last executing test programs: 14m2.381156377s ago: executing program 3 (id=1040): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002041"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000005c0)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636682cfdeaadb60000693d547de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f2519f7ec703f937cd8530410f370000000000008ee9dadacbafb2c3623a4622721dbc52328b63971ca6ab0ad6202bed3b42ed59e2651896cca9f6eba99ae5c75c255913db2dc43f03f7d1e778546230fd", 0xcb, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000080000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="235b781d11313c36c708f823", 0xc}, {&(0x7f0000002340)="a9a3f79f0d41bb05cac4ca12697ba70bbdbb33567631d6f146097830aa21972e16f6ee5d57a15dc3aac22451a47f54a5af159f8e22d1b0c20be91fd9593944d96ccaac1ac18955865e6b5865fb95b99377d21f9ad9f280afb8f76a771264277f8d10c7a75b9327d9b4def4dd74b8b11b676e4311c517283971dfda193ca0cd7a25107e25e02b4c2c7b6c0ed5253d990632919394fe766d3e12bb555fc403645c42946114786d2d08cc2a91f541f28f958d6cdb96abe41d18adbafdbd53847eaecdabe1f80d6d3ac7efa2df105e8a2c07572604ec27f85a76b3", 0xd9}, {&(0x7f0000002440)="fe695d23a6aa259d38a8154502ef02fd52372ed43413e845d8c540bca058a16620c034e1287fdc581a8166eae2b8524816bbeab172e5c48230045254df253b82d2b92e4f5699a077fff854685bce50aea20d8babeb0bef03a5cfa26b354df6bb15c317d8bb6a40906a8e5e682459297c380832919e3dfa38941963c0622eab9d0a29fde064ac2f58a685e77bfe75215233b938587d9b0d1815a299c68f0ba4bb8748c8db182c0561fd66a3b2deb2b3e0a51f06ffe7d6ad86428649b1a15926e90635ed452ecc6f88e07a4815f41b085d83b6d063fece5cb458e72c709336c57a358b1fc5cd9901", 0xe7}, {&(0x7f0000002540)="5e3491b6f865cd202f40daafc4d869b1038d27eb22d22d089bd1622a92047100d7ec1ff93349e89134096fd73aef492b1624c6f8cbdb6a525a255a9a8bde7e59bc8171b39618c5c92390e2f51e40e127ed26941fc5d7cecab2783605eb4f007c35a1a40698927900d70a0deba5b60673a32d34d6b7a11db5a7bbd902ccde75d6695848b68e0e0c609a24fb16e35da29bcb94302c524dcddee1db3496dc07794f1e2d852c401519b234bb9c9703a6897c762e8476a6cc74cae84f4e6cf965ba72664488b45d483bdcee77f1b8ba2833ad", 0xd0}, {&(0x7f0000002640)="fd8b0d1aeaf873ca93f06f10970ca71df9be217fbfc865174d66497b6029000c5e921bc1aa355d73c575b84880c1e04f88143a32e6a7863410aac7c19409cf136bcf35059b9a555159d5a503b6de7ef936c14810c70fce62f6be907bdf3fe9a87459f84c4ced769dd0ebb35d7633e24e58ed0ccefae8e892363036c29b726a3c6e70e99d4378f03cc4ee2bad1befdcc973302462fbd20a9e3bf112", 0x9b}, {&(0x7f0000002700)="e8afb0ed96fbd7247db53289dd5e1bb8a51c37d30ad94b89dbcfc248a5a4b6920ab0e91cafce4141c3a3d86ffddf0986ae4d82746808b79054c1f9180c0ccca3fd52c1af13cf48018b543d0f029edde4d2fcd52548daff76d35b3e6f9e355ddd9b927e6f730b53b4a9e2324924b691154d07c579c4154c7b97b0c4cb848873586fd5c997c94b7ca02c1147a50ccf62dc28762eb1c5d5fa03b2f881de8a5be24650ecf3439c83fac2c0b23972a72d6446e881c64c75540c9a822bfedf172b4c677fd71f1fc77dfe0d3d9ad27e9f0bc3f43305b0d1dcae1dafec45fa84449a89e7c71914d22398edbfb58194df9c0620d0042035", 0xf3}, {&(0x7f0000002800)="cc8452a0009c58ddb0a8", 0xa}], 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="2400000029000000360000003b01000000000000050200990401f30102000000000000001c0000002900000037000000670000000000000004010505020008001400000029000000390000002b0000a400000000"], 0x154}}, {{&(0x7f0000002a00)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000002a40)="7e6341a37f483c578fd78bf5e038451c031aa690636271cb74732f319e25f1e30de8a7edc56b14a8f88efe37bc3f05c5cf024bbe90757d291df8f1824f0038240841ffd752322ee727507cbe508e875c8b121eccc19b07aa660e6ed15cbd15691b882ec26ef5463073c8efc21bff324ce9a9469ad81177a4f39f4b29aef87c0b8c7ad4178b0b6e188d36c464d5250790a4908d911cf6db5db94d74bd47d22c1a54e6c2911836", 0xa6}, {&(0x7f0000002b00)="a75fd0e9b4dbe53129e1a0f56307a7c94e0f5f8d1b", 0x15}], 0x2, &(0x7f0000002b80)=[@hopopts={{0x6c, 0x29, 0x36, {0xd5, 0xa, '\x00', [@generic={0x3e, 0x4e, "d38b8dd1ed763a07c26d4fb25433796601aa92cd7e37850da158188963d302eb79e8853e09300370a3a9af8dcef7fa9e98fa4397833275eba9476d3b6ba944830e8500ca76132b6fe4d45c64ba0c"}, @padn={0x1, 0x1, [0x0]}, @generic={0xb}]}}}], 0x6c}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c00)="79f863d1e0c772ad850f63bb1b84ff6bd2e5b3e5cb22d30c68ae10504a4e8f3922dda07ee73a2561fe862332f5d62ff9a696f16024197fbfa8def2743d544a8b82866eea8ccc1688c141ac066156e15767ccad7206bcab00afdadaf190ee4adcd91a75ae519a5cb01e75b9a773e1dc8b12bef526739d03e543df2cc0da0d5364388a595e9730ed3cfd562b68ee5ed7ddb4658c2a42ced5d9b0a16612414372807a928edd29df1859dd7e7e23c50d67d93c6a407b3d08e0fbb39d040cd6f8b85904671da49203433817a56d", 0xcb}], 0x1, &(0x7f0000002d40)=[@hoplimit={{0x10, 0x29, 0x34, 0x9}}, @hopopts_2292={{0x24, 0x29, 0x36, {0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0x1ab}, @ra, @ra={0x5, 0x2, 0x1}]}}}, @rthdrdstopts={{0x2c, 0x29, 0x37, {0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}}}], 0x60}}], 0x3, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x5, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r9, 0xfffffffe}, &(0x7f0000000300)=0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 14m0.525750315s ago: executing program 3 (id=1045): read$FUSE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x32, 0x0}) syz_open_dev$media(0x0, 0x66, 0x180502) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) fallocate(r0, 0x2c, 0xc, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4800) 14m0.325881478s ago: executing program 3 (id=1047): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r4, 0x0) statx(0xffffffffffffff9c, 0x0, 0x400, 0xe6025bc676a83de5, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb5", 0x18, 0xffffffffffffffff) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff0204", 0x3) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x200, 0x9) fchmod(r2, 0x11) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) getpriority(0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) 13m58.397783473s ago: executing program 3 (id=1052): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x4, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x20000) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="3800000000000000d100000000000000030000000000000007000000000000001a"], 0x0, 0x0, 0x0, 0x0}) lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r6}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x68, &(0x7f0000000200)}, 0x10) r8 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x10040, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r8, 0xc004aeba, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x50000, 0xfff}}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg(r10, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x18}}], 0x2, 0x4008000) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x8, 0x9}) fsopen(&(0x7f0000000040)='v7\x00', 0x1) 13m57.816637535s ago: executing program 3 (id=1053): r0 = socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x428, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x340, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2f8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x428}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) writev(r6, &(0x7f0000000800)=[{&(0x7f0000000e80)="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", 0x200}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1ee89900", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf250a"], 0x14}}, 0x4000080) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 13m57.600310243s ago: executing program 3 (id=1056): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000880)={0xc, 0x8, 0x143, {0x0}}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x949, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0xec}}, './file0\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x5) r5 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x2) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)="0dc4d61b9e921f455fbd31cc9882d223e9ceee662777c753936f8657ea1071bbcea71b8a44b8883b417edb4d75763cd08b0876107d6ec23e38f634e668c3feb7f094af5335912b35f4546b6bdc2607f48f8d4e66526e4686ec8beb84d81a02c901778903b5b147180d4f0f13766ddbe3a3d9e4deb9dbdd5187b79b9db0aa06f949fb9eda53fc36e917e4f71376a6675d38b24cc481542e4be6589123842a40c5da5ed413163e2b4ced0dccd775881e211f1e204fe16e10e987159ef3458d43dedc82d15510128e516a0865c7070160ffee1b536f67d7e6a1c0f45d7dab573d812ddcaf22d1118bd5202992615cbd54163749049b9f830b1023", 0xf9}], 0x1}, 0x0) close(0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$kvm(0xffffff9c, &(0x7f0000000000), 0xd00000, 0x0) 13m56.998958707s ago: executing program 32 (id=1056): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000880)={0xc, 0x8, 0x143, {0x0}}, 0x10) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x949, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0xec}}, './file0\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x5) r5 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x2) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)="0dc4d61b9e921f455fbd31cc9882d223e9ceee662777c753936f8657ea1071bbcea71b8a44b8883b417edb4d75763cd08b0876107d6ec23e38f634e668c3feb7f094af5335912b35f4546b6bdc2607f48f8d4e66526e4686ec8beb84d81a02c901778903b5b147180d4f0f13766ddbe3a3d9e4deb9dbdd5187b79b9db0aa06f949fb9eda53fc36e917e4f71376a6675d38b24cc481542e4be6589123842a40c5da5ed413163e2b4ced0dccd775881e211f1e204fe16e10e987159ef3458d43dedc82d15510128e516a0865c7070160ffee1b536f67d7e6a1c0f45d7dab573d812ddcaf22d1118bd5202992615cbd54163749049b9f830b1023", 0xf9}], 0x1}, 0x0) close(0x3) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$kvm(0xffffff9c, &(0x7f0000000000), 0xd00000, 0x0) 5m28.760652285s ago: executing program 1 (id=3683): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000c00)=0x11) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m28.682341982s ago: executing program 1 (id=3684): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)=""/186, 0xba}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/52, 0x34}], 0x1}, 0x1}], 0x2, 0x40000001, 0x0) read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020) 5m27.771067161s ago: executing program 1 (id=3685): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="b5175f4b787a34383a3743369e4f175fc3e3e91ad026b35e1eb864a1cdf0453a682069bba7286eeeaaf9372803f8e5172d4eaf45b8ba9d772170e5aa8155f7f6d393e201cf933efce386548a9feb83b5a47c7a6e766356c72361c246743de6c77c39f76d289be64e90a2e7013aae9990c03db418549da05952cb48", @ANYRES16=r0], 0xff2e) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001a000002feffffff00010000ac1e010100000000000000000000000100000000000000000000000000010001d5874e2300080a0040203a0000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x844) sendmmsg$alg(r3, &(0x7f000000a200)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000004c0)="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", 0x18c}], 0x1, 0x0, 0x0, 0x20004004}], 0x1, 0x4804) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x40000042, 0x0, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x7, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x0, 0x7ff}) fchdir(r7) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="aee2b8c3", 0x4}], 0x1, 0x7, 0x6, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x80) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r8, 0x0, 0x0, 0x800) 5m26.748748856s ago: executing program 1 (id=3686): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fchdir(r1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 5m26.70726244s ago: executing program 1 (id=3687): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) munmap(&(0x7f00002e5000/0x1000)=nil, 0x1000) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) 5m23.219025247s ago: executing program 1 (id=3693): syz_usb_connect$uac1(0x5, 0x7a, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) capset(0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = dup2(r0, r0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 5m22.885425154s ago: executing program 33 (id=3693): syz_usb_connect$uac1(0x5, 0x7a, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) capset(0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = dup2(r0, r0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 14.188246341s ago: executing program 4 (id=4794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x1694, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.795442753s ago: executing program 4 (id=4801): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x6c, 0x66, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x10}, {0x10}, {0x5, 0xf}}, [{0x8, 0xb, 0xc}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xe}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x81bf}, {0x8, 0xb, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8084}, 0x20000080) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delchain={0x24, 0x2a, 0x201, 0x20000000, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0xfffffffc}, 0x80, 0x0, 0x0, 0x0, 0x54}, 0x640ce0c0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x3, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.78742076s ago: executing program 0 (id=4811): rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) r0 = gettid() migrate_pages(r0, 0x3, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0xffffffffffffffff) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYRESDEC=r3, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="ae9b5e958ec8c2a5407d74e8fae276ce751d3587eafd2b6a672c5ed27aba0e1d8bf0d8b72cdee47b17d151ab84b2ac3de2f2ac73717490d64b1e518f0de9ea4390a88b91e5ec19d0b1daab438b4d694fddfdb31f523335f47385a16d"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) io_uring_enter(0xffffffffffffffff, 0x67e, 0xa9e7, 0x3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000000c0)=""/104, 0x12) syz_usb_connect(0x0, 0x24, &(0x7f0000001000)={{0x12, 0x1, 0x110, 0x4c, 0x25, 0x6c, 0x20, 0x1604, 0x8007, 0xc355, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xe3, 0x0, 0x9a}}]}}, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x3fffff) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0xa0) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000280), &(0x7f00000003c0), 0x2, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x18, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x5, 0x2) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd2c, 0x25dfdbfb, 0x100, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0) 10.370033735s ago: executing program 5 (id=4802): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) sendmsg$WG_CMD_GET_DEVICE(r1, 0x0, 0x4000810) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) getpid() open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000014c0)={0x7, &(0x7f00000027c0)=[{0x6, 0x47, 0xff, 0x3}, {0x8, 0xe0, 0x5}, {0x1ff, 0x8, 0x6, 0x4f1f}, {0x5, 0x0, 0x9, 0x7}, {0x4, 0x3, 0x3a, 0xebdb}, {0x9, 0x3, 0xfe, 0x1}, {0xe5d0, 0x0, 0x1, 0x40}]}, 0x8) sendto$inet(r2, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x0}, 0x58) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) 9.657699894s ago: executing program 2 (id=4803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000"], 0x50) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) preadv(r2, &(0x7f0000001b00)=[{&(0x7f0000000040)=""/250, 0xfa}], 0x1, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00028005000300010000000800014000000009080002400000000d20000180070001006374000014000280080002400000000a080001400000000109000200"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000007000000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500005461c413961ee906005200000095000000000000007eb0"], &(0x7f0000000040)='GPL\x00', 0x6, 0x1e, &(0x7f0000000280)=""/30, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0xe61c1323c3c20c32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8080, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r7, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x0, 0xfffffff7, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 9.125523564s ago: executing program 6 (id=4804): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc00", 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c0088dd76e2800c00018006000600800a00000c00028005001780b0000000"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 8.650076607s ago: executing program 0 (id=4805): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.524765061s ago: executing program 2 (id=4806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x109402) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x41) eventfd(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) eventfd2(0x4, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa8081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x4, r4, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$I2C(&(0x7f00000000c0), 0x99c5, 0x80080) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x2, &(0x7f0000000100)={0x14, "48b4ade6822fd156114bee69dc3c84d68f21e1dd3916b9443377b4ddaf86f0311a"}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0x4192}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_MTU={0x8, 0x4, 0xd4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004094) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') fchdir(r10) ioctl$KVM_GET_CLOCK(r10, 0x8030ae7c, &(0x7f0000000340)) openat$full(0xffffff9c, &(0x7f00000001c0), 0x140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.404204799s ago: executing program 2 (id=4807): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r1 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0xffffffff, 0x0, 0x1013, 0x9, 0xa, 0x0, 0x5, 0x1993012db91ab52e}}) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc540900", 0x2c}], 0x1}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x800000}}) r6 = syz_io_uring_setup(0x4d, &(0x7f00000003c0)={0x0, 0x4663, 0x4, 0x0, 0x2}, 0x0, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r6, 0x12, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000240), 0x11, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000f7216e4d42a20be62aac5bf644ee7ee6da884842cb4b6c7fef5a0d4c856c18a4a0b4a7e16373d003fd", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250000000008000a0002000000"], 0x1c}}, 0x4041) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x7c80, 0x0) close(0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904"], 0x0) 8.2482809s ago: executing program 5 (id=4808): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)={{0x12, 0x1, 0x250, 0xee, 0x4c, 0xbe, 0x10, 0x8ca, 0x111, 