2940) did not claim interface 2 before use [ 1546.102486][T20941] openvswitch: netlink: IP tunnel dst address not specified [ 1546.886160][T20948] netlink: 'syz.3.2930': attribute type 4 has an invalid length. [ 1546.974968][T20949] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1547.022165][T20948] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1547.082652][T20949] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1547.825681][T20958] bond0: Device is already in use. [ 1547.880788][T20958] tipc: Enabling of bearer rejected, already enabled [ 1547.927394][T20958] fuse: Bad value for 'fd' [ 1547.946178][T20958] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1548.793411][ T5836] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1548.959110][ T5836] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1548.969652][ T5836] usb 2-1: config 0 has no interface number 0 [ 1548.998354][ T5836] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1549.011048][ T5836] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1549.026597][ T5836] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1549.039191][ T5836] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1549.050863][ T5836] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1549.072134][ T5836] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1549.085921][ T5836] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1549.095390][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.165627][ T5836] usb 2-1: config 0 descriptor?? [ 1549.204351][T20980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1549.250225][T20980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1549.286625][ T5836] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1549.715061][T20971] ldusb 2-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1551.318647][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.325409][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.090035][T20381] usb 2-1: USB disconnect, device number 75 [ 1552.098945][T20381] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1552.427128][T21015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2943'. [ 1552.547373][ T5836] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1552.710549][ T5836] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1552.720087][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.771317][ T5836] usb 3-1: Product: syz [ 1552.777298][ T5836] usb 3-1: Manufacturer: syz [ 1552.782128][ T5836] usb 3-1: SerialNumber: syz [ 1553.072217][ T5836] rtl8150 3-1:1.0: couldn't reset the device [ 1553.082297][ T5836] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1553.123919][ T5836] usb 3-1: USB disconnect, device number 71 [ 1553.205134][T21025] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1554.118535][T21033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2957'. [ 1555.214505][T21046] netlink: 'syz.3.2948': attribute type 4 has an invalid length. [ 1555.315313][T21046] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2948'. [ 1555.365800][T21046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2948'. [ 1555.378708][T21048] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1555.446019][T21049] loop0: detected capacity change from 0 to 2560 [ 1555.656435][T21049] buffer_io_error: 310 callbacks suppressed [ 1555.656460][T21049] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 1555.683998][T21049] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 1555.716977][T21049] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 1555.729365][T21049] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 1555.749397][T21049] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 1555.759934][T21049] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 1555.810287][T21049] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 1555.836541][T21049] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 1555.888658][T21049] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 1555.908292][T21049] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 1556.124741][T21057] loop6: detected capacity change from 0 to 524287999 [ 1556.205376][ T5836] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1556.381954][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.394861][ T5836] usb 1-1: config 0 has no interfaces? [ 1556.402666][ T5836] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1556.420001][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.455699][ T5836] usb 1-1: config 0 descriptor?? [ 1559.012580][T20381] usb 1-1: USB disconnect, device number 53 [ 1561.543568][T21119] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1561.567381][T21119] bridge3: entered promiscuous mode [ 1561.616444][T21119] bridge3: entered allmulticast mode [ 1563.210642][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1563.210671][ T30] audit: type=1800 audit(1768343332.240:1290): pid=21133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2968" name="bus" dev="ramfs" ino=74578 res=0 errno=0 [ 1563.699555][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.713941][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.724196][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.734250][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.744619][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.759592][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.768854][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.778893][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.790964][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.801111][T12115] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 1563.829733][T12115] hid-generic 00A0:0006:0003.001A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1564.119485][T21147] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 1564.197573][T12115] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1564.410171][T12115] usb 3-1: config 0 has no interfaces? [ 1564.416736][T12115] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1564.428113][T12115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.476692][T12115] usb 3-1: config 0 descriptor?? [ 1564.914902][ T5922] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1565.074095][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1565.140400][ T5922] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1565.164065][ T5922] usb 4-1: config 0 has no interface number 0 [ 1565.170465][ T5922] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1565.280039][ T5922] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1565.290771][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.305873][ T5922] usb 4-1: Product: syz [ 1565.310946][ T5922] usb 4-1: Manufacturer: syz [ 1565.322214][ T5922] usb 4-1: SerialNumber: syz [ 1565.332084][ T5922] usb 4-1: config 0 descriptor?? [ 1565.387014][ T5922] f81534 4-1:0.12: required endpoints missing [ 1566.342674][T21171] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2977'. [ 1567.568661][ T5836] usb 4-1: USB disconnect, device number 57 [ 1567.798662][T20381] usb 3-1: USB disconnect, device number 72 [ 1568.763751][T21192] create_pit_timer: 3 callbacks suppressed [ 1568.763772][T21192] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1570.449039][T21211] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1570.469233][T21211] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1571.273042][ T30] audit: type=1800 audit(1768343340.300:1291): pid=21208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2984" name="bus" dev="ramfs" ino=74697 res=0 errno=0 [ 1572.428174][T21230] netlink: 'syz.3.2991': attribute type 4 has an invalid length. [ 1573.039441][T21246] fuse: Unknown parameter 'grou00000000000000000000' [ 1573.244122][T21248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 1574.256467][T21266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2998'. [ 1574.854664][T21279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1575.709265][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 1577.424169][ T5922] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1577.634828][ T5922] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1577.654894][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.663287][ T5922] usb 1-1: Product: syz [ 1577.668173][ T5922] usb 1-1: Manufacturer: syz [ 1577.672810][ T5922] usb 1-1: SerialNumber: syz [ 1578.017533][ T5922] rtl8150 1-1:1.0: couldn't reset the device [ 1578.024297][ T5922] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1578.045207][ T5922] usb 1-1: USB disconnect, device number 54 [ 1578.292403][T21315] batadv_slave_0: entered promiscuous mode [ 1578.302653][T21315] batadv_slave_0: entered allmulticast mode [ 1578.342430][T21315] netlink: 'syz.3.3007': attribute type 8 has an invalid length. [ 1578.634245][ T5836] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1578.787655][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.798535][ T5836] usb 3-1: config 0 has no interfaces? [ 1578.808433][ T5836] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1578.818900][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.836459][ T5836] usb 3-1: config 0 descriptor?? [ 1579.339136][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'. [ 1579.437071][T21333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3012'. [ 1581.381173][ T5836] usb 3-1: USB disconnect, device number 73 [ 1581.441775][T21341] tipc: New replicast peer: 255.255.255.255 [ 1581.454511][T21341] tipc: Enabled bearer , priority 10 [ 1581.754318][ T5922] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1581.915945][ T5922] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1581.927975][ T5922] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1581.944411][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1581.958694][ T5922] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1581.969228][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1581.982860][ T5922] usb 2-1: Product: syz [ 1581.992322][ T5922] usb 2-1: Manufacturer: syz [ 1581.998267][ T5922] usb 2-1: SerialNumber: syz [ 1582.019417][ T5922] usb 2-1: config 0 descriptor?? [ 1582.037803][ T5922] usb 2-1: selecting invalid altsetting 0 [ 1582.270652][T21343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.286705][T21343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.306997][ T5922] usb 2-1: USB disconnect, device number 76 [ 1582.463977][ T5836] tipc: Node number set to 1251002010 [ 1582.991256][ T30] audit: type=1326 audit(1768343352.020:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.031685][ T30] audit: type=1326 audit(1768343352.060:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.055643][ T30] audit: type=1326 audit(1768343352.090:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.081596][ T30] audit: type=1326 audit(1768343352.110:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.105855][ T30] audit: type=1326 audit(1768343352.110:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.131480][ T30] audit: type=1326 audit(1768343352.110:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.154155][ T30] audit: type=1326 audit(1768343352.110:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.184098][ T30] audit: type=1326 audit(1768343352.140:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1583.263739][T21366] binder: 21357:21366 ioctl c018620c 80000380 returned -22 [ 1584.160812][T21373] fuse: Unknown parameter 'grou00000000000000000000' [ 1585.031821][T21386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1585.697937][ T5836] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1585.896309][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1585.908352][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1585.923609][ T5836] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1585.993965][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.036469][ T5836] usb 2-1: config 0 descriptor?? [ 1586.043698][T21391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1586.094234][ T5836] hub 2-1:0.0: USB hub found [ 1586.357769][ T5836] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1586.684916][T21410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3030'. [ 1586.697192][T21410] netlink: 'syz.3.3030': attribute type 4 has an invalid length. [ 1586.816348][T21413] fuse: Bad value for 'fd' [ 1586.822715][T21413] fuse: Unknown parameter '0xffffffffffffffff' [ 1586.850675][ T5836] usbhid 2-1:0.0: can't add hid device: -32 [ 1586.873898][ T5836] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1588.211781][T21425] fuse: Unknown parameter 'group_i00000000000000000000' [ 1588.344137][T21431] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1588.353246][T21431] bridge3: entered promiscuous mode [ 1588.359715][T21431] bridge3: entered allmulticast mode [ 1588.501272][T21437] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3036'. [ 1588.845079][ T5836] usb 2-1: USB disconnect, device number 77 [ 1588.913870][ T30] audit: type=1326 audit(1768343357.940:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1588.942601][ T30] audit: type=1326 audit(1768343357.970:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1588.987334][T21439] program