last executing test programs: 15m18.061544892s ago: executing program 32 (id=742): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x220, 0x9, 0x8000000000000005, 0x8001, 0xe91d, 0xfffe}) 15m3.479670822s ago: executing program 33 (id=798): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) 13m54.55149569s ago: executing program 34 (id=1038): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m30.830266726s ago: executing program 35 (id=1318): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5548, &(0x7f0000007a00)="$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") 12m27.571760667s ago: executing program 36 (id=1330): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80801) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) socket(0x400000000010, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x100, 0x1000000, 0x35f, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x4800, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1, 0xfffffffd, 0x0, r0}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0) 11m18.848137648s ago: executing program 8 (id=1522): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x5, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x9, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x17, 0x80000000, 0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x200000000003, 0x400000000000000a}) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x20000007, 0x101, 0x5, 0x80, 0x6, 0x0, 0xff, 0x6, 0x9, 0x6, 0xfb, 0x67, 0x4}, {0xf9d1, 0x9, 0x7, 0x2, 0x7, 0xfe, 0x9, 0x6a, 0xf, 0x44, 0xfa, 0x2, 0xe}, {0x5, 0x9, 0x0, 0x4, 0x0, 0x4, 0x1, 0xb, 0x3, 0x7f, 0x3, 0x7, 0x6}], 0x40004}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11m18.529660798s ago: executing program 8 (id=1525): socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 11m17.098525956s ago: executing program 8 (id=1530): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x180) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdirat(r1, &(0x7f0000000100)='./file1\x00', 0x35) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nvram(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x200, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf255200010008000300", @ANYRES32=r9, @ANYBLOB="0500880006000000060048"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24004054) 11m15.640673546s ago: executing program 8 (id=1538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000"], 0x24, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x1, 0x80000000) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) llistxattr(0x0, &(0x7f0000000600)=""/33, 0x21) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)='\v2', 0x2}], 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 11m13.525957097s ago: executing program 8 (id=1547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup2(0xffffffffffffffff, r3) 11m12.711700164s ago: executing program 8 (id=1549): r0 = syz_open_dev$evdev(0x0, 0xe949, 0x593241) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084523, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 10m57.275610373s ago: executing program 37 (id=1549): r0 = syz_open_dev$evdev(0x0, 0xe949, 0x593241) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084523, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m59.690232188s ago: executing program 5 (id=1951): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000f06810b000000000000000001000006050001000700000006000b0080000000050001000700000006000b0002000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 8m58.425644281s ago: executing program 5 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = gettid() socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) tkill(r5, 0xb) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000009b80)={0x40000012}) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8m57.389901005s ago: executing program 5 (id=1954): syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20060400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 8m57.205582162s ago: executing program 5 (id=1956): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52e, &(0x7f0000000e80)="$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") mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r1, 0x0, 0x0, 0x24, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 8m55.393139653s ago: executing program 5 (id=1968): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 8m54.219139742s ago: executing program 5 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r5, 0xb) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000009b80)={0x40000012}) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8m53.821935376s ago: executing program 38 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r5, 0xb) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000009b80)={0x40000012}) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8m53.346455892s ago: executing program 2 (id=1991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x8000) 8m52.079725744s ago: executing program 2 (id=1992): pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) 8m51.037215349s ago: executing program 2 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 8m50.825627176s ago: executing program 2 (id=2002): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52e, &(0x7f0000000e80)="$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") mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 8m48.100206828s ago: executing program 2 (id=2006): fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x22, &(0x7f00000004c0)=ANY=[], 0x0) 8m47.381558432s ago: executing program 2 (id=2010): open(0x0, 0x60840, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x40, 0x9, 0xa7, {0xa7, 0xd, "923dbfdfd119d3c642173dd522db7d5d55a7d136a7544809895bf30531811508473aa32e15c475eabd0472a7ed153bb7f4489fc6b2bf6ebaa4df6eaf7f63a07f55be584f8aef1c2145e6432350776c7b7ce776a8eae8c7c6264090fc23b3b17c7a26237a9f065850a4a8b0664130c6000e1708478184ff69b28c0f6dec4f34a049c626f507cdb6c57566185cbbb193eb659926f443b43abec22e2cbba3c3195de9ea3c417a"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000680)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "e89c3095"}, @global=@item_012={0x2, 0x1, 0x3, "d75a"}, @global=@item_4={0x3, 0x1, 0xb, "874d13b7"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0x9, 'N'}, @local=@item_4={0x3, 0x2, 0x5, "50eb475a"}, @global=@item_4={0x3, 0x1, 0x5, "46362b1d"}, @local=@item_4={0x3, 0x2, 0x4, "4a7c5383"}, @main=@item_012={0x0, 0x0, 0x1}, @local=@item_012={0x1, 0x2, 0x5, '{'}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xa, 0x1, {0x22, 0xb1a}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000740)={0x0, 0xe, 0x6c, "48de289c8165b558bd51a5789bd3d99025526f5b775cd28e774a82a5c8c1fc98fe791289af17bf3d4370faffb925b97f0e9a9a55e52c784b12436f53708987a26919db3038372130aa84d47b238bac86be20949ddb0c7d8687a7c9ab7cdcc0b8dc43ac5af5e7b189ef086e04"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x1, 0x65, "1391686ac8ed8b19843ce2a683706d921d0458b040a9143bd367ea3568ffe513f49a79ff85a895b7dc60d001a27fdca4b8824a994302b147988d0f79d88aba0c053f639ed26f0d3f91eeb3c7b23b9af005797c57d70fa88f703915d64dba83f16914f19edf"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000003b33597c1cf6b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='efivarfs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) ioctl$OCFS2_IOC_GROUP_ADD64(r5, 0x40186f03, &(0x7f0000000180)={0xffffffff, 0xd, 0x1, 0x7}) 8m46.85353711s ago: executing program 39 (id=2010): open(0x0, 0x60840, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x40, 0x9, 0xa7, {0xa7, 0xd, "923dbfdfd119d3c642173dd522db7d5d55a7d136a7544809895bf30531811508473aa32e15c475eabd0472a7ed153bb7f4489fc6b2bf6ebaa4df6eaf7f63a07f55be584f8aef1c2145e6432350776c7b7ce776a8eae8c7c6264090fc23b3b17c7a26237a9f065850a4a8b0664130c6000e1708478184ff69b28c0f6dec4f34a049c626f507cdb6c57566185cbbb193eb659926f443b43abec22e2cbba3c3195de9ea3c417a"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000680)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "e89c3095"}, @global=@item_012={0x2, 0x1, 0x3, "d75a"}, @global=@item_4={0x3, 0x1, 0xb, "874d13b7"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0x9, 'N'}, @local=@item_4={0x3, 0x2, 0x5, "50eb475a"}, @global=@item_4={0x3, 0x1, 0x5, "46362b1d"}, @local=@item_4={0x3, 0x2, 0x4, "4a7c5383"}, @main=@item_012={0x0, 0x0, 0x1}, @local=@item_012={0x1, 0x2, 0x5, '{'}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xa, 0x1, {0x22, 0xb1a}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000740)={0x0, 0xe, 0x6c, "48de289c8165b558bd51a5789bd3d99025526f5b775cd28e774a82a5c8c1fc98fe791289af17bf3d4370faffb925b97f0e9a9a55e52c784b12436f53708987a26919db3038372130aa84d47b238bac86be20949ddb0c7d8687a7c9ab7cdcc0b8dc43ac5af5e7b189ef086e04"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x1, 0x65, "1391686ac8ed8b19843ce2a683706d921d0458b040a9143bd367ea3568ffe513f49a79ff85a895b7dc60d001a27fdca4b8824a994302b147988d0f79d88aba0c053f639ed26f0d3f91eeb3c7b23b9af005797c57d70fa88f703915d64dba83f16914f19edf"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000003b33597c1cf6b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='efivarfs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) ioctl$OCFS2_IOC_GROUP_ADD64(r5, 0x40186f03, &(0x7f0000000180)={0xffffffff, 0xd, 0x1, 0x7}) 8m32.212788742s ago: executing program 9 (id=2041): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000e5e000/0x3000)=nil, 0x3000, 0x0) 8m30.511084299s ago: executing program 9 (id=2045): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "361394"}}}, 0xd) 8m30.337626506s ago: executing program 9 (id=2046): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, 0x0}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8m30.273241657s ago: executing program 9 (id=2047): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) 8m29.281109841s ago: executing program 9 (id=2049): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3778, 0x800, 0x1, 0x378}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd014, 0x80, 0x1, 0x31}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x715, 0x1, 0x3, 0x21b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1374, 0x1000, 0x1, 0x7}}], 0x4, &(0x7f0000001480)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xb}, 0x0, 0x0, '\x00', {0x3, 0x8e2, 0x0, &(0x7f0000000480)=@buf_1k="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"}}, &(0x7f0000001500)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6f6c}}, './file0\x00'}) syz_io_uring_setup(0x138e1, &(0x7f0000001540)={0x0, 0x3a1c, 0x40, 0xffffffff, 0x3e2, 0x0, r2}, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000001c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) getpgrp(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 8m27.957146615s ago: executing program 9 (id=2053): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mincore(&(0x7f0000e5e000/0x3000)=nil, 0x3000, 0x0) 8m26.582772882s ago: executing program 40 (id=2053): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mincore(&(0x7f0000e5e000/0x3000)=nil, 0x3000, 0x0) 6m40.601588336s ago: executing program 1 (id=2390): socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 6m37.81112997s ago: executing program 1 (id=2399): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000102c0)={'wlan0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000480)="480000001400190d7ebdeb75fd0d8c162c84e48068d8c033ed7a80ffe0090f000060000000a2bc566109c87a0f7f8900fcff20000001002471083e0d5fcce62483c3f596a722191e", 0x48}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) 6m37.560955678s ago: executing program 1 (id=2402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001880)={{r1, 0x10, 0x6, 0x8, 0x3f800000000, 0x7cd, 0x0, 0x7, 0x1, 0x9, 0x0, 0x3, 0x40, 0xfffffffffffffffe, 0xf30}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, r0, 0x43233000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000102010100100000000000000a0000053000fb802c000180120003bf67e21a338004411d3eece6242b194ac6933d7233c5508f19f72ef27cf0f1fe2c137bd6908ab218ae44b07deaed1b0b078368a26e2cd896a7221b601d48053ab673a2d5d89801b5e72e467d006f56545ccefe085746f82baccb5092be9c3bf44ff3cbe8e2c38ebd1959f138a77ea9040b443818f1c9cadcd6b3966f"], 0x44}}, 0x0) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0xa, 0x80}, {0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x3}}, 0xe8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r8, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r2) socket$inet6_tcp(0xa, 0x1, 0x0) 6m36.443559896s ago: executing program 1 (id=2406): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$eJzs3U1oXNUeAPD/nXw0L01f8j54r3SV9wp9fZQmTad5pdAH7apQtGArKOjC0EzStJO2NCmYLMQP0IoK7aYbi6ALBekirlQEkS5ERXDRjaAUVBAbSKtVpAshcu/MxLSZpE1Tc2n8/eBwz7kzc89/5uSeueefSxLAH1ZnROyKiIaI2BIR7dX9hWqJJyslfV6pOHEoLUlMTx+4mkQSEXuLE4dqx0qq29XVA7RExIUPI1ob5/Y7MjZ+pK9cLp2otrtHh493j4yNbx4a7hssDZaOFnu2F4vF3h3F3rv2Xn/45fCZd67vef7sle8//ebi2+eT2BVt1cdmv4+7pTM6Zz6T2RqTiP/f7c5y1pJ3ACza+fvPvJR3DADA8kuv8f8aEf/Orv/boyEqF+uHJx+91h7XBuZ7XcfPr1xezjgBAACAOzcd7bEz3QIAAAArViEi2iIpdFXvBWiLQqGrq3IP79+jtVA+NjK6aeDYyaP9kd0r2xFNhYGhcql2r3BHNCVpuyer/9beelO7GBF/iYhT7X/K2l0Hj5X7805+AAAAwArXFnHpkWfe/efqedb/qS/b844SAAAAWIp0/b/mUmv2p7p+ss4HAACAFSld/1979srHYf0PAAAAK1Zt/T/zf7hUVFRUZip5z1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw1/R0EtMAAADAipZ3/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHvL3uLEoVpZrj4n9yxXT8xnandEdFTGv1QtlUcaoyXbtkRTRLT+mETjrNclEdGwxL67NkR0xqbPTz/x3VtpierP4RIPyz1i4uu8IyBPzdvyjoA8rXsg7wjI02en8o6APF2cyjsC8rT/QN4RkKd9/8s7AvL08tW8I+CD3RGxpV7+rxBrs20lC3Rz/qchyxAtzSfnIjqj69vZ++bmfwqTS+yGBUztjtgZEaU5+b9C7SkdDdXWmixV2JQMDJVLWyLizxGxMZpWpe2eBfrYu/ZC3UzPi/9Ix//kvlr+Ly1p/7VcYDWOycZVN76uv2+0b6nvm4qppyLWNdYb/2Qm/5vMk/9ddZt9vPfV/uF6+69/lI7/C+8vPP78nqZfjfhP3fM/mXlOWuseHT7ePTI2vnlouG+wNFg6WuzZXiwWe3cUe7uz+aC7NivM9ebTr9f9pv/XwWz+HzP++UnP/9aFxz+b/0fGxo/0lculEyOL7+O5DWfrfoe/cTYd/+YLdzL/NycPZgE2V/c93jc6eqInojm5b+7+rYuPeaWqfR61zysd/43r63//167/KvN/Yc78/7fqtlD5FeK8/vva5br7vzidjn/xIed/ftLx77/F+Z/ccP4vvvLY+v0b6/X9cGTXf+duff5vy4KpHcT1363d7gDlHScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMz2awAAAP//MEf3BQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x56) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f2833b738e062a00000000f730b7ecb98454c0b900", [0x204]}) write$binfmt_script(r0, 0x0, 0x0) 6m34.758180103s ago: executing program 1 (id=2414): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 6m31.217629022s ago: executing program 1 (id=2427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000657000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x1004000) r1 = userfaultfd(0x80001) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0xfffffed6, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000340)={@local, @empty}, 0xc) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x10, @rand_addr=' \x01\x00', 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000236bdb720f4204d6250170102030109022d00020307600f0904eb0a02b965020140020904828000fcb4594000000000000000000000000000000000f5800c7fe4cfede8dce06f0bf4dee406af2d463d33808601a0261da13e13d64063601e81b98a90668943f72ec23461a9e94502674bc9bdb116989edc1867e0d243f130db3b9cfd0c8a6ba1875f93e7e35696164df4622560df8b7a96db060a1143fb44d58c21170398fcfab9e9ac775ea62c418953f181ddbf0a9b17a1bb950b7416bfd861521a6d217f6a0c42715ce82852ccb37b8723afea238a734454941da16f097e48251eba57c3607c1356fe2a56f8f990e6185f902937ae53172cbc"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, 0x0, &(0x7f0000000040)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r8 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4038587a, &(0x7f0000000300)={{r9, &(0x7f0000000100)='$)&\x00', 0x400000, &(0x7f0000000140)={@align=0x9, {0x977, 0x9, 0x7, 0x4}}, 0x9, &(0x7f00000001c0), &(0x7f0000000240)=0x8000}, {[0x7, 0x5, 0x7e7, 0x4]}, 0x347a8c7a, 0x6a, &(0x7f0000000280)=""/106}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {&(0x7f0000000040)="a1260000000000", 0x7}, {&(0x7f0000000680)="37bcb3983785779d77392b7d63586b7d44a9eabc0e", 0x15}], 0x3) 6m30.858277194s ago: executing program 41 (id=2427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000657000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x1004000) r1 = userfaultfd(0x80001) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0xfffffed6, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000340)={@local, @empty}, 0xc) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x10, @rand_addr=' \x01\x00', 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, 0x0, &(0x7f0000000040)) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r8 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4038587a, &(0x7f0000000300)={{r9, &(0x7f0000000100)='$)&\x00', 0x400000, &(0x7f0000000140)={@align=0x9, {0x977, 0x9, 0x7, 0x4}}, 0x9, &(0x7f00000001c0), &(0x7f0000000240)=0x8000}, {[0x7, 0x5, 0x7e7, 0x4]}, 0x347a8c7a, 0x6a, &(0x7f0000000280)=""/106}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {&(0x7f0000000040)="a1260000000000", 0x7}, {&(0x7f0000000680)="37bcb3983785779d77392b7d63586b7d44a9eabc0e", 0x15}], 0x3) 18.892443685s ago: executing program 0 (id=3753): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) userfaultfd(0x801) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 16.924801861s ago: executing program 7 (id=3760): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x2e4, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2b4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x83014000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x4000) r6 = userfaultfd(0x80801) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 16.408192869s ago: executing program 0 (id=3762): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xffff7ff9, 0x20}}, 