last executing test programs: 18.557874513s ago: executing program 1 (id=2175): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r3, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r7) r8 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000000)={0x3, [[0x0, 0x1001, 0x1, 0x9, 0x3, 0x1, 0x6, 0xfffffffd], [0x5, 0x3, 0x9, 0xfe, 0xffffffff, 0x6610, 0x1, 0x80], [0x400, 0x80000000, 0x1219, 0x0, 0x2, 0x723d, 0xfffffe00]], '\x00', [{0x6, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x80000001, 0x81, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x86, 0x1, 0x0, 0x1}, {0xfffffff9, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x10001, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x98b, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x81d4, 0x0, 0x0, 0x1}, {0x9, 0x200, 0x0, 0x1}], '\x00', 0xfffffff8}) 18.396051757s ago: executing program 4 (id=2177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b04000000000000000002000008700004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000013000018008000100666962002400028008000340000000010800024000000003080003400000000c08000240000000010900020073797a32000000000900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) madvise(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0x17) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000001740)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) 17.143219967s ago: executing program 2 (id=2179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f00009dc000/0x2000)=nil, 0x2000, 0xb635773f07ebbee9, 0x148050, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000019080)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x4) 16.183666671s ago: executing program 1 (id=2180): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x8000000000000}) fcntl$lock(r4, 0x7, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') unshare(0x22020600) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) syz_open_dev$evdev(0x0, 0x1, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xce9dc54468bb77b8}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x2c93a000) ioctl$BLKPBSZGET(r0, 0x127b, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x57, {0x68, 0x2, 0x8, 0x6, 0x13d2}}) 16.157548187s ago: executing program 4 (id=2181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) memfd_create(0x0, 0xb) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x4000000) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357", @ANYBLOB], 0x44}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) unshare(0x22000600) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2) 15.105214678s ago: executing program 3 (id=2182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x113c}}, 0x8004) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r5) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x29, 0x7, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000005c0)={'IDLETIMER\x00'}, &(0x7f0000000600)=0x1e) recvmsg$kcm(r8, &(0x7f0000000400)={&(0x7f0000000240)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000380)=""/19, 0x13}], 0x4}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304ffffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000002800000140012800a00010069706f69620000000400028008000500", @ANYRES8=r7, @ANYBLOB="74d8"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x30, 0x2}, 0x18) sendfile(r9, r9, 0x0, 0x200000) 13.562589525s ago: executing program 2 (id=2183): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2034cc, 0x5, 0x1, 0x40000e4, 0x1b, "4de35b934f2993b8aa4c5a3293d0ecea86c1dd"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000002000)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r6) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000240)=0x0) process_vm_readv(r9, &(0x7f0000000640)=[{&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f00000005c0)=""/128, 0x80}], 0x7, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES16=r2], 0x23c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000010000104fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000018a0000140003006970766c616e31000000000000000000240012800b000100fd2f766c616e0000140002800600010000000000060c02000200000042f447eae7432bb20a605d83a68141740beccb4c5929253f5107add5a1e0b8fa680ce51a8eb540004399000000dab3000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xe47, 0x102, 0x2080060f, 0xffffbffe, 0x12, "1c6b6f29626102237e13b098e4ac59b4c2e70c"}) 12.717603005s ago: executing program 0 (id=2184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x164, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "9161b5234cf131839e9c50b5b076675d6a5e59dbd625f4c315418d3aef8650955a8393a1992f14627f9c5d54add53cb0a6fd8c2476ec9abc4c101236426740916488faa7adfaad862d1fc29ffa0a9fad6cee701f3d58337a20f6b8bd362a72cdfd7b3412ee9e82d0da3648ede252345fc0d0fb987247ba813b2ceef72737a7d7a28b9d10f456a4e2b4206053d53189efb21e1f307f19277fb56516c249f20645f0e9ac12794e8aa060dfcae9b2da570e095126"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6bc1d8a76da1c94c972af51601743d6b55a328bc97667a9371bb695a09effca1cfb343"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbee, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setfsuid(0xffffffffffffffff) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) 12.591862348s ago: executing program 3 (id=2185): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) ftruncate(0xffffffffffffffff, 0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x7, 0x1849211c67724aa6, 0x4, 0x1, 0x4, {}, {0x0, 0x1, 0x1, 0x1, 0x4, 0x0, "d738005b"}, 0xf, 0x3, {0x0}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x2}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) 12.281331888s ago: executing program 1 (id=2186): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$I2C(0x0, 0x1, 0x2603) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, &(0x7f0000000100)}], 0x1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100000001}}, 0x30) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x80077}, {@remote, 0x4e20, 0x10000, 0x3, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@ipv6_getaddr={0x3c, 0x16, 0x4, 0x70bd29, 0x25dfdbfd, {0xa, 0x80, 0xc2, 0xfd}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 10.847163896s ago: executing program 4 (id=2187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 10.685361249s ago: executing program 2 (id=2188): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x7, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x2dc, 0x40011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x800) lremovexattr(&(0x7f0000003d00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000280)=@random={'user.', '\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x8, 0x4, 0xfb}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x7, 0x0, r12, 0x0, 0x0, 0x0, 0x20010000}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}}, 0x90) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x20000004) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r13, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000ac0)={0x18, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x5, 0x0, 0x8}, [@generic="e791"]}, 0x18}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) 9.164541925s ago: executing program 3 (id=2190): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x35c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x330, 0x2, [@TCA_U32_SEL={0x244, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x1, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2, 0x3}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x5, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x7, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0xfffffffc, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfff7fffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xd4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x2000080, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x7, 0x7}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x35c}}, 0x24040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES8=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4606, &(0x7f0000000080)={0x2}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x224141, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) 9.097672695s ago: executing program 0 (id=2191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000ca32c7329458e68a330a721f000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000674ae874c8a3ac27c779eb0000000000000000000000000000000000000000000000000000000000000000fcffffff00"/144]}, 0x108) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r5 = open(0x0, 0x26c840, 0x389b0d52417bb218) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x38, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200488b0}, 0x40c4) pwritev2(r5, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) r7 = socket$qrtr(0x2a, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x3, 0xfffffffffffffffe}) fchown(r8, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) sendmsg$sock(r7, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x404, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 6.536306702s ago: executing program 4 (id=2192): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_int(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x34d903) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r5, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0xff43) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) dup(r4) 6.518399841s ago: executing program 2 (id=2193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mmap(&(0x7f00009dc000/0x2000)=nil, 0x2000, 0xb635773f07ebbee9, 0x148050, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000019080)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x4) 6.180772244s ago: executing program 0 (id=2194): modify_ldt$write(0x1, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7ffffffc}]}) getrusage(0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}, {&(0x7f0000000380)=""/103, 0x67}], 0x2, 0x33, 0x51b) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x2, 0x0, 0x5}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0xe, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x8) 5.662055659s ago: executing program 3 (id=2195): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000406010300000000000000000a00000405000100070000000500010007000000af5cc5ad43b8fd00"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x20}, {0x54}, {0x6}]}) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 5.613763774s ago: executing program 0 (id=2196): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x395180, 0x149) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 5.561234477s ago: executing program 1 (id=2197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000001140)={0x0, 0x100000058, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x200, 0x70bd2c}, 0x75}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[], {0x3b00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x58, 0x1406, 0x20, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r11, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 3.667566829s ago: executing program 0 (id=2198): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) ftruncate(0xffffffffffffffff, 0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x7, 0x1849211c67724aa6, 0x4, 0x1, 0x4, {}, {0x0, 0x1, 0x1, 0x1, 0x4, 0x0, "d738005b"}, 0xf, 0x3, {0x0}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x2}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) 3.273326639s ago: executing program 2 (id=2199): io_setup(0x72, &(0x7f00000003c0)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r1, 0x0, 0x0, 0x5, 0x0, 0x3}]) pipe2$9p(&(0x7f0000000000), 