0x2fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x10, 0x3, "", [{{0x9, 0x4, 0x37, 0x8, 0x0, 0x96, 0x9b, 0xa7, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x0, 0xffffffff, 0x407}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000300000007e2ff910f000005000000000900000003000000b050000008000000050000000010000009000000000000004d10ffff0e00000001000000050000000700000003000000050000000f00000000000001000000005c004100100000000000001004000000002e00"], &(0x7f0000000440)=""/102, 0x7f, 0x66, 0x1}, 0x28) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2503feffffff000000001600000014000180a27fa62670d2fc7c7a39ad0628b8000004000000010002004e23ac1e01010000000000000000000002000a004e21fffffff3fe8800000000000000000000000000011800000000000680000003002d6bd7c7ee4bffcc781f16735256a9effc8c2edaf6f8da9d0bf3ecae3f7817d5b8e43cb5650cd96b032a7a5fff1a02b9b3700fc7e7f031b72066703af28bc612593085263f9678ebbda92d080f3144894d224a035f6f9ef6a36d747944234d26b6a6e11a21c6090fbcec98f2f6dcd97b1d4ab86ce307d5af44d4e0a056834600000005000000010009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x163, 0x3ff, 0x621f, 0x8200, 0xffffffffffffffff, 0xb, '\x00', r1, r2, 0x5, 0x2, 0x4, 0x8, @value=r4}, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r6}}, 0x18) syz_emit_ethernet(0x7a, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000140)) unshare(0x62040200) 7.649570604s ago: executing program 6 (id=4809): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0x1}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) personality(0x400000) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, 0x0, &(0x7f00000001c0), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.648489509s ago: executing program 0 (id=4821): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.646395139s ago: executing program 4 (id=4822): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f0000002600)=""/19, 0x13}, {0x0}, {&(0x7f0000002740)=""/129, 0x81}], 0x6, &(0x7f0000002840)=""/83, 0x53}, 0x3) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001700), 0x80880, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x488, 0x0, 0x2}]}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f14010000000000000000000a0045"], 0x24}}, 0x0) r6 = openat$apparmor_task_current(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000040)=ANY=[@ANYRES64], 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7338, &(0x7f0000000200)={0x0, 0x86f5, 0x2, 0x0, 0x1c, 0x0, r3}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) 6.728448524s ago: executing program 0 (id=4810): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) syz_usb_connect$uac3(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="120111020000004082054400400001020301090281000301055081080b0202012630010904000000010130000a24010a0a00050000000904010000010230000904010101010230000905010900020d04ff0a252507000000248000090402"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r2 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r3, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0) renameat(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x404c880) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x35b) faccessat2(r5, &(0x7f0000000140)='./file0\x00', 0x100, 0x200) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x4, &(0x7f00000000c0)={[0x7, 0x4]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x52bc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa5}, 0x1c) 6.123061361s ago: executing program 6 (id=4813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x1694, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.12243459s ago: executing program 5 (id=4814): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffe, &(0x7f0000000000)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x0, 0xb, 0x0, 0x0, 0x59}) r3 = inotify_init() r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgsnd(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r4, &(0x7f0000001240)={0x0, ""/144}, 0x98, 0x3, 0x2000) msgrcv(r4, &(0x7f0000000900)={0x0, ""/185}, 0xc1, 0x3, 0x1000) inotify_add_watch(r3, &(0x7f00000001c0)='.\x00', 0x60005eb) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000080)=0x3) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_RESVSP(r1, 0x402c5839, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x8000400}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x2a, 0x68, 0x4000, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0x0, 0x0, 0x3}, {"984b"}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000003e8300290300000000000000decc5b29"], 0x14}}, 0x8000) 6.119055742s ago: executing program 4 (id=4825): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xb6, 0x34, 0x18, 0x20, 0x525, 0xa4a4, 0xd37e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x4, 0xa0, 0xf3, "", [{{0x9, 0x4, 0x84, 0x6, 0x1, 0x2, 0x5, 0xb5, 0x4, [], [{{0x9, 0x5, 0xa, 0x1, 0x10, 0xf8, 0x6c, 0x5}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x48f, 0x0, 0x200}]}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000500)={0xbb, 0x10000}, 0xc) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000080)=0x5) 4.758766243s ago: executing program 6 (id=4815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x1) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) dup3(r5, r3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x800) 4.75838999s ago: executing program 5 (id=4816): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x1694, 0x0) r3 = syz_open_dev$sndpcmc(0x0, 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.758158064s ago: executing program 4 (id=4817): landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) ioctl$EVIOCGSW(r0, 0xc0189436, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0xff, 0x20000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000140)={0x0, 0x9, [0x5, 0x400, 0x8, 0x8, 0x5, 0xfffffffffffffffd]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="00030000000000001c0012800c0001006d6163"], 0x4c}}, 0x884) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0)="e5ce57034440e2e43fb056a1ddae01bd969144299c690a1fe002c96c78787f3e90bba12dd4a54380664ff434b7dfee5f80f7274618493a4b673de9ca2cab50d5619aec930bb4d8d7ee9ab42a06035674efb8c3b052036ffd375c1d38e7acfeef7ea52d15941965f95044f5bac71d3822713a185980ab83c9c627a21bc22c4e316aa934dea06014dcaf748cd0f9a10b640d4d588a46bc918533e120fef66154ff9340fba3fad20684a3b1694416ad2878f825ba93718f5a1fe8b5635471", 0xbd, 0x5, 0x0) 4.756110239s ago: executing program 0 (id=4818): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.753196389s ago: executing program 2 (id=4831): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x1, 0x44008004) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3003}, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000"], 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf00}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x12, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) sendfile(r7, r7, 0x0, 0x35) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x8, 0x0, 0x1, 0xe}], {{0x8000, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 3.44665743s ago: executing program 5 (id=4819): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x24}}, 0x20000050) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x3) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1", 0x11}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.446252636s ago: executing program 4 (id=4820): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0100000005000000fd090000840000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000008000"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r3}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 3.444832535s ago: executing program 0 (id=4833): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0xfa13646e8d91cf2d, 0x54, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x5d, 0x80, 0xe, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x7, 0x24, 0x6, 0x0, 0x0, "cb1f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x401}, [@obex={0x5, 0x24, 0x15, 0x80}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x42, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x5, 0xfc}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x3, 0x0, 0x8, 0x4}, 0xdf, &(0x7f00000008c0)={0x5, 0xf, 0xdf, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc8, "a7e14ff9125acbce3df033d0acb4cc10"}, @generic={0xbc, 0x10, 0x4, "1c7c744e2b640462ce5644878bfe5319b37efdaff938ed718cea39951d045351ed3cff48a28dcc2f4495653bab6a7c323256cc4ade77a58b871eb9e0328b844d750b8262d59e806e5934b80bb4cb306b74607a2850045c2d7d40b418a315cc8826318593a7075f086c1be6aa3e087a97e1fa01582d20e6050bbf50a366a69c450385ac3c4fd227375d280e106747417ddb3e8b913bd1f9bcc964fffc7ceb982c6d906fd62b77e6339feecf0a9c9eca3ff63c046f13904260b0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xb7, 0x2, 0xfb94}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x82c}}, {0xdf, &(0x7f0000000280)=@string={0xdf, 0x3, "c17fe184921345a323c443bc70fdec17885a59f28d7ff680f6df2988f78029b71c6c8d75e057b14be275b7a724d6522047d96edca797fcaf0e12c1d686b417c0b8fed1a924d742ab2940da4da6fda346abf224373225fb7a330e369300555d20bc793f5a6a230ac2520a747734ae2d4412d74c22c027dc355f2e79eedc763d5346529cf78040c89eeb69fe8470c117eec29653df5c45b995d8b3700aad00d02a99bb9e208ab6ea552a67b0e386846ce2a8f29fb790be30d00b5d4df1106f016ee35281331e6f1ea6494863c307c31847680919c271c30286543b21fc3a"}}, {0x9c, &(0x7f0000000380)=@string={0x9c, 0x3, "efe4bb8a6fbca917e685007d41c0e3d987988ba206f4ee6693fc24e3f72a10aeb760c56c43a219cc5e28b1a1cc4a90f041c6a9e2d12d3b21dbcb5a94f7114ed990c568b3888c2557c8b3cefcb775484e1505dfbfe08526e73660d2e1601b534387ac6ee1a525fc720fd00bf03bcf55c4336c8e51232c716762a3e84f0872084b397eb29ed0512d07eba450a34ed79a5071f7596b5d27fcbf463b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x801}}, {0x62, &(0x7f0000000740)=ANY=[@ANYRES8=r0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1c0f}}, {0xfb, &(0x7f0000000540)=@string={0xfb, 0x3, "3f67a0162981ddf895d76af8cac033656f2fd93746efc3e3ac5f2c8cdab2aa3b4cf9d40c13f3921d01be730308adc98b19c1d0fea9fbd3991e9ffbfc422173ba1a6b90a051dc087d73651512a66442a077d5fbc3fc4e3748c67fd4f546f1b524d3a0d46791cc613ec6fda91ec6315690e324795b6a4428c6524e0bb6409cb3666b12061cab180e335815be7bf095863d2f478bd35b4384b3710d8d37c1dcbbf58c26f66fea41d52180d468be61cc176e94ce89bcd7d0d9dd9839fe338f70b8557d3bb50a33e9bd4a56370694e6052b4a33d7892f8491fb0ea26eb1896c5d607cc88f9f0d8bcb16bcb48be00cfe834ca370adcbb9147eb89c32"}}]}) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbfbaaaaaaaaaabf0800050000200066000040029078ac1e0101ac1e010144040f241e0b5a004ea490787f000001"], 0x0) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='numa_maps\x00') getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x240408d4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x8c}}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$xdp(0x2c, 0x3, 0x0) 3.435163382s ago: executing program 6 (id=4823): fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) 3.43452867s ago: executing program 2 (id=4824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.532432999s ago: executing program 2 (id=4826): r0 = syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2e, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0x11, 0x24, 0xa, 0x6, 0x1, [0x0, 0x173ea21786b5b7df, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x0, 0xfffe, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9}, @mss={0x2, 0x4, 0x4}, @mss={0x2, 0x4, 0x8}, @exp_smc={0xfe, 0x6}, @nop, @window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0x5}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r6, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 1.07508626s ago: executing program 6 (id=4827): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)={{0x12, 0x1, 0x250, 0xee, 0x4c, 0xbe, 0x10, 0x8ca, 0x111, 0x2fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x10, 0x3, "", [{{0x9, 0x4, 0x37, 0x8, 0x0, 0x96, 0x9b, 0xa7, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x0, 0xffffffff, 0x407}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000300000007e2ff910f000005000000000900000003000000b050000008000000050000000010000009000000000000004d10ffff0e00000001000000050000000700000003000000050000000f00000000000001000000005c004100100000000000001004000000002e00"], &(0x7f0000000440)=""/102, 0x7f, 0x66, 0x1}, 0x28) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2503feffffff000000001600000014000180a27fa62670d2fc7c7a39ad0628b8000004000000010002004e23ac1e01010000000000000000000002000a004e21fffffff3fe8800000000000000000000000000011800000000000680000003002d6bd7c7ee4bffcc781f16735256a9effc8c2edaf6f8da9d0bf3ecae3f7817d5b8e43cb5650cd96b032a7a5fff1a02b9b3700fc7e7f031b72066703af28bc612593085263f9678ebbda92d080f3144894d224a035f6f9ef6a36d747944234d26b6a6e11a21c6090fbcec98f2f6dcd97b1d4ab86ce307d5af44d4e0a056834600000005000000010009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x163, 0x3ff, 0x621f, 0x8200, 0xffffffffffffffff, 0xb, '\x00', r1, r2, 0x5, 0x2, 0x4, 0x8, @value=r4}, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r6}}, 0x18) syz_emit_ethernet(0x7a, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000140)) unshare(0x62040200) 0s ago: executing program 5 (id=4828): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) syz_usb_connect$uac3(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="120111020000004082054400400001020301090281000301055081080b0202012630010904000000010130000a24010a0a00050000000904010000010230000904010101010230000905010900020d04ff0a252507000000248000090402"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r2 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r3, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0) renameat(r2, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x404c880) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x35b) faccessat2(r5, &(0x7f0000000140)='./file0\x00', 0x100, 0x200) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x4, &(0x7f00000000c0)={[0x7, 0x4]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x52bc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa5}, 0x1c) kernel console output (not intermixed with test programs): config 0 has no interfaces? [ 1201.258813][ T5702] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1201.281393][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.317591][ T5702] usb 3-1: Product: syz [ 1201.333092][ T5702] usb 3-1: Manufacturer: syz [ 1201.350341][ T5702] usb 3-1: SerialNumber: syz [ 1201.361638][T19893] usb 1-1: USB disconnect, device number 47 [ 1201.400105][ T5702] usb 3-1: config 0 descriptor?? [ 1201.533148][T22206] fido_id[22206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1201.683909][T22200] i2c i2c-0: dtv_property_process_set: SET cmd 0x2330302f undefined [ 1201.732950][T19893] usb 3-1: USB disconnect, device number 56 [ 1201.775193][T22212] netlink: 'syz.6.4396': attribute type 1 has an invalid length. [ 1201.868421][T22212] bond2: entered promiscuous mode [ 1201.874298][T22212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1202.012609][T22212] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4396'. [ 1202.042156][T22212] bond2: entered allmulticast mode [ 1202.147120][T22212] bond2: (slave bridge2): making interface the new active one [ 1202.174758][T22212] bridge2: entered promiscuous mode [ 1202.197356][T22212] bridge2: entered allmulticast mode [ 1202.243457][T22212] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1202.423847][T19924] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1202.585636][T19924] usb 1-1: Using ep0 maxpacket: 8 [ 1202.606018][T19924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1202.637852][T19924] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1202.663409][T19924] usb 1-1: config 0 has no interface number 0 [ 1202.681571][T19924] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1202.727967][T19924] usb 1-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1202.769073][T19924] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 1202.808097][T19924] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1202.837726][T19924] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1202.877262][ T5287] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 1202.885639][T19924] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 1202.910221][T19924] usb 1-1: config 0 interface 122 has no altsetting 0 [ 1202.939131][T19924] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 1202.966982][ T7786] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1202.969546][T19924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.015353][T19924] usb 1-1: Product: syz [ 1203.031515][T19924] usb 1-1: Manufacturer: syz [ 1203.043246][T19924] usb 1-1: SerialNumber: syz [ 1203.060634][T19924] usb 1-1: config 0 descriptor?? [ 1203.077665][T22220] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1203.094445][T22220] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1203.158164][ T7786] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 1203.158194][ T7786] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.158215][ T7786] usb 7-1: config 0 has no interface number 0 [ 1203.158244][ T7786] usb 7-1: config 0 interface 106 has no altsetting 0 [ 1203.158280][ T7786] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1203.158304][ T7786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.170140][ T7786] usb 7-1: config 0 descriptor?? [ 1203.215552][ T7786] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1203.215872][ C1] wdm_int_callback: 827 callbacks suppressed [ 1203.215892][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.215908][ C1] wdm_int_callback: 827 callbacks suppressed [ 1203.215922][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.216117][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.216136][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.216334][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.216355][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.216563][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.216583][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.216781][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.216800][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.217005][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.217022][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.217213][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.217227][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.217416][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.217430][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.217611][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.217624][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.217803][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 