0x2e) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 16.342784651s ago: executing program 3 (id=3764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) keyctl$setperm(0x5, 0x0, 0x1010) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 11.838198753s ago: executing program 0 (id=3772): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) userfaultfd(0x801) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 10.373615912s ago: executing program 7 (id=3778): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 10.301780434s ago: executing program 3 (id=3779): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.258188419s ago: executing program 7 (id=3782): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xffff7ff9, 0x20}}, 0x2e) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 6.529682211s ago: executing program 3 (id=3786): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 5.543801894s ago: executing program 0 (id=3789): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x2e4, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2b4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x83014000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x4000) r6 = userfaultfd(0x80801) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.499578785s ago: executing program 3 (id=3790): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.322095622s ago: executing program 7 (id=3791): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="490000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 5.121630388s ago: executing program 4 (id=3793): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30, 0x8, 0x6ff60000000}, &(0x7f0000000180)=0x18) 5.0717246s ago: executing program 4 (id=3794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x94707000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 4.861462007s ago: executing program 4 (id=3796): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x2e4, r2, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2b4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x83014000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.576187746s ago: executing program 7 (id=3797): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.89049592s ago: executing program 0 (id=3798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x15}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)}], 0x1}, 0x44) 3.450371074s ago: executing program 0 (id=3801): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mlock2(&(0x7f000034f000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xffff7ff9, 0x20}}, 0x2e) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 1.840083778s ago: executing program 4 (id=3803): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="5602ce3cb1ff0e4a63eaca6e29e1114abc40b789b08e031ba4f6f2332e51a1c2bb819a0a6206d346b9a8a7a5d21e0c6c85b4197a085a1e2fc324b2d7de9d90cb61f64b8cde5de6", 0x47, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0), &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.741721482s ago: executing program 6 (id=3804): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ptrace(0x10, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.665946495s ago: executing program 4 (id=3805): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, 0x0, 0x20000000) 1.301743396s ago: executing program 6 (id=3806): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x94707000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 722.439176ms ago: executing program 3 (id=3807): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="490000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d0003000000008000000000000000000000070000000000000008000000000040000500000000000000"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 678.001148ms ago: executing program 4 (id=3808): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x2e4, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2b4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x83014000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x4000) r6 = userfaultfd(0x80801) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 441.601796ms ago: executing program 6 (id=3809): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8004, 0x2) userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffff9c, &(0x7f0000000240), 0x200200, 0x0) socket$inet6(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling', 0x1, 0x18f) socket$l2tp(0x2, 0x2, 0x73) memfd_secret(0x80000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e61, @multicast2}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x197, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 403.841497ms ago: executing program 6 (id=3810): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) userfaultfd(0x801) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000}) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x4) io_uring_setup(0x1694, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 254.998722ms ago: executing program 6 (id=3811): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0xffffffff, 0x400, 0x1, 0x257, 0x0, r5}, &(0x7f0000002440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72c3, 0x8, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc880, 0x40, 0x1, 0x37b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8041, 0x5, 0x96}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1) 121.515406ms ago: executing program 7 (id=3812): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) 17.85357ms ago: executing program 6 (id=3813): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x2e4, r2, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2b4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x83014000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 0s ago: executing program 3 (id=3814): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38) sendfile(r3, r3, 0x0, 0x1002000ff) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(0x0, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) kernel console output (not intermixed with test programs): T11] device hsr_slave_1 left promiscuous mode [ 857.939145][ T11] device veth1_macvtap left promiscuous mode [ 858.040469][ T11] device veth0_macvtap left promiscuous mode [ 859.229283][ T11] bond2 (unregistering): Released all slaves [ 859.300523][ T11] bond1 (unregistering): Released all slaves [ 862.632188][ T11] bond0 (unregistering): Released all slaves [ 862.734003][T15649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 862.813770][T15649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 863.775491][T15649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.835661][T15649] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.344699][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 864.367229][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.420010][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 864.707730][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.749072][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.756249][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.511910][T15878] securityfs: Unknown parameter 'm8{>bvZ000&' [ 866.125522][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 866.143807][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 866.152371][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 866.253225][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.260350][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.286194][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 866.296389][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 866.310411][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 866.344484][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 866.471816][T15877] netlink: 'syz.7.2732': attribute type 4 has an invalid length. [ 866.540289][ T4263] lo speed is unknown, defaulting to 1000 [ 866.600493][T15889] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 866.633245][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 866.665321][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 866.711848][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 866.807419][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 866.876328][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 866.920996][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 866.948829][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 866.968501][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 867.008312][T15649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 869.200589][T15649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.218493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 869.227829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 869.270173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 869.282704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 869.328031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 869.366207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 869.407035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 869.442361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 869.489779][T15649] device veth0_vlan entered promiscuous mode [ 869.530589][T15649] device veth1_vlan entered promiscuous mode [ 869.617505][T15939] netlink: 'syz.7.2744': attribute type 4 has an invalid length. [ 869.626484][T15939] securityfs: Unknown parameter 'm8{>bvZ000&' [ 870.230345][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.236747][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.274298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 870.353385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 870.396929][T15649] device veth0_macvtap entered promiscuous mode [ 870.414273][T15941] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 870.458776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 870.487824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 870.513987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 870.554358][T15649] device veth1_macvtap entered promiscuous mode [ 870.697441][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.865733][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.988829][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.138265][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.209014][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.251641][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.414081][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.451878][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.788535][T15649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.920515][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 871.945203][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 872.015657][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 872.064509][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.106839][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.233031][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.626238][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.255900][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.266875][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.292330][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.353088][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.404388][T15649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.418960][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 874.566721][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 875.605622][T15649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.731080][T15649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.801434][T15649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.927422][T15649] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.251788][ T5833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.280937][ T5833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.305419][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 876.332006][ T5833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.367112][ T5833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.394218][ T8401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 876.530887][T15991] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 876.837985][T16004] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2759'. [ 877.213361][ T7] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 877.456311][ T7] usb 4-1: config 1 has an invalid interface number: 4 but max is 1 [ 877.511954][ T7] usb 4-1: config 1 has an invalid interface number: 245 but max is 1 [ 877.612865][ T7] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 877.633266][ T7] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 877.642727][ T7] usb 4-1: config 1 has no interface number 0 [ 877.649307][ T7] usb 4-1: config 1 has no interface number 1 [ 877.660644][ T7] usb 4-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 877.677008][ T7] usb 4-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 877.695265][ T7] usb 4-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 877.708642][ T7] usb 4-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 877.720426][ T7] usb 4-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 877.784363][ T7] usb 4-1: config 1 interface 4 has no altsetting 0 [ 877.959628][ T7] usb 4-1: config 1 interface 245 has no altsetting 0 [ 878.040955][ T7] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 878.058129][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.106416][ T7] usb 4-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 878.776990][ T7] usb 4-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 879.087588][ T7] usb 4-1: SerialNumber: Ѕ [ 879.396721][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2762'. [ 879.584834][T16034] netlink: 'syz.3.2762': attribute type 10 has an invalid length. [ 879.597215][T16034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2762'. [ 879.725634][T16037] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2762'. [ 879.784488][T16034] netlink: 'syz.3.2762': attribute type 10 has an invalid length. [ 879.831641][T16034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2762'. [ 879.946629][ T7] usb 4-1: USB disconnect, device number 51 [ 880.650307][T16061] Bluetooth: hci0: unsupported parameter 255 [ 880.739329][T16061] Bluetooth: hci0: unsupported parameter 255 [ 882.273513][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 884.135064][T16108] Bluetooth: hci0: unsupported parameter 255 [ 884.161448][T16108] Bluetooth: hci0: unsupported parameter 255 [ 885.953482][ T4287] Bluetooth: hci0: command 0x1407 tx timeout [ 885.959674][ T4291] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 886.020651][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2794'. [ 889.619999][ T4291] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 890.065476][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2809'. [ 891.453407][T16237] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 891.508778][T16237] File: /dev/nullb0 PID: 16237 Comm: syz.7.2812 [ 891.701897][T16230] block device autoloading is deprecated and will be removed. [ 891.701970][T16239] block device autoloading is deprecated and will be removed. [ 894.873783][T16283] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 895.703174][T16283] File: /dev/nullb0 PID: 16283 Comm: syz.3.2824 [ 895.723097][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 900.041609][T16340] loop7: detected capacity change from 0 to 131072 [ 900.191322][T16340] F2FS-fs (loop7): Found nat_bits in checkpoint [ 900.249737][T16340] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 900.957776][T16335] md: superblock version 12389 not known [ 901.007472][T16335] md: couldn't set array info. -22 [ 901.014075][T16342] md: md2 stopped. [ 902.312813][T16381] autofs4:pid:16381:autofs_fill_super: called with bogus options [ 903.302992][ T4318] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 903.526720][ T4318] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 904.182009][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.273258][ T4318] usb 5-1: Product: syz [ 904.277774][ T4318] usb 5-1: Manufacturer: syz [ 904.282387][ T4318] usb 5-1: SerialNumber: syz [ 905.992870][ T4318] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 906.234443][ T4318] cdc_ncm 5-1:1.0: bind() failure [ 906.255785][ T4318] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 906.262604][ T4318] cdc_ncm 5-1:1.1: bind() failure [ 906.280668][ T4318] usb 5-1: USB disconnect, device number 42 [ 906.429185][T16427] autofs4:pid:16427:autofs_fill_super: called with bogus options [ 907.804130][T16446] loop7: detected capacity change from 0 to 131072 [ 907.906539][T16446] F2FS-fs (loop7): Found nat_bits in checkpoint [ 907.938062][T16446] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 909.903181][ T4321] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 910.051606][T16486] autofs4:pid:16486:autofs_fill_super: called with bogus options [ 910.107280][ T4321] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 910.138216][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.168333][ T4321] usb 5-1: Product: syz [ 910.181666][ T4321] usb 5-1: Manufacturer: syz [ 910.198273][ T4321] usb 5-1: SerialNumber: syz [ 911.462207][T16500] loop7: detected capacity change from 0 to 131072 [ 911.524134][T16500] F2FS-fs (loop7): Found nat_bits in checkpoint [ 911.644636][T16500] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 912.462204][ T4321] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 912.553004][ T4321] cdc_ncm 5-1:1.0: bind() failure [ 912.561542][ T4321] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 912.633258][ T4321] cdc_ncm 5-1:1.1: bind() failure [ 912.679615][ T4321] usb 5-1: USB disconnect, device number 43 [ 912.736709][T16506] ptrace attach of ""[16523] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[16506] [ 913.653941][T16538] block device autoloading is deprecated and will be removed. [ 913.752231][T16535] md: md2 stopped. [ 915.893056][ T4318] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 916.117351][ T4318] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 917.624055][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.632135][ T4318] usb 4-1: Product: syz [ 917.912936][ T4318] usb 4-1: Manufacturer: syz [ 917.932985][ T4318] usb 4-1: SerialNumber: syz [ 918.880766][T16581] ptrace attach of ""[16591] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[16581] [ 920.011683][ T4318] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 920.028801][ T4318] cdc_ncm 4-1:1.0: bind() failure [ 920.081713][ T4318] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 920.164677][ T4318] cdc_ncm 4-1:1.1: bind() failure [ 920.247562][ T4318] usb 4-1: USB disconnect, device number 52 [ 924.287945][T16666] ptrace attach of ""[16668] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[16666] [ 924.823005][T16677] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2910'. [ 926.763029][ T4318] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 927.786205][ T4318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.814211][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.858211][ T4318] usb 1-1: Product: syz [ 927.898291][ T4318] usb 1-1: Manufacturer: syz [ 927.913303][ T4318] usb 1-1: SerialNumber: syz [ 928.071144][T16719] ptrace attach of ""[16720] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[16719] [ 928.162355][T16714] md: superblock version 12389 not known [ 928.174244][T16715] block device autoloading is deprecated and will be removed. [ 928.181919][T16714] md: couldn't set array info. -22 [ 928.304269][T16715] md: md2 stopped. [ 929.694432][ T4318] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 929.700540][ T4318] cdc_ncm 1-1:1.0: bind() failure [ 929.772787][ T4318] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 929.832956][ T4318] cdc_ncm 1-1:1.1: bind() failure [ 929.893755][ T4318] usb 1-1: USB disconnect, device number 49 [ 930.275287][T16748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2925'. [ 931.399224][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.405618][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.747862][T16771] ptrace attach of ""[16772] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[16771] [ 935.589657][T16784] block device autoloading is deprecated and will be removed. [ 935.638120][T16789] block device autoloading is deprecated and will be removed. [ 935.885253][T16802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2937'. [ 936.714095][T16784] md: superblock version 12389 not known [ 936.730099][T16784] md: couldn't set array info. -22 [ 937.103491][T16784] md: md2 stopped. [ 940.160015][T16852] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2949'. [ 945.293211][ T4319] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 945.486130][ T4319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 945.510210][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.575933][ T4319] usb 5-1: Product: syz [ 945.591415][ T4319] usb 5-1: Manufacturer: syz [ 945.612609][ T4319] usb 5-1: SerialNumber: syz [ 945.648329][T16904] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2961'. [ 947.743269][ T4319] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 947.984333][ T4319] cdc_ncm 5-1:1.0: bind() failure [ 948.064359][ T4319] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 948.094991][ T4319] cdc_ncm 5-1:1.1: bind() failure [ 948.137827][ T4319] usb 5-1: USB disconnect, device number 44 [ 948.618295][T16959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2975'. [ 952.282994][ T4319] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 952.496774][ T4319] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.534334][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.581436][ T4319] usb 8-1: Product: syz [ 952.603035][ T4319] usb 8-1: Manufacturer: syz [ 952.607670][ T4319] usb 8-1: SerialNumber: syz [ 952.626362][T17001] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2988'. [ 954.095798][T17022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2993'. [ 954.650948][ T4319] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 954.866621][ T4319] cdc_ncm 8-1:1.0: bind() failure [ 954.901629][ T4319] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 954.919117][ T4319] cdc_ncm 8-1:1.1: bind() failure [ 954.931264][ T4319] usb 8-1: USB disconnect, device number 11 [ 954.984278][T17029] autofs4:pid:17029:autofs_fill_super: called with bogus options [ 958.475109][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3001'. [ 959.093331][T17076] autofs4:pid:17076:autofs_fill_super: called with bogus options [ 959.217007][ T9252] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 959.313176][ T4320] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 959.392586][T17080] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3008'. [ 959.413149][ T9252] usb 5-1: Using ep0 maxpacket: 16 [ 959.434193][ T9252] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.478244][ T9252] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 959.511574][T17083] netlink: 'syz.0.3009': attribute type 8 has an invalid length. [ 959.512774][ T9252] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 959.523186][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.577132][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.585369][ T9252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.593734][ T4320] usb 4-1: Product: syz [ 959.613061][ T4320] usb 4-1: Manufacturer: syz [ 959.627872][ T4320] usb 4-1: SerialNumber: syz [ 959.637987][ T9252] usb 5-1: Product: syz [ 959.657452][ T9252] usb 5-1: Manufacturer: syz [ 959.683757][ T9252] usb 5-1: SerialNumber: syz [ 959.914150][ T9252] usb 5-1: 0:2 : does not exist [ 959.919141][ T9252] usb 5-1: unit 15 not found! [ 959.950533][ T9252] usb 5-1: USB disconnect, device number 45 [ 960.212039][T17095] udevd[17095]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.265732][ T4320] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 960.280836][ T4320] cdc_ncm 4-1:1.0: bind() failure [ 960.306723][ T4320] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 960.315755][ T4320] cdc_ncm 4-1:1.1: bind() failure [ 960.332808][ T4320] usb 4-1: USB disconnect, device number 53 [ 961.469341][T17117] device veth0 entered promiscuous mode [ 961.488433][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3014'. [ 962.047150][T17128] autofs4:pid:17128:autofs_fill_super: called with bogus options [ 962.932949][ T4320] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 963.136909][ T4320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 963.162690][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.187821][ T4320] usb 4-1: Product: syz [ 963.207732][ T4320] usb 4-1: Manufacturer: syz [ 963.221890][ T4320] usb 4-1: SerialNumber: syz [ 963.848591][ T4320] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 963.856176][ T4320] cdc_ncm 4-1:1.0: bind() failure [ 963.877605][ T4320] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 963.884928][ T4320] cdc_ncm 4-1:1.1: bind() failure [ 963.918320][ T4320] usb 4-1: USB disconnect, device number 54 [ 966.723355][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3034'. [ 966.791654][T17200] autofs4:pid:17200:autofs_fill_super: called with bogus options [ 966.829563][T17203] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3035'. [ 967.833456][ T4321] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 968.037005][ T4321] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 968.148418][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.156657][ T4321] usb 4-1: Product: syz [ 968.161318][ T4321] usb 4-1: Manufacturer: syz [ 968.166765][ T4321] usb 4-1: SerialNumber: syz [ 968.755716][T17246] autofs4:pid:17246:autofs_fill_super: called with bogus options [ 968.777183][ T4321] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 969.149134][ T4321] cdc_ncm 4-1:1.0: bind() failure [ 969.158104][ T4321] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 969.165290][ T4321] cdc_ncm 4-1:1.1: bind() failure [ 969.184922][ T4321] usb 4-1: USB disconnect, device number 55 [ 969.291210][T17249] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3048'. [ 969.313284][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 969.444878][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3049'. [ 971.042830][T17285] autofs4:pid:17285:autofs_fill_super: called with bogus options [ 971.427788][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3061'. [ 972.404643][T17312] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 973.733573][T17336] autofs4:pid:17336:autofs_fill_super: called with bogus options [ 974.353062][ T4321] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 974.362979][ T954] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 974.543123][ T954] usb 1-1: Using ep0 maxpacket: 16 [ 974.550172][ T954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.583325][ T4321] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.615740][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.627829][ T4321] usb 8-1: Product: syz [ 974.632018][ T4321] usb 8-1: Manufacturer: syz [ 974.637536][ T954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 974.651493][ T4321] usb 8-1: SerialNumber: syz [ 974.665808][ T954] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 974.702990][ T954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.716955][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3077'. [ 974.726283][ T954] usb 1-1: Product: syz [ 974.738880][ T954] usb 1-1: Manufacturer: syz [ 974.779205][ T954] usb 1-1: SerialNumber: syz [ 975.013174][ T954] usb 1-1: 0:2 : does not exist [ 975.018122][ T954] usb 1-1: unit 6 not found! [ 975.081998][ T954] usb 1-1: USB disconnect, device number 50 [ 975.279378][ T4321] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 975.289318][ T4321] cdc_ncm 8-1:1.0: bind() failure [ 975.304963][ T4321] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 975.314529][T17095] udevd[17095]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.318988][ T4321] cdc_ncm 8-1:1.1: bind() failure [ 975.337762][T17377] autofs4:pid:17377:autofs_fill_super: called with bogus options [ 975.369517][ T4321] usb 8-1: USB disconnect, device number 12 [ 977.062577][T17407] device veth0 entered promiscuous mode [ 977.086333][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 977.528184][T17413] autofs4:pid:17413:autofs_fill_super: called with bogus options [ 977.601978][ T26] audit: type=1326 audit(1780519415.607:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.4.3098" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f505f59ce59 code=0x0 [ 978.083129][ T4319] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 978.272943][ T4319] usb 8-1: Using ep0 maxpacket: 16 [ 978.280433][ T4319] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.300504][ T4319] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.322703][ T4319] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 978.339956][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.348631][ T4319] usb 8-1: Product: syz [ 978.352833][ T4319] usb 8-1: Manufacturer: syz [ 978.357782][ T4319] usb 8-1: SerialNumber: syz [ 978.579265][ T4319] usb 8-1: 0:2 : does not exist [ 978.584681][ T4319] usb 8-1: unit 6 not found! [ 978.734257][ T4319] usb 8-1: USB disconnect, device number 13 [ 978.806246][T17095] udevd[17095]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.506570][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3112'. [ 982.671524][T17514] block device autoloading is deprecated and will be removed. [ 982.730830][T17508] md: md2 stopped. [ 987.563222][ T4319] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 987.773255][ T4319] usb 8-1: Using ep0 maxpacket: 16 [ 987.780707][ T4319] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.837235][ T4319] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 987.891553][ T4319] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 987.949780][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.988705][ T4319] usb 8-1: Product: syz [ 988.008171][ T4319] usb 8-1: Manufacturer: syz [ 988.038593][ T4319] usb 8-1: SerialNumber: syz [ 988.282146][ T4319] usb 8-1: 0:2 : does not exist [ 988.296276][ T4319] usb 8-1: unit 6 not found! [ 988.388611][ T4319] usb 8-1: USB disconnect, device number 14 [ 988.634182][T17095] udevd[17095]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 989.501287][T17605] block device autoloading is deprecated and will be removed. [ 990.689360][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3152'. [ 991.370063][T17641] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3156'. [ 991.515685][T17644] autofs4:pid:17644:autofs_fill_super: called with bogus options [ 991.562989][ T4320] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 991.758107][ T4320] usb 8-1: Using ep0 maxpacket: 8 [ 991.778751][ T4320] usb 8-1: config 5 has an invalid interface number: 245 but max is 1 [ 991.812943][ T4320] usb 8-1: config 5 has no interface number 1 [ 992.768325][ T4320] usb 8-1: config 5 interface 0 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1007 [ 992.836903][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.843260][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.935622][ T4320] usb 8-1: config 5 interface 0 has no altsetting 0 [ 992.951563][ T4320] usb 8-1: config 5 interface 245 has no altsetting 0 [ 992.961453][ T4320] usb 8-1: New USB device found, idVendor=15c2, idProduct=0034, bcdDevice=12.b6 [ 992.970836][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.983116][ T4320] usb 8-1: Product: syz [ 992.991030][ T4320] usb 8-1: Manufacturer: syz [ 993.089993][ T4320] usb 8-1: SerialNumber: syz [ 993.702281][T17637] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 993.919032][ T4320] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 993.943074][ T4320] imon 8-1:5.0: unable to initialize intf0, err -19 [ 993.970040][ T4320] imon:imon_probe: failed to initialize context! [ 993.984355][ T4320] imon 8-1:5.0: unable to register, err -19 [ 994.016657][ T4320] imon 8-1:5.245: inconsistent driver matching [ 994.027900][ T4320] imon 8-1:5.245: unable to register, err -22 [ 994.039415][ T4320] imon: probe of 8-1:5.245 failed with error -22 [ 994.058506][ T4320] usb 8-1: USB disconnect, device number 15 [ 994.939895][T17697] autofs4:pid:17697:autofs_fill_super: called with bogus options [ 995.502193][T17699] md: superblock version 12389 not known [ 995.510805][T17699] md: couldn't set array info. -22 [ 995.774325][T17724] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3175'. [ 999.759658][T17778] overlayfs: failed to clone upperpath [ 999.954614][T17786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3192'. [ 1001.643007][ T2185] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1001.837373][ T2185] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1001.857917][ T2185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.892984][ T2185] usb 1-1: Product: syz [ 1001.907455][ T2185] usb 1-1: Manufacturer: syz [ 1001.920483][ T2185] usb 1-1: SerialNumber: syz [ 1001.947560][ T2185] usb 1-1: config 0 descriptor?? [ 1002.186237][ T2185] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1003.083007][ T4319] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1003.714354][ T2185] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1003.725614][ T2185] usb 1-1: USB disconnect, device number 51 [ 1003.942985][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 1003.961924][ T4319] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1004.911839][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.920425][ T4319] usb 4-1: Product: syz [ 1004.925554][ T4319] usb 4-1: Manufacturer: syz [ 1004.930275][ T4319] usb 4-1: SerialNumber: syz [ 1004.937093][ T4319] usb 4-1: config 0 descriptor?? [ 1004.954537][ T4319] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1005.180392][T17859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3206'. [ 1005.348204][ T4319] gspca_sonixj: reg_r err -71 [ 1005.354361][ T4319] sonixj: probe of 4-1:0.0 failed with error -71 [ 1005.393270][ T4319] usb 4-1: USB disconnect, device number 56 [ 1006.073143][ T4319] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1006.315621][ T4319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1006.334906][ T4319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.503552][ T4319] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1007.603376][ T4319] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1007.622905][ T4319] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1007.639375][ T4319] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1007.664115][ T4319] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1007.689111][ T4319] usb 5-1: string descriptor 0 read error: -22 [ 1007.700400][ T4319] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1007.718224][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.182414][T17924] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3221'. [ 1008.566199][ T4319] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1009.457153][ T4319] usb 5-1: USB disconnect, device number 46 [ 1009.684566][T17095] udevd[17095]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.833474][ T4291] Bluetooth: hci3: hcon ffff88807c782000 sent 0 < count 10 [ 1009.841543][ T4291] Bluetooth: hci3: hcon