0x0) getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private2, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x303040) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x7, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_io_uring_setup(0x269, 0x0, &(0x7f0000000280), 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = signalfd4(r4, 0x0, 0x0, 0x80800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) r10 = syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) wait4(r10, 0x0, 0x40000000, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000840)={0x2, r10}) 2.673279249s ago: executing program 4 (id=2200): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYBLOB='\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) ftruncate(0xffffffffffffffff, 0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0x7, 0x1849211c67724aa6, 0x4, 0x1, 0x4, {}, {0x0, 0x1, 0x1, 0x1, 0x4, 0x0, "d738005b"}, 0xf, 0x3, {0x0}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x2}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000002c0), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) 2.191918536s ago: executing program 3 (id=2201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000000)={0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a1c001e00090a010400000000000000000700fffd0800054000000007140000001000010000000000000000000084000a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$kcm(0x11, 0x3, 0x0) timerfd_create(0x0, 0x800) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x200000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigprocmask(0x2, &(0x7f0000000180)={[0xfffffffffffffffb]}, &(0x7f00000001c0), 0x8) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000100)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(r7, 0x406, r7) 1.106294161s ago: executing program 2 (id=2202): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x23c}}, 0x20000091) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 644.665488ms ago: executing program 0 (id=2203): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b04000000000000000002000008700004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000013000018008000100666962002400028008000340000000010800024000000003080003400000000c08000240000000010900020073797a32000000000900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) madvise(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0x17) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000001740)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) 530.913574ms ago: executing program 1 (id=2205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2888}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) io_uring_setup(0x664c, &(0x7f0000000500)) r3 = accept(r0, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000) socket$kcm(0x29, 0x2, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket(0xa, 0x3, 0xff) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, 0x0, 0x0) unshare(0x66000080) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r9 = gettid() sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r9], 0x28}}, 0x0) 0s ago: executing program 4 (id=2206): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x35c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x330, 0x2, [@TCA_U32_SEL={0x244, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x1, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2, 0x3}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x5, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x7, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0xfffffffc, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfff7fffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xd4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x2000080, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x7, 0x7}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x35c}}, 0x24040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES8=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4606, &(0x7f0000000080)={0x2}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x224141, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) kernel console output (not intermixed with test programs): 5 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1105.094073][ T5972] usb 5-1: USB disconnect, device number 46 [ 1105.128537][ T5921] usb 3-1: USB disconnect, device number 56 [ 1105.220623][ T30] audit: type=1326 audit(1766155348.882:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1105.342532][ T30] audit: type=1326 audit(1766155348.882:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1105.451099][ T30] audit: type=1326 audit(1766155348.882:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1105.579183][ T30] audit: type=1326 audit(1766155348.882:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1105.704752][ T30] audit: type=1326 audit(1766155348.882:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1105.772369][T14498] fuse: Bad value for 'fd' [ 1105.943225][ T30] audit: type=1326 audit(1766155348.882:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1106.106963][ T30] audit: type=1326 audit(1766155348.882:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.1.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1106.242390][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1567'. [ 1106.256418][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 1107.688449][ T5921] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1107.998938][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 1108.040579][ T5921] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 1108.051922][ T5921] usb 2-1: config 0 has no interface number 0 [ 1108.111172][ T5921] usb 2-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1108.230812][ T5921] usb 2-1: config 0 interface 28 has no altsetting 0 [ 1108.268237][ T5921] usb 2-1: Dual-Role OTG device on HNP port [ 1108.292082][ T5921] usb 2-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67 [ 1108.322770][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.352620][ T5921] usb 2-1: Product: syz [ 1108.372877][ T5921] usb 2-1: Manufacturer: syz [ 1108.378193][ T5921] usb 2-1: SerialNumber: syz [ 1108.388793][ T5834] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1108.439326][ T5921] usb 2-1: config 0 descriptor?? [ 1108.461954][ T5921] hub 2-1:0.28: bad descriptor, ignoring hub [ 1108.478568][ T5921] hub 2-1:0.28: probe with driver hub failed with error -5 [ 1108.500186][ T5921] option 2-1:0.28: GSM modem (1-port) converter detected [ 1108.549039][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 1108.557867][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.614574][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.662278][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1108.816770][ T5834] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1108.832049][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.982573][ T5834] usb 3-1: config 0 descriptor?? [ 1109.255309][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 1109.450248][T14521] random: crng reseeded on system resumption [ 1110.432654][ T5834] usbhid 3-1:0.0: can't add hid device: -71 [ 1110.457179][ T5834] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1110.895671][T14538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1574'. [ 1110.941995][ T5834] usb 3-1: USB disconnect, device number 57 [ 1111.649622][ T5834] usb 2-1: USB disconnect, device number 44 [ 1111.670542][ T5834] option 2-1:0.28: device disconnected [ 1113.945607][T14566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1580'. [ 1113.980992][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1580'. [ 1114.684088][T14575] netlink: 'syz.4.1582': attribute type 6 has an invalid length. [ 1114.898623][ T5921] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1115.069086][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 1115.087700][ T5921] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1115.097750][ T5921] usb 4-1: config 0 has no interface number 0 [ 1115.110461][ T5921] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1115.134532][ T5921] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1115.145233][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.157570][ T5921] usb 4-1: Product: syz [ 1115.163920][ T5921] usb 4-1: Manufacturer: syz [ 1115.177682][ T5921] usb 4-1: SerialNumber: syz [ 1115.217417][ T5921] usb 4-1: config 0 descriptor?? [ 1115.276046][ T5921] smsc75xx v1.0.0 [ 1115.909197][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1115.960777][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1116.137302][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1116.244190][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1116.392893][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1116.452682][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1116.528199][ T5921] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1117.559648][T14593] random: crng reseeded on system resumption [ 1118.626159][T14604] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1118.637640][T14604] team0: Port device batadv8 added [ 1118.732862][T14605] hub 9-0:1.0: USB hub found [ 1118.741132][T14605] hub 9-0:1.0: 1 port detected [ 1119.007299][ T5921] usb 4-1: USB disconnect, device number 60 [ 1120.388910][ T5921] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1120.559955][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 1120.662208][T14622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1591'. [ 1120.915578][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1590'. [ 1121.024197][ T5921] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 1121.072688][ T5921] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1121.141578][ T5921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1121.187183][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.223140][ T5921] usb 5-1: Product: syz [ 1121.234494][ T5921] usb 5-1: Manufacturer: syz [ 1121.250876][ T5921] usb 5-1: SerialNumber: syz [ 1121.289622][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.298620][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.340426][T14615] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1121.869694][T14631] fuse: Unknown parameter '0x0000000000000007' [ 1121.988643][T14632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1124.980509][T14649] xt_hashlimit: max too large, truncated to 1048576 [ 1125.029504][T14648] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1125.103070][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 1125.500109][ T5834] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1125.765937][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 1125.829498][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 1125.915595][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.960460][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.014642][ T5834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1126.064524][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.104260][ T5834] usb 2-1: config 0 descriptor?? [ 1126.636984][ T5921] usb 5-1: USB disconnect, device number 47 [ 1130.454805][T14675] netlink: 'syz.3.1598': attribute type 29 has an invalid length. [ 1130.536689][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 1130.572920][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1130.714716][ T5834] usb 2-1: USB disconnect, device number 45 [ 1130.853332][ T5921] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1131.218580][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 1131.230992][ T5921] usb 3-1: config 0 has no interfaces? [ 1131.284943][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1131.331579][ T5921] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1131.403591][ T5921] usb 3-1: Manufacturer: syz [ 