1203.217816][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 1203.257151][T19893] usb 6-1: USB disconnect, device number 124 [ 1203.462658][T19893] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1203.506588][T19924] pl2303 1-1:0.122: pl2303 converter detected [ 1203.517172][T19924] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1203.533383][T19924] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1203.586971][T19924] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1203.596923][T19924] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1203.605715][T19924] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1203.641815][T19924] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1203.681838][T19924] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1203.691451][T19893] cdc_mbim 6-1:1.0 wwan0: failed to kill vid 0081/0 [ 1203.717915][T19924] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1203.762471][T19924] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 1203.794659][T19924] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 1203.795071][T19924] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 1203.819956][T19924] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 1203.851500][T19924] usb 1-1: USB disconnect, device number 48 [ 1203.915600][T19924] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1203.916214][T19924] pl2303 1-1:0.122: device disconnected [ 1204.085751][T22256] tap0: tun_chr_ioctl cmd 1074025677 [ 1204.095372][T22256] tap0: linktype set to 769 [ 1204.136095][T19893] wwan wwan0: port wwan0mbim0 disconnected [ 1204.395814][ T1106] usb 7-1: Failed to submit usb control message: -110 [ 1204.395885][ T1106] usb 7-1: unable to send the bmi data to the device: -110 [ 1204.395906][ T1106] usb 7-1: unable to get target info from device [ 1204.395931][ T1106] usb 7-1: could not get target info (-110) [ 1204.395947][ T1106] usb 7-1: could not probe fw (-110) [ 1206.003817][ T7786] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1206.224011][ T7786] usb 1-1: Using ep0 maxpacket: 32 [ 1206.244869][ T7786] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1206.259200][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.278711][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.313163][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.329156][T19893] usb 7-1: USB disconnect, device number 27 [ 1206.330516][T22305] tipc: Enabled bearer , priority 0 [ 1206.345867][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.369033][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.393536][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.414752][T22305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4408'. [ 1206.429131][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.443643][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.466243][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.477575][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4408'. [ 1206.490281][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.518470][ T7786] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1206.589685][ T7786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.591040][T22304] tipc: Disabling bearer [ 1206.632939][ T7786] usb 1-1: Product: syz [ 1206.651729][ T7786] usb 1-1: Manufacturer: syz [ 1206.683094][ T7786] usb 1-1: SerialNumber: syz [ 1206.706499][ T7786] usb 1-1: config 0 descriptor?? [ 1206.754441][ T7786] etas_es58x 1-1:0.0: Starting syz syz (Serial Number syz) [ 1206.961013][ T7786] usb 1-1: USB disconnect, device number 49 [ 1207.466495][T22340] netlink: 'syz.4.4412': attribute type 1 has an invalid length. [ 1207.573510][T22343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1207.851570][T22340] bond4: entered promiscuous mode [ 1207.892919][T22340] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1208.102233][T22352] bond4: (slave bridge5): making interface the new active one [ 1208.143912][T22352] bridge5: entered promiscuous mode [ 1208.170115][T22352] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1208.233173][T22343] bond4: entered allmulticast mode [ 1208.250013][T22343] bridge5: entered allmulticast mode [ 1208.671771][T22336] syzkaller0: entered promiscuous mode [ 1208.683790][T22336] syzkaller0: entered allmulticast mode [ 1208.869357][T22363] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 1209.144166][ T7786] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1209.305993][ T7786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.329965][ T7786] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1209.344141][ T7786] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1209.353356][ T7786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.386452][ T7786] usb 1-1: config 0 descriptor?? [ 1209.429585][T22374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1209.535677][T22379] bond3: (slave geneve2): Enslaving as a backup interface with an up link [ 1209.565446][T11051] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1209.734711][T11051] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1210.014088][T22366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.048080][T22366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.107070][T22366] sctp: [Deprecated]: syz.0.4417 (pid 22366) Use of int in max_burst socket option. [ 1210.107070][T22366] Use struct sctp_assoc_value instead [ 1210.334670][ T7786] Bluetooth: Can't get version to change to load ram patch err [ 1210.384180][ T7786] Bluetooth: Loading sysconfig file failed [ 1210.399694][ T7786] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 1210.421216][ T7786] usb 1-1: USB disconnect, device number 50 [ 1211.221012][T19924] hid_parser_main: 445 callbacks suppressed [ 1211.221027][T19924] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 1211.283643][T19924] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1212.203284][T22419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.255599][T22419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.275501][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4430'. [ 1212.513878][ T7786] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1212.688763][ T7786] usb 6-1: Using ep0 maxpacket: 32 [ 1212.715369][ T7786] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1212.751784][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.785463][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.804906][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.816492][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.828112][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.840180][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.852213][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.871701][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.928450][ T7786] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1212.948524][ T7786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.992106][ T7786] usb 6-1: Product: syz [ 1213.006357][ T7786] usb 6-1: Manufacturer: syz [ 1213.023654][ T7786] usb 6-1: SerialNumber: syz [ 1213.067143][ T7786] usb 6-1: config 0 descriptor?? [ 1213.077871][ T7786] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz) [ 1213.349285][T19924] usb 6-1: USB disconnect, device number 125 [ 1214.091958][T22439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.123301][T22439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.703790][T12844] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1214.905344][T12844] usb 6-1: Using ep0 maxpacket: 32 [ 1214.929495][T12844] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.956429][T12844] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1215.007925][T12844] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55 [ 1215.019196][T12844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.030974][T12844] usb 6-1: Product: syz [ 1215.038700][T12844] usb 6-1: Manufacturer: syz [ 1215.046546][T12844] usb 6-1: SerialNumber: syz [ 1215.790468][T12844] usb 6-1: USB disconnect, device number 126 [ 1215.850915][T22458] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.4438'. [ 1216.237277][T22446] ALSA: mixer_oss: invalid OSS volume 'VOLU/iommu' [ 1216.637660][T22475] netlink: 'syz.0.4445': attribute type 1 has an invalid length. [ 1216.693881][T12844] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1216.738259][T22475] bond5: entered promiscuous mode [ 1216.777997][T22475] bond5: entered allmulticast mode [ 1216.792406][T22478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1216.799049][T22478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1216.808347][T22478] vhci_hcd vhci_hcd.0: Device attached [ 1216.811780][T22475] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1216.832283][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1216.875146][T12844] usb 6-1: Using ep0 maxpacket: 32 [ 1216.889291][T12844] usb 6-1: config 6 has an invalid interface number: 132 but max is 0 [ 1216.913473][T12844] usb 6-1: config 6 has no interface number 0 [ 1216.938737][T22477] erspan1: entered allmulticast mode [ 1216.949904][T12844] usb 6-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 1216.983139][T22477] bond5: (slave erspan1): making interface the new active one [ 1216.999920][T12844] usb 6-1: config 6 interface 132 has no altsetting 0 [ 1217.000037][T22477] erspan1: entered promiscuous mode [ 1217.024081][T22477] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 1217.034866][T12844] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 1217.068664][T12844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.089337][T12844] usb 6-1: Product: syz [ 1217.094033][ T7786] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1217.109392][T12844] usb 6-1: Manufacturer: syz [ 1217.121960][T12844] usb 6-1: SerialNumber: syz [ 1217.137564][T22480] vhci_hcd: connection closed [ 1217.174298][ T35] vhci_hcd vhci_hcd.4: stop threads [ 1217.220115][ T35] vhci_hcd vhci_hcd.4: release socket [ 1217.238269][ T35] vhci_hcd vhci_hcd.4: disconnect device [ 1217.264109][ T7786] usb 7-1: Using ep0 maxpacket: 8 [ 1217.292943][ T7786] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1217.309336][ T7786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.332786][ T7786] usb 7-1: Product: syz [ 1217.367565][ T7786] usb 7-1: Manufacturer: syz [ 1217.409460][ T7786] usb 7-1: SerialNumber: syz [ 1217.469881][T12844] usbtest 6-1:6.132: couldn't get endpoints, -22 [ 1217.491034][T12844] usbtest 6-1:6.132: probe with driver usbtest failed with error -22 [ 1217.539440][T12844] usb 6-1: USB disconnect, device number 127 [ 1217.585010][T22493] cifs: Unknown parameter '' [ 1217.754124][ T10] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1217.884260][T22485] bond3: option mode: unable to set because the bond device has slaves [ 1217.922662][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1217.933175][ T7786] usb 7-1: unit 0 not found! [ 1217.947457][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1218.009576][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 1218.049016][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1218.071855][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.090540][ T7786] usb 7-1: USB disconnect, device number 28 [ 1218.098072][ T10] usb 3-1: Product: syz [ 1218.108027][ T10] usb 3-1: Manufacturer: syz [ 1218.123433][ T10] usb 3-1: SerialNumber: syz [ 1218.276435][T22499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.288919][T22499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.445215][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1218.452643][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1218.494335][ T10] usb 3-1: USB disconnect, device number 57 [ 1218.548249][T21657] udevd[21657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.782572][T22506] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4451'. [ 1218.903746][T22506] dvmrp6: entered allmulticast mode [ 1219.363788][T19893] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1219.534043][T19893] usb 3-1: Using ep0 maxpacket: 8 [ 1219.546045][T19893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1219.558935][T19893] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 1219.575388][T19893] usb 3-1: config 0 has no interface number 0 [ 1219.603298][T19893] usb 3-1: config 0 interface 36 has no altsetting 0 [ 1219.664895][T19893] usb 3-1: New USB device found, idVendor=3195, idProduct=f280, bcdDevice=cf.dd [ 1219.674654][T19893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.691904][T19893] usb 3-1: Product: à ¬ [ 1219.698762][T19893] usb 3-1: Manufacturer: à°Œ [ 1219.717149][T19893] usb 3-1: SerialNumber: à š [ 1219.733775][T19893] usb 3-1: config 0 descriptor?? [ 1220.280013][T22525] binder_alloc: 22523: binder_alloc_buf, no vma [ 1220.711922][T22531] faux_driver vkms: [drm] Unknown color mode 262147; guessing buffer size. [ 1220.894115][ T7786] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1221.057831][ T7786] usb 6-1: config 0 has no interfaces? [ 1221.069988][ T7786] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1221.088833][ T7786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.107791][ T7786] usb 6-1: Product: syz [ 1221.117579][ T7786] usb 6-1: Manufacturer: syz [ 1221.128226][ T7786] usb 6-1: SerialNumber: syz [ 1221.145579][ T7786] usb 6-1: config 0 descriptor?? [ 1221.639650][ T10] usb 6-1: USB disconnect, device number 2 [ 1222.272408][T19893] cp210x 3-1:0.36: cp210x converter detected [ 1222.305665][T19893] cp210x 3-1:0.36: failed to get vendor val 0x370b size 1: -71 [ 1222.332857][T22549] netlink: 'syz.5.4462': attribute type 1 has an invalid length. [ 1222.333021][T19893] cp210x 3-1:0.36: querying part number failed [ 1222.388022][T19893] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1222.471567][T19893] usb 3-1: USB disconnect, device number 58 [ 1222.535191][T19893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1222.578776][T19893] cp210x 3-1:0.36: device disconnected [ 1222.749033][ T29] audit: type=1326 audit(1782474822.651:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22536 comm="syz.0.4459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f880ec code=0x0 [ 1222.969980][T22549] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1223.032374][T22556] gretap1: entered promiscuous mode [ 1223.100813][T22556] bond3: (slave gretap1): making interface the new active one [ 1223.158674][T22556] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1225.183880][ T5702] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1225.343891][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 1225.350161][ T5702] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1225.360512][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.387475][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.414775][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.443887][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.470552][T22588] fuse: Unknown parameter '0x000000000000000b' [ 1225.493851][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.527993][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.562716][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.588205][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.611410][ T5702] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1225.633008][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.667381][ T5702] usb 6-1: Product: syz [ 1225.680763][ T5702] usb 6-1: Manufacturer: syz [ 1225.699190][ T5702] usb 6-1: SerialNumber: syz [ 1225.739071][ T5702] usb 6-1: config 0 descriptor?? [ 1225.771765][ T5702] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz) [ 1225.822597][T22597] binder_alloc: 22594: binder_alloc_buf, no vma [ 1225.963051][ T5702] usb 6-1: USB disconnect, device number 3 [ 1226.112080][T22601] loop5: detected capacity change from 0 to 4095 [ 1226.437880][T22601] buffer_io_error: 323 callbacks suppressed [ 1226.437987][T22601] Buffer I/O error on dev loop5, logical block 511, async page read [ 1226.460675][T21786] Buffer I/O error on dev loop5, logical block 511, async page read [ 1226.802111][T22610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.841837][T22610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.084393][T22618] syzkaller1: entered promiscuous mode [ 1227.128509][T22618] syzkaller1: entered allmulticast mode [ 1227.695584][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1227.863958][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1227.889652][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1227.915917][ T10] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1227.925358][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.956216][ T10] usb 6-1: Product: syz [ 1227.973788][ T10] usb 6-1: Manufacturer: syz [ 1227.994994][ T10] usb 6-1: SerialNumber: syz [ 1228.025823][ T10] usb 6-1: config 0 descriptor?? [ 1228.068286][ T10] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0204 [ 1228.292096][T22613] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4474'. [ 1228.319693][T22613] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4474'. [ 1228.352980][ T10] usb 6-1: USB disconnect, device number 4 [ 1229.004280][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1229.045420][T22638] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 1229.136564][T22638] netlink: 'syz.2.4478': attribute type 2 has an invalid length. [ 1229.209088][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1229.248251][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1229.311232][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1229.339451][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.397772][T22637] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1229.429883][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1229.448541][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4481'. [ 1229.726476][ T10] usb 7-1: USB disconnect, device number 29 [ 1230.487650][T22656] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4482'. [ 1231.068226][T22659] binder_alloc: 22657: binder_alloc_buf, no vma [ 1231.095336][T22661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.186368][T22661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.244506][T22661] sit0: left promiscuous mode [ 1231.269216][T22661] dummy0: left promiscuous mode [ 1231.310703][T22661] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1231.347007][T22661] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 1231.373162][T22661] ipip0: left promiscuous mode [ 1231.389720][T22661] ipip0: left allmulticast mode [ 1231.410195][T22661] bond1: left promiscuous mode [ 1231.426469][T22661] macvlan0: left promiscuous mode [ 1231.498390][T22661] bond4: left promiscuous mode [ 1231.509901][T22661] bridge5: left promiscuous mode [ 1231.527828][T22661] bond4: left allmulticast mode [ 1231.551463][T22661] bridge5: left allmulticast mode [ 1231.891030][T22676] loop4: detected capacity change from 0 to 7 [ 1232.018639][T22676] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1232.024424][T22676] loop4: partition table partially beyond EOD, truncated [ 1232.032492][T22676] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1232.213838][ T5702] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1232.395556][ T5702] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1232.416456][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1232.421812][ T5702] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1232.438334][ T4992] loop4: partition table partially beyond EOD, truncated [ 1232.517158][ T5702] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1232.547316][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1232.556553][ T5702] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1232.574142][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1232.588446][ T5702] usb 3-1: Product: syz [ 1232.588785][T22683] program syz.4.4489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1232.592641][ T5702] usb 3-1: Manufacturer: syz [ 1232.592660][ T5702] usb 3-1: SerialNumber: syz [ 1232.611514][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1232.704496][ T5702] usb 3-1: config 0 descriptor?? [ 1232.725362][ T5702] usb 3-1: selecting invalid altsetting 0 [ 1232.787414][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1232.794255][ T10] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 1232.803820][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.952153][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.964464][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.978031][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.995681][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.009030][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.022563][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.116904][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.129884][ T10] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1233.139578][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.148125][ T10] usb 7-1: Product: syz [ 1233.152529][ T10] usb 7-1: Manufacturer: syz [ 1233.157399][ T10] usb 7-1: SerialNumber: syz [ 1233.166012][ T10] usb 7-1: config 0 descriptor?? [ 1233.244400][ T10] etas_es58x 7-1:0.0: Starting syz syz (Serial Number syz) [ 1233.462646][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1233.543836][ T5702] usb 7-1: USB disconnect, device number 30 [ 1233.550868][ T4992] loop4: partition table partially beyond EOD, truncated [ 1233.565278][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1233.748099][T22686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.844552][T22686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.907586][T22686] tipc: Enabled bearer , priority 10 [ 1234.743905][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1234.761818][ T4992] loop4: partition table partially beyond EOD, truncated [ 1234.806930][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1234.957467][T19893] usb 3-1: USB disconnect, device number 59 [ 1235.023892][ T5702] tipc: Node number set to 864097746 [ 1235.113790][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1235.284068][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1235.302505][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1235.329438][ T10] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1235.368665][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1235.415422][ T10] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1235.461655][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1235.493898][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1235.517451][ T10] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1235.559935][ T10] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1235.609519][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1235.625467][ T10] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1235.689304][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1235.718616][ T10] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1235.739953][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1235.751341][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1235.763363][ T10] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1235.779110][ T10] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1235.820351][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1235.828357][ T10] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1235.882164][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1235.971161][ T10] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.142841][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1236.156166][T22712] program syz.0.4495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1236.208105][ T10] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1236.261087][ T10] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1236.290308][T22717] batman_adv: batadv0: Interface deactivated: dummy0 [ 1236.315251][ T10] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1236.322753][T22717] batadv_slave_1: left promiscuous mode [ 1236.354946][ T10] usb 1-1: string descriptor 0 read error: -71 [ 1236.387895][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1236.420627][T22716] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4496'. [ 1236.451548][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.502665][ T10] usb 1-1: can't set config #168, error -71 [ 1236.510992][T22717] bond2: left promiscuous mode [ 1236.532842][T22717] bond3: left promiscuous mode [ 1236.597594][T22717] bond4: left promiscuous mode [ 1236.605284][ T10] usb 1-1: USB disconnect, device number 51 [ 1236.605681][T22717] bridge1: left promiscuous mode [ 1236.628398][T22717] bond4: left allmulticast mode [ 1236.633610][T22717] bridge1: left allmulticast mode [ 1236.698102][T22717] vlan3: left allmulticast mode [ 1236.707156][T22717] bridge2: left allmulticast mode [ 1236.750055][T22717] bond5: left promiscuous mode [ 1236.768709][T22717] erspan1: left promiscuous mode [ 1236.785362][T22717] bond5: left allmulticast mode [ 1236.817887][T22717] erspan1: left allmulticast mode [ 1236.996125][T22728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.031614][T22728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.115701][ T7786] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1237.237484][T22728] tipc: Disabling bearer [ 1237.284781][ T7786] usb 6-1: Using ep0 maxpacket: 8 [ 1237.300360][ T7786] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1237.327605][ T7786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.387523][ T7786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1237.411442][ T7786] pvrusb2: ********** [ 1237.427201][ T7786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1237.458974][ T7786] pvrusb2: Important functionality might not be entirely working. [ 1237.500966][ T7786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1237.519022][ T7786] pvrusb2: ********** [ 1237.559838][ T2368] pvrusb2: Invalid write control endpoint [ 1237.619502][ T2368] pvrusb2: Invalid write control endpoint [ 1237.629817][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1237.645761][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1237.653588][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1237.667092][ T2368] pvrusb2: Device being rendered inoperable [ 1237.673599][ T2368] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1237.683895][ T2368] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1237.700145][T22738] input: syz1 as /devices/virtual/input/input128 [ 1237.716693][ T2368] pvrusb2: Attached sub-driver cx25840 [ 1237.737758][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1237.788783][ T10] usb 6-1: USB disconnect, device number 5 [ 1237.801038][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1238.867898][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.876340][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.323899][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1239.484321][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1239.524188][ T10] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1239.552120][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.611885][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.633611][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.666491][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.685641][T12844] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1239.712745][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.755854][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.794831][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.825883][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.864029][ T10] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1239.874434][T12844] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.891397][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.906973][T12844] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1239.917691][ T10] usb 3-1: Product: syz [ 1239.929169][ T10] usb 3-1: Manufacturer: syz [ 1239.937672][T12844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.949373][ T10] usb 3-1: SerialNumber: syz [ 1239.958746][T12844] usb 7-1: Product: syz [ 1239.968523][ T10] usb 3-1: config 0 descriptor?? [ 1239.975569][T12844] usb 7-1: Manufacturer: syz [ 1239.984714][ T10] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) [ 1239.995404][T12844] usb 7-1: SerialNumber: syz [ 1240.020227][T12844] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1240.198328][ T10] usb 3-1: USB disconnect, device number 60 [ 1240.541377][T12844] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1240.597539][T12844] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1240.634367][T12844] usb 7-1: media controller created [ 1240.689922][T12844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.089338][T12844] usb 7-1: USB disconnect, device number 31 [ 1241.378133][T22785] batadv_slave_1: entered promiscuous mode [ 1241.607229][T22796] batadv_slave_1: left promiscuous mode [ 1242.973868][T19893] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1243.207397][T19893] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1243.250457][T19893] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.311782][T19893] usb 1-1: config 8 has no interface number 0 [ 1243.339030][T19893] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1243.390685][T19893] usb 1-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.468466][T19893] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1243.497843][T19893] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1243.513992][T19893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.828748][T22816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4520'. [ 1245.774775][T22842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.812900][T22847] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4526'. [ 1245.823409][ T7786] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1245.849289][T22847] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4526'. [ 1245.883975][T22842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.949597][T19893] usb 1-1: string descriptor 0 read error: -71 [ 1245.967924][T19893] ir_toy 1-1:8.177: required endpoints not found [ 1245.990480][T19893] usb 1-1: USB disconnect, device number 52 [ 1246.003801][ T1227] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1246.004076][ T7786] usb 3-1: Using ep0 maxpacket: 32 [ 1246.044423][ T7786] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1246.071120][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.083593][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.104944][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.116793][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.130173][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.148977][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.170070][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.187590][ T1227] usb 6-1: not running at top speed; connect to a high speed hub [ 1246.202169][ T1227] usb 6-1: config 45 has an invalid interface number: 2 but max is 0 [ 1246.216181][ T1227] usb 6-1: config 45 has no interface number 0 [ 1246.217222][ T7786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.232869][ T1227] usb 6-1: config 45 interface 2 has no altsetting 0 [ 1246.250741][ T7786] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1246.255202][ T1227] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1246.263293][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.287208][ T1227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.295391][ T7786] usb 3-1: Product: syz [ 1246.295410][ T7786] usb 3-1: Manufacturer: syz [ 1246.295424][ T7786] usb 3-1: SerialNumber: syz [ 1246.310850][ T7786] usb 3-1: config 0 descriptor?? [ 1246.327385][ T7786] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) [ 1246.337497][ T1227] usb 6-1: Product: syz [ 1246.352154][ T1227] usb 6-1: Manufacturer: syz [ 1246.360302][ T1227] usb 6-1: SerialNumber: syz [ 1246.365089][ T5702] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1246.514722][ T5702] usb 7-1: Using ep0 maxpacket: 32 [ 1246.521740][ T5702] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1246.532572][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.582231][T12844] usb 3-1: USB disconnect, device number 61 [ 1246.589122][ T5702] usb 7-1: config 0 descriptor?? [ 1246.637949][ T5702] as10x_usb: device has been detected [ 1246.661631][ T1227] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1246.672067][ T5702] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1246.687447][ T1227] dvb-usb: bulk message failed: -22 (3/0) [ 1246.717514][ T5702] usb 7-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1246.730619][ T1227] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1246.770391][ T1227] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1246.798568][ T1227] usb 6-1: media controller created [ 1246.807187][ T1227] dvb-usb: bulk message failed: -22 (5/0) [ 1246.825445][ T1227] dvb-usb: MAC address reading failed. [ 1246.838610][T22846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.852700][ T1227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.854496][T22846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.894360][ T1227] dvb-usb: bulk message failed: -22 (6/0) [ 1246.915942][ T5702] as10x_usb: error during firmware upload part1 [ 1246.938506][ T1227] dvb-usb: bulk message failed: -22 (6/0) [ 1246.945119][ T5702] Registered device nBox DVB-T Dongle [ 1246.954002][ T1227] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1246.999668][ T1227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input129 [ 1247.027136][ T7786] usb 7-1: USB disconnect, device number 32 [ 1247.063384][ T1227] dvb-usb: schedule remote query interval to 100 msecs. [ 1247.085714][ T7786] Unregistered device nBox DVB-T Dongle [ 1247.095974][ T1227] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1247.102601][ T7786] as10x_usb: device has been disconnected [ 1247.134068][ T1227] usb 6-1: USB disconnect, device number 6 [ 1247.259479][ T1227] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1248.515282][ T1227] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1248.673772][ T1227] usb 7-1: Using ep0 maxpacket: 8 [ 1248.692360][ T1227] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.701055][ T1227] usb 7-1: config 0 has no interface number 0 [ 1248.709068][ T1227] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1248.743727][ T1227] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1248.765351][ T1227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.810556][ T1227] usb 7-1: Product: syz [ 1248.843378][ T1227] usb 7-1: Manufacturer: syz [ 1248.868511][ T1227] usb 7-1: SerialNumber: syz [ 1248.898118][ T1227] usb 7-1: config 0 descriptor?? [ 1249.130761][ T1227] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1249.359033][ T1227] usb 7-1: USB disconnect, device number 33 [ 1249.542686][ T7786] IPVS: starting estimator thread 0... [ 1249.663939][T22888] IPVS: using max 56 ests per chain, 134400 per kthread [ 1249.846369][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.915935][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.124671][T22902] loop6: detected capacity change from 0 to 2640 [ 1250.136679][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.162036][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.181251][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.227386][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.274754][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.327898][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.365363][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.384013][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.441109][T22902] ldm_validate_partition_table(): Disk read failed. [ 1250.515310][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.644583][T22902] Buffer I/O error on dev loop6, logical block 0, async page read [ 1250.700112][T22902] Dev loop6: unable to read RDB block 0 [ 1250.715886][T22902] loop6: unable to read partition table [ 