ffff88804eb76000 sent 0 < count 16 [ 1009.849028][ T4291] Bluetooth: hci3: hcon ffff88804eb76000 sent 0 < count 5 [ 1009.856490][ T4291] Bluetooth: hci3: hcon ffff88804eb76000 sent 0 < count 23552 [ 1012.733876][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1012.813562][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1012.852991][T17977] device bridge_slave_1 left promiscuous mode [ 1012.891049][ T4291] Bluetooth: hci4: hcon ffff8880640ec000 sent 0 < count 10 [ 1012.901135][ T4291] Bluetooth: hci4: hcon ffff888073e06000 sent 0 < count 16 [ 1012.916204][ T4291] Bluetooth: hci4: hcon ffff888073e06000 sent 0 < count 5 [ 1012.923436][ T4291] Bluetooth: hci4: hcon ffff888073e06000 sent 0 < count 23552 [ 1012.971337][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.070543][T17977] device bridge_slave_0 left promiscuous mode [ 1013.091129][T17992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1013.146645][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.097532][T18039] overlayfs: missing 'lowerdir' [ 1017.604294][T18065] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3258'. [ 1019.592671][T18088] overlayfs: missing 'lowerdir' [ 1019.882924][ T4321] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1020.074073][ T954] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1020.082979][ T4321] usb 8-1: Using ep0 maxpacket: 32 [ 1020.089832][ T4321] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1020.104377][ T4321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.110885][ T9252] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1020.128381][ T4321] usb 8-1: config 0 descriptor?? [ 1020.265621][ T954] usb 4-1: config 1 has an invalid interface number: 4 but max is 1 [ 1020.297976][ T954] usb 4-1: config 1 has an invalid interface number: 245 but max is 1 [ 1020.306451][ T9252] usb 5-1: Using ep0 maxpacket: 32 [ 1020.318529][ T954] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1020.330413][ T9252] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1020.341431][ T4321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1020.349318][ T9252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.360884][ T954] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1020.371828][ T954] usb 4-1: config 1 has no interface number 0 [ 1020.382995][ T9252] usb 5-1: config 0 descriptor?? [ 1020.384389][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1020.393014][ T954] usb 4-1: config 1 has no interface number 1 [ 1020.406660][ T9252] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1020.412266][ T4321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1020.420026][ T954] usb 4-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1020.441149][ T4321] usb 8-1: media controller created [ 1020.450970][ T954] usb 4-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1020.475750][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1020.499194][ T954] usb 4-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1020.532098][ T954] usb 4-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1021.206034][ T4321] az6027: usb out operation failed. (-71) [ 1021.212777][ T4321] stb0899_attach: Driver disabled by Kconfig [ 1021.391646][ T4321] az6027: no front-end attached [ 1021.391646][ T4321] [ 1022.546515][ T4321] az6027: usb out operation failed. (-71) [ 1022.552450][ T9252] gspca_sunplus: reg_w_riv err -110 [ 1022.559184][ T4321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1022.598705][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input61 [ 1022.629422][ T4321] dvb-usb: schedule remote query interval to 400 msecs. [ 1022.710266][ T9252] sunplus: probe of 5-1:0.0 failed with error -110 [ 1022.723856][ T954] usb 4-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1022.737521][ T954] usb 4-1: config 1 interface 4 has no altsetting 0 [ 1022.740198][ T4321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1022.744756][ T954] usb 4-1: config 1 interface 245 has no altsetting 0 [ 1022.771918][ T954] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1022.781186][ T954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.789345][ T954] usb 4-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1022.815144][ T954] usb 4-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1022.873040][ T954] usb 4-1: SerialNumber: Ѕ [ 1022.895756][ T9252] usb 5-1: USB disconnect, device number 47 [ 1022.903110][ T4321] usb 8-1: USB disconnect, device number 16 [ 1022.937230][ T954] usb 4-1: can't set config #1, error -71 [ 1022.963961][ T954] usb 4-1: USB disconnect, device number 57 [ 1023.053451][ T4321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1023.094529][T18135] overlayfs: missing 'lowerdir' [ 1023.458548][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'. [ 1024.013805][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3290'. [ 1024.055910][ T4321] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1024.082474][T18170] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3290'. [ 1024.092223][ T4321] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1024.153680][T18170] netlink: 'syz.6.3290': attribute type 10 has an invalid length. [ 1024.161746][T18176] overlayfs: missing 'lowerdir' [ 1024.195945][T18170] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3290'. [ 1024.231231][T18170] netlink: 'syz.6.3290': attribute type 10 has an invalid length. [ 1024.286737][T18170] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3290'. [ 1026.814812][T18221] device veth0 entered promiscuous mode [ 1026.841465][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1026.933138][T18230] overlayfs: missing 'lowerdir' [ 1027.411138][ T9252] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1027.615313][ T9252] usb 5-1: config 1 has an invalid interface number: 4 but max is 1 [ 1027.664354][ T9252] usb 5-1: config 1 has an invalid interface number: 245 but max is 1 [ 1027.697860][ T9252] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1027.700982][T18251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1027.713076][T18251] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1027.727915][T18251] vhci_hcd vhci_hcd.0: Device attached [ 1027.764384][ T9252] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1027.817696][T18252] vhci_hcd: cannot find a urb of seqnum 255 max seqnum 0 [ 1027.827733][ T9252] usb 5-1: config 1 has no interface number 0 [ 1027.827920][ T9044] vhci_hcd: stop threads [ 1027.844901][ T9252] usb 5-1: config 1 has no interface number 1 [ 1027.869445][ T9044] vhci_hcd: release socket [ 1027.871566][ T9252] usb 5-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1027.889432][ T9044] vhci_hcd: disconnect device [ 1027.906667][ T9252] usb 5-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1027.947082][ T9252] usb 5-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1027.973969][ T9252] usb 5-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1028.002566][ T9252] usb 5-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1028.037225][ T9252] usb 5-1: config 1 interface 4 has no altsetting 0 [ 1028.053056][ T9252] usb 5-1: config 1 interface 245 has no altsetting 0 [ 1028.076799][ T9252] usb 5-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1028.106064][ T9252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.142644][ T9252] usb 5-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1028.240949][ T9252] usb 5-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1028.380623][ T9252] usb 5-1: SerialNumber: Ѕ [ 1028.617122][T18272] overlayfs: missing 'lowerdir' [ 1028.623586][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1028.686028][T18235] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1028.767934][T18235] netlink: 'syz.4.3308': attribute type 10 has an invalid length. [ 1028.808472][T18235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1028.885645][T18235] netlink: 'syz.4.3308': attribute type 10 has an invalid length. [ 1028.930110][T18235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1028.984414][ T9252] usb 5-1: USB disconnect, device number 48 [ 1030.894660][T18320] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1030.933959][T18320] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1033.776243][T18369] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1033.785175][T18369] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1033.962679][T18377] overlayfs: failed to clone upperpath [ 1034.854993][T18407] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1034.880234][T18407] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1035.230500][T18417] tipc: Enabling of bearer rejected, failed to enable media [ 1037.113763][T18453] overlayfs: missing 'lowerdir' [ 1037.464750][T18464] binder: 18463:18464 ioctl c0306201 0 returned -14 [ 1037.676651][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3379'. [ 1038.483524][T18468] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3379'. [ 1039.907602][T18499] overlayfs: missing 'lowerdir' [ 1040.456297][T18509] netlink: 'syz.6.3383': attribute type 4 has an invalid length. [ 1041.253934][T18519] binder: 18518:18519 ioctl c0306201 0 returned -14 [ 1042.982979][ T4319] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1043.043486][T18543] overlayfs: missing 'lowerdir' [ 1043.175731][ T4319] usb 1-1: config 1 has an invalid interface number: 4 but max is 1 [ 1043.217586][ T4319] usb 1-1: config 1 has an invalid interface number: 245 but max is 1 [ 1043.257407][ T4319] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1043.307557][ T4319] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1043.406191][ T4319] usb 1-1: config 1 has no interface number 0 [ 1043.423014][ T4319] usb 1-1: config 1 has no interface number 1 [ 1043.453234][ T4319] usb 1-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1043.540889][ T4319] usb 1-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1043.617759][ T4319] usb 1-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1043.693871][ T4319] usb 1-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1043.715727][T18562] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3401'. [ 1043.793300][ T4319] usb 1-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1043.867654][ T4319] usb 1-1: config 1 interface 4 has no altsetting 0 [ 1043.915581][ T4319] usb 1-1: config 1 interface 245 has no altsetting 0 [ 1043.966363][ T4319] usb 1-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1044.017842][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.049501][ T4319] usb 1-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1044.124288][ T4319] usb 1-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1044.245219][ T4319] usb 1-1: SerialNumber: Ѕ [ 1044.491084][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1044.592260][T18535] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1044.688650][ T4319] usb 1-1: USB disconnect, device number 52 [ 1045.860336][T18603] netlink: 'syz.7.3406': attribute type 4 has an invalid length. [ 1045.869216][T18603] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1046.075369][T18606] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1047.421803][T18631] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3414'. [ 1047.508808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.393006][ T4263] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1048.510777][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3421'. [ 1048.593080][ T4263] usb 1-1: Using ep0 maxpacket: 32 [ 1048.602117][ T4263] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1048.621988][ T4263] usb 1-1: config 0 has no interface number 0 [ 1048.644684][ T4263] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1048.656861][ T4263] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1048.671258][ T4263] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1048.691116][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.700378][ T4263] usb 1-1: Product: syz [ 1048.705825][ T4263] usb 1-1: Manufacturer: syz [ 1048.710621][ T4263] usb 1-1: SerialNumber: syz [ 1048.734031][ T4263] usb 1-1: config 0 descriptor?? [ 1048.914486][ T4263] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1048.943631][ T4263] em28xx 1-1:0.89: Video interface 89 found: [ 1049.103889][ T954] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1049.294410][ T954] usb 4-1: Using ep0 maxpacket: 32 [ 1049.302432][ T954] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1049.403000][ T954] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1049.419019][ T954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.455040][ T954] usb 4-1: config 0 descriptor?? [ 1049.515952][ T4263] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1049.516130][ T954] hub 4-1:0.0: bad descriptor, ignoring hub [ 1049.568559][ T954] hub: probe of 4-1:0.0 failed with error -5 [ 1049.624507][ T954] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1050.393872][T18695] netlink: 'syz.7.3425': attribute type 4 has an invalid length. [ 1050.403067][T18695] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1050.580582][ T4263] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1050.619770][ T4263] em28xx 1-1:0.89: board has no eeprom [ 1050.722890][ T4263] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1050.733677][ T4263] em28xx 1-1:0.89: analog set to bulk mode. [ 1050.765347][ T4321] em28xx 1-1:0.89: Registering V4L2 extension [ 1050.799426][ T4263] usb 1-1: USB disconnect, device number 53 [ 1050.841477][ T4263] em28xx 1-1:0.89: Disconnecting em28xx [ 1050.947849][ T4321] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1050.960128][ T4321] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1050.980594][ T4321] em28xx 1-1:0.89: No AC97 audio processor [ 1051.014831][ T4321] usb 1-1: Decoder not found [ 1051.026228][ T4321] em28xx 1-1:0.89: failed to create media graph [ 1051.047117][ T4321] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1051.154792][T18720] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3431'. [ 1051.681867][ T4321] em28xx 1-1:0.89: Registering snapshot button... [ 1052.105940][ T4321] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input62 [ 1052.263309][ T4319] usb 4-1: USB disconnect, device number 58 [ 1052.268385][ T4321] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1052.342893][ T2185] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1052.344965][ T4263] em28xx 1-1:0.89: Closing input extension [ 1052.394479][ T4263] em28xx 1-1:0.89: Deregistering snapshot button [ 1052.554631][ T2185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.621934][ T2185] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1052.651961][ T4263] em28xx 1-1:0.89: Freeing device [ 1052.800028][ T2185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.837726][ T2185] usb 5-1: config 0 descriptor?? [ 1053.072083][ T2185] usbhid 5-1:0.0: can't add hid device: -71 [ 1053.093247][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3438'. [ 1053.118535][ T2185] usbhid: probe of 5-1:0.0 failed with error -71 [ 1053.297374][ T2185] usb 5-1: USB disconnect, device number 49 [ 1053.824700][ T2185] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1053.943276][T18760] netlink: 'syz.3.3439': attribute type 4 has an invalid length. [ 1054.002268][T18761] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1054.113062][ T2185] usb 5-1: Using ep0 maxpacket: 32 [ 1054.124139][ T2185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.135425][ T2185] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1054.144670][ T2185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.195460][ T2185] usb 5-1: config 0 descriptor?? [ 1054.244335][ T2185] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1054.277547][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.284477][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.339538][ T2185] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1054.762497][ T4263] usb 5-1: USB disconnect, device number 50 [ 1054.822345][ T4263] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1055.488658][T18784] binder: 18783:18784 ioctl c0306201 200000001440 returned -14 [ 1055.783130][ T4263] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1055.972904][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 1057.193110][ T4263] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1057.384053][ T4263] usb 5-1: config 0 has no interface number 0 [ 1057.390200][ T4263] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1057.415915][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1057.429437][T18793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1057.540647][ T4263] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1057.613776][ T4263] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1057.973716][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.981760][ T4263] usb 5-1: Product: syz [ 1058.045541][ T4263] usb 5-1: Manufacturer: syz [ 1058.077651][ T4263] usb 5-1: SerialNumber: syz [ 1058.115960][ T4263] usb 5-1: config 0 descriptor?? [ 1058.147428][ T4263] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1058.190060][ T4263] em28xx 5-1:0.89: Video interface 89 found: [ 1058.499209][T18827] netlink: 'syz.0.3452': attribute type 4 has an invalid length. [ 1058.547152][T18827] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1059.357691][ T4263] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1060.181149][ T4263] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1060.189827][ T4263] em28xx 5-1:0.89: board has no eeprom [ 1060.272902][ T4263] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1060.292881][ T4263] em28xx 5-1:0.89: analog set to bulk mode. [ 1060.334994][ T4263] usb 5-1: USB disconnect, device