1131.559729][T14689] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1131.570516][T14689] team0: Port device batadv5 added [ 1131.681606][T14690] hub 9-0:1.0: USB hub found [ 1131.689098][T14690] hub 9-0:1.0: 1 port detected [ 1131.779502][ T5921] usb 3-1: config 0 descriptor?? [ 1133.438638][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1133.438660][ T30] audit: type=1326 audit(1766155377.962:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1133.704320][ T30] audit: type=1326 audit(1766155377.962:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1134.062258][ T30] audit: type=1326 audit(1766155377.962:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1134.147448][ T30] audit: type=1326 audit(1766155377.962:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1134.491065][ T30] audit: type=1326 audit(1766155378.012:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1134.572776][ T5834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1134.622832][ T5834] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1134.775019][ T30] audit: type=1326 audit(1766155378.022:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1134.889532][ T30] audit: type=1326 audit(1766155378.022:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1134.954292][ T5921] usb 3-1: USB disconnect, device number 58 [ 1135.060744][ T30] audit: type=1326 audit(1766155378.022:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1135.148458][ T30] audit: type=1326 audit(1766155378.032:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1135.253566][T14710] xt_hashlimit: max too large, truncated to 1048576 [ 1135.409531][T14706] fido_id[14706]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1135.424881][ T30] audit: type=1326 audit(1766155378.032:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14695 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1138.518418][ T5921] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1138.700113][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 1138.741659][ T5921] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 1138.761443][ T5921] usb 1-1: config 0 has no interface number 0 [ 1138.779524][ T5921] usb 1-1: config 0 interface 23 has no altsetting 0 [ 1138.859021][ T5921] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1138.883756][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.918832][ T5921] usb 1-1: Product: syz [ 1138.929032][ T5921] usb 1-1: Manufacturer: syz [ 1138.959910][ T5921] usb 1-1: SerialNumber: syz [ 1139.012163][ T5921] usb 1-1: config 0 descriptor?? [ 1139.107999][T14742] xt_hashlimit: max too large, truncated to 1048576 [ 1141.978150][T14750] netlink: 'syz.3.1614': attribute type 13 has an invalid length. [ 1141.986918][T14750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1614'. [ 1142.098568][T14750] kvm: Disabled LAPIC found during irq injection [ 1143.299051][ T5921] usb 1-1: USB disconnect, device number 41 [ 1146.032274][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1620'. [ 1146.266473][T14785] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1146.571137][ T5834] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1146.839369][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 1147.014676][ T5834] usb 4-1: config 6 has an invalid interface number: 223 but max is 0 [ 1147.029637][ T5834] usb 4-1: config 6 has no interface number 0 [ 1147.036584][ T5834] usb 4-1: config 6 interface 223 has no altsetting 0 [ 1147.087156][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 1147.134720][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.156205][ T5834] usb 4-1: Product: syz [ 1147.326565][ T5834] usb 4-1: Manufacturer: syz [ 1147.350580][ T5834] usb 4-1: SerialNumber: syz [ 1147.434889][T14795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 1147.458472][ T5921] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1147.856559][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 1147.951820][ T5921] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 1147.976729][ T5921] usb 1-1: config 0 has no interface number 0 [ 1148.000351][ T5921] usb 1-1: config 0 interface 23 has no altsetting 0 [ 1148.390742][ T5921] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1148.427979][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.474707][ T5921] usb 1-1: Product: syz [ 1148.503895][ T5921] usb 1-1: Manufacturer: syz [ 1149.107346][ T5921] usb 1-1: SerialNumber: syz [ 1149.349766][ T5921] usb 1-1: config 0 descriptor?? [ 1149.614394][T14790] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1623'. [ 1150.654262][T14812] xt_hashlimit: max too large, truncated to 1048576 [ 1150.720337][T14813] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1150.957651][T14813] team0: Port device batadv5 added [ 1151.210104][T14813] hub 9-0:1.0: USB hub found [ 1151.215448][T14813] hub 9-0:1.0: 1 port detected [ 1152.567745][ T5834] hdpvr 4-1:6.223: Could not find bulk-in endpoint [ 1152.596050][ T5834] hdpvr 4-1:6.223: probe with driver hdpvr failed with error -12 [ 1152.648023][ T5834] usb 4-1: USB disconnect, device number 61 [ 1153.230662][ T5921] usb 1-1: USB disconnect, device number 42 [ 1153.768984][ T5834] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1153.981417][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 1154.013128][ T5834] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 1154.179615][ T5834] usb 5-1: config 254 has no interface number 0 [ 1154.186334][ T5834] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1154.355702][ T5834] usb 5-1: config 254 interface 235 has no altsetting 0 [ 1154.437660][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1154.453628][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.464785][ T5834] usb 5-1: Product: syz [ 1154.474910][ T5834] usb 5-1: Manufacturer: syz [ 1154.480340][ T5834] usb 5-1: SerialNumber: syz [ 1154.525085][T14828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1154.759697][T14828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1154.781655][ T5834] usbtest 5-1:254.235: Linux gadget zero [ 1154.792920][ T5834] usbtest 5-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 1154.997860][T14828] loop6: detected capacity change from 0 to 2560 [ 1155.031334][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.083077][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.132723][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.149894][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.168651][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.213049][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.288492][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.322570][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.418567][T14828] ldm_validate_partition_table(): Disk read failed. [ 1155.460464][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.490055][T14828] Buffer I/O error on dev loop6, logical block 0, async page read [ 1155.498094][T14828] Dev loop6: unable to read RDB block 0 [ 1155.739334][T14828] loop6: unable to read partition table [ 1155.778991][T14828] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1155.859556][ T5200] ldm_validate_partition_table(): Disk read failed. [ 1155.868552][ T5200] Dev loop6: unable to read RDB block 0 [ 1155.886924][ T5200] loop6: unable to read partition table [ 1155.907134][ T5834] usb 5-1: USB disconnect, device number 48 [ 1156.513865][T14848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1158.169051][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 1158.808402][T14875] fuse: Bad value for 'fd' [ 1161.084453][T14880] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 1161.618702][T14887] xt_hashlimit: max too large, truncated to 1048576 [ 1161.739242][ T5921] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1161.972267][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 1162.085570][ T5921] usb 5-1: config 0 has no interfaces? [ 1162.126231][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1162.178807][ T5921] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1162.256142][ T5921] usb 5-1: Manufacturer: syz [ 1162.294425][ T5921] usb 5-1: config 0 descriptor?? [ 1163.179535][T14898] hub 1-0:1.0: USB hub found [ 1163.203573][T14898] hub 1-0:1.0: 1 port detected [ 1165.131573][ T5834] usb 5-1: USB disconnect, device number 49 [ 1165.393686][T14906] xt_hashlimit: max too large, truncated to 1048576 [ 1165.821281][T14910] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1165.891945][T14910] bond2 (unregistering): Released all slaves [ 1166.568766][ T5834] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1166.801387][ T5834] usb 3-1: config 0 has no interfaces? [ 1166.870780][ T5834] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1166.900126][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.929972][ T5834] usb 3-1: Product: syz [ 1166.935602][ T5834] usb 3-1: Manufacturer: syz [ 1166.942619][ T5834] usb 3-1: SerialNumber: syz [ 1166.968016][ T5834] usb 3-1: config 0 descriptor?? [ 1168.903922][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1652'. [ 1169.618053][ T5921] usb 3-1: USB disconnect, device number 59 [ 1169.954155][T14947] xt_hashlimit: max too large, truncated to 1048576 [ 1172.501625][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1659'. [ 1172.527496][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1659'. [ 1173.688924][T14976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1661'. [ 1174.360720][T14983] xt_hashlimit: max too large, truncated to 1048576 [ 1175.578696][T14999] xt_hashlimit: size too large, truncated to 1048576 [ 1177.028033][T15004] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1177.132667][T15004] bond2 (unregistering): Released all slaves [ 1177.657435][T15012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1667'. [ 1177.831976][ T40] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1178.051766][ T40] usb 3-1: config 0 has no interfaces? [ 1178.119365][ T40] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1178.158626][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.283080][ T40] usb 3-1: Product: syz [ 1178.288017][ T40] usb 3-1: Manufacturer: syz [ 1178.295893][ T40] usb 3-1: SerialNumber: syz [ 1178.698979][ T5834] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1178.704915][ T40] usb 3-1: config 0 descriptor?? [ 1178.869368][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 1178.888099][ T5834] usb 1-1: config 0 has no interfaces? [ 1178.921155][ T5834] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1178.984997][ T5834] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1179.027650][ T5834] usb 1-1: Manufacturer: syz [ 1179.164424][ T5834] usb 1-1: config 0 descriptor?? [ 1179.266425][T15030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1669'. [ 1181.006658][ T5834] usb 3-1: USB disconnect, device number 60 [ 1181.618185][T15042] xt_hashlimit: max too large, truncated to 1048576 [ 1181.669866][T15044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1672'. [ 1182.480794][ T5921] usb 1-1: USB disconnect, device number 43 [ 1182.756157][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.768691][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.471352][ T5921] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1187.883699][ T5921] usb 1-1: config 0 has no interfaces? [ 1188.012717][ T5921] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1188.045296][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.098532][ T5921] usb 1-1: Product: syz [ 1188.114456][ T5921] usb 1-1: Manufacturer: syz [ 1188.131805][ T5921] usb 1-1: SerialNumber: syz [ 1188.197933][ T5921] usb 1-1: config 0 descriptor?? [ 1188.363667][T15103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 