1250.799627][T22902] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1251.072158][ T4992] ldm_validate_partition_table(): Disk read failed. [ 1251.087280][ T4992] Dev loop6: unable to read RDB block 0 [ 1251.099104][ T4992] loop6: unable to read partition table [ 1251.482364][T22919] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1251.600471][T22922] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1251.604225][T22918] netlink: 'syz.4.4541': attribute type 3 has an invalid length. [ 1251.623836][ T1227] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1251.817011][T22917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.852816][T22917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.258326][ T5702] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1252.434081][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 1252.440217][ T5702] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1252.456756][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.480349][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.619323][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.716175][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.727840][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.741818][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.755999][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.774878][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.789964][ T5702] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1252.801729][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.827169][ T5702] usb 1-1: Product: syz [ 1252.835181][ T5702] usb 1-1: Manufacturer: syz [ 1252.844083][ T5702] usb 1-1: SerialNumber: syz [ 1252.863645][ T5702] usb 1-1: config 0 descriptor?? [ 1252.881031][ T5702] etas_es58x 1-1:0.0: Starting syz syz (Serial Number syz) [ 1253.096939][ T5702] usb 1-1: USB disconnect, device number 53 [ 1253.493182][ T1227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1253.509281][ T1227] usb 3-1: no configurations [ 1253.524867][ T1227] usb 3-1: can't read configurations, error -22 [ 1253.794460][T22936] netlink: 'syz.4.4545': attribute type 1 has an invalid length. [ 1253.807031][T22936] netlink: 'syz.4.4545': attribute type 2 has an invalid length. [ 1253.954756][T22941] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.964311][T22941] binder: 22940:22941 ioctl 4018620d 80004a80 returned -16 [ 1253.996545][ T29] audit: type=1800 audit(1782474853.911:2243): pid=22937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4544" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1256.924991][T22973] loop6: detected capacity change from 0 to 7 [ 1256.942187][T22973] Dev loop6: unable to read RDB block 7 [ 1256.954068][T22973] loop6: unable to read partition table [ 1256.991462][T22973] loop6: partition table beyond EOD, truncated [ 1257.020219][T22973] loop_reread_partitions: partition scan of loop6 (þ被xü^>±à– ) failed (rc=-5) [ 1257.309443][ T4992] Dev loop6: unable to read RDB block 7 [ 1257.318471][ T4992] loop6: unable to read partition table [ 1257.323894][ T5702] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1257.368325][ T4992] loop6: partition table beyond EOD, truncated [ 1257.510203][ T5702] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1257.548637][ T5702] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1257.565930][ T5702] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1257.575307][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.583349][ T5702] usb 1-1: Product: syz [ 1257.587704][ T5702] usb 1-1: Manufacturer: syz [ 1257.592344][ T5702] usb 1-1: SerialNumber: syz [ 1257.908550][ T5702] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1257.952593][ T1227] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1258.175593][T22973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.211451][T22973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.233784][ T5702] usb 1-1: USB disconnect, device number 54 [ 1258.347623][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1259.084059][ T1227] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1259.096790][ T1227] ath9k_htc: Failed to initialize the device [ 1259.127633][ T5702] usb 1-1: ath9k_htc: USB layer deinitialized [ 1259.434505][ T5702] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1259.461881][T23006] binder: BINDER_SET_CONTEXT_MGR already set [ 1259.471083][T23006] binder: 23005:23006 ioctl 4018620d 80004a80 returned -16 [ 1259.606130][ T5702] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1259.635571][ T5702] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1259.665973][ T5702] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1259.682150][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.708212][ T5702] usb 1-1: Product: syz [ 1259.714225][ T5702] usb 1-1: Manufacturer: syz [ 1259.727345][ T5702] usb 1-1: SerialNumber: syz [ 1259.754482][ T5702] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1259.939325][ T1227] usb 1-1: USB disconnect, device number 55 [ 1260.509855][T23016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1261.831104][T23030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.869209][T23030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.946557][T23032] netlink: 'syz.0.4565': attribute type 1 has an invalid length. [ 1261.989403][T23032] netlink: 'syz.0.4565': attribute type 2 has an invalid length. [ 1266.764076][ T5702] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1266.945079][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 1266.960083][ T5702] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1266.978821][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.993007][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.013360][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.037866][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.065678][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.098650][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.116591][T23077] netlink: 'syz.6.4574': attribute type 4 has an invalid length. [ 1267.158549][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.239983][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.267396][ T5702] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1267.280642][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.293714][ T5702] usb 6-1: Product: syz [ 1267.300064][ T5702] usb 6-1: Manufacturer: syz [ 1267.312944][ T5702] usb 6-1: SerialNumber: syz [ 1267.345165][ T5702] usb 6-1: config 0 descriptor?? [ 1267.357774][ T5702] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz) [ 1267.582918][ T5702] usb 6-1: USB disconnect, device number 7 [ 1268.071911][T23091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.128680][T23091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.242872][T23091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.278826][T23091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.043770][ T5702] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1269.233959][ T5702] usb 3-1: Using ep0 maxpacket: 16 [ 1269.259624][ T5702] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 1269.326468][ T5702] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 1269.361249][ T5702] usb 3-1: config 166 has no interface number 0 [ 1269.385392][ T5702] usb 3-1: config 166 has no interface number 1 [ 1269.417923][ T5702] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1269.511016][ T5702] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1269.561699][ T5702] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1269.573726][ T5702] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1269.591592][ T5702] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1269.603885][ T5702] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1269.660154][ T5702] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1269.713768][ T5702] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1269.773520][ T5702] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1269.870116][ T5702] usb 3-1: config 166 interface 177 has no altsetting 0 [ 1269.886203][ T5702] usb 3-1: config 166 interface 34 has no altsetting 0 [ 1269.917120][ T5702] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1269.936357][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.949091][ T5702] usb 3-1: Product: syz [ 1269.967748][ T5702] usb 3-1: Manufacturer: syz [ 1270.012326][ T5702] usb 3-1: SerialNumber: syz [ 1270.135427][T23120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4580'. [ 1270.287909][ T5702] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 1270.483250][ T5702] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 1270.731727][ T5702] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 1271.337522][T23149] syzkaller0: entered promiscuous mode [ 1271.344542][T23149] syzkaller0: entered allmulticast mode [ 1271.382166][T23149] TC_ACT_REPEAT abuse ? [ 1271.503931][ T5702] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1271.528280][ T5702] uvcvideo 3-1:166.34: No valid video chain found. [ 1271.591499][ T5702] usb 3-1: USB disconnect, device number 64 [ 1272.421244][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4586'. [ 1273.066835][T23178] tipc: Enabled bearer , priority 0 [ 1273.095544][T23178] syzkaller0: entered promiscuous mode [ 1273.120376][T23178] syzkaller0: entered allmulticast mode [ 1273.356221][T23180] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4589'. [ 1273.376258][T23182] tipc: Resetting bearer [ 1273.387602][T23173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.413641][T23173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.653148][T23177] tipc: Resetting bearer [ 1273.695579][T23177] tipc: Disabling bearer [ 1274.111819][T23190] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1274.220638][T23190] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1274.295187][T23196] netlink: 'syz.5.4591': attribute type 4 has an invalid length. [ 1274.522236][T23190] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1278.347818][T23239] loop5: detected capacity change from 0 to 2640 [ 1278.388837][T23239] buffer_io_error: 27 callbacks suppressed [ 1278.388856][T23239] Buffer I/O error on dev loop5, logical block 0, async page read [ 1278.434026][T23239] Buffer I/O error on dev loop5, logical block 0, async page read [ 1278.471863][T23239] Buffer I/O error on dev loop5, logical block 0, async page read [ 1278.516993][T23239] Buffer I/O error on dev loop5, logical block 0, async page read [ 1278.549653][T23239] Buffer I/O error on dev loop5, logical block 0, async page read [ 1278.598567][T23239] loop5: unable to read partition table [ 1278.639714][T23243] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1278.657117][T23239] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1278.666162][T19893] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1278.699101][T23243] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1278.718921][T23243] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 1278.767178][T23243] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 1278.797898][T23243] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 1278.846192][T19893] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.884641][T19893] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1278.940614][T19893] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1278.968091][T19893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.003383][T19893] usb 7-1: Product: syz [ 1279.021245][T19893] usb 7-1: Manufacturer: syz [ 1279.038809][T19893] usb 7-1: SerialNumber: syz [ 1280.082091][T23279] batadv_slave_1: entered promiscuous mode [ 1280.175817][T19893] usb 7-1: unit 5 not found! [ 1280.229248][T23280] batadv_slave_1: left promiscuous mode [ 1280.260703][T19893] usb 7-1: USB disconnect, device number 34 [ 1280.266777][ T1227] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1280.358185][T21786] udevd[21786]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.425671][ T1227] usb 6-1: Using ep0 maxpacket: 32 [ 1280.432254][ T1227] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1280.446979][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.461005][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.478267][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.510173][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.527462][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.548141][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.570492][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.598156][ T1227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.620562][ T1227] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1280.631573][ T1227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.653893][ T1227] usb 6-1: Product: syz [ 1280.660462][ T1227] usb 6-1: Manufacturer: syz [ 1280.669446][ T1227] usb 6-1: SerialNumber: syz [ 1280.681948][ T1227] usb 6-1: config 0 descriptor?? [ 1280.695558][ T1227] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz) [ 1280.934635][ T7786] usb 6-1: USB disconnect, device number 8 [ 1281.103832][ T1227] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1281.274617][ T1227] usb 7-1: Using ep0 maxpacket: 16 [ 1281.292190][ T1227] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1281.315816][ T1227] usb 7-1: string descriptor 0 read error: -22 [ 1281.333252][ T1227] usb 7-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 1281.350088][ T1227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.900010][ T1227] hid (null): invalid report_count 463869145 [ 1282.001533][ T1227] thrustmaster 0003:044F:B320.008A: invalid report_count 463869145 [ 1282.028402][ T1227] thrustmaster 0003:044F:B320.008A: item 0 4 1 9 parsing failed [ 1282.043151][ T1227] thrustmaster 0003:044F:B320.008A: parse failed [ 1282.057159][ T1227] thrustmaster 0003:044F:B320.008A: probe with driver thrustmaster failed with error -22 [ 1282.171476][ T1227] usb 7-1: USB disconnect, device number 35 [ 1283.475423][T23306] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1283.490572][T23306] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1283.554806][ T7786] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1283.623512][T23306] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1283.734085][ T7786] usb 7-1: Using ep0 maxpacket: 16 [ 1283.753427][ T7786] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 1283.766780][ T7786] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 1283.803361][ T7786] usb 7-1: config 166 has no interface number 0 [ 1283.820487][ T7786] usb 7-1: config 166 has no interface number 1 [ 1283.845777][ T7786] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1283.876426][ T7786] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1283.909068][ T7786] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1283.940546][ T7786] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1283.974240][ T7786] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1284.002395][T23310] syzkaller0: entered promiscuous mode [ 1284.009779][T23310] syzkaller0: entered allmulticast mode [ 1284.013958][ T7786] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1284.044354][ T7786] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1284.090215][ T7786] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1284.135637][ T7786] usb 7-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1284.169562][ T7786] usb 7-1: config 166 interface 177 has no altsetting 0 [ 1284.191814][ T7786] usb 7-1: config 166 interface 34 has no altsetting 0 [ 1284.217211][ T7786] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1284.236286][ T7786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.291270][ T7786] usb 7-1: Product: syz [ 1284.304677][ T7786] usb 7-1: Manufacturer: syz [ 1284.320435][ T7786] usb 7-1: SerialNumber: syz [ 1284.547155][ T7786] ums-realtek 7-1:166.177: USB Mass Storage device detected [ 1284.757211][ T7786] ums-realtek 7-1:166.34: USB Mass Storage device detected [ 1284.935981][T23327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.947387][T23327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.055813][ T7786] ums-realtek 7-1:166.34: probe with driver ums-realtek failed with error -5 [ 1285.665522][ T7786] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1285.703043][ T7786] uvcvideo 7-1:166.34: No valid video chain found. [ 1285.761123][ T7786] usb 7-1: USB disconnect, device number 36 [ 1285.867123][T23340] syzkaller0: entered promiscuous mode [ 1285.878979][T23340] syzkaller0: entered allmulticast mode [ 1286.539492][T23352] binder: BINDER_SET_CONTEXT_MGR already set [ 1286.547158][T23352] binder: 23351:23352 ioctl 4018620d 80004a80 returned -16 [ 1288.595301][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1288.764308][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1288.780617][ T24] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1288.805170][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.831952][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.852106][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.886875][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.918223][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.945519][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.979398][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.002997][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.041419][ T24] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1289.061352][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.105736][ T24] usb 3-1: Product: syz [ 1289.116896][ T24] usb 3-1: Manufacturer: syz [ 1289.133966][ T24] usb 3-1: SerialNumber: syz [ 1289.158034][ T24] usb 3-1: config 0 descriptor?? [ 1289.189971][ T24] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) [ 1289.397736][ T24] usb 3-1: USB disconnect, device number 65 [ 1289.677004][T23415] program syz.5.4625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1290.726194][T23419] loop5: detected capacity change from 0 to 2640 [ 1290.743998][T23419] buffer_io_error: 325 callbacks suppressed [ 1290.744015][T23419] Buffer I/O error on dev loop5, logical block 0, async page read [ 1290.799911][T23419] Buffer I/O error on dev loop5, logical block 0, async page read [ 1290.832654][T23419] Buffer I/O error on dev loop5, logical