number 51 [ 1060.352644][ T4263] em28xx 5-1:0.89: Disconnecting em28xx [ 1060.369943][ T4321] em28xx 5-1:0.89: Registering V4L2 extension [ 1060.630759][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3461'. [ 1060.728533][ T4321] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1060.750315][ T4321] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1060.813629][ T4321] em28xx 5-1:0.89: No AC97 audio processor [ 1060.908999][ T4321] usb 5-1: Decoder not found [ 1060.941911][ T4321] em28xx 5-1:0.89: failed to create media graph [ 1061.908719][ T4321] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1062.003446][ T4321] em28xx 5-1:0.89: Registering snapshot button... [ 1062.083135][ T4321] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input63 [ 1062.223652][ T4321] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1062.314044][ T4263] em28xx 5-1:0.89: Closing input extension [ 1062.319906][ T4263] em28xx 5-1:0.89: Deregistering snapshot button [ 1062.410051][T18872] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.442033][T18872] binder: 18869:18872 ioctl 4018620d 200000000040 returned -16 [ 1062.481852][ T4263] em28xx 5-1:0.89: Freeing device [ 1063.051287][T18881] netlink: 'syz.0.3467': attribute type 4 has an invalid length. [ 1063.060370][T18881] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1064.202970][ T2185] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1064.257726][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3474'. [ 1064.313605][ T9252] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1064.410421][ T2185] usb 1-1: config 1 has an invalid interface number: 4 but max is 1 [ 1064.429401][ T2185] usb 1-1: config 1 has an invalid interface number: 245 but max is 1 [ 1064.448080][ T2185] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1064.488761][ T2185] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1064.503046][ T9252] usb 4-1: Using ep0 maxpacket: 32 [ 1064.510200][ T9252] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1064.535218][ T2185] usb 1-1: config 1 has no interface number 0 [ 1064.541525][ T9252] usb 4-1: config 0 has no interface number 0 [ 1064.556602][ T2185] usb 1-1: config 1 has no interface number 1 [ 1064.563236][ T9252] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1064.586258][ T2185] usb 1-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1064.597495][ T9252] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1064.605403][ T2185] usb 1-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1064.616177][ T2185] usb 1-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1064.634932][ T9252] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1064.645449][ T9252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.655628][ T2185] usb 1-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1064.672127][ T9252] usb 4-1: Product: syz [ 1064.676666][ T9252] usb 4-1: Manufacturer: syz [ 1064.681296][ T9252] usb 4-1: SerialNumber: syz [ 1064.692133][ T2185] usb 1-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1064.730732][ T9252] usb 4-1: config 0 descriptor?? [ 1064.756779][ T2185] usb 1-1: config 1 interface 4 has no altsetting 0 [ 1064.772225][ T9252] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1064.796788][ T2185] usb 1-1: config 1 interface 245 has no altsetting 0 [ 1064.812942][ T9252] em28xx 4-1:0.89: Video interface 89 found: [ 1064.830892][ T2185] usb 1-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1064.859013][ T2185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.884021][ T2185] usb 1-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1064.981997][ T2185] usb 1-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1065.083047][ T2185] usb 1-1: SerialNumber: Ѕ [ 1065.317504][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1065.363172][ T2185] usb 1-1: USB disconnect, device number 54 [ 1065.371637][ T9252] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1065.695581][T18942] device wlan1 entered promiscuous mode [ 1066.258357][ T9252] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1066.301816][ T9252] em28xx 4-1:0.89: board has no eeprom [ 1066.463077][ T9252] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1066.483649][ T9252] em28xx 4-1:0.89: analog set to bulk mode. [ 1067.233076][ T9252] usb 4-1: USB disconnect, device number 59 [ 1067.280139][ T9252] em28xx 4-1:0.89: Disconnecting em28xx [ 1067.335313][ T954] em28xx 4-1:0.89: Registering V4L2 extension [ 1067.482940][ T2185] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1067.543077][ T954] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1067.559563][ T954] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1067.576677][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'. [ 1067.588822][ T954] em28xx 4-1:0.89: No AC97 audio processor [ 1067.626059][ T954] usb 4-1: Decoder not found [ 1067.659706][ T954] em28xx 4-1:0.89: failed to create media graph [ 1067.684015][ T2185] usb 1-1: Using ep0 maxpacket: 32 [ 1067.690726][ T2185] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1067.714853][ T954] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1067.745864][ T2185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.760063][ T954] em28xx 4-1:0.89: Registering snapshot button... [ 1067.793915][ T954] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input64 [ 1067.810884][ T2185] usb 1-1: config 0 descriptor?? [ 1067.834432][ T2185] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1067.876684][ T954] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1067.899508][ T9252] em28xx 4-1:0.89: Closing input extension [ 1067.905724][ T9252] em28xx 4-1:0.89: Deregistering snapshot button [ 1067.945469][ T9252] em28xx 4-1:0.89: Freeing device [ 1068.144097][T18972] vivid-006: disconnect [ 1068.162537][T18970] vivid-006: reconnect [ 1069.175363][ T4321] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1069.324469][ T9252] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1069.385746][ T4321] usb 8-1: config 1 has an invalid interface number: 4 but max is 1 [ 1069.400660][ T4321] usb 8-1: config 1 has an invalid interface number: 245 but max is 1 [ 1069.432188][ T4321] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1069.448930][ T2185] gspca_sunplus: reg_w_riv err -71 [ 1069.459438][ T2185] sunplus: probe of 1-1:0.0 failed with error -71 [ 1069.466379][ T4321] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1069.515460][ T2185] usb 1-1: USB disconnect, device number 55 [ 1069.517206][ T4321] usb 8-1: config 1 has no interface number 0 [ 1069.523097][ T9252] usb 5-1: Using ep0 maxpacket: 32 [ 1069.547728][ T9252] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1069.558515][ T4321] usb 8-1: config 1 has no interface number 1 [ 1069.592134][ T4321] usb 8-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1069.613653][ T9252] usb 5-1: config 0 has no interface number 0 [ 1069.639042][ T4321] usb 8-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1069.651607][ T9252] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1069.677469][ T4321] usb 8-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1069.695609][ T9252] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1069.712652][ T4321] usb 8-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1069.743708][ T9252] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1069.755001][ T4321] usb 8-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1069.787870][ T4321] usb 8-1: config 1 interface 4 has no altsetting 0 [ 1069.797268][ T4321] usb 8-1: config 1 interface 245 has no altsetting 0 [ 1069.806254][ T9252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.810345][ T4321] usb 8-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1069.834025][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.842328][ T4321] usb 8-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1069.880681][ T4321] usb 8-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1069.922574][ T9252] usb 5-1: Product: syz [ 1069.948707][ T9252] usb 5-1: Manufacturer: syz [ 1069.967937][ T9252] usb 5-1: SerialNumber: syz [ 1070.027656][ T4321] usb 8-1: SerialNumber: Ѕ [ 1070.033487][ T9252] usb 5-1: config 0 descriptor?? [ 1070.057380][ T9252] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1070.079094][ T9252] em28xx 5-1:0.89: Video interface 89 found: [ 1070.384245][ T4321] usb 8-1: USB disconnect, device number 17 [ 1070.413156][ T6193] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1070.613062][ T6193] usb 1-1: Using ep0 maxpacket: 32 [ 1070.630593][ T6193] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1070.657027][ T6193] usb 1-1: config 0 has no interface number 0 [ 1070.664626][ T9252] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1070.680452][ T6193] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1070.694055][ T6193] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1070.712609][ T6193] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1070.737186][ T6193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.747648][ T6193] usb 1-1: Product: syz [ 1070.754393][ T6193] usb 1-1: Manufacturer: syz [ 1070.760861][ T6193] usb 1-1: SerialNumber: syz [ 1070.781127][ T6193] usb 1-1: config 0 descriptor?? [ 1070.803812][ T6193] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1070.815728][ T6193] em28xx 1-1:0.89: Video interface 89 found: [ 1071.565913][ T9252] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1071.584151][ T6193] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1071.604235][ T9252] em28xx 5-1:0.89: board has no eeprom [ 1071.693118][ T9252] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1071.723027][ T9252] em28xx 5-1:0.89: analog set to bulk mode. [ 1071.751304][T18958] em28xx 5-1:0.89: Registering V4L2 extension [ 1071.795500][ T9252] usb 5-1: USB disconnect, device number 52 [ 1071.842758][ T9252] em28xx 5-1:0.89: Disconnecting em28xx [ 1071.851910][T18958] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1071.877498][T18958] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1071.898970][T19045] binder: 19044:19045 ioctl 4018620d 0 returned -22 [ 1071.924601][T18958] em28xx 5-1:0.89: No AC97 audio processor [ 1072.020384][T18958] usb 5-1: Decoder not found [ 1072.060045][T18958] em28xx 5-1:0.89: failed to create media graph [ 1072.161155][T18958] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1072.209238][ T6193] em28xx 1-1:0.89: board has no eeprom [ 1072.302625][T18958] em28xx 5-1:0.89: Registering snapshot button... [ 1072.331322][T18958] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input65 [ 1072.405434][T18958] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1072.483008][ T6193] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1072.501224][ T6193] em28xx 1-1:0.89: analog set to bulk mode. [ 1072.520767][ T9252] em28xx 5-1:0.89: Closing input extension [ 1072.526893][ T9252] em28xx 5-1:0.89: Deregistering snapshot button [ 1072.583923][ T6193] usb 1-1: USB disconnect, device number 56 [ 1072.611503][ T6193] em28xx 1-1:0.89: Disconnecting em28xx [ 1072.670746][ T2185] em28xx 1-1:0.89: Registering V4L2 extension [ 1072.680676][ T9252] em28xx 5-1:0.89: Freeing device [ 1072.946274][ T2185] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1072.972369][ T2185] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1073.000064][ T2185] em28xx 1-1:0.89: No AC97 audio processor [ 1073.923585][ T2185] usb 1-1: Decoder not found [ 1073.928235][ T2185] em28xx 1-1:0.89: failed to create media graph [ 1074.035547][ T2185] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1074.082344][ T2185] em28xx 1-1:0.89: Registering snapshot button... [ 1074.224188][ T2185] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input66 [ 1074.299555][ T2185] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1074.361116][ T6193] em28xx 1-1:0.89: Closing input extension [ 1074.367240][ T6193] em28xx 1-1:0.89: Deregistering snapshot button [ 1074.523610][ T6193] em28xx 1-1:0.89: Freeing device [ 1075.117040][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3521'. [ 1075.653701][T19107] binder: 19104:19107 ioctl 4018620d 0 returned -22 [ 1076.133960][ T4320] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1076.166599][ T4321] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1076.284306][T19131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1076.294079][T19131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1076.304954][T19131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1076.342987][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 1076.349792][ T4320] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.387731][ T4320] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1076.403041][ T4321] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 1076.418654][ T4321] usb 1-1: config 1 has no interface number 0 [ 1076.431719][ T4321] usb 1-1: config 1 interface 242 has no altsetting 0 [ 1076.438958][ T4320] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1076.445788][ T4320] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1076.455710][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.465667][ T4321] usb 1-1: New USB device found, idVendor=345f, idProduct=3020, bcdDevice=d3.d8 [ 1076.486064][ T4320] usb 4-1: config 0 descriptor?? [ 1076.495607][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.522285][ T4321] usb 1-1: Product: syz [ 1076.532241][ T4321] usb 1-1: Manufacturer: syz [ 1076.544069][ T4321] usb 1-1: SerialNumber: syz [ 1076.781427][ T4321] pl2303 1-1:1.242: required endpoints missing [ 1076.823536][ T4321] usb 1-1: USB disconnect, device number 57 [ 1076.942154][ T4320] corsair 0003:1B1C:1B3E.0013: unknown main item tag 0x0 [ 1077.737561][ T4320] corsair 0003:1B1C:1B3E.0013: hidraw0: USB HID vff.ff Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 1077.816540][ T4320] usb 4-1: USB disconnect, device number 60 [ 1078.196909][T19150] fido_id[19150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1078.218071][ T4321] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1078.309248][T19168] random: crng reseeded on system resumption [ 1078.435580][ T4321] usb 5-1: config 1 has an invalid interface number: 4 but max is 1 [ 1078.459847][ T4321] usb 5-1: config 1 has an invalid interface number: 245 but max is 1 [ 1078.468309][ T4320] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1078.500122][ T4321] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1078.537437][ T4321] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1078.572884][ T4321] usb 5-1: config 1 has no interface number 0 [ 1078.584977][ T4321] usb 5-1: config 1 has no interface number 1 [ 1078.601355][ T4321] usb 5-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1078.634128][ T4321] usb 5-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1078.662890][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 1078.678664][ T4320] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1078.688071][ T4320] usb 4-1: config 0 has no interface number 0 [ 1078.694678][ T4321] usb 5-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1078.705631][ T4320] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1078.716883][ T4321] usb 5-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1078.731394][ T4320] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1078.739452][ T4321] usb 5-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1078.753373][ T4321] usb 5-1: config 1 interface 4 has no altsetting 0 [ 1078.760328][ T4321] usb 5-1: config 1 interface 245 has no altsetting 0 [ 1078.771110][ T4320] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1078.780875][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.803352][ T4321] usb 5-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1078.813024][ T4320] usb 4-1: Product: syz [ 1078.818398][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.826637][ T4320] usb 4-1: Manufacturer: syz [ 1078.831387][ T4320] usb 4-1: SerialNumber: syz [ 1078.836492][ T4321] usb 5-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1078.861982][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.884890][ T4320] usb 4-1: config 0 descriptor?? [ 1078.906829][ T4320] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1078.923435][ T4320] em28xx 4-1:0.89: Video interface 89 found: [ 1078.937344][ T4321] usb 5-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1078.972195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1078.980232][ T4321] usb 5-1: SerialNumber: Ѕ [ 1079.257803][ T4321] usb 5-1: USB disconnect, device number 53 [ 1079.390102][T19191] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 1079.412362][T19191] pit: kvm: requested 91352 ns i8254 timer period limited to 200000 ns [ 1079.445351][T19191] pit: kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 1079.463679][T19200] binder: 19199:19200 ioctl c0306201 200000001440 returned -11 [ 1079.471869][T19191] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 1079.494203][T19191] pit: kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 1079.510361][T19191] pit: kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 1079.523647][ T4320] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1079.536172][T19191] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1079.548840][T19191] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1079.558612][T19191] pit: kvm: requested 189409 ns i8254 timer period limited to 200000 ns [ 1079.568471][T19191] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 1079.770151][ T4291] Bluetooth: hci1: ACL packet for unknown connection handle 3840 [ 1080.192917][ T6193] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1080.388870][ T4320] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1080.952913][ T4320] em28xx 4-1:0.89: board has no eeprom [ 1081.053064][ T4320] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1081.060974][ T4320] em28xx 4-1:0.89: analog set to bulk mode. [ 1081.092551][ T4263] em28xx 4-1:0.89: Registering V4L2 extension [ 1081.117076][ T6193] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1081.142957][ T6193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.149002][ T4320] usb 4-1: USB disconnect, device number 61 [ 1081.183438][ T4320] em28xx 4-1:0.89: Disconnecting em28xx [ 1081.236636][ T6193] usb 8-1: Product: syz [ 1081.278099][ T4263] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1081.289375][ T4263] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1081.314487][ T4263] em28xx 4-1:0.89: No AC97 audio processor [ 1081.318963][ T6193] usb 8-1: Manufacturer: syz [ 1081.327269][ T4263] usb 4-1: Decoder not found [ 1081.342926][ T6193] usb 8-1: SerialNumber: syz [ 1081.347690][ T4263] em28xx 4-1:0.89: failed to create media graph [ 1081.350240][T19235] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.374110][ T6193] usb 8-1: config 0 descriptor?? [ 1081.380990][ T4263] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1081.419541][ T4263] em28xx 4-1:0.89: Registering snapshot button... [ 1081.434594][T19235] binder: 19234:19235 ioctl 4018620d 200000000040 returned -16 [ 1081.493018][ T4263] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input67 [ 1081.576794][ T4263] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1081.592344][ T6193] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1081.627701][ T4320] em28xx 4-1:0.89: Closing input extension [ 1081.641133][ T4320] em28xx 4-1:0.89: Deregistering snapshot button [ 1081.725564][ T4320] em28xx 4-1:0.89: Freeing device [ 1082.033053][ T2185] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1082.113129][ T4320] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1082.226138][ T2185] usb 5-1: config 1 has an invalid interface number: 4 but max is 1 [ 1082.239681][ T2185] usb 5-1: config 1 has an invalid interface number: 245 but max is 1 [ 1082.248703][ T2185] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1082.262839][ T2185] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1082.271894][ T2185] usb 5-1: config 1 has no interface number 0 [ 1082.285202][ T2185] usb 5-1: config 1 has no interface number 1 [ 1082.291518][ T2185] usb 5-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1082.317722][ T2185] usb 5-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1082.328557][ T2185] usb 5-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1082.334782][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.340469][ T2185] usb 5-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1082.374951][ T2185] usb 5-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1082.385578][ T4320] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1082.397905][ T2185] usb 5-1: config 1 interface 4 has no altsetting 0 [ 1082.423075][ T2185] usb 5-1: config 1 interface 245 has no altsetting 0 [ 1082.429335][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.441170][ T2185] usb 5-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1082.452038][ T4320] usb 4-1: config 0 descriptor?? [ 1082.461164][ T2185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.479066][ T4320] pwc: Askey VC010 type 2 USB webcam detected. [ 1082.481484][ T2185] usb 5-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1082.525492][ T2185] usb 5-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1082.586236][T18958] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1082.637227][ T2185] usb 5-1: SerialNumber: Ѕ [ 1082.678437][ T4320] pwc: send_video_command error -71 [ 1082.695553][ T4320] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1082.714179][ T4320] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 1082.773037][ T4320] usb 4-1: USB disconnect, device number 62 [ 1082.802935][T18958] usb 1-1: Using ep0 maxpacket: 32 [ 1082.811731][T18958] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1082.832195][T18958] usb 1-1: config 0 has no interface number 0 [ 1082.849783][T18958] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1082.880596][ T2185] usb 5-1: USB disconnect, device number 54 [ 1082.890655][T18958] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1082.944939][T18958] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1082.955161][T18958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.964579][T18958] usb 1-1: Product: syz [ 1082.969085][T18958] usb 1-1: Manufacturer: syz [ 1082.974519][T18958] usb 1-1: SerialNumber: syz [ 1082.990705][T18958] usb 1-1: config 0 descriptor?? [ 1083.017555][ T6193] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1083.027965][ T6193] usb 8-1: USB disconnect, device number 18 [ 1083.048818][T18958] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1083.068625][T18958] em28xx 1-1:0.89: Video interface 89 found: [ 1083.252991][ T4320] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1083.455073][ T4320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.507600][ T4320] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1083.554247][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.609829][ T4320] usb 4-1: config 0 descriptor?? [ 1083.646351][ T4320] pwc: Askey VC010 type 2 USB webcam detected. [ 1083.667513][T18958] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1084.052604][ T4320] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1084.612783][T18958] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1084.621053][T18958] em28xx 1-1:0.89: board has no eeprom [ 1084.654429][ T4320] pwc: recv_control_msg error -32 req 02 val 2700 [ 1084.664554][ T4320] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1084.693182][T18958] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1084.701594][ T4320] pwc: recv_control_msg error -32 req 04 val 1000 [ 1084.703743][T18958] em28xx 1-1:0.89: analog set to bulk mode. [ 1084.824292][ T4320] pwc: recv_control_msg error -32 req 04 val 1300 [ 1084.914512][ T4320] pwc: recv_control_msg error -32 req 04 val 1400 [ 1084.927650][ T4320] pwc: recv_control_msg error -32 req 02 val 2000 [ 1085.035349][ T4320] pwc: recv_control_msg error -32 req 02 val 2100 [ 1085.087898][ T4320] pwc: recv_control_msg error -32 req 04 val 1500 [ 1085.253348][T18958] usb 1-1: USB disconnect, device number 58 [ 1085.263655][T18958] em28xx 1-1:0.89: Disconnecting em28xx [ 1085.270997][ T6193] em28xx 1-1:0.89: Registering V4L2 extension [ 1085.384251][ T4320] pwc: recv_control_msg error -71 req 02 val 2400 [ 1085.392304][ T4320] pwc: recv_control_msg error -71 req 02 val 2600 [ 1085.449358][ T4320] pwc: recv_control_msg error -71 req 02 val 2900 [ 1085.479845][ T4320] pwc: recv_control_msg error -71 req 02 val 2800 [ 1085.508448][ T4320] pwc: recv_control_msg error -71 req 04 val 1100 [ 1085.557530][ T4320] pwc: recv_control_msg error -71 req 04 val 1200 [ 1085.586408][ T4320] pwc: Registered as video103. [ 1085.611501][ T6193] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1085.619826][ T4320] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input68 [ 1085.625843][ T6193] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1085.683809][ T6193] em28xx 1-1:0.89: No AC97 audio processor [ 1085.707928][ T4320] usb 4-1: USB disconnect, device number 63 [ 1085.729964][ T6193] videodev: could not get a free minor [ 1085.755915][ T6193] em28xx 1-1:0.89: unable to register video device (error=-23). [ 1085.878484][ T6193] em28xx 1-1:0.89: Registering snapshot button... [ 1085.888420][ T6193] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input69 [ 1085.966229][ T6193] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1086.028865][T18958] em28xx 1-1:0.89: Closing input extension [ 1086.050053][T18958] em28xx 1-1:0.89: Deregistering snapshot button [ 1086.185033][T18958] em28xx 1-1:0.89: Freeing device [ 1086.693306][ T6193] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1086.887144][ T6193] usb 4-1: config 1 has an invalid interface number: 4 but max is 1 [ 1086.905336][ T6193] usb 4-1: config 1 has an invalid interface number: 245 but max is 1 [ 1086.942915][ T4320] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1086.957781][ T6193] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1087.134430][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 1087.163594][ T4320] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1087.172331][ T4320] usb 5-1: config 0 has no interface number 0 [ 1087.182544][ T4320] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1087.194363][ T4320] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1087.214748][ T4320] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1087.225458][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.235979][ T4320] usb 5-1: Product: syz [ 1087.240227][ T4320] usb 5-1: Manufacturer: syz [ 1087.249016][ T4320] usb 5-1: SerialNumber: syz [ 1087.281662][ T4320] usb 5-1: config 0 descriptor?? [ 1087.310542][ T4320] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1087.320528][ T4320] em28xx 5-1:0.89: Video interface 89 found: [ 1087.408138][ T6193] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1087.599077][ T6193] usb 4-1: config 1 has no interface number 0 [ 1087.627695][T19365] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3594'. [ 1087.640841][ T6193] usb 4-1: config 1 has no interface number 1 [ 1087.663528][ T6193] usb 4-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1087.709002][ T6193] usb 4-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1087.740497][ T6193] usb 4-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1087.764782][ T6193] usb 4-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1087.793697][ T6193] usb 4-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1087.823538][ T6193] usb 4-1: config 1 interface 4 has no altsetting 0 [ 1087.830191][ T6193] usb 4-1: config 1 interface 245 has no altsetting 0 [ 1087.877246][ T6193] usb 4-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1087.900713][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.952369][ T6193] usb 4-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1087.987837][ T4320] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1088.028011][ T6193] usb 4-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1088.063270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.222985][T19374] netlink: 'syz.7.3597': attribute type 4 has an invalid length. [ 1088.232023][T19374] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1088.333032][ T6193] usb 4-1: SerialNumber: Ѕ [ 1088.826133][ T4320] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1088.926913][ T6193] usb 4-1: USB disconnect, device number 64 [ 1089.343453][ T4320] em28xx 5-1:0.89: board has no eeprom [ 1089.412897][ T4320] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1089.420403][ T4320] em28xx 5-1:0.89: analog set to bulk mode. [ 1089.427272][ T4263] em28xx 5-1:0.89: Registering V4L2 extension [ 1089.436283][ T4320] usb 5-1: USB disconnect, device number 55 [ 1089.443111][ T4320] em28xx 5-1:0.89: Disconnecting em28xx [ 1089.504287][ T4263] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1089.511585][ T4263] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1089.537820][ T4263] em28xx 5-1:0.89: No AC97 audio processor [ 1089.615305][ T4263] usb 5-1: Decoder not found [ 1089.633864][ T4263] em28xx 5-1:0.89: failed to create media graph [ 1089.653044][ T4263] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1089.703849][ T4263] em28xx 5-1:0.89: Registering snapshot button... [ 1089.733304][ T4263] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input70 [ 1089.734231][T19400] binder: 19397:19400 ioctl c0306201 200000001440 returned -11 [ 1089.793894][ T4263] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1089.835338][ T4320] em28xx 5-1:0.89: Closing input extension [ 1089.841221][ T4320] em28xx 5-1:0.89: Deregistering snapshot button [ 1089.924976][ T4320] em28xx 5-1:0.89: Freeing device [ 1090.427378][T19418] netlink: 'syz.4.3610': attribute type 4 has an invalid length. [ 1090.459811][T19418] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1090.943118][ T4320] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1091.112898][T18958] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1091.135676][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 1091.149273][ T4320] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1091.188573][ T4320] usb 1-1: config 0 has no interface number 0 [ 1091.195010][ T4320] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1091.210052][ T4320] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1091.219563][ T4320] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1091.231636][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.245324][ T4320] usb 1-1: Product: syz [ 1091.249619][ T4320] usb 1-1: Manufacturer: syz [ 1091.254891][ T4320] usb 1-1: SerialNumber: syz [ 1091.290203][ T4320] usb 1-1: config 0 descriptor?? [ 1091.316423][T18958] usb 5-1: config 1 has an invalid interface number: 4 but max is 1 [ 1091.337880][T18958] usb 5-1: config 1 has an invalid interface number: 245 but max is 1 [ 1091.353639][ T4320] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1091.367209][ T4320] em28xx 1-1:0.89: Video interface 89 found: [ 1091.383243][T18958] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1091.392017][T18958] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1091.432912][T18958] usb 5-1: config 1 has no interface number 0 [ 1091.439175][T18958] usb 5-1: config 1 has no interface number 1 [ 1091.466315][T18958] usb 5-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1091.486851][T18958] usb 5-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1091.497211][T18958] usb 5-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1091.523128][T18958] usb 5-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1091.539912][T18958] usb 5-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1091.566447][T18958] usb 5-1: config 1 interface 4 has no altsetting 0 [ 1091.590918][T18958] usb 5-1: config 1 interface 245 has no altsetting 0 [ 1091.618100][T18958] usb 5-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1091.637505][T18958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.650998][T18958] usb 5-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1091.676386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1091.696746][T18958] usb 5-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1091.731515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1091.743556][T18958] usb 5-1: SerialNumber: Ѕ [ 1091.986061][T19469] netlink: 'syz.3.3622': attribute type 4 has an invalid length. [ 1091.995042][T19469] securityfs: Unknown parameter 'm8{>bvZ000&' [ 1092.032347][T18958] usb 5-1: USB disconnect, device number 56 [ 1092.189021][ T4320] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1092.840062][ T4320] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1092.859890][ T4320] em28xx 1-1:0.89: board has no eeprom [ 1092.952905][ T4320] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1092.960169][ T4320] em28xx 1-1:0.89: analog set to bulk mode. [ 1092.987369][ T4321] em28xx 1-1:0.89: Registering V4L2 extension [ 1092.996469][ T4290] Bluetooth: hci2: command 0x1003 tx timeout [ 1092.996619][ T4291] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1093.054530][ T4320] usb 1-1: USB disconnect, device number 59 [ 1093.062725][ T4320] em28xx 1-1:0.89: Disconnecting em28xx [ 1093.109678][ T6193] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1093.421652][ T6193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.582866][ T6193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1093.626297][ T6193] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1093.695410][ T6193] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1093.733924][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.739243][ T4321] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1093.741978][ T6193] usb 4-1: Product: syz [ 1093.778578][ T4321] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1093.801692][ T6193] usb 4-1: Manufacturer: syz [ 1093.806210][ T4321] em28xx 1-1:0.89: No AC97 audio processor [ 1093.816806][ T4321] usb 1-1: Decoder not found [ 1093.821446][ T4321] em28xx 1-1:0.89: failed to create media graph [ 1093.823986][ T6193] usb 4-1: SerialNumber: syz [ 1094.065529][ T6193] usb 4-1: config 0 descriptor?? [ 1094.082642][ T6193] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 1094.203610][ T4321] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1094.211599][ T4321] em28xx 1-1:0.89: Registering snapshot button... [ 1094.220770][ T4321] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input71 [ 1094.233649][ T4321] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1094.242929][ T4320] em28xx 1-1:0.89: Closing input extension [ 1094.243936][ T6193] usb 4-1: No valid video chain found. [ 1094.248764][ T4320] em28xx 1-1:0.89: Deregistering snapshot button [ 1094.732133][ T4320] em28xx 1-1:0.89: Freeing device [ 1094.815655][ T6193] usb 4-1: USB disconnect, device number 65 [ 1095.382867][ T6193] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1095.542962][ T4320] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1095.559885][T19547] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3647'. [ 1095.613788][ T6193] usb 5-1: config 1 has an invalid interface number: 4 but max is 1 [ 1095.672922][ T6193] usb 5-1: config 1 has an invalid interface number: 245 but max is 1 [ 1095.731945][ T6193] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1095.819021][ T6193] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1095.939697][ T6193] usb 5-1: config 1 has no interface number 0 [ 1096.018343][ T6193] usb 5-1: config 1 has no interface number 1 [ 1096.095148][ T6193] usb 5-1: config 1 interface 245 altsetting 4 has an invalid endpoint with address 0x21, skipping [ 1096.400061][ T6193] usb 5-1: config 1 interface 245 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1096.403104][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 1096.447879][ T4320] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1096.467073][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.504887][ T4320] usb 4-1: config 0 descriptor?? [ 1096.527055][ T4320] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1096.564446][ T6193] usb 5-1: config 1 interface 245 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1096.813070][ T6193] usb 5-1: config 1 interface 245 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1096.993671][ T6193] usb 5-1: config 1 interface 245 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1097.031918][ T6193] usb 5-1: config 1 interface 4 has no altsetting 0 [ 1097.042943][ T6193] usb 5-1: config 1 interface 245 has no altsetting 0 [ 1097.074893][ T6193] usb 5-1: New USB device found, idVendor=05c6, idProduct=9070, bcdDevice=d7.41 [ 1097.097154][ T6193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.110593][ T6193] usb 5-1: Product: ┎屘㧾ӣそ⯥䀮箊▌夒딃ꍸ绾肝膒⑭碦ખꈷ⳴즭듀堘岲ꔴ촽狤挀틔䣱ⓘ㟡藣䊫䊂⓮ꮹ嬙쏺ꠉ퉌㺙碗섭成䆗ꗇ掐䢋鵻䏯蹤퉵짏︺蓔쨘⶿쵪ꪃ鯂뺑礅⌖麧䁻枕㏻ᷠڴ쵭忻裂燎 [ 1097.136227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1097.257475][ T6193] usb 5-1: Manufacturer: ֫䄺䜪ᘰ鞙턻㬢쀔棧彇屭﵎箧进痆굝⁆幏闄䔧唆㰽뻘⧁곺뼾㼨⚙Ꞓ聠뺩שּׂ헝垯眬ꢺ࿗$⧓쟼ਤኳ፠㺆ᛨ䘾鼍ᧇ콧텟⢣讄嶎罘Ġ֯➠먢䆩錕飪⿳綏쩃嶯ᐎ嬐㱘鄦類ꊌ믊峥䏳ࡣ䫴楙軋肳빈䷽꩸鴗쬫ᖅ〦ʂৢየԇ뜭࠲ꮻ멖锗혾쉛垹ቨ솏䨝໯䳅 [ 1097.292304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1097.351727][ T6193] usb 5-1: SerialNumber: Ѕ [ 1097.620558][ T6193] usb 5-1: USB disconnect, device number 57 [ 1098.148494][ T4320] gspca_sunplus: reg_w_riv err -71 [ 1098.155503][ T4320] sunplus: probe of 4-1:0.0 failed with error -71 [ 1098.185639][ T4320] usb 4-1: USB disconnect, device number 66 [ 1098.262979][ T6193] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1098.463009][ T6193] usb 1-1: Using ep0 maxpacket: 32 [ 1098.475600][ T6193] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1098.507781][T19610] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3662'. [ 1098.568770][ T6193] usb 1-1: config 0 has no interface number 0 [ 1098.611904][ T6193] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1098.655157][ T6193] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1098.737912][ T6193] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1099.207082][ T6193] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1099.264124][ T6193] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1099.296084][ T6193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.328257][ T6193] usb 1-1: Product: syz [ 1099.337441][ T6193] usb 1-1: Manufacturer: syz [ 1099.354517][ T6193] usb 1-1: SerialNumber: syz [ 1099.375090][ T6193] usb 1-1: config 0 descriptor?? [ 1099.381122][T19590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1100.254641][ T6193] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 1100.435051][ T6193] usb 1-1: USB disconnect, device number 60 [ 1100.603194][ T6193] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1100.913223][ T4321] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1101.112890][ T4321] usb 8-1: Using ep0 maxpacket: 32 [ 1101.201671][T19667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1101.838315][ T4321] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1101.862877][ T4321] usb 8-1: config 0 has no interface number 0 [ 1101.869035][ T4321] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1101.888258][ T4321] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1101.906534][ T4321] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1101.915728][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.923842][ T4321] usb 8-1: Product: syz [ 1101.928025][ T4321] usb 8-1: Manufacturer: syz [ 1101.932637][ T4321] usb 8-1: SerialNumber: syz [ 1101.949393][ T4321] usb 8-1: config 0 descriptor?? [ 1101.981053][ T4321] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1102.102885][ T4321] em28xx 8-1:0.89: Video interface 89 found: [ 1102.335753][T19680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1102.570557][ T4321] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1103.482752][ T4321] em28xx 8-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1103.613241][ T9252] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1104.170322][ T4321] em28xx 8-1:0.89: board has no eeprom [ 1104.242887][ T4321] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1104.250764][ T4321] em28xx 8-1:0.89: analog set to bulk mode. [ 1104.263473][ T4320] em28xx 8-1:0.89: Registering V4L2 extension [ 1104.263571][ T9252] usb 5-1: Using ep0 maxpacket: 32 [ 1104.281088][ T4321] usb 8-1: USB disconnect, device number 19 [ 1104.300278][ T4321] em28xx 8-1:0.89: Disconnecting em28xx [ 1104.340830][ T9252] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1104.373315][ T9252] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1104.380937][ T9252] usb 5-1: can't read configurations, error -71 [ 1104.459456][ T4320] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1104.469515][ T4320] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1104.531623][ T4320] em28xx 8-1:0.89: No AC97 audio processor [ 1104.558287][ T4320] usb 8-1: Decoder not found [ 1104.572986][ T4320] em28xx 8-1:0.89: failed to create media graph [ 1104.599691][ T4320] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1104.640248][ T4320] em28xx 8-1:0.89: Registering snapshot button... [ 1104.663657][ T4320] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input72 [ 1104.723465][ T4320] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1104.743232][ T4321] em28xx 8-1:0.89: Closing input extension [ 1104.749112][ T4321] em28xx 8-1:0.89: Deregistering snapshot button [ 1104.774494][ T4321] em28xx 8-1:0.89: Freeing device [ 1105.236432][T19725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3692'. [ 1105.372879][ T4321] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1105.552879][ T4321] usb 8-1: Using ep0 maxpacket: 32 [ 1105.887638][ T4321] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1105.896108][ T4321] usb 8-1: config 0 has no interface number 0 [ 1105.902234][ T4321] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1105.912436][ T4321] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1105.921534][ T4321] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1105.931012][ T4321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.939267][ T4321] usb 8-1: Product: syz [ 1105.943708][ T4321] usb 8-1: Manufacturer: syz [ 1105.948331][ T4321] usb 8-1: SerialNumber: syz [ 1105.955120][ T4321] usb 8-1: config 0 descriptor?? [ 1105.963878][ T4321] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1105.975213][ T4321] em28xx 8-1:0.89: Video interface 89 found: [ 1106.616084][ T4321] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1107.488205][ T4321] em28xx 8-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1107.511289][ T4321] em28xx 8-1:0.89: board has no eeprom [ 1107.642887][ T4321] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1107.658503][ T4321] em28xx 8-1:0.89: analog set to bulk mode. [ 1107.713023][ T4321] usb 8-1: USB disconnect, device number 20 [ 1107.808152][ T4321] em28xx 8-1:0.89: Disconnecting em28xx [ 1107.880864][ T33] em28xx 8-1:0.89: Registering V4L2 extension [ 1108.522160][T19780] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3708'. [ 1108.824407][ T33] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1108.831440][ T33] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1108.891834][ T33] em28xx 8-1:0.89: No AC97 audio processor [ 1110.397222][ T33] usb 8-1: Decoder not found [ 1110.428205][ T33] em28xx 8-1:0.89: failed to create media graph [ 1110.465863][ T33] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1110.575624][ T33] em28xx 8-1:0.89: Registering snapshot button... [ 1110.586778][ T33] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input73 [ 1110.670447][T19800] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[14499] was attempted by " [ 1110.672266][ T33] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1111.538487][ T4321] em28xx 8-1:0.89: Closing input extension [ 1111.546740][ T4321] em28xx 8-1:0.89: Deregistering snapshot button [ 1111.602261][ T4321] em28xx 8-1:0.89: Freeing device [ 1111.809030][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3717'. [ 1112.113068][ T6193] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1113.033527][ T6193] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1113.084986][ T6193] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.153343][ T6193] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.273040][ T6193] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1113.313369][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.321464][ T6193] usb 4-1: Product: syz [ 1113.342883][ T6193] usb 4-1: Manufacturer: syz [ 1113.347651][ T6193] usb 4-1: SerialNumber: syz [ 1113.642970][ T4321] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1114.178920][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1114.186832][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1114.194432][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1114.201978][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1114.209771][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1114.219625][ T6193] usb 4-1: selecting invalid altsetting 1 [ 1114.226071][ T6193] usb 4-1: unit 3 not found! [ 1114.248808][ T6193] usb 4-1: unit 6 not found! [ 1114.445977][ T6193] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1114.471118][ T6193] usb 4-1: USB disconnect, device number 67 [ 1114.485873][T17095] udevd[17095]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.522972][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 1114.531838][ T4321] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1114.556128][ T4321] usb 1-1: config 0 has no interface number 0 [ 1114.569072][ T4321] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1114.592880][ T4321] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1114.602232][ T4321] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1114.611680][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.619902][ T4321] usb 1-1: Product: syz [ 1114.624607][ T4321] usb 1-1: Manufacturer: syz [ 1114.629351][ T4321] usb 1-1: SerialNumber: syz [ 1114.636157][ T4321] usb 1-1: config 0 descriptor?? [ 1114.647145][ T4321] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1114.657068][ T4321] em28xx 1-1:0.89: Video interface 89 found: [ 1115.253658][ T4321] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1115.716305][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.723418][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.143114][ T4321] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1116.167662][ T4321] em28xx 1-1:0.89: board has no eeprom [ 1116.252875][ T4321] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1116.263754][ T4321] em28xx 1-1:0.89: analog set to bulk mode. [ 1116.373194][ T4263] em28xx 1-1:0.89: Registering V4L2 extension [ 1116.404067][ T4321] usb 1-1: USB disconnect, device number 61 [ 1116.410676][ T4321] em28xx 1-1:0.89: Disconnecting em28xx [ 1117.382160][ T4263] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1117.391335][ T4263] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1117.406173][ T4263] em28xx 1-1:0.89: No AC97 audio processor [ 1117.413122][ T4263] usb 1-1: Decoder not found [ 1117.417805][ T4263] em28xx 1-1:0.89: failed to create media graph [ 1117.426474][ T4263] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1117.444415][ T4263] em28xx 1-1:0.89: Registering snapshot button... [ 1117.451785][ T4263] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input74 [ 1117.561988][ T4263] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1117.733062][T18958] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1117.781812][ T4321] em28xx 1-1:0.89: Closing input extension [ 1117.787936][ T4321] em28xx 1-1:0.89: Deregistering snapshot button [ 1117.874651][ T4321] em28xx 1-1:0.89: Freeing device [ 1117.942897][T18958] usb 5-1: Using ep0 maxpacket: 32 [ 1118.466732][T18958] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1118.481864][T18958] usb 5-1: config 0 has no interface number 0 [ 1118.498700][T18958] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1118.521970][T18958] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1118.546127][T18958] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1118.578650][T18958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.591613][T18958] usb 5-1: Product: syz [ 1118.596010][T18958] usb 5-1: Manufacturer: syz [ 1118.600766][T18958] usb 5-1: SerialNumber: syz [ 1118.623099][T18958] usb 5-1: config 0 descriptor?? [ 1118.632132][T18958] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1118.653434][T19878] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1118.682956][T18958] em28xx 5-1:0.89: Video interface 89 found: [ 1118.693580][T19878] File: /dev/nullb0 PID: 19878 Comm: syz.3.3733 [ 1119.283392][T18958] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1120.290449][T19911] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3738'. [ 1120.779723][T18958] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1120.841848][T18958] em28xx 5-1:0.89: board has no eeprom [ 1120.992999][T18958] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1121.138424][T18958] em28xx 5-1:0.89: analog set to bulk mode. [ 1121.187999][T18958] usb 5-1: USB disconnect, device number 60 [ 1121.255534][T18958] em28xx 5-1:0.89: Disconnecting em28xx [ 1121.322333][ T9252] em28xx 5-1:0.89: Registering V4L2 extension [ 1121.497974][T19929] dlm: no locking on control device [ 1122.054413][ T9252] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1122.103247][ T9252] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1122.170328][ T9252] em28xx 5-1:0.89: No AC97 audio processor [ 1122.261887][ T9252] usb 5-1: Decoder not found [ 1122.288220][ T9252] em28xx 5-1:0.89: failed to create media graph [ 1123.117805][ T9252] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1123.126122][ T9252] em28xx 5-1:0.89: Registering snapshot button... [ 1123.135415][ T9252] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input75 [ 1123.147633][ T9252] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1123.156376][T18958] em28xx 5-1:0.89: Closing input extension [ 1123.162239][T18958] em28xx 5-1:0.89: Deregistering snapshot button [ 1123.277424][T18958] em28xx 5-1:0.89: Freeing device [ 1123.603510][ T6193] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1123.643103][T18958] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1123.797824][ T6193] usb 8-1: Using ep0 maxpacket: 32 [ 1123.815651][ T6193] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1123.842972][T18958] usb 5-1: Using ep0 maxpacket: 16 [ 1123.849932][T18958] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1123.878559][ T6193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.887025][T18958] usb 5-1: config 0 has no interface number 0 [ 1123.918926][T18958] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1123.946548][ T6193] usb 8-1: config 0 descriptor?? [ 1123.970527][T18958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.979446][ T6193] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1124.019425][T18958] usb 5-1: Product: syz [ 1124.062970][T18958] usb 5-1: Manufacturer: syz [ 1124.100835][T18958] usb 5-1: SerialNumber: syz [ 1124.136609][T18958] usb 5-1: config 0 descriptor?? [ 1124.163375][T18958] usb 5-1: can't set config #0, error -71 [ 1124.317229][T18958] usb 5-1: USB disconnect, device number 61 [ 1125.083384][T19955] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1125.101903][T19955] File: /dev/nullb0 PID: 19955 Comm: syz.4.3746 [ 1125.751224][ T6193] gspca_sunplus: reg_w_riv err -71 [ 1126.069091][ T6193] sunplus: probe of 8-1:0.0 failed with error -71 [ 1126.080526][ T6193] usb 8-1: USB disconnect, device number 21 [ 1126.601164][T19981] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3752'. [ 1126.723240][T18958] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1127.696057][ T4291] Bluetooth: hci0: Malformed Event: 0x02 [ 1127.733037][T18958] usb 5-1: Using ep0 maxpacket: 32 [ 1127.740016][T18958] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1127.778842][T18958] usb 5-1: config 0 has no interface number 0 [ 1127.827078][T18958] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1127.919314][T18958] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1128.014340][T18958] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1128.051631][T18958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.072318][T19994] device syzkaller0 entered promiscuous mode [ 1128.085842][T18958] usb 5-1: Product: syz [ 1128.099334][T18958] usb 5-1: Manufacturer: syz [ 1128.130268][T18958] usb 5-1: SerialNumber: syz [ 1128.156505][T18958] usb 5-1: config 0 descriptor?? [ 1128.180621][T18958] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1128.226024][T18958] em28xx 5-1:0.89: Video interface 89 found: [ 1128.803396][T18958] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1129.618239][T18958] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1129.672876][ T9252] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1130.544075][T18958] em28xx 5-1:0.89: board has no eeprom [ 1130.672963][T18958] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1130.683340][T18958] em28xx 