1188.779401][T15115] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1188.807241][T15108] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1189.140072][T15108] bond2 (unregistering): Released all slaves [ 1189.389778][T15111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.578976][ T5834] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1189.619378][T15111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.872985][ T5834] usb 3-1: config 0 has no interfaces? [ 1189.886658][ T5834] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1189.998528][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.007930][ T5834] usb 3-1: Product: syz [ 1190.039608][ T5834] usb 3-1: Manufacturer: syz [ 1190.044933][ T5834] usb 3-1: SerialNumber: syz [ 1190.112682][ T5834] usb 3-1: config 0 descriptor?? [ 1190.172762][ T5921] usb 1-1: USB disconnect, device number 44 [ 1192.048661][T15133] kthread_run failed with err -4 [ 1192.647557][T15146] netlink: 'syz.3.1688': attribute type 2 has an invalid length. [ 1193.179631][T15146] : entered promiscuous mode [ 1194.139738][ T40] usb 3-1: USB disconnect, device number 61 [ 1194.643437][T15170] fuse: Bad value for 'fd' [ 1195.149095][ T5834] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1195.555226][ T5834] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1195.573511][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.654393][ T5834] usb 3-1: config 0 descriptor?? [ 1195.761515][ T5834] cp210x 3-1:0.0: cp210x converter detected [ 1196.172214][ T5834] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1197.929212][ T5974] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1198.139268][ T5972] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1198.159420][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 1198.579646][ T5974] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 1198.643045][ T5974] usb 5-1: config 0 has no interface number 0 [ 1198.662985][ T5974] usb 5-1: config 0 interface 23 has no altsetting 0 [ 1198.736680][ T5972] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1198.849504][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.882349][ T5974] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1198.930208][ T5972] usb 4-1: config 0 has no interfaces? [ 1198.957619][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.987936][ T5972] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1199.003242][ T5974] usb 5-1: Product: syz [ 1199.030119][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.041583][ T5974] usb 5-1: Manufacturer: syz [ 1199.046559][ T5974] usb 5-1: SerialNumber: syz [ 1199.270788][ T5972] usb 4-1: config 0 descriptor?? [ 1199.327084][ T5974] usb 5-1: config 0 descriptor?? [ 1201.165550][T15197] netlink: set zone limit has 4 unknown bytes [ 1201.200343][ T5834] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -110 [ 1201.270220][ T5834] cp210x 3-1:0.0: GPIO initialisation failed: -110 [ 1201.999108][ T5834] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1202.807816][ T40] usb 4-1: USB disconnect, device number 62 [ 1202.974114][ T5834] usb 3-1: USB disconnect, device number 62 [ 1203.001371][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1203.059500][ T5834] cp210x 3-1:0.0: device disconnected [ 1204.611412][ T5974] usb 5-1: USB disconnect, device number 50 [ 1204.772466][T15221] xt_hashlimit: max too large, truncated to 1048576 [ 1205.105016][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 1205.268779][ T8837] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1205.481230][ T8837] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1205.493400][ T8837] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1205.536144][ T8837] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1205.547992][ T8837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.616477][ T8837] usb 1-1: Product: syz [ 1205.661086][ T8837] usb 1-1: Manufacturer: syz [ 1205.677936][ T8837] usb 1-1: SerialNumber: syz [ 1205.989066][ T8837] usb 1-1: config 0 descriptor?? [ 1206.016378][T15222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1206.027630][T15222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1208.551453][T15244] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1705'. [ 1209.156433][T15244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1209.245519][T15248] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1209.774083][T15252] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1707'. [ 1211.135288][ T8837] dm9601 1-1:0.0: probe with driver dm9601 failed with error -110 [ 1211.300882][ T5834] usb 1-1: USB disconnect, device number 45 [ 1213.898353][ T8837] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1214.225578][ T8837] usb 5-1: Using ep0 maxpacket: 32 [ 1214.263934][ T8837] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 1214.272664][ T8837] usb 5-1: config 0 has no interface number 0 [ 1214.298092][ T8837] usb 5-1: config 0 interface 23 has no altsetting 0 [ 1214.325882][ T8837] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1214.336035][ T8837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.353740][ T8837] usb 5-1: Product: syz [ 1214.371195][ T8837] usb 5-1: Manufacturer: syz [ 1214.381330][ T8837] usb 5-1: SerialNumber: syz [ 1214.417364][ T8837] usb 5-1: config 0 descriptor?? [ 1215.140807][T15294] xt_hashlimit: max too large, truncated to 1048576 [ 1217.219742][ T8837] usb 5-1: USB disconnect, device number 51 [ 1218.074442][T15315] netlink: 'syz.4.1718': attribute type 5 has an invalid length. [ 1219.849767][T15327] xt_hashlimit: max too large, truncated to 1048576 [ 1220.857092][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1723'. [ 1222.275913][ T8837] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1222.918911][ T8837] usb 2-1: Using ep0 maxpacket: 8 [ 1222.962697][ T8837] usb 2-1: config 1 has an invalid interface number: 222 but max is 0 [ 1222.981423][ T8837] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1223.048515][ T8837] usb 2-1: config 1 has no interface number 0 [ 1223.189593][ T8837] usb 2-1: too many endpoints for config 1 interface 222 altsetting 245: 158, using maximum allowed: 30 [ 1223.375439][ T8837] usb 2-1: config 1 interface 222 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 1223.438407][ T8837] usb 2-1: config 1 interface 222 has no altsetting 0 [ 1223.484293][ T8837] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1223.500023][ T8837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.638400][ T8837] usb 2-1: Product: syz [ 1223.663336][ T8837] usb 2-1: Manufacturer: syz [ 1223.693819][ T8837] usb 2-1: SerialNumber: syz [ 1223.976653][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 1224.021750][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 1224.203171][ T2983] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.214494][ T2983] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.236402][ T2983] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.804030][T15343] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1224.968331][T15343] usb 3-1: Using ep0 maxpacket: 32 [ 1225.019450][T15343] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 1225.049798][T15343] usb 3-1: config 0 has no interface number 0 [ 1225.077107][T15343] usb 3-1: config 0 interface 23 has no altsetting 0 [ 1225.134957][T15343] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1225.146724][T15343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.160311][T15343] usb 3-1: Product: syz [ 1225.174555][T15343] usb 3-1: Manufacturer: syz [ 1225.273670][T15343] usb 3-1: SerialNumber: syz [ 1225.355974][T15343] usb 3-1: config 0 descriptor?? [ 1227.191070][ T8837] usb 2-1: USB disconnect, device number 46 [ 1228.514558][T15384] input: syz1 as /devices/virtual/input/input31 [ 1228.734925][T15380] program syz.1.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1228.764584][T15394] xt_hashlimit: max too large, truncated to 1048576 [ 1228.830746][T15343] usb 3-1: USB disconnect, device number 63 [ 1229.269153][T15403] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1734'. [ 1229.279276][T15403] unsupported nla_type 13342 [ 1231.014319][T15412] xt_hashlimit: max too large, truncated to 1048576 [ 1231.401840][T15415] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1231.446403][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 1231.777536][T15415] bond3 (unregistering): Released all slaves [ 1231.978508][T15343] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1232.078309][ T8837] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1232.158642][T15343] usb 3-1: Using ep0 maxpacket: 16 [ 1232.223061][T15343] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1232.248392][T15343] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1232.268921][T15343] usb 3-1: config 0 has no interface number 0 [ 1232.283219][T15343] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 1232.296750][T15343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.305430][T15343] usb 3-1: Product: syz [ 1232.315569][T15343] usb 3-1: Manufacturer: syz [ 1232.325950][T15343] usb 3-1: SerialNumber: syz [ 1232.378189][T15343] usb 3-1: config 0 descriptor?? [ 1232.427903][ T8837] usb 2-1: config 0 has no interfaces? [ 1232.467675][ T8837] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1232.498314][ T8837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.529199][ T8837] usb 2-1: Product: syz [ 1232.544038][ T8837] usb 2-1: Manufacturer: syz [ 1232.579602][ T8837] usb 2-1: SerialNumber: syz [ 1232.623476][T15426] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1739'. [ 1232.650426][ T8837] usb 2-1: config 0 descriptor?? [ 1234.124851][ T8837] usb 2-1: USB disconnect, device number 47 [ 1234.383844][T15440] Cannot find add_set index 2 as target [ 1235.025954][T15451] hub 1-0:1.0: USB hub found [ 1235.041457][T15451] hub 1-0:1.0: 1 port detected [ 1235.476085][T15455] tipc: Started in network mode [ 1235.481349][T15455] tipc: Node identity ac1414aa, cluster identity 4711 [ 1235.729089][T15455] tipc: Enabling of bearer rejected, failed to enable media [ 1235.938977][T15455] tipc: Enabled bearer , priority 0 [ 1236.094465][T15343] rndis_host 3-1:0.109: More than one union descriptor, skipping ... [ 1236.429379][T15343] usb 3-1: bad CDC descriptors [ 1236.470416][T15343] cdc_acm 3-1:0.109: More than one union descriptor, skipping ... [ 1236.550038][T15343] usb 3-1: USB disconnect, device number 64 [ 1237.076551][T15343] tipc: Node number set to 2886997162 [ 1237.599664][T15460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1744'. [ 1239.110781][T15480] xt_hashlimit: max too large, truncated to 1048576 [ 1240.333450][T15486] fuse: Unknown parameter 'group_i00000000000000000000' [ 1241.516277][T15491] xt_hashlimit: max too large, truncated to 1048576 [ 1243.607199][T15513] binder: BINDER_SET_CONTEXT_MGR already set [ 1243.614252][T15513] binder: 15509:15513 ioctl 4018620d 200000000040 returned -16 [ 1243.996530][T15512] syz.4.1755 (15512): drop_caches: 2 [ 1244.186155][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.199180][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.009440][T15529] hub 1-0:1.0: USB hub found [ 1246.015344][T15529] hub 1-0:1.0: 1 port detected [ 1246.274577][T15531] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1246.284497][T15531] team0: Port device batadv5 added [ 1246.398025][T15532] hub 9-0:1.0: USB hub found [ 1246.409329][T15532] hub 9-0:1.0: 1 port detected [ 1248.059628][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 1248.699757][T15554] xt_hashlimit: max too large, truncated to 1048576 [ 1249.877542][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 1249.887448][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1249.887469][ T30] audit: type=1326 audit(1766155494.392:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1249.953876][ T30] audit: type=1326 audit(1766155494.392:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.082938][ T30] audit: type=1326 audit(1766155494.392:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.172017][ T30] audit: type=1326 audit(1766155494.392:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.208381][T15343] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1250.257486][ T30] audit: type=1326 audit(1766155494.402:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.396625][ T30] audit: type=1326 audit(1766155494.402:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.429505][T15343] usb 4-1: Using ep0 maxpacket: 32 [ 1250.449812][T15343] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1250.462421][ T30] audit: type=1326 audit(1766155494.402:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.494412][T15343] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.562807][ T30] audit: type=1326 audit(1766155494.402:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.589205][T15343] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1250.611976][T15343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.628388][T15343] usb 4-1: Product: syz [ 1250.632947][T15343] usb 4-1: Manufacturer: syz [ 1250.637555][T15343] usb 4-1: SerialNumber: syz [ 1250.658870][ T30] audit: type=1326 audit(1766155494.402:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1250.787606][ T30] audit: type=1326 audit(1766155494.402:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15557 comm="syz.3.