syz.1.3037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1589.006246][ T30] audit: type=1326 audit(1768343357.970:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.037229][T21439] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 1589.045468][ T30] audit: type=1326 audit(1768343358.000:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.099623][ T30] audit: type=1326 audit(1768343358.000:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.147167][ T30] audit: type=1326 audit(1768343358.000:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.185963][ T30] audit: type=1326 audit(1768343358.000:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.230007][ T30] audit: type=1326 audit(1768343358.010:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.284199][ T30] audit: type=1326 audit(1768343358.010:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.355650][ T30] audit: type=1326 audit(1768343358.010:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21438 comm="syz.1.3037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1589.538468][T21442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1590.225931][T21456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1590.483766][T21459] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1590.989910][T21462] netlink: 'syz.1.3042': attribute type 20 has an invalid length. [ 1591.004124][T21462] IPv6: NLM_F_CREATE should be specified when creating new route [ 1591.031059][T21462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1591.038442][T21462] IPv6: NLM_F_CREATE should be set when creating new route [ 1591.649247][T21472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 1592.198344][T21479] fuse: Unknown parameter 'group_i00000000000000000000' [ 1593.741895][T21498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1594.344079][T21506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3051'. [ 1595.878725][T21515] tipc: New replicast peer: 255.255.255.255 [ 1595.898365][T21515] tipc: Enabled bearer , priority 10 [ 1596.224049][T20381] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1596.401154][T20381] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1596.413368][T20381] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1596.466408][T20381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1596.489394][T20381] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1596.504150][ T5836] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1596.512215][T20381] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1596.534132][T20381] usb 3-1: Product: syz [ 1596.538480][T20381] usb 3-1: Manufacturer: syz [ 1596.554224][T20381] usb 3-1: SerialNumber: syz [ 1596.580627][T20381] usb 3-1: config 0 descriptor?? [ 1596.595609][T20381] usb 3-1: selecting invalid altsetting 0 [ 1596.887969][T21517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.926821][T21517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.971616][ T5914] usb 3-1: USB disconnect, device number 74 [ 1597.219456][ T5836] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.230505][ T5836] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1597.242343][ T5836] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1597.254078][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.743992][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1597.744020][ T30] audit: type=1326 audit(1768343366.770:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1597.756932][T21521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.793269][ T30] audit: type=1326 audit(1768343366.780:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1597.824552][T21521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.883984][ T30] audit: type=1326 audit(1768343366.780:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1597.924063][ T30] audit: type=1326 audit(1768343366.790:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1598.001176][ T30] audit: type=1326 audit(1768343366.910:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1598.053148][ T30] audit: type=1326 audit(1768343367.010:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1598.090045][ T30] audit: type=1326 audit(1768343367.040:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1598.128942][ T30] audit: type=1326 audit(1768343367.040:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.3054" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1599.194930][ T30] audit: type=1804 audit(1768343368.220:1377): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3060" name="/newroot/590/file0" dev="fuse" ino=1 res=1 errno=0 [ 1599.317294][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'. [ 1600.175255][T20381] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 1600.370657][T20381] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1600.379125][T20381] usb 3-1: config 179 has no interface number 0 [ 1600.386176][T20381] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1600.402260][T20381] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1600.532075][T20381] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1600.543733][T20381] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 1600.555079][T20381] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1600.573945][T20381] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1600.583600][T20381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.616537][T21562] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1600.629238][T20381] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1600.653460][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1600.662007][T20381] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 1600.814619][T21572] wireguard1: entered promiscuous mode [ 1600.832711][T21572] wireguard1: entered allmulticast mode [ 1600.896240][T21562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.965955][T21562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.992239][T21562] loop6: detected capacity change from 0 to 524288000 [ 1601.108333][ C0] invalid error, dev loop6, sector 2048 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1601.119149][T21562] loop6: detected capacity change from 524288000 to 0 [ 1601.180528][T20381] usb 3-1: USB disconnect, device number 75 [ 1601.220313][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'. [ 1601.332358][T21578] pimreg: entered allmulticast mode [ 1601.338206][T21579] pimreg: left allmulticast mode [ 1602.742236][T21584] netlink: 'syz.2.3067': attribute type 20 has an invalid length. [ 1602.793211][T21584] IPv6: NLM_F_CREATE should be specified when creating new route [ 1602.819520][T21584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1602.826982][T21584] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.045723][ T5914] usb 2-1: USB disconnect, device number 79 [ 1603.879664][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 1605.919047][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1606.247455][T21621] fuse: Bad value for 'fd' [ 1606.269946][T21621] fuse: Unknown parameter '0xffffffffffffffff' [ 1606.597368][T21626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3076'. [ 1607.312304][T21640] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1609.215942][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 1611.796122][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1612.761862][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.768492][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1616.820390][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3098'. [ 1616.943907][T21753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3101'. [ 1616.996940][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1618.721181][T21776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1620.620215][T21796] openvswitch: netlink: Flow key attr not present in new flow. [ 1624.207064][T21834] sctp: [Deprecated]: syz.1.3117 (pid 21834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1624.207064][T21834] Use struct sctp_sack_info instead [ 1624.658870][T21840] sctp: [Deprecated]: syz.4.3118 (pid 21840) Use of int in max_burst socket option. [ 1624.658870][T21840] Use struct sctp_assoc_value instead [ 1625.770799][T21837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3117'. [ 1627.507497][T21865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1627.544072][T20381] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 1627.747868][T20381] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1627.756429][T20381] usb 3-1: config 0 has no interface number 0 [ 1627.774206][T20381] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1627.786848][T20381] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1627.814219][T20381] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1627.826967][T20381] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1627.838287][T20381] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1627.853076][T20381] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1627.866702][T20381] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1627.880477][T20381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.924208][T20381] usb 3-1: config 0 descriptor?? [ 1628.026940][T21880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1628.034611][T21880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1628.070344][T20381] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1628.587346][T21873] ldusb 3-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 1630.564775][T20381] usb 3-1: USB disconnect, device number 76 [ 1630.575663][T20381] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1631.529129][T21904] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1633.355732][T21924] ip6t_REJECT: ECHOREPLY is not supported [ 1633.471046][T21926] sctp: [Deprecated]: syz.0.3133 (pid 21926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1633.471046][T21926] Use struct sctp_sack_info instead [ 1634.895207][T21928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3133'. [ 1635.533941][T20381] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1635.714493][T20381] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1635.726610][T20381] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1635.783142][T21957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1635.823221][T20381] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1635.833686][T20381] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1635.853259][T20381] usb 4-1: Product: syz [ 1635.863708][T20381] usb 4-1: Manufacturer: syz [ 1635.868942][T20381] usb 4-1: SerialNumber: syz [ 1635.877489][T20381] usb 4-1: config 0 descriptor?? [ 1635.947469][T20381] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1636.021571][T20614] udevd[20614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1637.912067][T21982] program syz.2.3144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1638.257193][ T5922] usb 4-1: USB disconnect, device number 58 [ 1638.884056][ T5922] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1639.063987][ T5922] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 1639.089890][ T5922] usb 4-1: config 0 has no interface number 0 [ 1639.101743][ T5922] usb 4-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 1639.122337][ T5922] usb 4-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1639.137278][ T5922] usb 4-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 1639.155667][ T5922] usb 4-1: config 0 interface 87 has no altsetting 0 [ 1639.167761][ T5922] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 1639.178911][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.188910][ T5922] usb 4-1: Product: syz [ 1639.195223][ T5922] usb 4-1: Manufacturer: syz [ 1639.202646][ T5922] usb 4-1: SerialNumber: syz [ 1639.212703][ T5922] usb 4-1: config 0 descriptor?? [ 1639.258720][ T5922] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1640.274330][ T143] usb 4-1: Failed to submit usb control message: -110 [ 1640.282510][ T143] usb 4-1: unable to send the bmi data to the device: -110 [ 1640.297830][ T143] usb 4-1: unable to get target info from device [ 1640.309485][ T143] usb 4-1: could not get target info (-110) [ 1640.317564][ T143] usb 4-1: could not probe fw (-110) [ 1640.362114][ T5922] usb 4-1: USB disconnect, device number 59 [ 1640.772326][T22014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3149'. [ 1641.009915][T22016] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1641.261099][ C1] hrtimer: interrupt took 14106108 ns [ 1643.007833][T22034] netlink: 'syz.2.3153': attribute type 2 has an invalid length. [ 1643.116383][T22034] !: entered promiscuous mode [ 1643.252483][T22034] netlink: 'syz.2.3153': attribute type 2 has an invalid length. [ 1643.287036][T22034] !: left promiscuous mode [ 1643.840317][T22051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1644.955853][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 1646.307595][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 1646.391092][T22067] : entered promiscuous mode [ 1647.051561][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1647.295557][T22082] syzkaller0: entered promiscuous mode [ 1647.320474][T22082] syzkaller0: entered allmulticast mode [ 1649.300435][T22107] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3168'. [ 1649.334669][T22105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1649.358988][T22105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1649.388222][T22105] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1649.420925][T22105] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1651.314003][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 1651.395869][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 1651.397019][T22135] Bluetooth: hci2: command 0x0406 tx timeout [ 1651.450252][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3172'. [ 1651.493989][T22135] Bluetooth: hci4: command 0x0406 tx timeout [ 1653.405601][T22154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1653.978016][T22161] program syz.4.3177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1654.034903][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1654.116033][T22162] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1655.317228][T22165] fuse: Invalid rootmode [ 1655.541679][T22180] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1655.568402][T22182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3181'. [ 1656.580797][T22195] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 1, id = 0 [ 1656.611113][T22194] : renamed from bridge_slave_0 [ 1656.714286][T22193] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3183'. [ 1657.174167][T22190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1657.235434][T22190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1657.242130][T22190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1657.330276][T22190] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1659.234452][T22135] Bluetooth: hci0: command 0x0406 tx timeout [ 1659.346243][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1659.352742][T22135] Bluetooth: hci1: command 0x0406 tx timeout [ 1659.413996][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1659.444195][T22225] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1659.933685][T22233] openvswitch: netlink: Message has 1 unknown bytes. [ 1659.949687][T22233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1660.037206][T22236] fuse: Invalid rootmode [ 1660.493494][T22241] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1662.300280][ T933] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1662.479662][ T933] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1662.489999][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.514660][ T933] usb 2-1: config 0 descriptor?? [ 1662.528420][ T933] cp210x 2-1:0.0: cp210x converter detected [ 1662.703958][ T5914] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1662.747990][ T933] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1662.864020][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 1662.895342][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 1662.906656][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024 [ 1662.919141][ T5914] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1662.928558][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.963846][ T5914] usb 1-1: config 0 descriptor?? [ 1663.000305][T22261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1663.006512][T22263] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3199'. [ 1663.017642][T22261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1663.093738][T22264] fuse: Bad value for 'fd' [ 1663.111571][T22261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1663.146686][T22261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1663.389065][ T5914] bigben 0003:146B:0902.001B: unexpected rdesc, please submit for review [ 1663.398215][ T5914] hid_parser_main: 5 callbacks suppressed [ 1663.398234][ T5914] bigben 0003:146B:0902.001B: unknown main item tag 0x0 [ 1663.412354][ T5914] bigben 0003:146B:0902.001B: unknown main item tag 0x0 [ 1663.425455][ T5914] bigben 0003:146B:0902.001B: unknown main item tag 0x0 [ 1663.442498][ T5914] bigben 0003:146B:0902.001B: unknown main item tag 0x0 [ 1663.449627][ T5914] bigben 0003:146B:0902.001B: item fetching failed at offset 4/5 [ 1663.465192][ T5914] bigben 0003:146B:0902.001B: parse failed [ 1663.471222][ T5914] bigben 0003:146B:0902.001B: probe with driver bigben failed with error -22 [ 1663.503611][T22255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.559292][T22255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.618117][T22255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.675051][T22255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.707613][ T933] usb 1-1: USB disconnect, device number 55 [ 1664.934796][T22276] sctp: [Deprecated]: syz.2.3202 (pid 22276) Use of int in maxseg socket option. [ 1664.934796][T22276] Use struct sctp_assoc_value instead [ 1664.994290][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 1665.073873][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1665.118429][ T5922] usb 2-1: USB disconnect, device number 80 [ 1665.131496][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1665.154250][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1665.160791][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1665.178505][ T5922] cp210x 2-1:0.0: device disconnected [ 1666.658163][T22302] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3207'. [ 1668.649960][T22331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1668.662251][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1669.923518][T22344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 1670.007232][T22345] ip6t_REJECT: ECHOREPLY is not supported [ 1670.075039][ T5914] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1670.249419][ T5914] usb 3-1: config 0 has no interfaces? [ 1670.255388][ T5914] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1670.267990][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.303323][ T5914] usb 3-1: config 0 descriptor?? [ 1671.776412][T22366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3218'. [ 1673.250687][ T5914] usb 3-1: USB disconnect, device number 78 [ 1674.196271][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.202710][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.225223][ T30] audit: type=1326 audit(1768343444.260:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.282214][ T30] audit: type=1326 audit(1768343444.280:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.323161][ T30] audit: type=1326 audit(1768343444.280:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.389045][ T30] audit: type=1326 audit(1768343444.280:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.442584][ T30] audit: type=1326 audit(1768343444.380:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.518352][T22400] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1675.540915][ T30] audit: type=1326 audit(1768343444.420:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.582704][ T30] audit: type=1326 audit(1768343444.420:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.613613][ T30] audit: type=1326 audit(1768343444.450:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.644976][ T30] audit: type=1326 audit(1768343444.450:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.674558][ T30] audit: type=1326 audit(1768343444.450:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22393 comm="syz.1.3224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1675.812840][T22405] fuse: Bad value for 'rootmode' [ 1676.344691][T22414] trusted_key: encrypted_key: insufficient parameters specified [ 1676.354950][T22414] trusted_key: encrypted_key: insufficient parameters specified [ 1677.525771][T22423] IPVS: Unknown mcast interface: batadv0 [ 1678.634702][ T5922] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1678.797249][ T5922] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 1678.806097][ T5922] usb 3-1: config 0 has no interface number 0 [ 1678.812254][ T5922] usb 3-1: config 0 interface 122 has no altsetting 0 [ 1678.831990][ T5922] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1678.849978][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.865097][ T5922] usb 3-1: Product: syz [ 1678.872122][ T5922] usb 3-1: Manufacturer: syz [ 1678.888107][ T5922] usb 3-1: SerialNumber: syz [ 1678.913954][ T5922] usb 3-1: config 0 descriptor?? [ 1679.219356][T22444] binder: 22435:22444 ioctl c018620c 80000380 returned -22 [ 1679.695603][T22431] veth0: entered promiscuous mode [ 1681.721937][ T5914] usb 3-1: USB disconnect, device number 79 [ 1681.737466][ T5914] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1681.771379][T22429] veth0: left promiscuous mode [ 1681.891015][T22465] fuse: Unknown parameter 'use00000000000000000000' [ 1683.960838][T22497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1685.417124][T22502] netlink: 'syz.2.3246': attribute type 1 has an invalid length. [ 1685.703022][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 1685.806503][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 1686.955406][T22537] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1688.315675][T22551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3255'. [ 1688.458895][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1688.458920][ T30] audit: type=1326 audit(1768343457.490:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.529891][ T30] audit: type=1326 audit(1768343457.510:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.601958][ T30] audit: type=1326 audit(1768343457.530:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.677742][ T30] audit: type=1326 audit(1768343457.530:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.752477][ T30] audit: type=1326 audit(1768343457.530:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.787895][ T30] audit: type=1326 audit(1768343457.530:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.848548][ T30] audit: type=1326 audit(1768343457.530:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.899320][ T30] audit: type=1326 audit(1768343457.540:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.944726][ T30] audit: type=1326 audit(1768343457.540:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1688.992602][ T30] audit: type=1326 audit(1768343457.540:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22548 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1689.266753][T22558] fuse: Bad value for 'rootmode' [ 1689.533346][T22565] input: syz1 as /devices/virtual/input/input55 [ 1690.990134][T22577] trusted_key: encrypted_key: keylen parameter is missing [ 1691.194212][T22579] fuse: Unknown parameter 'use00000000000000000000' [ 1692.021066][T22594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1692.474143][ T5914] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1692.637921][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.650812][ T5914] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1692.663844][ T5914] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1692.676962][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.701390][T22600] syzkaller1: entered promiscuous mode [ 1692.715145][ T5914] usb 4-1: config 0 descriptor?? [ 1692.729193][T22600] syzkaller1: entered allmulticast mode [ 1692.765676][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1695.160774][T22626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3273'. [ 1695.289446][ T5914] usb 4-1: USB disconnect, device number 60 [ 1695.627633][T22633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1695.951218][T22636] vhci_hcd vhci_hcd.0: port 0 already used [ 1696.962755][T22648] sctp: [Deprecated]: syz.2.3276 (pid 22648) Use of int in maxseg socket option. [ 1696.962755][T22648] Use struct sctp_assoc_value instead [ 1697.008854][T22648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3276'. [ 1697.094978][T22649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 1698.539808][T22663] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1698.697510][T22665] syzkaller1: entered promiscuous mode [ 1698.711626][T22665] syzkaller1: entered allmulticast mode [ 1698.743673][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1699.324651][T22681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1699.531608][ T5914] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1699.756277][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 1699.795555][ T5914] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1699.818367][ T5914] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1699.828854][ T5914] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1699.842197][ T5914] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1699.981583][ T5914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1699.996009][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.016185][ T5914] usb 1-1: Product: syz [ 1700.020441][ T5914] usb 1-1: Manufacturer: syz [ 1700.033410][ T5914] usb 1-1: SerialNumber: syz [ 1700.368604][ T5914] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1700.779801][T22686] fuse: Unknown parameter 'mGN‡8o«ad' [ 1701.037212][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1701.150636][T22672] usblp0:failed reading printer status (-32) [ 1702.771010][ T5914] usb 1-1: USB disconnect, device number 56 [ 1702.833629][ T5914] usblp0: removed [ 1705.157242][T22740] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 1705.828024][T22728] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1707.374351][ T5922] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1707.455634][T22761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1707.534844][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.546478][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1707.562154][ T5922] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1707.604513][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1707.612944][ T5922] usb 3-1: SerialNumber: syz [ 1707.877348][ T5922] usb 3-1: 0:2 : does not exist [ 1707.882601][ T5922] usb 3-1: unit 5: unexpected type 0x0c [ 1707.949429][ T5922] usb 3-1: USB disconnect, device number 80 [ 1708.007882][T22171] udevd[22171]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1708.065593][T22772] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1708.522511][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3302'. [ 1709.766013][T22788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.078979][T22798] xt_policy: output policy not valid in PREROUTING and INPUT [ 1712.269518][T22835] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1712.334208][T22831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1714.418954][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 1714.448168][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 1714.518408][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 1717.831098][T22890] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1718.835499][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1718.952456][T22904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1720.909059][T22931] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1720.964637][ T5922] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 1720.972676][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1721.214640][ T5922] usb 1-1: device descriptor read/64, error -32 [ 1721.463946][ T5922] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1721.476800][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1721.654499][ T5922] usb 1-1: device descriptor read/64, error -32 [ 1721.774191][ T5922] usb usb1-port1: attempt power cycle [ 1722.144704][ T5922] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 1722.170949][T22948] bridge_slave_1: entered promiscuous mode [ 1722.459062][ T5922] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1722.475928][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1722.490770][ T5922] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1722.538703][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1722.554695][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1722.611393][ T5922] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1722.619655][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1722.694161][ T5922] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1722.724593][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1722.773244][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1722.961058][ T5922] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1722.973020][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1722.997328][ T5922] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1723.014273][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1723.049120][ T5922] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1723.366806][ T5922] usb 1-1: string descriptor 0 read error: -22 [ 1723.376297][ T5922] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1723.387705][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.482801][ T5922] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1723.888850][T22949] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1724.011770][ T5914] usb 1-1: USB disconnect, device number 59 [ 1724.077840][T22957] fuse: Bad value for 'fd' [ 1724.447244][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1726.401833][T22989] fuse: Unknown parameter 'mGN‡8o«ad' [ 1727.394468][T12115] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1727.595046][T12115] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 1727.614263][T12115] usb 4-1: config 7 has no interface number 0 [ 1727.637805][T12115] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1727.653037][T12115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.668924][T12115] usb 4-1: Product: syz [ 1727.677393][T12115] usb 4-1: Manufacturer: syz [ 1727.684097][T12115] usb 4-1: SerialNumber: syz [ 1728.520287][T12115] as10x_usb: device has been detected [ 1728.530547][T12115] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1728.560927][T12115] usb 4-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1728.621742][T12115] as10x_usb: error during firmware upload part1 [ 1728.641861][T12115] Registered device Elgato EyeTV DTT Deluxe [ 1728.746919][T22999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.806347][T22999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.834594][T23022] tun0: tun_chr_ioctl cmd 1074025675 [ 1728.841591][T23022] tun0: persist enabled [ 1728.880634][T23024] tun0: tun_chr_ioctl cmd 1074025675 [ 1728.888781][T23024] tun0: persist disabled [ 1728.954517][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 1728.964956][T23017] netlink: 'syz.4.3348': attribute type 1 has an invalid length. [ 1728.973085][T23017] netlink: 'syz.4.3348': attribute type 2 has an invalid length. [ 1729.457334][T23031] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1729.464199][T23031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1729.491999][T23036] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 1729.499071][T23036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1729.513476][T23031] vhci_hcd vhci_hcd.0: Device attached [ 1729.528363][T12115] usb 4-1: USB disconnect, device number 61 [ 1729.577449][T12115] Unregistered device Elgato EyeTV DTT Deluxe [ 1729.588771][T12115] as10x_usb: device has been disconnected [ 1729.615482][T23039] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17) [ 1729.622162][T23039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1729.630810][T23031] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 1729.637468][T23031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1729.664262][T23036] vhci_hcd vhci_hcd.0: Device attached [ 1729.703530][T23031] vhci_hcd vhci_hcd.0: Device attached [ 1729.730311][T23045] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 1729.737011][T23045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1729.788544][ T5922] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1729.797991][T23039] vhci_hcd vhci_hcd.0: Device attached [ 1729.811305][T23031] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1729.846845][T23036] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(25) [ 1729.853632][T23036] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1729.864924][T23031] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1729.873875][T23045] vhci_hcd vhci_hcd.0: Device attached [ 1729.910033][T23031] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(23) [ 1729.916901][T23031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1729.933261][T23036] vhci_hcd vhci_hcd.0: Device attached [ 1730.045567][T23031] vhci_hcd vhci_hcd.0: Device attached [ 1730.152642][T23051] vhci_hcd: connection closed [ 1730.154840][ T1110] vhci_hcd vhci_hcd.1: stop threads [ 1730.175222][T23048] vhci_hcd: connection closed [ 1730.175816][T23046] vhci_hcd: connection closed [ 1730.177545][T23037] vhci_hcd: connection closed [ 1730.180850][T23040] vhci_hcd: connection closed [ 1730.190435][T23042] vhci_hcd: connection closed [ 1730.200420][ T1110] vhci_hcd vhci_hcd.1: release socket [ 1730.223264][ T1110] vhci_hcd vhci_hcd.1: disconnect device [ 1730.229337][T23033] vhci_hcd: connection reset by peer [ 1730.248562][ T1110] vhci_hcd vhci_hcd.1: stop threads [ 1730.284565][ T1110] vhci_hcd vhci_hcd.1: release socket [ 1730.300595][ T1110] vhci_hcd vhci_hcd.1: disconnect device [ 1730.317082][ T1110] vhci_hcd vhci_hcd.1: stop threads [ 1730.322444][ T1110] vhci_hcd vhci_hcd.1: release socket [ 1730.331574][ T1110] vhci_hcd vhci_hcd.1: disconnect device [ 1730.372217][ T1110] vhci_hcd vhci_hcd.1: stop threads [ 1730.384529][ T1110] vhci_hcd vhci_hcd.1: release socket [ 1730.391130][ T1110] vhci_hcd vhci_hcd.1: disconnect device [ 1730.403307][ T1110] vhci_hcd vhci_hcd.1: stop threads [ 1730.413235][ T1110] vhci_hcd vhci_hcd.1: release socket [ 1730.423466][ T1110] vhci_hcd vhci_hcd.1: disconnect device [ 1730.432403][ T1110] vhci_hcd vhci_hcd.1: stop threads [ 1730.437310][T23056] netlink: 'syz.3.3353': attribute type 4 has an invalid length. [ 1730.445528][ T1110] vhci_hcd vhci_hcd.1: release socket [ 1730.445665][ T1110] vhci_hcd vhci_hcd.1: disconnect device [ 1730.446548][ T1110] vhci_hcd vhci_hcd.1: stop threads [ 1730.483726][ T1110] vhci_hcd vhci_hcd.1: release socket [ 1730.490345][ T1110] vhci_hcd vhci_hcd.1: disconnect device [ 1730.515259][T23056] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1730.582099][T23056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1730.617799][T23059] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1733.054110][T23088] program syz.1.3359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1733.599405][ T933] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1734.044548][ T933] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.066901][ T933] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1734.089442][ T933] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1734.110378][ T933] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1734.131637][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.228806][ T933] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1734.242873][ T933] usb 1-1: invalid MIDI out EP 0 [ 1734.454714][ T933] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1734.897605][T23113] udevd[23113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1734.914729][ T5922] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1735.014015][ T5914] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1735.204330][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 1735.374967][T23118] program syz.4.3364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1735.532395][ T5914] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1735.555440][ T5914] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1735.578282][ T5914] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1735.603133][ T5914] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1735.644659][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.651709][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.095087][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1736.108758][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.121986][ T5914] usb 3-1: Product: syz [ 1736.128466][ T5914] usb 3-1: Manufacturer: syz [ 1736.139516][ T5914] usb 3-1: SerialNumber: syz [ 1736.265911][T12115] usb usb36-port1: attempt power cycle [ 1736.451951][ T5836] usb 1-1: USB disconnect, device number 60 [ 1736.492980][T23124] input: syz0 as /devices/virtual/input/input57 [ 1736.845507][T12115] usb usb36-port1: unable to enumerate USB device [ 1736.888406][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 1737.244612][ T5922] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1737.424587][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1737.445622][ T5922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.461421][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.484575][ T5922] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1737.505322][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1737.534569][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1737.542668][ T5922] usb 1-1: SerialNumber: syz [ 1737.585714][ T5922] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1737.664603][ T5914] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1737.689609][ T5914] usb 3-1: USB disconnect, device number 81 [ 1737.715262][ T5914] usblp0: removed [ 1739.714984][T23157] netlink: 'syz.4.3372': attribute type 4 has an invalid length. [ 1739.727510][T23157] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3372'. [ 1739.743895][T23157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3372'. [ 1739.798194][ T5914] usb 1-1: USB disconnect, device number 61 [ 1739.805747][T23157] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1740.257881][T23163] tipc: Enabling of bearer rejected, failed to enable media [ 1741.739870][T23183] program syz.2.3378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1742.695219][ T5922] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1742.874612][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1742.887259][ T5922] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1742.896379][ T5922] usb 3-1: config 0 has no interface number 0 [ 1742.903259][ T5922] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.932622][ T5922] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.949926][ T5922] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1742.969029][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.985091][ T5922] usb 3-1: config 0 descriptor?? [ 1743.651602][ T5922] uclogic 0003:28BD:0094.001C: pen parameters not found [ 1743.666279][ T5922] uclogic 0003:28BD:0094.001C: interface is invalid, ignoring [ 1743.892463][T23191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.924793][T23191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.015690][T12115] usb 3-1: USB disconnect, device number 82 [ 1744.034691][ T5914] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1744.173947][ T5914] usb 2-1: device descriptor read/64, error -71 [ 1744.424996][ T5914] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1744.563895][ T5914] usb 2-1: device descriptor read/64, error -71 [ 1744.690348][ T5914] usb usb2-port1: attempt power cycle [ 1745.056925][ T5914] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1745.106444][ T5914] usb 2-1: device descriptor read/8, error -71 [ 1745.374677][ T5914] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1745.434847][ T5914] usb 2-1: device descriptor read/8, error -71 [ 1745.555142][ T5914] usb usb2-port1: unable to enumerate USB device [ 1745.588039][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3387'. [ 1745.740370][T23216] usb usb8: usbfs: process 23216 (syz.4.3387) did not claim interface 0 before use [ 1746.806161][T23240] netlink: 'syz.1.3390': attribute type 29 has an invalid length. [ 1746.854806][T23240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 1747.065429][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1747.136223][T23243] netlink: 'syz.1.3390': attribute type 2 has an invalid length. [ 1747.836966][T23243] : entered promiscuous mode [ 1748.025939][T23250] fuse: Unknown parameter '0x0000000000000003' [ 1750.348030][T23271] fuse: Bad value for 'fd' [ 1750.815708][T23282] fuse: Unknown parameter '0x0000000000000003' [ 1752.508936][T23300] fuse: Unknown parameter '0x0000000000000003' [ 1752.879409][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1753.412735][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1753.440894][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1753.479077][T23322] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1753.512781][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1754.296238][T23326] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1754.346409][T23326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1754.419856][T23325] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1755.091375][T23334] fuse: Unknown parameter '0x0000000000000003' [ 1755.278948][T23341] xt_bpf: check failed: parse error [ 1755.525696][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1755.578322][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1755.699847][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 1756.550858][T23355] netlink: 'syz.3.3415': attribute type 4 has an invalid length. [ 1757.436135][T23368] fuse: Unknown parameter '0x0000000000000003' [ 1757.523817][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1757.523843][ T30] audit: type=1326 audit(1768343526.550:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1757.594222][ T30] audit: type=1326 audit(1768343526.550:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1757.648868][ T30] audit: type=1326 audit(1768343526.550:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1757.686552][ T30] audit: type=1326 audit(1768343526.550:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1758.391657][ T30] audit: type=1326 audit(1768343527.420:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1758.424501][ T30] audit: type=1326 audit(1768343527.450:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1758.489721][ T30] audit: type=1326 audit(1768343527.450:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23381 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1758.534670][ T30] audit: type=1326 audit(1768343527.560:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1758.592536][ T30] audit: type=1326 audit(1768343527.590:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1758.638517][ T30] audit: type=1326 audit(1768343527.590:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.3417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1759.634588][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1759.686071][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1759.828206][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1760.104385][T12115] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1760.253587][T23395] fuse: Unknown parameter '0x0000000000000003' [ 1760.278850][T12115] usb 4-1: Using ep0 maxpacket: 32 [ 1760.288326][T12115] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.299433][T12115] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1760.315897][T12115] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1760.332543][T12115] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1760.369308][T12115] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1760.380371][T12115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.392047][T12115] usb 4-1: Product: syz [ 1760.401162][T12115] usb 4-1: Manufacturer: syz [ 1760.409495][T12115] usb 4-1: SerialNumber: syz [ 1760.453645][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1760.483116][T12115] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input58 [ 1760.684453][T12115] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1760.696307][T12115] (id 0x00) [ 1760.852136][T12115] rc_core: IR keymap rc-imon-pad not found [ 1760.865824][T12115] Registered IR keymap rc-empty [ 1760.884524][T12115] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1760.895339][T12115] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1761.016960][T12115] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1761.036911][T12115] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input59 [ 1761.065128][T12115] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:62> initialized [ 1761.339083][ T5922] usb 4-1: USB disconnect, device number 62 [ 1762.315841][T23419] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1762.694496][T12115] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1762.834833][T12115] usb 1-1: device descriptor read/64, error -71 [ 1763.090422][T12115] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1763.244858][T12115] usb 1-1: device descriptor read/64, error -71 [ 1763.316005][ T5836] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1763.356630][T12115] usb usb1-port1: attempt power cycle [ 1763.724343][T12115] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1763.785378][T12115] usb 1-1: device descriptor read/8, error -71 [ 1764.076135][T12115] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1764.136516][ T5836] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.147301][ T5836] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1764.172482][ T5836] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1764.200030][ T5836] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1764.225891][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.458450][ T5836] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1764.467448][ T5836] usb 4-1: invalid MIDI out EP 0 [ 1764.592355][T22920] udevd[22920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.629828][ T5836] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1765.117778][T12115] usb 1-1: device descriptor read/8, error -71 [ 1765.251773][T12115] usb usb1-port1: unable to enumerate USB device [ 1765.903904][T12115] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1766.126750][T12115] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.138332][T12115] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1766.184955][T12115] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1766.202360][T12115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1766.223419][T12115] usb 2-1: SerialNumber: syz [ 1766.600283][T23467] program syz.4.3440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1767.072509][ T5922] usb 4-1: USB disconnect, device number 63 [ 1767.358690][T23467] syz.4.3440 (23467): drop_caches: 2 [ 1769.280223][T12115] usb 2-1: 0:2 : does not exist [ 1769.317130][T12115] usb 2-1: USB disconnect, device number 85 [ 1769.537427][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1769.537447][ T30] audit: type=1800 audit(1768343538.570:1452): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3446" name="bus" dev="ramfs" ino=87439 res=0 errno=0 [ 1771.305067][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1773.182557][T23551] netlink: 'syz.1.3456': attribute type 4 has an invalid length. [ 1773.290292][T23552] delete_channel: no stack [ 1773.461256][T23551] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3456'. [ 1774.886584][T23567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1775.196864][ T5922] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1775.371676][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.410759][ T5922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1775.432653][ T5922] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1775.456956][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.502669][ T5922] usb 1-1: config 0 descriptor?? [ 1775.869342][ T30] audit: type=1326 audit(1768343544.890:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1775.938987][ T30] audit: type=1326 audit(1768343544.940:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1775.980383][ T30] audit: type=1326 audit(1768343544.940:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1776.011055][ T30] audit: type=1326 audit(1768343544.950:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1776.129367][ T30] audit: type=1326 audit(1768343544.970:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1776.177869][ T30] audit: type=1326 audit(1768343545.080:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1776.218550][ T30] audit: type=1326 audit(1768343545.080:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1776.264698][ T30] audit: type=1326 audit(1768343545.080:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1776.344744][ T30] audit: type=1326 audit(1768343545.280:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1776.397653][ T30] audit: type=1326 audit(1768343545.290:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.3.3460" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1777.020076][T23586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3462'. [ 1777.866948][T12115] usb 1-1: USB disconnect, device number 66 [ 1779.225887][T23612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1779.624379][ T5922] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1779.717947][T23604] usb usb8: usbfs: process 23604 (syz.0.3466) did not claim interface 0 before use [ 1779.784652][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1780.034674][ T5922] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1780.165404][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1780.275164][ T5922] usb usb4-port1: attempt power cycle [ 1780.615673][ T5922] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1780.667023][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1780.924588][ T5922] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1780.955127][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1781.074717][ T5922] usb usb4-port1: unable to enumerate USB device [ 1781.132291][T23631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1781.155275][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 1781.240103][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 1781.331143][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 1783.788723][T12115] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1783.958439][T12115] usb 1-1: Using ep0 maxpacket: 16 [ 1783.969114][T12115] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1783.984429][T12115] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1784.000526][T12115] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1784.021955][T12115] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1784.038234][T12115] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1784.048035][T12115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.065092][T12115] usb 1-1: Product: syz [ 1784.074830][T12115] usb 1-1: Manufacturer: syz [ 1784.083501][T12115] usb 1-1: SerialNumber: syz [ 1784.382535][T12115] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1786.168505][T23691] EXT4-fs: Conflicting test_dummy_encryption options [ 1786.985470][T12115] usb 1-1: USB disconnect, device number 67 [ 1786.997867][T12115] usblp0: removed [ 1788.494409][ T933] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1788.652852][ T933] usb 3-1: config 0 has no interfaces? [ 1788.678329][ T933] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1788.701552][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.734683][ T933] usb 3-1: Product: syz [ 1788.752190][ T933] usb 3-1: Manufacturer: syz [ 1788.761009][T23714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1788.796185][ T933] usb 3-1: SerialNumber: syz [ 1788.845646][ T933] usb 3-1: config 0 descriptor?? [ 1789.156582][T23709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.261965][T23709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.216419][T23727] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1791.076154][T12115] usb 3-1: USB disconnect, device number 83 [ 1794.444615][ T933] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1794.604591][ T933] usb 3-1: Using ep0 maxpacket: 8 [ 1794.613359][ T933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1794.648023][ T933] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1794.664494][ T933] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1794.674651][T23764] netlink: 'syz.1.3497': attribute type 4 has an invalid length. [ 1794.675685][ T933] usb 3-1: Product: syz [ 1794.690287][ T933] usb 3-1: Manufacturer: syz [ 1794.702054][ T933] usb 3-1: SerialNumber: syz [ 1795.034972][ T933] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 1795.043495][ T933] visor 3-1:1.0: probe with driver visor failed with error -110 [ 1795.557455][T23776] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1796.830642][T23792] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3503'. [ 1796.846388][T23791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3501'. [ 1796.858676][T23792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3503'. [ 1796.898852][T23790] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1797.090968][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.098290][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.236786][ T933] usb 3-1: USB disconnect, device number 84 [ 1800.177303][T23834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1800.290194][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 1802.569875][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1803.601376][T23867] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1803.627075][T23867] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1803.654715][T23867] netlink: 'syz.4.3516': attribute type 3 has an invalid length. [ 1803.684700][T23867] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1803.957024][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'. [ 1804.028301][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'. [ 1804.871745][T23882] EXT4-fs: Conflicting test_dummy_encryption options [ 1805.807394][T23894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1805.834555][T23894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1805.885935][T23894] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1806.660298][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1807.894763][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1808.008708][T23921] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1810.037573][T23935] netlink: zone id is out of range [ 1810.494280][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 1811.200801][T23948] netlink: 'syz.1.3531': attribute type 4 has an invalid length. [ 1811.676850][T23935] netlink: set zone limit has 4 unknown bytes [ 1812.216091][T23959] tun0: tun_chr_ioctl cmd 1074025675 [ 1812.232037][T23959] tun0: persist enabled [ 1812.258283][T23959] tun0: tun_chr_ioctl cmd 1074025675 [ 1812.278068][T23959] tun0: persist disabled [ 1812.309248][T23959] netlink: 'syz.4.3534': attribute type 1 has an invalid length. [ 1812.328361][T23959] netlink: 'syz.4.3534': attribute type 2 has an invalid length. [ 1814.002612][T23985] usb usb8: usbfs: process 23985 (syz.3.3538) did not claim interface 0 before use [ 1816.978411][T24024] netlink: 'syz.2.3545': attribute type 4 has an invalid length. [ 1817.040183][T24021] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1817.636305][T24034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3547'. [ 1818.174117][T24018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1818.189972][T24033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1819.495902][T12115] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1819.624484][ T933] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 1819.656069][T12115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.667312][T12115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.683796][T12115] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1819.693013][T12115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.705711][T12115] usb 1-1: config 0 descriptor?? [ 1819.776541][ T933] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 1819.786646][ T933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.803588][ T933] usb 2-1: config 0 has no interface number 0 [ 1819.813353][ T933] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1819.829046][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.847387][ T933] usb 2-1: config 0 descriptor?? [ 1819.865948][ T933] hub 2-1:0.3: bad descriptor, ignoring hub [ 1819.880910][ T933] hub 2-1:0.3: probe with driver hub failed with error -5 [ 1819.897537][ T933] sierra 2-1:0.3: Sierra USB modem converter detected [ 1820.152532][T12115] cm6533_jd 0003:0D8C:0022.001D: unknown global tag 0xe [ 1820.170338][T12115] cm6533_jd 0003:0D8C:0022.001D: item 0 2 1 14 parsing failed [ 1820.185371][T12115] cm6533_jd 0003:0D8C:0022.001D: parse failed [ 1820.197415][T12115] cm6533_jd 0003:0D8C:0022.001D: probe with driver cm6533_jd failed with error -22 [ 1820.222106][T24061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.240698][T24052] bond3: option miimon: invalid value (18446744073709551615) [ 1820.279885][T24061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.293981][T24052] bond3: option miimon: allowed values 0 - 2147483647 [ 1820.313968][T24052] bond3 (unregistering): Released all slaves [ 1820.400683][T24062] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1820.411534][T24062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1820.447994][T24063] ALSA: mixer_oss: invalid OSS volume '' [ 1820.520972][T24060] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1820.531485][ T933] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1820.565624][ T933] usb 2-1: USB disconnect, device number 86 [ 1820.576369][ T933] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1820.599893][ T933] sierra 2-1:0.3: device disconnected [ 1820.631385][ T5922] usb 1-1: USB disconnect, device number 68 [ 1821.917697][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1821.927404][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1821.938786][ T5922] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1821.984896][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1822.114735][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1822.127295][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.139113][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1822.153274][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1822.187270][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1822.197608][ T5922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1822.206697][ T5922] usb 1-1: Manufacturer: syz [ 1822.239807][ T5922] usb 1-1: config 0 descriptor?? [ 1823.723234][T24099] fuse: Unknown parameter 'ìÔ‰ðÉF¡fd' [ 1824.589024][T24109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3561'. [ 1826.201001][ T5922] usb 1-1: USB disconnect, device number 69 [ 1826.334795][ T933] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1826.497647][ T933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.508851][ T933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1826.535763][ T933] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1826.563427][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1826.580835][ T933] usb 3-1: SerialNumber: syz [ 1827.193830][ T5922] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1827.349722][ T5922] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1827.359705][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.392823][ T5922] usb 2-1: Product: syz [ 1827.400892][ T5922] usb 2-1: Manufacturer: syz [ 1827.408255][ T5922] usb 2-1: SerialNumber: syz [ 1827.422825][ T5922] usb 2-1: config 0 descriptor?? [ 1827.954475][ T5922] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1827.974781][ T5922] peak_usb 2-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 1828.125484][ T5922] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1828.138923][ T5922] usb 2-1: USB disconnect, device number 87 [ 1828.460818][T24140] veth1_macvtap: left promiscuous mode [ 1828.477307][T24140] macsec0: entered promiscuous mode [ 1828.577010][T24143] veth1_macvtap: entered promiscuous mode [ 1828.605196][T24143] macsec0: left promiscuous mode [ 1829.185907][ T933] usb 3-1: 0:2 : does not exist [ 1829.226968][ T933] usb 3-1: USB disconnect, device number 85 [ 1829.236710][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1829.247678][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1829.321637][T23966] udevd[23966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1829.368446][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1830.334911][T24158] input: syz0 as /devices/virtual/input/input60 [ 1831.502781][T24177] lo: left promiscuous mode [ 1831.525919][T24177] tunl0: left promiscuous mode [ 1831.546891][T24177] gre0: left promiscuous mode [ 1831.585675][T24177] gretap0: left promiscuous mode [ 1831.591240][T24177] erspan0: left promiscuous mode [ 1831.648307][T24177] ip_vti0: left promiscuous mode [ 1831.655544][T24177] ip6_vti0: left promiscuous mode [ 1831.666726][T24177] sit0: left promiscuous mode [ 1831.672074][T24177] ip6tnl0: left promiscuous mode [ 1831.685128][T24177] ip6gre0: left promiscuous mode [ 1831.692727][T24177] syz_tun: left promiscuous mode [ 1831.706528][T24177] ip6gretap0: left promiscuous mode [ 1831.712401][T24177] team0: left promiscuous mode [ 1831.725453][T24177] team_slave_0: left promiscuous mode [ 1831.731718][T24177] team_slave_1: left promiscuous mode [ 1831.746522][T24177] dummy0: left promiscuous mode [ 1831.752279][T24177] nlmon0: left promiscuous mode [ 1831.806982][T24177] caif0: left promiscuous mode [ 1831.811836][T24177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1832.004536][ T933] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1832.164286][ T933] usb 2-1: Using ep0 maxpacket: 32 [ 1832.177458][ T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1832.196652][ T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1832.213088][ T933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1832.247380][ T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1832.279824][ T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1832.327683][ T933] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1832.357603][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.376290][ T933] usb 2-1: Product: syz [ 1832.381938][ T933] usb 2-1: Manufacturer: syz [ 1832.397502][ T933] usb 2-1: SerialNumber: syz [ 1832.429322][ T933] usb 2-1: config 0 descriptor?? [ 1832.459420][T24187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1832.556829][ T933] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 1832.645229][ T5185] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1832.657792][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1832.691010][ T5185] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1832.773281][T24066] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1832.900385][ T5185] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1832.945506][ T5185] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1832.979661][ T5185] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1833.008908][ T5185] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1833.633501][T24177] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1834.784032][ T5836] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1834.817683][ T933] usb 2-1: USB disconnect, device number 88 [ 1834.974134][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 1834.981233][ T5836] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1834.991658][ T5836] usb 3-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 1835.001757][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.010908][ T5836] usb 3-1: Product: syz [ 1835.017094][ T5836] usb 3-1: SerialNumber: syz [ 1835.087639][T24208] tipc: Enabling of bearer rejected, already enabled [ 1835.366802][ T5836] usbhid 3-1:1.0: can't add hid device: -71 [ 1835.373060][ T5836] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1835.407154][ T5836] usb 3-1: USB disconnect, device number 86 [ 1835.514724][ T933] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1835.681292][ T933] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1835.698346][ T933] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1835.719307][ T933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1835.738118][ T933] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1835.762044][ T933] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1835.772561][ T933] usb 1-1: Product: syz [ 1835.777394][ T933] usb 1-1: Manufacturer: syz [ 1835.784328][ T933] usb 1-1: SerialNumber: syz [ 1835.796664][ T933] usb 1-1: config 0 descriptor?? [ 1835.823429][ T933] usb 1-1: selecting invalid altsetting 0 [ 1835.864608][ T5836] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1836.067686][T24215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.132452][T24215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.150742][T12115] usb 1-1: USB disconnect, device number 70 [ 1838.165716][ T5914] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1838.336596][ T5914] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.348403][ T5914] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1838.374576][ T5914] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1838.409854][ T5914] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1838.439048][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.480202][ T5914] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1838.500846][ T5914] usb 3-1: invalid MIDI out EP 0 [ 1838.813619][ T5914] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1839.478568][T24244] KVM: debugfs: duplicate directory 24244-5 [ 1839.768216][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1839.778331][ T5836] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1839.793397][ T5836] usb 4-1: can't read configurations, error -71 [ 1840.470351][T24253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1841.199794][ T5914] usb 3-1: USB disconnect, device number 87 [ 1841.734476][ T933] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1841.904292][ T933] usb 3-1: Using ep0 maxpacket: 16 [ 1841.917596][ T933] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1841.927393][ T933] usb 3-1: config 0 has an invalid interface number: 137 but max is 128 [ 1841.942765][ T933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.962312][ T933] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1841.974447][ T933] usb 3-1: config 0 has no interface number 0 [ 1842.001005][ T933] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1842.013243][ T933] usb 3-1: New USB device strings: Mfr=1, Product=1, SerialNumber=3 [ 1842.026598][ T933] usb 3-1: Product: syz [ 1842.030844][ T933] usb 3-1: Manufacturer: syz [ 1842.038608][ T933] usb 3-1: SerialNumber: syz [ 1842.060658][ T933] usb 3-1: config 0 descriptor?? [ 1842.165237][ T933] go7007 3-1:0.137: Sensoray 2250 found [ 1842.171137][ T933] go7007 3-1:0.137: probe with driver go7007 failed with error -12 [ 1842.425285][ T933] usb 3-1: USB disconnect, device number 88 [ 1843.794277][T24300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1843.804937][T24300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1843.829222][T24300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1845.350726][T24312] netlink: 'syz.4.3605': attribute type 4 has an invalid length. [ 1845.377930][T24312] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3605'. [ 1845.660833][T24312] delete_channel: no stack [ 1845.952364][T24320] netlink: 'syz.1.3604': attribute type 9 has an invalid length. [ 1846.015028][T24320] netlink: 'syz.1.3604': attribute type 11 has an invalid length. [ 1846.043830][T24320] netlink: 'syz.1.3604': attribute type 12 has an invalid length. [ 1846.077443][T24320] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3604'. [ 1846.119138][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'. [ 1849.887663][T24358] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1850.357548][T24362] openvswitch: netlink: Message has 1 unknown bytes. [ 1850.367398][T24362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1850.654102][T24365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1850.685911][T24365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1850.719875][T24366] netlink: 'syz.2.3615': attribute type 11 has an invalid length. [ 1851.762288][T24378] netlink: 'syz.0.3617': attribute type 2 has an invalid length. [ 1851.914599][T24381] GUP no longer grows the stack in syz.0.3617 (24381): 80005000-80008000 (80004000) [ 1851.934726][T24381] CPU: 1 UID: 0 PID: 24381 Comm: syz.0.3617 Tainted: G L syzkaller #0 PREEMPT(full) [ 1851.934767][T24381] Tainted: [L]=SOFTLOCKUP [ 1851.934777][T24381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1851.934797][T24381] Call Trace: [ 1851.934807][T24381] [ 1851.934819][T24381] dump_stack_lvl+0xe8/0x150 [ 1851.934929][T24381] fixup_user_fault+0x64a/0x700 [ 1851.935067][T24381] fault_in_user_writeable+0x72/0xe0 [ 1851.935110][T24381] futex_lock_pi+0x773/0xa90 [ 1851.935149][T24381] ? __pfx_futex_lock_pi+0x10/0x10 [ 1851.935209][T24381] ? __pfx_futex_wake_mark+0x10/0x10 [ 1851.935255][T24381] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1851.935336][T24381] do_futex+0x292/0x420 [ 1851.935361][T24381] ? __pfx_do_futex+0x10/0x10 [ 1851.935381][T24381] ? __vm_munmap+0x2c1/0x380 [ 1851.935442][T24381] __se_sys_futex_time32+0x360/0x3e0 [ 1851.935471][T24381] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1851.935494][T24381] ? rcu_is_watching+0x15/0xb0 [ 1851.935538][T24381] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1851.935563][T24381] __do_fast_syscall_32+0x1dc/0x570 [ 1851.935660][T24381] ? lockdep_hardirqs_on+0x7b/0x110 [ 1851.935704][T24381] ? do_fast_syscall_32+0x34/0x80 [ 1851.935724][T24381] ? asm_int80_emulation+0x1a/0x20 [ 1851.935759][T24381] ? do_int80_emulation+0x218/0x420 [ 1851.935784][T24381] do_fast_syscall_32+0x34/0x80 [ 1851.935806][T24381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1851.935833][T24381] RIP: 0023:0xf704d539 [ 1851.935850][T24381] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1851.935866][T24381] RSP: 002b:00000000f479255c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1851.935887][T24381] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 1851.935900][T24381] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 1851.935912][T24381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1851.935923][T24381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1851.935935][T24381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1851.935961][T24381] [ 1852.372356][T24378] : entered promiscuous mode [ 1852.700316][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1852.759473][T24393] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1854.835375][T22135] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1855.200171][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3627'. [ 1856.775738][T24442] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1858.043395][ T5836] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1858.204649][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 1858.217150][ T5836] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 1858.227068][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.237911][ T5836] usb 1-1: Product: syz [ 1858.243134][ T5836] usb 1-1: Manufacturer: syz [ 1858.249532][ T5836] usb 1-1: SerialNumber: syz [ 1858.257991][ T5836] usb 1-1: config 0 descriptor?? [ 1858.479695][ T5836] usb 1-1: can't set first interface for hiFace device. [ 1858.487967][ T5836] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1858.510507][ T5836] usb 1-1: USB disconnect, device number 71 [ 1858.525387][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.531920][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.751998][T24484] tipc: Bearer : already 2 bearers with priority 10 [ 1859.760250][T24484] tipc: Bearer : trying with adjusted priority [ 1859.770418][T24484] tipc: Enabling of bearer rejected, failed to enable media [ 1861.351309][T24504] tipc: Enabling of bearer rejected, already enabled [ 1864.516037][ T5914] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1864.685416][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 1864.695622][ T5914] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 1864.726089][ T5914] usb 4-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 1864.758182][ T5914] usb 4-1: config 0 has no interface number 0 [ 1864.791359][ T5914] usb 4-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1864.807499][ T5914] usb 4-1: config 0 interface 169 has no altsetting 0 [ 1864.833432][ T5914] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 1864.846131][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.871724][ T5914] usb 4-1: Product: syz [ 1864.892121][ T5914] usb 4-1: Manufacturer: syz [ 1864.898217][ T5914] usb 4-1: SerialNumber: syz [ 1864.928616][ T5914] usb 4-1: config 0 descriptor?? [ 1864.965673][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1865.035987][ T5914] snd-usb-audio 4-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 1865.091433][T24439] udevd[24439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1865.312879][T24539] netlink: 'syz.3.3650': attribute type 21 has an invalid length. [ 1865.332441][T24539] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1865.414664][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1865.809461][ T5914] usb 4-1: USB disconnect, device number 70 [ 1866.284966][ T5914] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1866.477226][ T5914] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1866.490439][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.510548][ T5914] usb 2-1: Product: syz [ 1866.522387][ T5914] usb 2-1: Manufacturer: syz [ 1866.536917][ T5914] usb 2-1: SerialNumber: syz [ 1866.546115][T24555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1866.589688][ T5914] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1866.736859][ T5836] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1867.804661][ T5836] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1867.812274][ T5836] ath9k_htc: Failed to initialize the device [ 1867.872084][ T5836] usb 2-1: ath9k_htc: USB layer deinitialized [ 1868.121584][T24567] batadv_slave_0: left allmulticast mode [ 1868.936709][ T5914] usb 2-1: USB disconnect, device number 89 [ 1870.830996][T24598] openvswitch: netlink: Message has 1 unknown bytes. [ 1870.842570][T24598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1872.404525][T12115] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1872.567962][T12115] usb 1-1: config 0 has an invalid interface number: 187 but max is 1 [ 1872.584553][T12115] usb 1-1: config 0 has an invalid interface number: 116 but max is 1 [ 1872.614521][T12115] usb 1-1: config 0 has no interface number 0 [ 1872.621043][T12115] usb 1-1: config 0 has no interface number 1 [ 1872.642772][T12115] usb 1-1: config 0 interface 116 altsetting 64 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1872.655035][T12115] usb 1-1: config 0 interface 187 has no altsetting 0 [ 1872.661855][T12115] usb 1-1: config 0 interface 116 has no altsetting 0 [ 1872.681075][T12115] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 4.61 [ 1872.699464][T12115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.714565][T12115] usb 1-1: Product: syz [ 1872.719671][T12115] usb 1-1: Manufacturer: syz [ 1872.725088][T12115] usb 1-1: SerialNumber: syz [ 1872.750988][T12115] usb 1-1: config 0 descriptor?? [ 1872.764664][T24190] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1872.962466][T24190] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1872.976464][T24190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.006693][T24190] usb 2-1: Product: syz [ 1873.017695][T24190] usb 2-1: Manufacturer: syz [ 1873.023039][T24190] usb 2-1: SerialNumber: syz [ 1873.052927][T12115] snd-usb-6fire 1-1:0.187: unable to receive device firmware state. [ 1873.074516][T12115] snd-usb-6fire 1-1:0.187: probe with driver snd-usb-6fire failed with error -71 [ 1873.153290][T12115] usb 1-1: USB disconnect, device number 72 [ 1873.488459][T24190] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1873.507117][T24190] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1873.680356][T24628] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1874.836381][T24614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.859931][T24614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.904730][T24614] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1874.951619][T24190] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1874.975765][T24190] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1874.998183][T24190] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1875.434534][T24190] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1875.453380][T24190] usb 2-1: USB disconnect, device number 90 [ 1877.574782][T24672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3676'. [ 1877.641991][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 1879.707039][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1879.707063][ T30] audit: type=1326 audit(1768343648.690:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1879.764794][ T30] audit: type=1326 audit(1768343648.770:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1879.806583][T24697] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1879.827370][ T30] audit: type=1326 audit(1768343648.770:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1879.866523][T24697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1879.878583][ T30] audit: type=1326 audit(1768343648.770:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1879.904519][ T5914] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1879.919929][T24698] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1879.946625][ T30] audit: type=1326 audit(1768343648.770:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1879.979615][ T30] audit: type=1326 audit(1768343648.780:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1880.017635][ T30] audit: type=1326 audit(1768343648.830:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1880.059184][ T30] audit: type=1326 audit(1768343648.830:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1880.094846][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 1880.115891][ T5914] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1880.126543][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.135638][ T30] audit: type=1326 audit(1768343648.890:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1880.160415][ T5914] usb 4-1: Product: syz [ 1880.171123][ T5914] usb 4-1: Manufacturer: syz [ 1880.176573][ T5914] usb 4-1: SerialNumber: syz [ 1880.188114][ T5914] usb 4-1: config 0 descriptor?? [ 1880.193155][ T30] audit: type=1326 audit(1768343649.000:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24684 comm="syz.1.3680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1880.464328][ T5914] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1881.308033][T24695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.375223][T24695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.648190][ T5914] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1882.498916][T24190] usb 4-1: USB disconnect, device number 71 [ 1884.165648][T24739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3691'. [ 1885.296697][T24742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 1887.035064][T24758] netlink: 'syz.3.3694': attribute type 4 has an invalid length. [ 1889.343570][T24789] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1889.407066][T24789] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1889.438899][T24787] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1891.678514][T24816] netlink: 4 bytes leftover after parsing attributes in process `#! ./file0 [\\%'. [ 1893.613612][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1893.613627][ T30] audit: type=1326 audit(1768343662.640:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24837 comm="syz.4.3708" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x0 [ 1895.549284][T24859] netlink: 'syz.3.3712': attribute type 4 has an invalid length. [ 1897.832826][T24879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1897.928088][T24884] input: syz1 as /devices/virtual/input/input63 [ 1898.357008][T24871] IPVS: set_ctl: invalid protocol: 25955 0.1.5.1:0 [ 1902.488472][T24920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1903.060460][T24920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1903.574641][ T30] audit: type=1326 audit(1768343672.590:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24926 comm="syz.3.3725" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 1905.029474][ T30] audit: type=1326 audit(1768343674.060:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.072617][ T30] audit: type=1326 audit(1768343674.100:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.116207][ T30] audit: type=1326 audit(1768343674.100:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.147959][ T30] audit: type=1326 audit(1768343674.100:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.179890][ T30] audit: type=1326 audit(1768343674.100:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.209554][ T30] audit: type=1326 audit(1768343674.100:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.408646][ T30] audit: type=1326 audit(1768343674.440:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.437126][ T30] audit: type=1326 audit(1768343674.440:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1905.483081][ T30] audit: type=1326 audit(1768343674.460:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24950 comm="syz.1.3727" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1906.064518][T12115] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1906.236410][T24960] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1906.254588][T12115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.272514][T12115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1906.294473][T12115] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1906.320325][T12115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.337894][T12115] usb 4-1: config 0 descriptor?? [ 1906.387923][T24961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1906.766490][T12115] itetech 0003:06CB:73F5.001E: collection stack underflow [ 1906.779808][T12115] itetech 0003:06CB:73F5.001E: item 0 0 0 12 parsing failed [ 1906.789167][T12115] itetech 0003:06CB:73F5.001E: probe with driver itetech failed with error -22 [ 1906.956724][T24966] xt_bpf: check failed: parse error [ 1907.028310][T24190] usb 4-1: USB disconnect, device number 72 [ 1908.356964][T24982] misc userio: The device must be registered before sending interrupts [ 1908.388203][T24972] wireguard0: entered promiscuous mode [ 1908.397959][T24972] wireguard0: entered allmulticast mode [ 1908.779011][T24190] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 1908.974774][T24190] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1908.988834][T24190] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 1909.000112][T24190] usb 4-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 1909.015363][T24190] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1909.066997][T24190] usb 4-1: string descriptor 0 read error: -22 [ 1909.074836][T24190] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1909.094623][T24190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.185101][T24982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1909.205753][T24982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1910.583245][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3735'. [ 1910.718408][T24995] hub 9-0:1.0: USB hub found [ 1910.747614][T24995] hub 9-0:1.0: 1 port detected [ 1911.741087][T12115] usb 4-1: USB disconnect, device number 73 [ 1916.695107][ T3489] [ 1916.697571][ T3489] ============================================ [ 1916.703923][ T3489] WARNING: possible recursive locking detected [ 1916.710113][ T3489] syzkaller #0 Tainted: G L [ 1916.716183][ T3489] -------------------------------------------- [ 1916.722342][ T3489] kworker/u8:10/3489 is trying to acquire lock: [ 1916.728628][ T3489] ffff88807f78cd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 1916.738693][ T3489] [ 1916.738693][ T3489] but task is already holding lock: [ 1916.746154][ T3489] ffff8880344b3558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 1916.756050][ T3489] [ 1916.756050][ T3489] other info that might help us debug this: [ 1916.764141][ T3489] Possible unsafe locking scenario: [ 1916.764141][ T3489] [ 1916.771630][ T3489] CPU0 [ 1916.774923][ T3489] ---- [ 1916.778225][ T3489] lock(&qdisc_xmit_lock_key#4); [ 1916.783336][ T3489] lock(&qdisc_xmit_lock_key#4); [ 1916.788660][ T3489] [ 1916.788660][ T3489] *** DEADLOCK *** [ 1916.788660][ T3489] [ 1916.796813][ T3489] May be due to missing lock nesting notation [ 1916.796813][ T3489] [ 1916.805251][ T3489] 10 locks held by kworker/u8:10/3489: [ 1916.810811][ T3489] #0: ffff8880333ac148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1916.822084][ T3489] #1: ffffc9000bf77bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1916.835001][ T3489] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 1916.844848][ T3489] #3: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 1916.854932][ T3489] #4: ffff88804f23f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 1916.867717][ T3489] #5: ffff8880344b3558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 1916.878009][ T3489] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1916.886981][ T3489] #7: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0x1000 [ 1916.896927][ T3489] #8: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 1916.906874][ T3489] #9: ffff888056b42228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 1916.919425][ T3489] [ 1916.919425][ T3489] stack backtrace: [ 1916.925331][ T3489] CPU: 0 UID: 0 PID: 3489 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1916.925361][ T3489] Tainted: [L]=SOFTLOCKUP [ 1916.925369][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1916.925384][ T3489] Workqueue: bond0 bond_alb_monitor [ 1916.925421][ T3489] Call Trace: [ 1916.925432][ T3489] [ 1916.925447][ T3489] dump_stack_lvl+0xe8/0x150 [ 1916.925469][ T3489] print_deadlock_bug+0x279/0x290 [ 1916.925491][ T3489] __lock_acquire+0x2540/0x2cf0 [ 1916.925508][ T3489] ? __pfx_netif_skb_features+0x10/0x10 [ 1916.925535][ T3489] ? sch_direct_xmit+0x153/0x4b0 [ 1916.925550][ T3489] lock_acquire+0x107/0x340 [ 1916.925564][ T3489] ? sch_direct_xmit+0x153/0x4b0 [ 1916.925584][ T3489] _raw_spin_lock+0x2e/0x40 [ 1916.925666][ T3489] ? sch_direct_xmit+0x153/0x4b0 [ 1916.925682][ T3489] sch_direct_xmit+0x153/0x4b0 [ 1916.925700][ T3489] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1916.925715][ T3489] ? look_up_lock_class+0x57/0x110 [ 1916.925731][ T3489] ? register_lock_class+0x31/0x2e0 [ 1916.925748][ T3489] __dev_queue_xmit+0x1379/0x31c0 [ 1916.925773][ T3489] ? __dev_queue_xmit+0x289/0x31c0 [ 1916.925799][ T3489] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1916.925820][ T3489] ? neigh_resolve_output+0x438/0x750 [ 1916.925869][ T3489] ? eth_header+0x11b/0x200 [ 1916.925905][ T3489] ? __asan_memcpy+0x40/0x70 [ 1916.925968][ T3489] ip_finish_output2+0xbb6/0x1000 [ 1916.925989][ T3489] ? ip_skb_dst_mtu+0x917/0xb70 [ 1916.926007][ T3489] ? ip_finish_output2+0x3d0/0x1000 [ 1916.926024][ T3489] ? ip_finish_output+0x33a/0x3f0 [ 1916.926041][ T3489] ip_output+0x29f/0x450 [ 1916.926058][ T3489] ? ip_output+0x5b/0x450 [ 1916.926075][ T3489] iptunnel_xmit+0x5f8/0xa90 [ 1916.926145][ T3489] ip_tunnel_xmit+0x1c41/0x2390 [ 1916.926189][ T3489] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1916.926214][ T3489] ? gre_build_header+0x3fd/0xa40 [ 1916.926251][ T3489] ? __pfx_gre_build_header+0x10/0x10 [ 1916.926273][ T3489] gre_tap_xmit+0x590/0x7a0 [ 1916.926293][ T3489] ? __pfx_gre_tap_xmit+0x10/0x10 [ 1916.926313][ T3489] dev_hard_start_xmit+0x2cd/0x800 [ 1916.926340][ T3489] sch_direct_xmit+0x241/0x4b0 [ 1916.926357][ T3489] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1916.926372][ T3489] ? ret_from_fork_asm+0x1a/0x30 [ 1916.926396][ T3489] __dev_queue_xmit+0x1379/0x31c0 [ 1916.926420][ T3489] ? __dev_queue_xmit+0x289/0x31c0 [ 1916.926446][ T3489] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1916.926468][ T3489] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1916.926518][ T3489] ? kmem_cache_alloc_node_noprof+0x48c/0x720 [ 1916.926547][ T3489] ? __alloc_skb+0x27e/0x3a0 [ 1916.926580][ T3489] ? alb_send_lp_vid+0x13a/0x530 [ 1916.926596][ T3489] alb_send_lp_vid+0x328/0x530 [ 1916.926612][ T3489] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1916.926627][ T3489] ? trace_sched_exit_tp+0x36/0xf0 [ 1916.926653][ T3489] alb_send_learning_packets+0x10d/0x2c0 [ 1916.926677][ T3489] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1916.926701][ T3489] ? bond_alb_monitor+0xf1/0x1800 [ 1916.926726][ T3489] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1916.926744][ T3489] bond_alb_monitor+0x3e4/0x1800 [ 1916.926769][ T3489] ? bond_alb_monitor+0xf1/0x1800 [ 1916.926791][ T3489] ? process_scheduled_works+0x9ef/0x1770 [ 1916.926806][ T3489] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1916.926829][ T3489] ? process_scheduled_works+0x9ef/0x1770 [ 1916.926844][ T3489] ? process_scheduled_works+0x9ef/0x1770 [ 1916.926859][ T3489] process_scheduled_works+0xad1/0x1770 [ 1916.926883][ T3489] ? __pfx_process_scheduled_works+0x10/0x10 [ 1916.926897][ T3489] ? do_raw_spin_lock+0x121/0x290 [ 1916.926923][ T3489] worker_thread+0x8a0/0xda0 [ 1916.926947][ T3489] kthread+0x711/0x8a0 [ 1916.926966][ T3489] ? __pfx_worker_thread+0x10/0x10 [ 1916.926981][ T3489] ? __pfx_kthread+0x10/0x10 [ 1916.927000][ T3489] ? _raw_spin_unlock_irq+0x23/0x50 [ 1916.927014][ T3489] ? __pfx_kthread+0x10/0x10 [ 1916.927032][ T3489] ret_from_fork+0x510/0xa50 [ 1916.927047][ T3489] ? __pfx_ret_from_fork+0x10/0x10 [ 1916.927060][ T3489] ? __switch_to+0xc9e/0x1480 [ 1916.927093][ T3489] ? __pfx_kthread+0x10/0x10 [ 1916.927112][ T3489] ret_from_fork_asm+0x1a/0x30 [ 1916.927138][ T3489] [ 1917.991943][T25044] bridge0: port 3(syz_tun) entered disabled state [ 1918.168452][T25051] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1918.194775][T25051] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1918.218818][T25051] netlink: 'syz.3.3747': attribute type 3 has an invalid length. [ 1918.227619][T25051] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1918.244387][T22027] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 1918.252861][T22027] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1918.268136][T22027] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1918.282090][T22027] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1919.956212][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.962944][ T1303] ieee802154 phy1 wpan1: encryption failed: -22