block 0, async page read [ 1290.873896][T23419] Buffer I/O error on dev loop5, logical block 0, async page read [ 1290.906109][T23419] Buffer I/O error on dev loop5, logical block 0, async page read [ 1290.942637][T23419] Buffer I/O error on dev loop5, logical block 0, async page read [ 1291.025168][T23420] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1291.066424][T23419] loop5: unable to read partition table [ 1291.081786][T23419] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1291.101868][T23420] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1291.141147][T23420] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 1291.177757][T23420] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 1291.423380][T23427] syzkaller0: entered promiscuous mode [ 1291.450650][T23427] syzkaller0: entered allmulticast mode [ 1291.635554][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4629'. [ 1291.677971][T23435] syzkaller0: entered promiscuous mode [ 1291.696080][T23435] syzkaller0: entered allmulticast mode [ 1292.248570][T23444] program syz.2.4644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1294.063797][ T29] audit: type=1326 audit(1782474893.971:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23462 comm="syz.5.4635" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x0 [ 1294.674129][ T7786] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1294.823984][T12844] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1294.835357][ T7786] usb 3-1: Using ep0 maxpacket: 16 [ 1294.856203][ T7786] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1294.870003][ T7786] usb 3-1: string descriptor 0 read error: -22 [ 1294.878977][T23477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4636'. [ 1294.902252][ T7786] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 1294.927203][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.993973][T12844] usb 1-1: Using ep0 maxpacket: 32 [ 1295.003450][T12844] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1295.022558][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.062952][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.094961][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.120336][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.145689][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.176644][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.203532][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.221507][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.246172][T12844] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1295.260392][T12844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.277291][T12844] usb 1-1: Product: syz [ 1295.283106][T12844] usb 1-1: Manufacturer: syz [ 1295.293131][T12844] usb 1-1: SerialNumber: syz [ 1295.328792][T12844] usb 1-1: config 0 descriptor?? [ 1295.347708][T12844] etas_es58x 1-1:0.0: Starting syz syz (Serial Number syz) [ 1295.451386][ T7786] hid (null): invalid report_count 463869145 [ 1295.566201][ T7786] thrustmaster 0003:044F:B320.008B: invalid report_count 463869145 [ 1295.590610][T12844] usb 1-1: USB disconnect, device number 56 [ 1295.597770][ T7786] thrustmaster 0003:044F:B320.008B: item 0 4 1 9 parsing failed [ 1295.624156][ T7786] thrustmaster 0003:044F:B320.008B: parse failed [ 1295.636358][ T7786] thrustmaster 0003:044F:B320.008B: probe with driver thrustmaster failed with error -22 [ 1295.744755][ T7786] usb 3-1: USB disconnect, device number 66 [ 1296.675826][T23490] binder: BINDER_SET_CONTEXT_MGR already set [ 1296.693131][T23490] binder: 23488:23490 ioctl 4018620d 80004a80 returned -16 [ 1296.837598][T23499] loop5: detected capacity change from 0 to 2640 [ 1296.864810][T23499] buffer_io_error: 326 callbacks suppressed [ 1296.864823][T23499] Buffer I/O error on dev loop5, logical block 0, async page read [ 1296.883896][T23499] Buffer I/O error on dev loop5, logical block 0, async page read [ 1296.902911][T23499] Buffer I/O error on dev loop5, logical block 0, async page read [ 1296.938960][T23499] Buffer I/O error on dev loop5, logical block 0, async page read [ 1296.996605][T23499] Buffer I/O error on dev loop5, logical block 0, async page read [ 1297.064731][T23502] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1297.092270][T23499] loop5: unable to read partition table [ 1297.114773][T23499] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 1297.163344][T23502] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 1297.210973][T23502] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 1297.265038][T23502] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 1297.295417][T23502] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 1298.635778][T23520] netlink: 'syz.2.4650': attribute type 1 has an invalid length. [ 1298.653986][T23520] netlink: 'syz.2.4650': attribute type 2 has an invalid length. [ 1298.816173][T23528] program syz.4.4652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1299.855997][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4653'. [ 1300.281228][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.288058][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.154240][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1301.354371][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1301.377701][ T24] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1301.403267][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.434854][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.505286][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.544412][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.589493][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.616894][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.632811][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.645081][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.658235][ T24] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1301.668654][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.687323][ T24] usb 6-1: Product: syz [ 1301.695483][ T24] usb 6-1: Manufacturer: syz [ 1301.707161][ T24] usb 6-1: SerialNumber: syz [ 1301.725263][ T24] usb 6-1: config 0 descriptor?? [ 1301.738275][ T24] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz) [ 1301.944248][T12840] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1301.944328][ T24] usb 6-1: USB disconnect, device number 9 [ 1302.093971][T12840] usb 7-1: Using ep0 maxpacket: 32 [ 1302.108249][T12840] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 1302.136267][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.159239][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.181243][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.204996][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.230821][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.256065][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.279341][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.302856][T12840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.342360][T12840] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1302.366623][T12840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.392871][T12840] usb 7-1: Product: syz [ 1302.402333][T12840] usb 7-1: Manufacturer: syz [ 1302.419962][T23556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'. [ 1302.429556][T12840] usb 7-1: SerialNumber: syz [ 1302.444835][T12840] usb 7-1: config 0 descriptor?? [ 1302.460552][T12840] etas_es58x 7-1:0.0: Starting syz syz (Serial Number syz) [ 1302.704575][T12840] usb 7-1: USB disconnect, device number 37 [ 1302.906111][T23564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4661'. [ 1303.024187][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4661'. [ 1303.637156][T23571] netlink: 'syz.4.4662': attribute type 4 has an invalid length. [ 1304.948957][T23594] syzkaller0: entered promiscuous mode [ 1305.001131][T23594] syzkaller0: entered allmulticast mode [ 1305.693864][T12840] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1305.853794][T12840] usb 1-1: Using ep0 maxpacket: 16 [ 1305.879934][T12840] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 1305.911748][T12840] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 1305.942666][T12840] usb 1-1: config 166 has no interface number 0 [ 1305.963629][T12840] usb 1-1: config 166 has no interface number 1 [ 1305.978297][T12840] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1306.005483][T12840] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1306.054395][T12840] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1306.067608][T23603] netlink: 'syz.5.4669': attribute type 3 has an invalid length. [ 1306.100909][T12840] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1306.134715][T12840] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1306.172278][T12840] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1306.213102][T12840] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1306.252091][T12840] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1306.281833][T12840] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1306.328317][T12840] usb 1-1: config 166 interface 177 has no altsetting 0 [ 1306.351690][T12840] usb 1-1: config 166 interface 34 has no altsetting 0 [ 1306.378196][T12840] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1306.393726][T12840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.419531][T12840] usb 1-1: Product: syz [ 1306.448506][T12840] usb 1-1: Manufacturer: syz [ 1306.460934][T12840] usb 1-1: SerialNumber: syz [ 1306.687937][T12840] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 1306.896704][T12840] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 1307.144408][T12840] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 1307.691844][T12840] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1307.725271][T12840] uvcvideo 1-1:166.34: No valid video chain found. [ 1307.782725][T12840] usb 1-1: USB disconnect, device number 57 [ 1308.342318][T23621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.357901][T23621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.483939][T19893] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1308.613818][T23633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4675'. [ 1308.634158][T23633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4675'. [ 1308.658005][T19893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1308.684590][T19893] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1308.712570][T19893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.741872][T19893] usb 3-1: config 0 descriptor?? [ 1308.767657][T23628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1309.215930][T23628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.268487][T23628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.682592][T23648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4690'. [ 1309.723465][T23648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4690'. [ 1310.514629][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1311.014751][ T24] IPVS: starting estimator thread 0... [ 1311.113820][T23670] IPVS: using max 31 ests per chain, 74400 per kthread [ 1311.377499][T19893] usbhid 3-1:0.0: can't add hid device: -71 [ 1311.409815][T19893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1311.450595][T19893] usb 3-1: USB disconnect, device number 67 [ 1311.911352][T19893] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1312.077420][T19893] usb 3-1: Using ep0 maxpacket: 32 [ 1312.093309][T19893] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1312.117898][T19893] usb 3-1: config 0 has no interface number 0 [ 1312.140422][T19893] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1312.169592][T19893] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1312.193391][T19893] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1312.219882][T19893] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1312.241631][T19893] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1312.268216][T19893] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1312.295334][T19893] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1312.323318][T19893] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 1312.358506][T19893] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1312.383969][T19893] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1312.427999][T19893] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1312.456381][T19893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.473615][T19893] usb 3-1: Product: syz [ 1312.486541][T19893] usb 3-1: Manufacturer: syz [ 1312.492673][T19893] usb 3-1: SerialNumber: syz [ 1312.510744][T19893] usb 3-1: config 0 descriptor?? [ 1312.521643][T23675] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1312.534462][T23675] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1312.571212][T19893] usb 3-1: will this work? Response EP is not usually 3 [ 1312.604108][T19893] usb 3-1: will this work? Image data EP is not usually 2 [ 1312.633527][T19893] scsi host1: microtekX6 [ 1313.207586][T19893] usb 3-1: USB disconnect, device number 68 [ 1313.697841][T23691] netlink: 'syz.4.4687': attribute type 1 has an invalid length. [ 1313.820175][T23698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4687'. [ 1313.893522][T23695] erspan1: entered allmulticast mode [ 1314.082400][T23691] bond5: entered promiscuous mode [ 1314.112972][T23691] bond5: entered allmulticast mode [ 1314.157649][T23691] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1314.744909][ T7786] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1314.777892][T23721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4693'. [ 1314.806765][T23721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4693'. [ 1314.918916][ T7786] usb 6-1: Using ep0 maxpacket: 32 [ 1314.926342][ T7786] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1314.936766][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.957762][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.989896][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.008161][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.023355][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.043784][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.056585][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.069736][ T7786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.082620][ T7786] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1315.092505][ T7786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.119222][ T7786] usb 6-1: Product: syz [ 1315.128257][ T7786] usb 6-1: Manufacturer: syz [ 1315.138457][ T7786] usb 6-1: SerialNumber: syz [ 1315.171835][ T7786] usb 6-1: config 0 descriptor?? [ 1315.188669][ T7786] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz) [ 1318.882648][T23725] macvlan2: entered promiscuous mode [ 1318.888346][T23725] macvlan2: entered allmulticast mode [ 1318.895471][T23725] batadv0: entered allmulticast mode [ 1318.901079][T23725] batadv0: entered promiscuous mode [ 1318.909261][T23725] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1318.919835][T23725] team0: Port device macvlan2 added [ 1319.057242][T23729] program syz.0.4706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1319.272422][T12844] usb 6-1: USB disconnect, device number 10 [ 1320.213423][T23748] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4699'. [ 1320.423086][T23751] program syz.6.4698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1320.794150][T23760] netlink: 'syz.0.4702': attribute type 1 has an invalid length. [ 1320.867845][T23760] bond6: entered promiscuous mode [ 1320.888904][T23760] bond6: entered allmulticast mode [ 1320.924554][T23763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1320.969831][T23760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1321.379741][T23777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4705'. [ 1321.431836][T23777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4705'. [ 1322.848614][T23786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.890837][T23786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.945463][T23786] batman_adv: batadv0: Interface activated: dummy0 [ 1322.973297][T23786] batadv0: mtu less than device minimum [ 1323.003562][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.014684][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.025783][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.036871][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.047998][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.059617][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.070713][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.081830][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.092921][T23786] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1323.147611][T23786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.278226][T23786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.430525][T23786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.479472][T23786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1323.491024][T23786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1323.514608][T23783] macvlan2: entered promiscuous mode [ 1323.527972][T23783] macvlan2: entered allmulticast mode [ 1323.541093][T23783] batadv0: entered promiscuous mode [ 1323.550260][T23783] batadv0: entered allmulticast mode [ 1323.560269][T23783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1323.571132][T23783] team0: Port device macvlan2 added [ 1323.586719][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.593884][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.605059][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.612191][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.648643][T23793] syzkaller1: entered promiscuous mode [ 1323.654374][T23793] syzkaller1: entered allmulticast mode [ 1323.849480][T23804] netlink: 'syz.5.4712': attribute type 10 has an invalid length. [ 1323.914126][T23809] netlink: 'syz.5.4712': attribute type 1 has an invalid length. [ 1323.979140][T23809] netlink: 'syz.5.4712': attribute type 3 has an invalid length. [ 1324.025239][T23809] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4712'. [ 1324.079978][T23807] netlink: 'syz.6.4711': attribute type 1 has an invalid length. [ 