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1251.609050][ T5974] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 1251.849612][ T5974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.861883][ T5974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1251.872863][ T5974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1251.967489][ T5974] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1251.986028][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.033648][T15565] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1252.050523][ T5974] hub 3-1:1.0: bad descriptor, ignoring hub [ 1252.057756][ T5974] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1252.077119][ T5974] cdc_wdm 3-1:1.0: skipping garbage [ 1252.092331][ T5974] cdc_wdm 3-1:1.0: skipping garbage [ 1252.303037][ T5974] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1252.377718][ T5974] cdc_wdm 3-1:1.0: Unknown control protocol [ 1252.489789][ T5974] usb 3-1: USB disconnect, device number 65 [ 1252.954708][T15343] kvaser_usb 4-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 1252.998659][T15343] usb 4-1: USB disconnect, device number 63 [ 1255.015926][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 1255.709115][T15613] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1775'. [ 1255.867359][T15609] netlink: 'syz.1.1774': attribute type 12 has an invalid length. [ 1256.013448][T15613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1256.309800][T15613] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1258.410882][T15632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 1259.329784][T15640] xt_hashlimit: max too large, truncated to 1048576 [ 1261.739516][T15660] netlink: 'syz.1.1784': attribute type 5 has an invalid length. [ 1262.554654][T15673] sctp: [Deprecated]: syz.2.1786 (pid 15673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1262.554654][T15673] Use struct sctp_sack_info instead [ 1262.843591][ T8837] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1263.418993][ T8837] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1263.429384][ T8837] usb 4-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 1263.449631][ T8837] usb 4-1: config 0 has no interface number 0 [ 1263.457646][ T8837] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1263.473554][ T8837] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1263.488959][ T8837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.519250][ T8837] usb 4-1: Product: syz [ 1263.523474][ T8837] usb 4-1: Manufacturer: syz [ 1263.579714][ T8837] usb 4-1: SerialNumber: syz [ 1263.630915][ T8837] usb 4-1: config 0 descriptor?? [ 1265.719601][T15685] vivid-007: disconnect [ 1265.789038][T15343] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1265.988499][T15343] usb 5-1: Using ep0 maxpacket: 32 [ 1266.016164][T15343] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 1266.024627][T15343] usb 5-1: config 0 has no interface number 0 [ 1266.031217][T15343] usb 5-1: config 0 interface 23 has no altsetting 0 [ 1266.323276][T15343] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1266.374845][T15343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.403120][T15343] usb 5-1: Product: syz [ 1266.416178][T15343] usb 5-1: Manufacturer: syz [ 1266.444160][T15343] usb 5-1: SerialNumber: syz [ 1266.647987][T15680] vivid-007: reconnect [ 1266.799386][T15697] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 1266.914813][T15343] usb 5-1: config 0 descriptor?? [ 1267.985843][ T8837] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1268.004636][ T8837] dvb-usb: bulk message failed: -22 (3/0) [ 1268.096990][ T8837] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1268.162826][ T8837] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1268.239892][ T8837] usb 4-1: media controller created [ 1268.283972][ T8837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1268.396005][ T8837] dvb-usb: bulk message failed: -22 (6/0) [ 1268.432309][ T8837] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1268.550521][ T8837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 1268.571837][ T8837] dvb-usb: schedule remote query interval to 150 msecs. [ 1268.584229][ T8837] dvb-usb: bulk message failed: -22 (3/0) [ 1268.679055][ T8837] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1268.741483][ T40] dvb-usb: bulk message failed: -22 (1/0) [ 1268.749666][ T40] dvb-usb: error while querying for an remote control event. [ 1268.890290][ T8837] usb 4-1: USB disconnect, device number 64 [ 1269.044248][T15352] dvb-usb: bulk message failed: -22 (1/0) [ 1269.132987][T15352] dvb-usb: error while querying for an remote control event. [ 1269.841660][ T8837] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1271.289985][T15343] usb 5-1: USB disconnect, device number 52 [ 1271.709538][T15728] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 1271.867286][T15727] sch_fq: defrate 0 ignored. [ 1273.272356][T15739] hub 1-0:1.0: USB hub found [ 1273.279121][T15739] hub 1-0:1.0: 1 port detected [ 1274.248882][T15743] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1274.255405][T15743] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1274.424771][T15753] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1799'. [ 1274.584269][T15743] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1274.596866][T15743] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1274.623716][T15744] fuse: Unknown parameter 'user_id00000000000000000000' [ 1274.777618][T15743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1274.791710][T15743] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1274.906093][T15743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1274.929316][T15743] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1274.985619][T15743] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1275.019417][T15743] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1276.030037][T15767] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1276.092978][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1276.092999][ T30] audit: type=1326 audit(1766155520.582:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1276.208742][ T30] audit: type=1326 audit(1766155520.582:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1276.307313][ T30] audit: type=1326 audit(1766155520.582:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1276.512504][ T30] audit: type=1326 audit(1766155520.582:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1276.585934][ T30] audit: type=1326 audit(1766155520.582:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1276.658432][ T30] audit: type=1326 audit(1766155520.582:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1276.915350][ T30] audit: type=1326 audit(1766155520.582:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1277.319598][ T30] audit: type=1326 audit(1766155520.912:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1277.428433][ T30] audit: type=1326 audit(1766155520.912:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1277.543803][ T30] audit: type=1326 audit(1766155520.972:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15761 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8baf58f749 code=0x7ffc0000 [ 1278.330424][T15778] program syz.1.1804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1278.376072][T15782] xt_hashlimit: max too large, truncated to 1048576 [ 1279.169091][ T5834] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1279.329104][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 1279.337977][ T5834] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1279.363587][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.416872][ T5834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1279.434964][ T5834] pvrusb2: ********** [ 1279.465229][ T5834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1279.480044][ T5834] pvrusb2: Important functionality might not be entirely working. [ 1279.480069][ T5834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1279.480083][ T5834] pvrusb2: ********** [ 1280.112833][ T2345] pvrusb2: Invalid write control endpoint [ 1280.178064][T15786] pvrusb2: Invalid write control endpoint [ 1280.312236][ T2345] pvrusb2: Invalid write control endpoint [ 1280.331946][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1280.485729][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1280.544502][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1280.615878][ T2345] pvrusb2: Device being rendered inoperable [ 1280.704131][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1280.724830][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1280.754288][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1280.765946][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1280.806519][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1283.161011][ T5974] usb 1-1: USB disconnect, device number 46 [ 1283.651661][T15828] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1815'. [ 1283.677641][T15828] loop6: detected capacity change from 0 to 524288000 [ 1283.757556][T15832] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 1284.001276][T15832] team0: Port device batadv9 added [ 1284.099545][T15832] hub 9-0:1.0: USB hub found [ 1284.104914][T15832] hub 9-0:1.0: 1 port detected [ 1284.162626][T15839] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 1284.499156][ T5974] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1284.725781][ T5974] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1284.774352][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1284.861666][ T5974] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1284.893544][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1284.991628][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1285.083850][ T5974] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1285.123130][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1285.159573][ T5974] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1285.199354][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1285.262079][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1285.485898][ T5974] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1285.597989][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1285.851195][ T5974] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1286.105161][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1286.105180][ T30] audit: type=1326 audit(1766155530.632:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.4.1817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff727d8f749 code=0x0 [ 1286.143946][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1286.166207][ T5974] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1286.404760][ T5974] usb 4-1: string descriptor 0 read error: -22 [ 1286.442728][ T5974] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1286.523135][T15852] binder: BINDER_SET_CONTEXT_MGR already set [ 1286.529365][T15852] binder: 15849:15852 ioctl 4018620d 200000000040 returned -16 [ 1286.540739][T15852] binder: 15849:15852 ioctl c0306201 200000000340 returned -14 [ 1286.574279][T15852] syz.2.1819 (15852): drop_caches: 2 [ 1286.942658][T15855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1820'. [ 1287.084870][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.718443][T15343] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1287.977172][T15343] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1287.985843][T15343] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.018128][T15343] usb 1-1: config 8 has no interface number 0 [ 1288.039330][T15343] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1288.087607][T15858] bridge0: port 1(bond0) entered blocking state [ 1288.111971][T15343] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1288.134428][T15343] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1288.159942][T15859] fuse: Unknown parameter 'su' [ 1288.185686][T15858] bridge0: port 1(bond0) entered disabled state [ 1288.209015][T15343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.253153][T15858] bond0: entered allmulticast mode [ 1288.261267][ T5974] usb 4-1: can't set config #168, error -71 [ 1288.281263][T15860] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1821'. [ 1288.296530][T15343] ir_toy 1-1:8.177: required endpoints not found [ 1288.352166][ T5974] usb 4-1: USB disconnect, device number 65 [ 1288.385964][T15858] bond0: entered promiscuous mode [ 1288.443549][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1821'. [ 1289.778737][T15876] syz.2.1833 (15876): drop_caches: 2 [ 1289.816854][T15873] usb 1-1: USB disconnect, device number 47 [ 1289.838398][T15873] hub 1-0:1.0: USB hub found [ 1289.967997][T15873] hub 1-0:1.0: 1 port detected [ 1290.348857][ T5974] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1290.650058][T15882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1292.777224][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1828'. [ 1295.119005][ T5972] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1295.281264][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 1295.300542][ T5972] usb 3-1: config 0 has no interfaces? [ 1295.309165][ T5972] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1295.338912][ T5972] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1295.357273][ T5972] usb 3-1: Manufacturer: syz [ 1295.429439][ T5972] usb 3-1: config 0 descriptor?? [ 1295.649686][T15932] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 1295.733809][T15934] xt_hashlimit: max too large, truncated to 1048576 [ 1296.877956][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1296.909299][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1296.928946][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1296.941410][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1296.951459][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1297.147308][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1297.193955][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1297.245891][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1297.342932][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 1297.604851][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1297.645515][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4200 [ 1297.751888][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000ff00 [ 1297.887255][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100007f00 [ 1297.985454][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100007f00 [ 1298.009940][ T8837] usb 3-1: USB disconnect, device number 66 [ 1298.066391][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100007f00 [ 1298.092429][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100007f00 [ 1298.233629][T15944] kvm: kvm [15943]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100007f00 [ 1298.547928][T15955] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1300.199146][T15966] __nla_validate_parse: 32 callbacks suppressed [ 1300.199167][T15966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1839'. [ 1300.730206][T15969] geneve2: entered promiscuous mode [ 1300.768530][T15969] geneve2: entered allmulticast mode [ 1301.263764][T15973] sctp: [Deprecated]: syz.1.1842 (pid 15973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1301.263764][T15973] Use struct sctp_sack_info instead [ 1301.830916][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 1302.989430][T15991] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1846'. [ 1303.012099][T15991] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1846'. [ 1303.056405][T15991] syz.4.1846 (15991): drop_caches: 2 [ 1305.619467][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.625862][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.846132][T16019] xt_hashlimit: max too large, truncated to 1048576 [ 1306.011851][T16016] hub 1-0:1.0: USB hub found [ 1306.017537][T16016] hub 1-0:1.0: 1 port detected [ 1306.979049][T16031] netlink: 'syz.4.1853': attribute type 13 has an invalid length. [ 1307.027878][T16031] gretap0: refused to change device tx_queue_len [ 1307.090940][T16031] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1308.318824][T16040] binder: 16037:16040 ioctl 4018620d 0 returned -22 [ 1308.342085][T16040] binder: 16037:16040 ioctl c018620c 200000000380 returned -1 [ 1309.246663][T16047] sctp: [Deprecated]: syz.0.1856 (pid 16047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1309.246663][T16047] Use struct sctp_sack_info instead [ 1310.605467][T16066] veth1_to_bond: entered allmulticast mode [ 1310.802114][ T8837] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1310.812859][ T5974] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1310.982852][ T8837] usb 3-1: config 0 has no interfaces? [ 1310.989008][ T5972] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1311.001418][ T8837] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1311.011707][ T8837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.024199][ T8837] usb 3-1: Product: syz [ 1311.037538][ T8837] usb 3-1: Manufacturer: syz [ 1311.054758][ T8837] usb 3-1: SerialNumber: syz [ 1311.067319][ T5974] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1311.082423][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1311.100859][ T5974] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1311.112166][ T8837] usb 3-1: config 0 descriptor?? [ 1311.141107][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1311.161804][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.176104][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.196241][ T5974] usb 5-1: Product: syz [ 1311.253957][ T5974] usb 5-1: Manufacturer: syz [ 1311.313038][ T5972] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1311.325570][ T5974] usb 5-1: SerialNumber: syz [ 1311.389930][ T5974] usb 5-1: config 0 descriptor?? [ 1311.395264][ T5972] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1311.455840][ T5974] usb 5-1: selecting invalid altsetting 0 [ 1311.462695][ T5972] usb 1-1: Manufacturer: syz [ 1311.495936][ T5972] usb 1-1: config 0 descriptor?? [ 1311.965611][T16069] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 1312.096492][ T5972] usbhid 1-1:0.0: can't add hid device: -71 [ 1312.103426][ T5972] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1312.127381][ T5972] usb 1-1: USB disconnect, device number 49 [ 1312.311439][ T5974] usb 5-1: USB disconnect, device number 53 [ 1313.003815][ T5974] usb 3-1: USB disconnect, device number 67 [ 1314.350189][T16062] veth1_to_bond: left allmulticast mode [ 1315.070204][T16104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1867'. [ 1316.799588][T16116] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 1316.944287][T16116] team0: Port device batadv10 added [ 1317.043230][T16116] hub 9-0:1.0: USB hub found [ 1317.059422][T16116] hub 9-0:1.0: 1 port detected [ 1317.886726][T16125] binder: BINDER_SET_CONTEXT_MGR already set [ 1317.893991][T16125] binder: 16122:16125 ioctl 4018620d 200000000140 returned -16 [ 1318.273687][T16131] sctp: [Deprecated]: syz.3.1872 (pid 16131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1318.273687][T16131] Use struct sctp_sack_info instead [ 1321.543326][T16165] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1322.111329][T16174] : renamed from bridge_slave_0 [ 1322.176711][T16176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1881'. [ 1323.350756][T16183] hub 1-0:1.0: USB hub found [ 1323.358995][T16183] hub 1-0:1.0: 1 port detected [ 1324.968910][ T5974] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1325.138893][ T5974] usb 3-1: Using ep0 maxpacket: 16 [ 1325.195108][ T5974] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 1325.299931][ T5972] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1325.499015][ T5972] usb 1-1: Using ep0 maxpacket: 32 [ 1325.780689][ T5972] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 1325.850833][ T5972] usb 1-1: config 0 has no interface number 0 [ 1325.912724][ T5974] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1325.922503][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.932464][ T5972] usb 1-1: config 0 interface 23 has no altsetting 0 [ 1326.000835][ T5974] usb 3-1: Product: syz [ 1326.030640][ T5974] usb 3-1: Manufacturer: syz [ 1326.035330][ T5974] usb 3-1: SerialNumber: syz [ 1326.083979][ T5972] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1326.129508][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.138978][ T5974] usb 3-1: config 0 descriptor?? [ 1326.188964][ T5972] usb 1-1: Product: syz [ 1326.213959][ T5972] usb 1-1: Manufacturer: syz [ 1326.240706][ T5972] usb 1-1: SerialNumber: syz [ 1326.411633][ T30] audit: type=1326 audit(1766155570.922:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1326.438090][ T5972] usb 1-1: config 0 descriptor?? [ 1326.632816][ T30] audit: type=1326 audit(1766155570.922:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1326.726314][ T30] audit: type=1326 audit(1766155570.922:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1326.839980][T16197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1886'. [ 1326.887200][ T30] audit: type=1326 audit(1766155570.922:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1326.973187][ T30] audit: type=1326 audit(1766155570.922:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1327.174777][ T30] audit: type=1326 audit(1766155570.922:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1327.286411][ T30] audit: type=1326 audit(1766155570.922:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1327.430515][ T30] audit: type=1326 audit(1766155570.922:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1327.542829][ T30] audit: type=1326 audit(1766155570.922:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1327.778677][ T30] audit: type=1326 audit(1766155570.922:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16209 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1328.119562][T15343] usb 3-1: USB disconnect, device number 68 [ 