5-1:0.89: analog set to bulk mode. [ 1130.726983][ T9252] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1130.765393][T18958] usb 5-1: USB disconnect, device number 62 [ 1130.784397][ T9252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.803948][T18958] em28xx 5-1:0.89: Disconnecting em28xx [ 1130.817398][ T9252] usb 1-1: Product: syz [ 1130.853680][ T9252] usb 1-1: Manufacturer: syz [ 1131.588862][ T9252] usb 1-1: SerialNumber: syz [ 1131.681055][ T6193] em28xx 5-1:0.89: Registering V4L2 extension [ 1131.910859][ T6193] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1131.927742][ T6193] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1131.964563][ T6193] em28xx 5-1:0.89: No AC97 audio processor [ 1132.119933][ T6193] usb 5-1: Decoder not found [ 1132.233616][ T6193] em28xx 5-1:0.89: failed to create media graph [ 1132.300712][ T6193] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1132.321864][T20051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3768'. [ 1132.821618][ T6193] em28xx 5-1:0.89: Registering snapshot button... [ 1132.859550][ T6193] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input76 [ 1132.877552][ T6193] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1132.904406][T18958] em28xx 5-1:0.89: Closing input extension [ 1132.912867][T18958] em28xx 5-1:0.89: Deregistering snapshot button [ 1133.114260][T18958] em28xx 5-1:0.89: Freeing device [ 1133.352183][ T9252] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1133.364376][ T9252] cdc_ncm 1-1:1.0: bind() failure [ 1133.419866][ T9252] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1133.561474][ T9252] cdc_ncm 1-1:1.1: bind() failure [ 1133.622701][ T9252] usb 1-1: USB disconnect, device number 62 [ 1135.323558][ T6193] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1135.568420][ T6193] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1135.641066][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.765246][ T6193] usb 4-1: Product: syz [ 1135.824338][ T6193] usb 4-1: Manufacturer: syz [ 1135.911629][ T6193] usb 4-1: SerialNumber: syz [ 1135.959552][ T6193] usb 4-1: config 0 descriptor?? [ 1137.559815][ T6193] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1137.671113][T20109] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1137.732732][ T6193] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 1137.792867][ T2185] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1138.181388][ T2185] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1138.192829][ T2185] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.202038][ T2185] usb 8-1: Product: syz [ 1138.210822][ T2185] usb 8-1: Manufacturer: syz [ 1138.215619][ T2185] usb 8-1: SerialNumber: syz [ 1138.700219][T20130] binder: BINDER_SET_CONTEXT_MGR already set [ 1138.704330][ T4321] usb 4-1: USB disconnect, device number 68 [ 1138.744741][T20130] binder: 20129:20130 ioctl 4018620d 200000000040 returned -16 [ 1138.811662][T20130] binder: 20129:20130 ioctl c0306201 200000001440 returned -11 [ 1139.895220][ T2185] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 1139.905769][ T2185] cdc_ncm 8-1:1.0: bind() failure [ 1139.948240][ T2185] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1140.124987][ T2185] cdc_ncm 8-1:1.1: bind() failure [ 1140.156670][ T2185] usb 8-1: USB disconnect, device number 22 [ 1140.452999][ T6193] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1140.673237][ T6193] usb 4-1: Using ep0 maxpacket: 32 [ 1140.693436][T20165] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3795'. [ 1140.708168][ T6193] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1140.906635][ T6193] usb 4-1: config 0 has no interface number 0 [ 1140.961864][ T6193] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1141.204046][ T6193] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1141.281377][ T6193] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1141.377326][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.442897][ T6193] usb 4-1: Product: syz [ 1141.467089][ T6193] usb 4-1: Manufacturer: syz [ 1141.471739][ T6193] usb 4-1: SerialNumber: syz [ 1141.517247][ T6193] usb 4-1: config 0 descriptor?? [ 1141.557602][T20177] device syzkaller0 entered promiscuous mode [ 1141.558464][ T6193] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1141.625894][ T6193] em28xx 4-1:0.89: Video interface 89 found: [ 1141.675657][ T2185] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1141.876275][ T2185] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1141.902930][ T2185] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.941804][ T2185] usb 8-1: Product: syz [ 1141.951941][ T2185] usb 8-1: Manufacturer: syz [ 1141.969986][ T2185] usb 8-1: SerialNumber: syz [ 1142.155961][ T2185] usb 8-1: config 0 descriptor?? [ 1143.308311][ T6193] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1143.314659][ T2185] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1143.483165][T18958] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1143.703851][T18958] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1143.726282][T18958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.888458][T18958] usb 1-1: Product: syz [ 1143.938210][T18958] usb 1-1: Manufacturer: syz [ 1143.951305][ T2185] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32 [ 1143.968649][ T6193] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1144.052329][ T6193] em28xx 4-1:0.89: board has no eeprom [ 1144.080627][T18958] usb 1-1: SerialNumber: syz [ 1144.213057][ T6193] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1144.296685][ T6193] em28xx 4-1:0.89: analog set to bulk mode. [ 1144.560913][ T6193] usb 4-1: USB disconnect, device number 69 [ 1144.617547][ T6193] em28xx 4-1:0.89: Disconnecting em28xx [ 1144.682339][ T2185] em28xx 4-1:0.89: Registering V4L2 extension [ 1145.060011][ T2185] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1145.072592][ T2185] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1145.111737][ T2185] em28xx 4-1:0.89: No AC97 audio processor [ 1145.169303][ T2185] usb 4-1: Decoder not found [ 1145.219158][ T2185] em28xx 4-1:0.89: failed to create media graph [ 1145.267823][ T2185] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1145.316925][T20228] ================================================================== [ 1145.325111][T20228] BUG: KASAN: use-after-free in v4l2_open+0x352/0x360 [ 1145.331960][T20228] Read of size 4 at addr ffff8880609087e8 by task v4l_id/20228 [ 1145.339484][T20228] [ 1145.341805][T20228] CPU: 0 PID: 20228 Comm: v4l_id Not tainted syzkaller #0 [ 1145.348896][T20228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1145.358952][T20228] Call Trace: [ 1145.362226][T20228] [ 1145.365142][T20228] dump_stack_lvl+0x188/0x24e [ 1145.369837][T20228] ? __lock_acquire+0x7d10/0x7d10 [ 1145.374918][T20228] ? show_regs_print_info+0x12/0x12 [ 1145.380100][T20228] ? load_image+0x400/0x400 [ 1145.384614][T20228] ? __virt_addr_valid+0x465/0x540 [ 1145.389775][T20228] ? v4l2_open+0x352/0x360 [ 1145.394177][T20228] print_report+0xa8/0x210 [ 1145.398581][T20228] kasan_report+0x10b/0x140 [ 1145.403138][T20228] ? v4l2_open+0x352/0x360 [ 1145.407542][T20228] v4l2_open+0x352/0x360 [ 1145.411769][T20228] chrdev_open+0x5c5/0x6a0 [ 1145.416234][T20228] ? cd_forget+0x160/0x160 [ 1145.420636][T20228] ? fsnotify_perm+0x39b/0x550 [ 1145.425467][T20228] ? cd_forget+0x160/0x160 [ 1145.429871][T20228] do_dentry_open+0x7e9/0x10d0 [ 1145.434680][T20228] path_openat+0x2635/0x2ee0 [ 1145.439274][T20228] ? verify_lock_unused+0x140/0x140 [ 1145.444461][T20228] ? do_syscall_64+0x4c/0xa0 [ 1145.449040][T20228] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.455216][T20228] ? do_filp_open+0x430/0x430 [ 1145.459881][T20228] do_filp_open+0x1f1/0x430 [ 1145.464371][T20228] ? vfs_tmpfile+0x480/0x480 [ 1145.468948][T20228] ? _raw_spin_unlock+0x24/0x40 [ 1145.473942][T20228] ? alloc_fd+0x58f/0x630 [ 1145.478836][T20228] do_sys_openat2+0x150/0x4b0 [ 1145.483508][T20228] ? up_read+0x20/0x20 [ 1145.487576][T20228] ? do_sys_open+0xe0/0xe0 [ 1145.491987][T20228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1145.498476][T20228] ? lock_chain_count+0x20/0x20 [ 1145.503324][T20228] __x64_sys_openat+0x135/0x160 [ 1145.508197][T20228] do_syscall_64+0x4c/0xa0 [ 1145.512600][T20228] ? clear_bhb_loop+0x60/0xb0 [ 1145.517273][T20228] ? clear_bhb_loop+0x60/0xb0 [ 1145.521955][T20228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.527858][T20228] RIP: 0033:0x7f2ae24a7407 [ 1145.532293][T20228] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1145.551894][T20228] RSP: 002b:00007ffe140ddf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1145.560299][T20228] RAX: ffffffffffffffda RBX: 00007f2ae2bfa880 RCX: 00007f2ae24a7407 [ 1145.568273][T20228] RDX: 0000000000000000 RSI: 00007ffe140def1b RDI: ffffffffffffff9c [ 1145.576237][T20228] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1145.584207][T20228] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1145.592181][T20228] R13: 00007ffe140de190 R14: 00007f2ae2d59000 R15: 000056481d5a34d8 [ 1145.600147][T20228] [ 1145.603158][T20228] [ 1145.605465][T20228] Allocated by task 2185: [ 1145.609774][T20228] kasan_set_track+0x4b/0x70 [ 1145.614356][T20228] __kasan_kmalloc+0x8e/0xa0 [ 1145.618934][T20228] em28xx_v4l2_init+0x107/0x2e70 [ 1145.623980][T20228] em28xx_init_extension+0x118/0x1b0 [ 1145.629271][T20228] process_one_work+0x8a2/0x1160 [ 1145.634272][T20228] worker_thread+0xd83/0x1270 [ 1145.638932][T20228] kthread+0x29d/0x330 [ 1145.643045][T20228] ret_from_fork+0x1f/0x30 [ 1145.647504][T20228] [ 1145.649811][T20228] Freed by task 2185: [ 1145.653768][T20228] kasan_set_track+0x4b/0x70 [ 1145.658354][T20228] kasan_save_free_info+0x2d/0x50 [ 1145.663360][T20228] ____kasan_slab_free+0x126/0x1e0 [ 1145.668458][T20228] slab_free_freelist_hook+0x131/0x1a0 [ 1145.673903][T20228] __kmem_cache_free+0xb6/0x1f0 [ 1145.678791][T20228] em28xx_v4l2_init+0x166c/0x2e70 [ 1145.683884][T20228] em28xx_init_extension+0x118/0x1b0 [ 1145.689199][T20228] process_one_work+0x8a2/0x1160 [ 1145.694156][T20228] worker_thread+0xd83/0x1270 [ 1145.698822][T20228] kthread+0x29d/0x330 [ 1145.702878][T20228] ret_from_fork+0x1f/0x30 [ 1145.707280][T20228] [ 1145.709591][T20228] The buggy address belongs to the object at ffff888060908000 [ 1145.709591][T20228] which belongs to the cache kmalloc-8k of size 8192 [ 1145.723633][T20228] The buggy address is located 2024 bytes inside of [ 1145.723633][T20228] 8192-byte region [ffff888060908000, ffff88806090a000) [ 1145.737092][T20228] [ 1145.739406][T20228] The buggy address belongs to the physical page: [ 1145.745806][T20228] page:ffffea0001824200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60908 [ 1145.755963][T20228] head:ffffea0001824200 order:3 compound_mapcount:0 compound_pincount:0 [ 1145.764273][T20228] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1145.772259][T20228] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017442280 [ 1145.780838][T20228] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1145.789402][T20228] page dumped because: kasan: bad access detected [ 1145.795794][T20228] page_owner tracks the page as allocated [ 1145.801492][T20228] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 16784, tgid 16775 (syz.7.2933), ts 935589634079, free_ts 935581646775 [ 1145.824395][T20228] post_alloc_hook+0x173/0x1a0 [ 1145.829240][T20228] get_page_from_freelist+0x1a1e/0x1ab0 [ 1145.834780][T20228] __alloc_pages+0x1ec/0x4f0 [ 1145.839363][T20228] alloc_slab_page+0x5d/0x160 [ 1145.844042][T20228] new_slab+0x87/0x2c0 [ 1145.848093][T20228] ___slab_alloc+0xbc6/0x1240 [ 1145.852766][T20228] __kmem_cache_alloc_node+0x1a0/0x260 [ 1145.858228][T20228] kmalloc_trace+0x26/0xe0 [ 1145.862730][T20228] md_alloc+0xa5/0xd00 [ 1145.866860][T20228] md_probe+0x53/0xc0 [ 1145.870831][T20228] blk_request_module+0x26e/0x290 [ 1145.875893][T20228] blkdev_get_no_open+0x33/0xc0 [ 1145.880798][T20228] blkdev_get_by_dev+0x74/0xa60 [ 1145.885634][T20228] blkdev_open+0x11e/0x2e0 [ 1145.890034][T20228] do_dentry_open+0x7e9/0x10d0 [ 1145.894782][T20228] path_openat+0x2635/0x2ee0 [ 1145.899351][T20228] page last free stack trace: [ 1145.904007][T20228] free_unref_page_prepare+0x8b4/0x9a0 [ 1145.909448][T20228] free_unref_page+0x2e/0x3f0 [ 1145.914106][T20228] qlist_free_all+0x76/0xe0 [ 1145.918660][T20228] kasan_quarantine_reduce+0x144/0x160 [ 1145.924099][T20228] __kasan_slab_alloc+0x1e/0x80 [ 1145.928935][T20228] slab_post_alloc_hook+0x4b/0x480 [ 1145.934045][T20228] __kmem_cache_alloc_node+0x140/0x260 [ 1145.939542][T20228] __kmalloc+0xa0/0x240 [ 1145.943687][T20228] tomoyo_encode+0x27e/0x540 [ 1145.948346][T20228] tomoyo_path_perm+0x382/0x610 [ 1145.953177][T20228] tomoyo_path_symlink+0xa8/0xf0 [ 1145.958104][T20228] security_path_symlink+0xdc/0x130 [ 1145.963285][T20228] do_symlinkat+0x10c/0x400 [ 1145.967773][T20228] __x64_sys_symlink+0x7a/0x90 [ 1145.972518][T20228] do_syscall_64+0x4c/0xa0 [ 1145.976943][T20228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1145.982829][T20228] [ 1145.985135][T20228] Memory state around the buggy address: [ 1145.990739][T20228] ffff888060908680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1145.998782][T20228] ffff888060908700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1146.006838][T20228] >ffff888060908780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1146.014885][T20228] ^ [ 1146.022322][T20228] ffff888060908800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1146.030371][T20228] ffff888060908880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1146.038413][T20228] ================================================================== [ 1146.046499][ C0] vkms_vblank_simulate: vblank timer overrun [ 1146.081073][T18958] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1146.100257][T18958] cdc_ncm 1-1:1.0: bind() failure [ 1146.108824][ T2185] em28xx 4-1:0.89: Registering snapshot button... [ 1146.504162][T18958] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1146.511774][ T2185] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input77 [ 1146.522586][T18958] cdc_ncm 1-1:1.1: bind() failure [ 1146.529858][ T2185] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1146.543726][T18958] usb 1-1: USB disconnect, device number 63 [ 1146.549694][ T6193] em28xx 4-1:0.89: Closing input extension [ 1146.555761][ T6193] em28xx 4-1:0.89: Deregistering snapshot button [ 1146.573024][ T2185] usb 8-1: USB disconnect, device number 23 [ 1146.820378][ T6193] em28xx 4-1:0.89: Freeing device [ 1147.603456][T20240] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1147.639912][T20240] File: /dev/nullb0 PID: 20240 Comm: syz.3.3814 [ 1147.883686][T20228] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1147.890918][T20228] CPU: 0 PID: 20228 Comm: v4l_id Not tainted syzkaller #0 [ 1147.898097][T20228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1147.908162][T20228] Call Trace: [ 1147.911420][T20228] [ 1147.914331][T20228] dump_stack_lvl+0x188/0x24e [ 1147.918990][T20228] ? memcpy+0x3c/0x60 [ 1147.922966][T20228] ? show_regs_print_info+0x12/0x12 [ 1147.928149][T20228] ? load_image+0x400/0x400 [ 1147.932645][T20228] panic+0x2e5/0x730 [ 1147.936523][T20228] ? bpf_jit_dump+0xd0/0xd0 [ 1147.941006][T20228] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1147.946982][T20228] ? _raw_spin_unlock+0x40/0x40 [ 1147.951849][T20228] ? print_memory_metadata+0x314/0x400 [ 1147.957332][T20228] check_panic_on_warn+0x80/0xa0 [ 1147.962371][T20228] ? v4l2_open+0x352/0x360 [ 1147.966816][T20228] end_report+0x66/0x110 [ 1147.971072][T20228] kasan_report+0x118/0x140 [ 1147.975571][T20228] ? v4l2_open+0x352/0x360 [ 1147.979981][T20228] v4l2_open+0x352/0x360 [ 1147.984206][T20228] chrdev_open+0x5c5/0x6a0 [ 1147.988607][T20228] ? cd_forget+0x160/0x160 [ 1147.993011][T20228] ? fsnotify_perm+0x39b/0x550 [ 1147.997795][T20228] ? cd_forget+0x160/0x160 [ 1148.002219][T20228] do_dentry_open+0x7e9/0x10d0 [ 1148.007010][T20228] path_openat+0x2635/0x2ee0 [ 1148.011611][T20228] ? verify_lock_unused+0x140/0x140 [ 1148.016802][T20228] ? do_syscall_64+0x4c/0xa0 [ 1148.021464][T20228] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1148.027516][T20228] ? do_filp_open+0x430/0x430 [ 1148.032174][T20228] do_filp_open+0x1f1/0x430 [ 1148.036654][T20228] ? vfs_tmpfile+0x480/0x480 [ 1148.041223][T20228] ? _raw_spin_unlock+0x24/0x40 [ 1148.046063][T20228] ? alloc_fd+0x58f/0x630 [ 1148.050399][T20228] do_sys_openat2+0x150/0x4b0 [ 1148.055078][T20228] ? up_read+0x20/0x20 [ 1148.059143][T20228] ? do_sys_open+0xe0/0xe0 [ 1148.063538][T20228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1148.069501][T20228] ? lock_chain_count+0x20/0x20 [ 1148.074331][T20228] __x64_sys_openat+0x135/0x160 [ 1148.079171][T20228] do_syscall_64+0x4c/0xa0 [ 1148.083574][T20228] ? clear_bhb_loop+0x60/0xb0 [ 1148.088234][T20228] ? clear_bhb_loop+0x60/0xb0 [ 1148.092901][T20228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1148.098793][T20228] RIP: 0033:0x7f2ae24a7407 [ 1148.103188][T20228] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1148.122791][T20228] RSP: 002b:00007ffe140ddf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1148.131204][T20228] RAX: ffffffffffffffda RBX: 00007f2ae2bfa880 RCX: 00007f2ae24a7407 [ 1148.139157][T20228] RDX: 0000000000000000 RSI: 00007ffe140def1b RDI: ffffffffffffff9c [ 1148.147126][T20228] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1148.155095][T20228] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1148.163050][T20228] R13: 00007ffe140de190 R14: 00007f2ae2d59000 R15: 000056481d5a34d8 [ 1148.171008][T20228] [ 1148.174274][T20228] Kernel Offset: disabled [ 1148.178595][T20228] Rebooting in 86400 seconds..