1324.116819][T23807] netlink: 'syz.6.4711': attribute type 2 has an invalid length. [ 1324.138288][T23814] netlink: 'syz.5.4712': attribute type 10 has an invalid length. [ 1324.384821][T23820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.467922][T23820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.531632][T23814] dummy0 (unregistering): left promiscuous mode [ 1324.568581][T23815] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1324.578995][T23815] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1324.770683][T23822] could not allocate digest TFM handle blake2s-128-generic [ 1325.449397][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4717'. [ 1325.658698][T23834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1325.700318][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1325.837913][T23837] netlink: 'syz.5.4718': attribute type 2 has an invalid length. [ 1326.235911][T23837] : entered promiscuous mode [ 1326.714511][T23845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.749887][T23845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.005736][ T1227] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1327.173906][ T1227] usb 1-1: Using ep0 maxpacket: 16 [ 1327.187429][ T1227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1327.207480][ T1227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42662, setting to 1024 [ 1327.266364][ T1227] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1327.279272][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.297527][ T1227] usb 1-1: Product: syz [ 1327.306290][ T1227] usb 1-1: Manufacturer: syz [ 1327.316535][ T1227] usb 1-1: SerialNumber: syz [ 1327.343157][ T1227] usb 1-1: config 0 descriptor?? [ 1327.397409][ T1227] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1328.269683][ T1127] net_ratelimit: 60 callbacks suppressed [ 1328.269701][ T1127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1328.437294][ T43] usb 1-1: Failed to submit usb control message: -110 [ 1328.461644][ T43] usb 1-1: unable to send the bmi data to the device: -110 [ 1328.486976][ T43] usb 1-1: unable to get target info from device [ 1328.502489][ T43] usb 1-1: could not get target info (-110) [ 1328.518846][ T43] usb 1-1: could not probe fw (-110) [ 1328.688545][T23868] trusted_key: encrypted_key: key user:syz not found [ 1328.729306][T23868] syzkaller1: entered promiscuous mode [ 1328.752977][T23868] syzkaller1: entered allmulticast mode [ 1328.843944][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1329.375794][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1329.657058][T19893] usb 1-1: USB disconnect, device number 58 [ 1329.839236][T23872] program syz.5.4729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1329.914958][ T43] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1329.963177][T23880] netlink: 'syz.4.4730': attribute type 10 has an invalid length. [ 1329.989509][T23880] team0: Device dummy0 failed to register rx_handler [ 1330.035292][T23880] netlink: 'syz.4.4730': attribute type 1 has an invalid length. [ 1330.047976][T23880] netlink: 'syz.4.4730': attribute type 3 has an invalid length. [ 1330.059655][T23880] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4730'. [ 1330.224624][T23884] netlink: 'syz.4.4730': attribute type 10 has an invalid length. [ 1330.444055][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1330.763506][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1330.975114][ T1127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1331.564183][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1331.666521][T23904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.695498][T23904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.123797][ T43] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1332.674627][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1333.233923][ T1127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1333.783798][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1334.174254][ T7786] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1334.204111][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1334.324336][ T7786] usb 3-1: Using ep0 maxpacket: 16 [ 1334.331738][ T7786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1334.340529][ T7786] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 1334.354002][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1334.362513][ T7786] usb 3-1: config 4 has no interface number 0 [ 1334.364753][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1334.388719][ T7786] usb 3-1: config 4 interface 55 has no altsetting 0 [ 1334.396920][ T43] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1334.404944][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42662, setting to 1024 [ 1334.431717][T12844] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1334.436715][ T24] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1334.451453][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.459942][ T7786] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 1334.460341][ T24] usb 6-1: Product: syz [ 1334.473994][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.483266][ T7786] usb 3-1: Product: syz [ 1334.487677][ T7786] usb 3-1: Manufacturer: syz [ 1334.491805][ T24] usb 6-1: Manufacturer: syz [ 1334.492382][ T7786] usb 3-1: SerialNumber: syz [ 1334.497552][T23937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.514848][ T24] usb 6-1: SerialNumber: syz [ 1334.521735][T23937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.527718][ T24] usb 6-1: config 0 descriptor?? [ 1334.553470][T23937] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1334.558317][ T24] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1334.643735][T12844] usb 1-1: Using ep0 maxpacket: 8 [ 1334.651108][T12844] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 1334.659636][T12844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.669973][T12844] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1334.682361][T12844] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1334.691743][T12844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.700266][T12844] usb 1-1: Product: syz [ 1334.704548][T12844] usb 1-1: Manufacturer: syz [ 1334.709196][T12844] usb 1-1: SerialNumber: syz [ 1334.716861][T12844] usb 1-1: config 0 descriptor?? [ 1334.745277][T23930] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1334.807088][T23930] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1334.825162][T23927] IPVS: Error connecting to the multicast addr [ 1334.923801][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1335.035822][ T7786] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1335.042471][ T7786] gspca_mr97310a: reg write [21] error -22 [ 1335.048948][ T7786] mr97310a 3-1:4.55: probe with driver mr97310a failed with error -22 [ 1335.062979][ T7786] usb 3-1: USB disconnect, device number 69 [ 1335.077326][T21786] udevd[21786]: setting mode of /dev/bus/usb/003/069 to 020664 failed: No such file or directory [ 1335.124196][T21786] udevd[21786]: setting owner of /dev/bus/usb/003/069 to uid=0, gid=0 failed: No such file or directory [ 1335.308319][ T50] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1335.454074][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1335.660619][ T43] usb 6-1: Failed to submit usb control message: -110 [ 1335.711631][ T43] usb 6-1: unable to send the bmi data to the device: -110 [ 1335.711674][ T43] usb 6-1: unable to get target info from device [ 1335.798567][ T43] usb 6-1: could not get target info (-110) [ 1335.798609][ T43] usb 6-1: could not probe fw (-110) [ 1335.844291][T23961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4747'. [ 1336.013923][ T1127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1336.584969][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1336.933277][ T7786] usb 6-1: USB disconnect, device number 11 [ 1337.042218][T23972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'. [ 1337.113815][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1337.673929][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1338.255088][T19893] usb 1-1: USB disconnect, device number 59 [ 1338.277439][ T43] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1338.455712][T23984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.487639][T23984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.530690][T23994] binder: 23992:23994 ioctl 4018620d 0 returned -22 [ 1338.623882][T23984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1338.635593][T23984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1338.685435][T23984] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1338.732704][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.739882][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.824623][ T1127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1338.843151][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.850424][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.997728][ T1106] bridge0: port 3(team0) entered blocking state [ 1339.004223][ T1106] bridge0: port 3(team0) entered forwarding state [ 1339.264772][T24010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.296592][T24010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.314901][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1339.329591][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 1339.339854][ T50] Bluetooth: hci2: hardware error 0x00 [ 1339.384161][ T43] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1339.904467][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1340.366584][T24020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4763'. [ 1340.436779][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1340.973816][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1341.123824][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1341.273793][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1341.291646][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.318471][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.333739][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.353726][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1341.369734][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.396286][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1341.413124][ T10] usb 6-1: config 0 descriptor?? [ 1341.524114][T13127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1341.847174][T24029] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4764'. [ 1341.878354][T24029] netlink: 'syz.5.4764': attribute type 1 has an invalid length. [ 1341.937226][T24029] bond4: entered promiscuous mode [ 1341.976566][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4764'. [ 1342.002735][T24029] bond4: entered allmulticast mode [ 1342.016557][T24029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1342.064629][ T1106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1342.103369][ T10] kye 0003:0458:4018.008C: reserved main item tag 0xd [ 1342.135189][T24047] bond4 (unregistering): Released all slaves [ 1342.170201][ T10] kye 0003:0458:4018.008C: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.5-1/input0 [ 1342.415242][ T10] usb 6-1: USB disconnect, device number 12 [ 1342.664045][ T1106] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1343.213863][ T1127] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1343.402508][ T24] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 1343.439622][ T24] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1343.458803][T24063] netlink: 'syz.0.4769': attribute type 10 has an invalid length. [ 1343.499427][T24063] batman_adv: batadv0: Interface deactivated: dummy0 [ 1343.525732][T24063] batman_adv: batadv0: Removing interface: dummy0 [ 1343.567411][T24063] team0: Port device dummy0 added [ 1343.594616][T24063] netlink: 'syz.0.4769': attribute type 1 has an invalid length. [ 1343.612594][T24063] netlink: 'syz.0.4769': attribute type 3 has an invalid length. [ 1343.637170][T24063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4769'. [ 1343.754029][ T7786] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1343.837525][T24069] netlink: 'syz.0.4769': attribute type 10 has an invalid length. [ 1343.881266][T24069] team0: Port device dummy0 removed [ 1343.922168][ T7786] usb 6-1: Using ep0 maxpacket: 8 [ 1343.932736][ T7786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1343.948593][ T7786] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 1343.967753][ T7786] usb 6-1: config 0 has no interface number 0 [ 1343.982586][ T7786] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1344.006250][ T7786] usb 6-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1344.032129][ T7786] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 1344.055918][ T7786] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1344.079653][ T7786] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1344.100395][ T7786] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 1344.122630][ T7786] usb 6-1: config 0 interface 122 has no altsetting 0 [ 1344.138383][ T7786] usb 6-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 1344.153734][ T7786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.170066][ T7786] usb 6-1: Product: syz [ 1344.184025][ T7786] usb 6-1: Manufacturer: syz [ 1344.190275][ T7786] usb 6-1: SerialNumber: syz [ 1344.206905][ T7786] usb 6-1: config 0 descriptor?? [ 1344.217982][T24057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1344.231490][T24057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1344.497016][ T7786] pl2303 6-1:0.122: pl2303 converter detected [ 1344.519721][ T7786] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1344.546701][ T7786] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1344.568393][ T7786] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1344.587024][ T7786] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1344.608551][ T7786] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1344.636037][ T7786] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1344.658949][ T7786] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1344.676063][ T7786] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1344.695841][ T7786] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 1344.736527][ T7786] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 1344.760529][ T7786] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 1344.806652][ T7786] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 1344.877492][T24075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1344.898511][ T7786] usb 6-1: USB disconnect, device number 13 [ 1344.964300][ T7786] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1345.026124][ T7786] pl2303 6-1:0.122: device disconnected [ 1345.034052][T13127] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1345.057498][T24078] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1345.154009][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.177345][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.204119][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.228169][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.308382][ T43] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1345.418224][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4775'. [ 1345.487611][T24089] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1348.043796][ T24] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1348.220778][T24116] binder: 24115:24116 ioctl 4018620d 0 returned -22 [ 1348.254029][ T24] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1348.298857][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.337812][ T24] usb 1-1: Product: syz [ 1348.358044][ T24] usb 1-1: Manufacturer: syz [ 1348.377715][ T24] usb 1-1: SerialNumber: syz [ 1348.400234][ T24] usb 1-1: config 0 descriptor?? [ 1348.410971][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1349.259591][ T24] gspca_sunplus: reg_w_riv err -71 [ 1349.264923][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1349.293326][ T24] usb 1-1: USB disconnect, device number 60 [ 1349.627977][T24133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.660423][T24133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.708524][T24133] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1349.736848][T24133] netlink: 'syz.4.4787': attribute type 1 has an invalid length. [ 1349.812761][T24140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1349.858633][T24133] bond7: entered promiscuous mode [ 1349.876207][T24133] bond7: entered allmulticast mode [ 1349.881988][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4791'. [ 1349.891477][T24133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1349.911153][T24138] bond5: option mode: unable to set because the bond device has slaves [ 1349.958017][T24143] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1349.993047][T24140] bond7 (unregistering): Released all slaves [ 1350.026337][T24141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4789'. [ 1350.062511][ T1106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.093397][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.144400][ T1127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.159281][ T1127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.299506][ T7786] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 1351.340516][ T7786] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1351.479589][ T50] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1351.603744][ T24] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1351.796407][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1351.819852][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1351.840196][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.869542][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 1351.884925][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.910644][ T24] usb 3-1: Product: syz [ 1351.925772][ T24] usb 3-1: Manufacturer: syz [ 1351.945446][ T24] usb 3-1: SerialNumber: syz [ 1352.392791][ T24] usb 3-1: interface 3 not found [ 1352.473568][ T24] usb 3-1: USB disconnect, device number 70 [ 1354.210161][T24189] netlink: 'syz.2.4812': attribute type 1 has an invalid length. [ 1354.257081][T24189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1354.451362][T24189] gretap1: entered promiscuous mode [ 1354.473287][T24189] bond6: (slave gretap1): making interface the new active one [ 1354.561637][T24189] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1354.684044][ T7786] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1354.883914][ T7786] usb 1-1: Using ep0 maxpacket: 32 [ 1354.915966][ T7786] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.939430][ T7786] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1354.966609][ T7786] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55 [ 1354.981801][ T7786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.999319][ T7786] usb 1-1: Product: syz [ 1355.005515][ T7786] usb 1-1: Manufacturer: syz [ 1355.017960][ T7786] usb 1-1: SerialNumber: syz [ 1355.704462][ T7786] usb 1-1: USB disconnect, device number 61 [ 1356.266449][T24220] netlink: 'syz.6.4804': attribute type 2 has an invalid length. [ 1356.382717][T24220] : entered promiscuous mode [ 1357.033750][ T7786] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1357.183929][ T7786] usb 6-1: Using ep0 maxpacket: 16 [ 1357.195841][ T7786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1357.210375][ T7786] usb 6-1: config 4 has an invalid interface number: 55 but max is 0 [ 1357.223951][ T7786] usb 6-1: config 4 has no interface number 0 [ 1357.230369][ T7786] usb 6-1: config 4 interface 55 has no altsetting 0 [ 1357.241200][ T7786] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 1357.254014][ T7786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.264235][ T7786] usb 6-1: Product: syz [ 1357.268490][ T7786] usb 6-1: Manufacturer: syz [ 1357.273192][ T7786] usb 6-1: SerialNumber: syz [ 1357.353840][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1357.435036][T24244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1357.503605][T24232] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4808'. [ 1357.512922][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1357.526626][ T24] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1357.552090][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.582778][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.611398][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.637776][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.651609][T24231] IPVS: Error connecting to the multicast addr [ 1357.672792][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.697421][T24232] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4808'. [ 1357.715190][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.756060][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.773519][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.786904][ T24] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1357.831722][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.859415][ T24] usb 3-1: Product: syz [ 1357.874765][ T24] usb 3-1: Manufacturer: syz [ 1357.899071][ T24] usb 3-1: SerialNumber: syz [ 1357.931305][ T24] usb 3-1: config 0 descriptor?? [ 1357.947561][ T24] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) [ 1358.084181][ T7786] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1358.105750][ T7786] gspca_mr97310a: reg write [21] error -22 [ 1358.126128][ T7786] mr97310a 6-1:4.55: probe with driver mr97310a failed with error -22 [ 1358.157794][ T24] usb 3-1: USB disconnect, device number 71 [ 1358.181350][ T7786] usb 6-1: USB disconnect, device number 14 [ 1358.683953][ T7786] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1358.848659][ T7786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1358.882407][ T7786] usb 1-1: not running at top speed; connect to a high speed hub [ 1358.917660][ T7786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.936633][ T7786] usb 1-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 1358.960451][ T7786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.966808][T24259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.981453][ T7786] usb 1-1: Product: syz [ 1358.992600][T24259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.998955][ T7786] usb 1-1: Manufacturer: syz [ 1359.005514][ T7786] usb 1-1: SerialNumber: syz [ 1359.405868][ T7786] usb 1-1: interface 3 not found [ 1359.430216][ T7786] usb 1-1: USB disconnect, device number 62 [ 1360.269641][T24269] binder: 24266:24269 ioctl c0306201 0 returned -14 [ 1361.531548][T24286] binder: 24285:24286 ioctl 4018620d 0 returned -22 [ 1361.715433][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.721795][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.809960][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1361.876042][T24302] netlink: 'syz.5.4819': attribute type 1 has an invalid length. [ 1361.913462][T24302] netlink: 'syz.5.4819': attribute type 2 has an invalid length. [ 1361.986146][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.003167][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1362.034372][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1362.056560][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.084281][ T10] usb 1-1: Product: syz [ 1362.095310][ T10] usb 1-1: Manufacturer: syz [ 1362.107523][ T10] usb 1-1: SerialNumber: syz [ 1362.130597][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 1362.335899][T24291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1362.693884][ T7786] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1362.863714][ T7786] usb 3-1: Using ep0 maxpacket: 8 [ 1362.874914][ T7786] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1362.896744][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.917438][ T7786] usb 3-1: Product: syz [ 1362.930222][ T7786] usb 3-1: Manufacturer: syz [ 1362.943285][ T7786] usb 3-1: SerialNumber: syz [ 1362.960438][T24291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1362.992409][ T10] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 1363.012833][ T10] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1363.052297][ T10] wwan wwan0: port wwan0mbim0 attached [ 1363.107734][ T10] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 12:b4:c6:61:fb:bc [ 1363.430759][T24291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.438270][T24291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.711189][ C1] wdm_int_callback: 112 callbacks suppressed [ 1363.711205][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.723877][ C1] wdm_int_callback: 112 callbacks suppressed [ 1363.723902][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.738062][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.744762][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.751459][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.758152][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.764548][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.771250][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.777640][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.784335][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.790702][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.797398][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.803827][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.810531][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.816910][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.823594][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.829985][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.836692][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.843103][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 1363.849798][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 1363.967526][T24291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.063275][T24291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.198537][T24291] batadv0: left allmulticast mode [ 1364.220731][T24291] macvlan2: left promiscuous mode [ 1364.238355][T24291] macvlan2: left allmulticast mode [ 1364.275607][T24291] bond6: left promiscuous mode [ 1364.285978][T24291] bond6: left allmulticast mode [ 1364.295390][T24305] bond5: option mode: unable to set because the bond device has slaves [ 1364.351488][ T7786] usb 3-1: unit 0 not found! [ 1364.553469][ T7786] usb 3-1: USB disconnect, device number 72 [ 1364.864744][ T1227] usb 1-1: USB disconnect, device number 63 [ 1364.894560][ T1227] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1364.914568][ T30] INFO: task kworker/1:7:19924 blocked for more than 143 seconds. [ 1364.931716][ T30] Tainted: G L syzkaller #0 [ 1364.954583][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1364.980789][ T30] task:kworker/1:7 state:D stack:21584 pid:19924 tgid:19924 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1365.012332][ T30] Workqueue: usb_hub_wq hub_event [ 1365.017897][ T30] Call Trace: [ 1365.021273][ T30] [ 1365.027822][ T30] __schedule+0x17d9/0x56c0 [ 1365.037963][ T30] ? wq_worker_sleeping+0x101/0x250 [ 1365.049610][ T30] ? __pfx___schedule+0x10/0x10 [ 1365.059646][ T30] ? schedule+0x90/0x2b0 [ 1365.069824][ T30] schedule+0x164/0x2b0 [ 1365.078400][ T30] schedule_preempt_disabled+0x13/0x30 [ 1365.089962][ T30] __mutex_lock+0x7bf/0x1550 [ 1365.098275][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1365.111382][ T30] ? hub_event+0x20c9/0x4d30 [ 1365.116664][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1365.125147][ T30] hub_event+0x20c9/0x4d30 [ 1365.129666][ T30] ? register_lock_class+0x31/0x2e0 [ 1365.135545][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1365.140970][ T30] ? __pfx_hub_event+0x10/0x10 [ 1365.146576][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1365.152324][ T30] ? rcu_is_watching+0x15/0xb0 [ 1365.157552][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 1365.163317][ T30] process_scheduled_works+0xa8e/0x14e0 [ 1365.168984][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1365.175246][ T30] ? assign_work+0x3cf/0x5d0 [ 1365.179861][ T30] worker_thread+0xa47/0xfb0 [ 1365.184597][ T30] kthread+0x388/0x470 [ 1365.188695][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1365.194007][ T30] ? __pfx_kthread+0x10/0x10 [ 1365.198645][ T30] ret_from_fork+0x514/0xb70 [ 1365.203232][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1365.208510][ T30] ? __switch_to+0xc89/0x1420 [ 1365.213249][ T30] ? __pfx_kthread+0x10/0x10 [ 1365.218126][ T30] ret_from_fork_asm+0x1a/0x30 [ 1365.222947][ T30] [ 1365.232681][ T30] [ 1365.232681][ T30] Showing all locks held in the system: [ 1365.246359][ T30] 3 locks held by kworker/1:0/24: [ 1365.252183][ T30] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1365.270136][ T30] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1365.279867][ T30] #2: ffff8880361be250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1365.290332][ T30] 1 lock held by khungtaskd/30: [ 1365.295431][ T30] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1365.305621][ T30] 7 locks held by kworker/1:2/1227: [ 1365.310870][ T30] #0: ffff8880226fa940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.333931][ T7786] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1365.335491][ T30] #1: ffffc90005d67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.353884][ T30] #2: ffff888025bbb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1365.373936][ T30] #3: ffff888033b1d1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1365.403784][ T30] #4: ffff88807e22e1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1365.420552][ T30] #5: ffffffff8fdead00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1365.433235][ T30] #6: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1365.448048][ T30] 2 locks held by getty/5378: [ 1365.452749][ T30] #0: ffff8880357070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1365.473888][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1365.493678][ T30] 2 locks held by kworker/0:3/5622: [ 1365.502148][ T7786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1365.503767][ T30] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.523247][ T7786] usb 6-1: not running at top speed; connect to a high speed hub [ 1365.525203][ T30] #1: ffffc90003c8fc40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.525281][ T30] 5 locks held by kworker/0:5/5694: [ 1365.525295][ T30] #0: ffff8880226fa940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.525356][ T30] #1: ffffc9000448fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.525416][ T30] #2: ffff88802b40e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1365.541138][ T7786] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.571195][ T30] #3: [ 1365.578280][ T7786] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 1365.586131][ T30] ffff88802b523568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1365.615910][ T30] #4: ffff88802b485660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1365.618098][ T7786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.626248][ T30] 8 locks held by kworker/0:15/7786: [ 1365.640009][ T30] 5 locks held by kworker/0:9/12843: [ 1365.645672][ T30] #0: ffff8880226fa940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.651748][ T7786] usb 6-1: Product: syz [ 1365.657575][ T30] #1: ffffc90005de7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.670496][ T7786] usb 6-1: Manufacturer: syz [ 1365.680464][ T7786] usb 6-1: SerialNumber: syz [ 1365.687688][ T30] #2: ffff88802b3eb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1365.697291][ T30] #3: ffff88802b3e8568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1365.707770][ T30] #4: ffff88802b3b0160 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1365.717997][ T30] 5 locks held by kworker/1:7/19924: [ 1365.723371][ T30] #0: ffff8880226fa940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.736876][ T30] #1: ffffc9000425fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1365.749101][ T30] #2: ffff88802b3f51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1365.758208][ T30] #3: ffff88802b402568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1365.768468][ T30] #4: ffff88802b3b0160 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1365.778588][ T30] 4 locks held by udevd/21786: [ 1365.783385][ T30] #0: ffff888029fd4f38 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1365.792521][ T30] #1: ffff888054907480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1365.802230][ T30] #2: ffff888011e40788 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1365.812043][ T30] #3: ffff888025c371d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1365.823123][ T30] 2 locks held by dhcpcd-run-hook/24340: [ 1365.829044][ T30] [ 1365.831397][ T30] ============================================= [ 1365.831397][ T30] [ 1365.870359][ T30] NMI backtrace for cpu 1 [ 1365.870397][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.870422][ T30] Tainted: [L]=SOFTLOCKUP [ 1365.870429][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1365.870440][ T30] Call Trace: [ 1365.870449][ T30] [ 1365.870457][ T30] dump_stack_lvl+0xe8/0x150 [ 1365.870485][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1365.870612][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1365.870651][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1365.870678][ T30] sys_info+0x135/0x170 [ 1365.870699][ T30] watchdog+0xfd7/0x1030 [ 1365.870730][ T30] ? watchdog+0x1c7/0x1030 [ 1365.870760][ T30] kthread+0x388/0x470 [ 1365.870777][ T30] ? __pfx_watchdog+0x10/0x10 [ 1365.870798][ T30] ? __pfx_kthread+0x10/0x10 [ 1365.870816][ T30] ret_from_fork+0x514/0xb70 [ 1365.870838][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1365.870855][ T30] ? __switch_to+0xc89/0x1420 [ 1365.870884][ T30] ? __pfx_kthread+0x10/0x10 [ 1365.870901][ T30] ret_from_fork_asm+0x1a/0x30 [ 1365.870934][ T30] [ 1365.870941][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1365.995634][ C0] NMI backtrace for cpu 0 [ 1365.995657][ C0] CPU: 0 UID: 0 PID: 24325 Comm: syz.5.4828 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.995681][ C0] Tainted: [L]=SOFTLOCKUP [ 1365.995687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1365.995698][ C0] RIP: 0023:0xf70fb2b7 [ 1365.995716][ C0] Code: 26 00 00 00 00 2e 8d b4 26 00 00 00 00 8d b6 00 00 00 00 8b 72 f8 8b 5a fc 83 ea 08 89 e8 39 f1 19 d8 72 ef 39 54 24 08 73 39 <8b> 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83 c0 08 89 70 f8 89 [ 1365.995801][ C0] RSP: 002b:00000000f75df7b0 EFLAGS: 00000287 [ 1365.995851][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 000000008bae4d2e [ 1365.995862][ C0] RDX: 00000000f6d09550 RSI: 000000008bae4d2e RDI: 00000000ffffffff [ 1365.995874][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1365.995885][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1365.995895][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.995906][ C0] FS: 0000000000000000 GS: 00000000572e0480 [ 1366.035750][ T7786] usb 6-1: interface 3 not found [ 1366.075600][ T1227] wwan wwan0: port wwan0mbim0 disconnected [ 1366.084930][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1366.084954][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1366.084981][ T30] Tainted: [L]=SOFTLOCKUP [ 1366.084992][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1366.085004][ T30] Call Trace: [ 1366.085012][ T30] [ 1366.085031][ T30] vpanic+0x56c/0xa60 [ 1366.085061][ T30] ? __pfx___schedule+0x10/0x10 [ 1366.085088][ T30] ? __pfx_vpanic+0x10/0x10 [ 1366.085111][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1366.085142][ T30] panic+0xc5/0xd0 [ 1366.085164][ T30] ? __pfx_panic+0x10/0x10 [ 1366.085183][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1366.085210][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1366.085239][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1366.085265][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1366.085293][ T30] watchdog+0x1030/0x1030 [ 1366.085327][ T30] ? watchdog+0x1c7/0x1030 [ 1366.085360][ T30] kthread+0x388/0x470 [ 1366.085381][ T30] ? __pfx_watchdog+0x10/0x10 [ 1366.085406][ T30] ? __pfx_kthread+0x10/0x10 [ 1366.085427][ T30] ret_from_fork+0x514/0xb70 [ 1366.085451][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1366.085473][ T30] ? __switch_to+0xc89/0x1420 [ 1366.085502][ T30] ? __pfx_kthread+0x10/0x10 [ 1366.085524][ T30] ret_from_fork_asm+0x1a/0x30 [ 1366.085560][ T30] [ 1366.090988][ T30] Kernel Offset: disabled