1328.710703][T16219] geneve2: entered allmulticast mode [ 1329.189124][ T5972] usb 1-1: USB disconnect, device number 50 [ 1329.258879][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 1329.508800][ T5972] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1329.748853][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 1329.779107][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.808943][ T5972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1329.994093][ T5972] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1330.046944][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.063342][ T5972] usb 2-1: Product: syz [ 1330.068030][ T5972] usb 2-1: Manufacturer: syz [ 1330.074630][ T5972] usb 2-1: SerialNumber: syz [ 1330.095273][ T5972] usb 2-1: config 0 descriptor?? [ 1330.115691][ T5972] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 1330.232045][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1895'. [ 1332.676436][ T5972] usb 2-1: USB disconnect, device number 48 [ 1333.066438][T16255] xt_hashlimit: max too large, truncated to 1048576 [ 1334.205652][T16269] picdev_read: 77 callbacks suppressed [ 1334.205735][T16269] kvm: pic: non byte read [ 1334.229727][T16269] kvm: pic: non byte read [ 1334.234720][T16269] kvm: pic: non byte read [ 1334.282560][T16269] kvm: pic: non byte read [ 1334.588707][T16269] kvm: pic: non byte read [ 1334.606228][T16269] kvm: pic: non byte read [ 1334.610976][T16269] kvm: pic: non byte read [ 1334.615747][T16269] kvm: pic: non byte read [ 1334.625827][T16269] kvm: pic: non byte read [ 1334.695312][T16269] kvm: pic: non byte read [ 1335.980915][T16286] fuse: Unknown parameter 'user_id00000000000000000000' [ 1338.184657][T16298] netlink: 'syz.3.1904': attribute type 12 has an invalid length. [ 1338.625235][T16298] Cannot find add_set index 0 as target [ 1341.658893][ T8837] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1341.687811][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1909'. [ 1341.704411][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1909'. [ 1341.834173][T16336] sctp: [Deprecated]: syz.2.1910 (pid 16336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1341.834173][T16336] Use struct sctp_sack_info instead [ 1341.980814][ T8837] usb 4-1: Using ep0 maxpacket: 8 [ 1341.989957][ T8837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1342.001775][ T8837] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1342.013327][ T8837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1342.024861][T15352] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1342.038747][ T8837] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1342.056654][ T8837] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1342.112810][ T8837] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1342.147773][ T8837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.188486][T15352] usb 5-1: Using ep0 maxpacket: 16 [ 1342.198702][T15352] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.253694][T15352] usb 5-1: config 0 has no interfaces? [ 1342.322786][T15352] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1342.379668][T15352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.434062][T15352] usb 5-1: Product: syz [ 1342.608146][ T8837] usb 4-1: GET_CAPABILITIES returned 0 [ 1342.614138][ T8837] usbtmc 4-1:16.0: can't read capabilities [ 1342.648566][T15352] usb 5-1: Manufacturer: syz [ 1342.666095][T15352] usb 5-1: SerialNumber: syz [ 1342.714332][T15352] usb 5-1: config 0 descriptor?? [ 1343.591257][T15352] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1343.867067][T15352] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1343.881199][T15352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.899994][T15352] usb 1-1: Product: syz [ 1343.922596][T15352] usb 1-1: Manufacturer: syz [ 1343.930556][T15352] usb 1-1: SerialNumber: syz [ 1344.241054][ T5972] usb 4-1: USB disconnect, device number 66 [ 1344.255592][T15352] usb 1-1: config 0 descriptor?? [ 1344.633993][T15352] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1344.825830][T16340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.835503][T16340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.012984][ T5972] usb 5-1: USB disconnect, device number 54 [ 1346.411617][T15352] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1346.555618][T16365] kAFS: unable to lookup cell '' [ 1346.562781][T16365] kAFS: unable to lookup cell '(,c' [ 1347.079681][ T5972] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1347.372582][ T5972] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.455236][ T5972] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1347.536134][ T5972] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1347.598509][T16378] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1919'. [ 1347.668796][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.091968][ T5972] usb 3-1: USB disconnect, device number 69 [ 1348.139992][T15352] usb 1-1: USB disconnect, device number 51 [ 1350.618771][ T5972] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1350.788906][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 1350.853541][ T5972] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 1350.918921][ T5972] usb 4-1: config 0 has no interface number 0 [ 1350.958877][ T5972] usb 4-1: config 0 interface 23 has no altsetting 0 [ 1351.089160][ T5972] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1351.108930][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.230694][ T5972] usb 4-1: Product: syz [ 1351.238027][ T5972] usb 4-1: Manufacturer: syz [ 1351.281338][ T5972] usb 4-1: SerialNumber: syz [ 1351.329310][T16412] overlayfs: missing 'lowerdir' [ 1351.539519][ T5972] usb 4-1: config 0 descriptor?? [ 1354.772409][ T5972] usb 4-1: USB disconnect, device number 67 [ 1355.498953][ T5972] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1355.651530][T16445] hsr0: entered allmulticast mode [ 1355.656653][T16445] hsr_slave_0: entered allmulticast mode [ 1355.757309][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'. [ 1355.799281][T16445] hsr_slave_1: entered allmulticast mode [ 1355.808871][ T5972] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1355.861194][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'. [ 1355.882189][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.893939][ T5972] usb 4-1: config 0 has no interfaces? [ 1355.908466][ T5972] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1355.930167][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.045060][T16447] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1356.077390][ T5972] usb 4-1: config 0 descriptor?? [ 1357.008281][ T5972] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1357.180681][ T5972] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1357.216852][ T5972] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1357.258869][ T5972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1357.273170][ T5972] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1357.316430][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.372080][ T5972] usb 2-1: config 0 descriptor?? [ 1357.429477][T16456] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1358.017320][ T5972] logitech 0003:046D:C24F.0004: item fetching failed at offset 5/7 [ 1358.349570][ T5972] logitech 0003:046D:C24F.0004: parse failed [ 1358.377608][ T5972] logitech 0003:046D:C24F.0004: probe with driver logitech failed with error -22 [ 1358.944929][T16464] bond2: entered promiscuous mode [ 1359.060827][T16464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1359.493053][T15352] usb 4-1: USB disconnect, device number 68 [ 1359.595711][ T8837] usb 2-1: USB disconnect, device number 49 [ 1361.638397][T16500] picdev_read: 77 callbacks suppressed [ 1361.638420][T16500] kvm: pic: non byte read [ 1361.648672][T16500] kvm: pic: non byte read [ 1361.654943][T16500] kvm: pic: non byte read [ 1361.662070][T16500] kvm: pic: non byte read [ 1361.670091][T16500] kvm: pic: non byte read [ 1361.676104][T16500] kvm: pic: non byte read [ 1361.684585][T16500] kvm: pic: non byte read [ 1361.691007][T16500] kvm: pic: non byte read [ 1361.696801][T16500] kvm: pic: non byte read [ 1361.701774][T16500] kvm: pic: non byte read [ 1363.616244][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1363.616266][ T30] audit: type=1326 audit(1766155608.102:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1363.792675][ T30] audit: type=1326 audit(1766155608.102:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1364.603870][ T30] audit: type=1326 audit(1766155608.102:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1364.805763][ T30] audit: type=1326 audit(1766155608.112:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1364.903654][ T30] audit: type=1326 audit(1766155608.112:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1364.998287][ T30] audit: type=1326 audit(1766155608.122:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1365.113835][ T30] audit: type=1326 audit(1766155608.122:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1365.348335][ T8837] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1365.376402][ T30] audit: type=1326 audit(1766155608.122:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1365.457619][ T30] audit: type=1326 audit(1766155608.132:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1365.533097][ T30] audit: type=1326 audit(1766155608.132:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16507 comm="syz.0.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1365.577847][ T8837] usb 2-1: config 0 has no interfaces? [ 1365.624675][ T8837] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1365.648329][ T8837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.676835][ T8837] usb 2-1: Product: syz [ 1365.702099][ T8837] usb 2-1: Manufacturer: syz [ 1365.706791][ T8837] usb 2-1: SerialNumber: syz [ 1365.757578][ T8837] usb 2-1: config 0 descriptor?? [ 1366.588832][ T5972] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1367.053502][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.060371][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.117071][ T5972] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1367.127745][ T5972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.159154][ T5972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1367.197209][ T5972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.272212][ T5972] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1367.287370][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1367.319196][ T5972] usb 3-1: Product: syz [ 1367.337100][ T5972] usb 3-1: Manufacturer: syz [ 1367.374481][ T5972] cdc_wdm 3-1:1.0: skipping garbage [ 1367.380448][ T5972] cdc_wdm 3-1:1.0: skipping garbage [ 1367.385905][ T5972] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1367.576374][T16537] openvswitch: netlink: IPv4 tun info is not correct [ 1367.629577][ T8837] usb 2-1: USB disconnect, device number 50 [ 1367.794127][ T5972] usb 3-1: USB disconnect, device number 70 [ 1368.258300][ T8837] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1368.417808][T16561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1950'. [ 1368.459143][ T8837] usb 2-1: Using ep0 maxpacket: 8 [ 1368.469791][ T8837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.493659][ T8837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1368.513108][ T8837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1368.556638][ T8837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1368.694093][ T8837] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1368.745395][ T8837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.831419][ T8837] hub 2-1:1.0: bad descriptor, ignoring hub [ 1368.860404][ T8837] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1368.935251][ T8837] cdc_wdm 2-1:1.0: skipping garbage [ 1368.959420][ T8837] cdc_wdm 2-1:1.0: skipping garbage [ 1369.047517][ T8837] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1369.105845][ T8837] cdc_wdm 2-1:1.0: Unknown control protocol [ 1370.513581][T16575] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1370.542139][T16575] bond3 (unregistering): Released all slaves [ 1370.988456][ T8837] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1371.238843][ T8837] usb 3-1: config 0 has no interfaces? [ 1371.274032][ T8837] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1371.290705][ T8837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.362159][ T8837] usb 3-1: Product: syz [ 1371.378287][ T8837] usb 3-1: Manufacturer: syz [ 1371.396255][ T8837] usb 3-1: SerialNumber: syz [ 1371.640700][ T8837] usb 3-1: config 0 descriptor?? [ 1371.819056][ T5972] usb 2-1: USB disconnect, device number 51 [ 1372.698348][ T8837] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1372.858395][ T8837] usb 2-1: Using ep0 maxpacket: 32 [ 1372.886733][T16598] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1956'. [ 1373.084146][ T8837] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 1373.092723][ T8837] usb 2-1: config 0 has no interface number 0 [ 1373.250498][ T8837] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1373.267835][ T8837] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1373.368756][ T8837] usb 2-1: Product: syz [ 1373.377047][ T8837] usb 2-1: Manufacturer: syz [ 1373.454501][ T8837] usb 2-1: config 0 descriptor?? [ 1374.840974][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1374.841001][ T30] audit: type=1326 audit(1766155619.372:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1375.055588][ T5974] usb 3-1: USB disconnect, device number 71 [ 1375.089056][ T30] audit: type=1326 audit(1766155619.422:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.0.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1377.018825][ T8837] usb 2-1: USB disconnect, device number 52 [ 1377.563984][T16637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1964'. [ 1378.499237][ T8837] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1378.808855][ T8837] usb 2-1: Using ep0 maxpacket: 16 [ 1378.861976][ T8837] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.903183][ T8837] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1379.017770][ T8837] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1379.088557][ T40] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1379.111948][ T8837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.226309][ T8837] usb 2-1: Product: syz [ 1379.237232][ T8837] usb 2-1: Manufacturer: syz [ 1379.251743][ T8837] usb 2-1: SerialNumber: syz [ 1379.279109][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 1379.381875][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1379.551416][ T40] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1379.576646][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.687396][ T40] usb 3-1: Product: syz [ 1379.695896][ T40] usb 3-1: Manufacturer: syz [ 1379.721325][ T40] usb 3-1: SerialNumber: syz [ 1379.776044][ T40] usb 3-1: config 0 descriptor?? [ 1379.911338][ T40] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1380.436569][T16658] syzkaller0: entered promiscuous mode [ 1380.449475][T16658] syzkaller0: entered allmulticast mode [ 1380.881839][ T973] usb 3-1: Failed to submit usb control message: -110 [ 1380.898516][ T973] usb 3-1: unable to send the bmi data to the device: -110 [ 1380.928850][ T973] usb 3-1: unable to get target info from device [ 1380.935338][ T973] usb 3-1: could not get target info (-110) [ 1380.958903][ T973] usb 3-1: could not probe fw (-110) [ 1382.582581][ T5972] usb 2-1: USB disconnect, device number 53 [ 1383.189787][ T40] usb 3-1: USB disconnect, device number 72 [ 1383.298715][ T8837] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1383.513358][ T8837] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1383.526536][ T8837] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1383.595815][ T8837] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1383.823048][ T8837] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1383.868300][ T8837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.405171][ T8837] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1384.634864][T16673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.646153][T16673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.678521][T16673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.688603][T16673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.752376][ T30] audit: type=1326 audit(1766155629.202:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1384.996550][T16524] udevd[16524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.020954][ T30] audit: type=1326 audit(1766155629.202:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e8c38df90 code=0x7ffc0000 [ 1385.067754][ T8837] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1385.172844][ T8837] usb 2-1: USB disconnect, device number 54 [ 1385.185906][ T30] audit: type=1326 audit(1766155629.202:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e8c38f34b code=0x7ffc0000 [ 1385.221885][ T30] audit: type=1326 audit(1766155629.202:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e8c38f34b code=0x7ffc0000 [ 1385.244870][ T30] audit: type=1326 audit(1766155629.222:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1385.268091][ T30] audit: type=1326 audit(1766155629.232:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1385.335225][ T30] audit: type=1326 audit(1766155629.232:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1385.492041][ T30] audit: type=1326 audit(1766155629.232:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1385.586007][ T30] audit: type=1326 audit(1766155629.232:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1385.711179][ T30] audit: type=1326 audit(1766155629.232:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16670 comm="syz.1.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8c38f749 code=0x7ffc0000 [ 1386.371862][T16708] netlink: 'syz.4.1978': attribute type 13 has an invalid length. [ 1387.390151][T16723] futex_wake_op: syz.3.1976 tries to shift op by 32; fix this program [ 1387.895670][T16727] netlink: 'syz.2.1981': attribute type 27 has an invalid length. [ 1390.516947][T16749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1390.664092][ T5972] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1390.897887][T16727] macvlan0: left promiscuous mode [ 1390.994451][ T5972] usb 5-1: config 0 has no interfaces? [ 1391.011986][ T5972] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1391.029167][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.051096][ T5972] usb 5-1: Product: syz [ 1391.062979][ T5972] usb 5-1: Manufacturer: syz [ 1391.073417][ T5972] usb 5-1: SerialNumber: syz [ 1391.120788][ T5972] usb 5-1: config 0 descriptor?? [ 1391.284105][T16727] bridge1: left promiscuous mode [ 1391.330469][T16727] batadv1: left promiscuous mode [ 1391.399229][T16727] vlan2: left promiscuous mode [ 1391.428876][T16727] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1391.462922][T16727] batadv2: left promiscuous mode [ 1391.579846][T16727] ipip0: left promiscuous mode [ 1391.595133][T16727] ipip0: left allmulticast mode [ 1391.715198][T16727] bond2: left promiscuous mode [ 1392.068868][ T1333] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.121085][ T1333] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.137944][ T1333] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.794160][T16777] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1987'. [ 1394.921346][T16790] bond0: left allmulticast mode [ 1394.926498][T16790] bond0: left promiscuous mode [ 1394.932574][T16790] bridge0: port 1(bond0) entered disabled state [ 1395.013717][ T5974] usb 5-1: USB disconnect, device number 55 [ 1395.093886][T16790] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1395.235151][T16795] netlink: 'syz.3.1991': attribute type 5 has an invalid length. [ 1395.964012][T16807] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.988267][T16807] binder: 16801:16807 ioctl 4018620d 200000000040 returned -16 [ 1396.273921][T16809] program syz.3.1995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1398.227629][T16821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1399.621171][T16836] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1399.907885][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2002'. [ 1399.930942][T16836] bond4 (unregistering): Released all slaves [ 1400.349129][T15352] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1400.710605][T15352] usb 2-1: config 0 has no interfaces? [ 1400.724096][T15352] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1400.740734][T15352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.750899][T15352] usb 2-1: Product: syz [ 1400.769009][T15352] usb 2-1: Manufacturer: syz [ 1400.773780][T15352] usb 2-1: SerialNumber: syz [ 1400.785123][T15352] usb 2-1: config 0 descriptor?? [ 1402.644018][T16871] random: crng reseeded on system resumption [ 1403.616790][ T5972] usb 2-1: USB disconnect, device number 55 [ 1403.940930][T16890] fuse: Bad value for 'fd' [ 1404.216021][T16893] binder: BINDER_SET_CONTEXT_MGR already set [ 1404.223551][T16893] binder: 16886:16893 ioctl 4018620d 200000000040 returned -16 [ 1406.956949][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2014'. [ 1409.037903][T16927] kvm: kvm [16921]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1409.052373][T16927] kvm: kvm [16921]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1409.139316][T16929] fuse: Unknown parameter 'LЄgroup_id' [ 1410.291417][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1410.291436][ T30] audit: type=1326 audit(1766155654.802:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1410.323090][ T30] audit: type=1326 audit(1766155654.802:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1410.352224][ T30] audit: type=1326 audit(1766155654.802:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1410.652262][T16947] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1411.063487][ T30] audit: type=1326 audit(1766155654.802:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1411.301134][T16957] program syz.3.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.320879][ T30] audit: type=1326 audit(1766155654.802:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1411.502914][ T30] audit: type=1326 audit(1766155654.812:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1411.636971][ T30] audit: type=1326 audit(1766155654.812:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1411.817366][ T30] audit: type=1326 audit(1766155654.812:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1412.408888][ T30] audit: type=1326 audit(1766155654.812:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1412.504543][ T30] audit: type=1326 audit(1766155654.812:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1413.494631][T16973] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1413.555529][T16973] bond5 (unregistering): Released all slaves [ 1414.078993][ T5972] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1414.302423][ T5972] usb 5-1: config 0 has no interfaces? [ 1414.323990][ T5972] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1414.324022][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.324044][ T5972] usb 5-1: Product: syz [ 1414.324059][ T5972] usb 5-1: Manufacturer: syz [ 1414.324075][ T5972] usb 5-1: SerialNumber: syz [ 1414.334644][ T5972] usb 5-1: config 0 descriptor?? [ 1414.567791][T16993] binder: BINDER_SET_CONTEXT_MGR already set [ 1414.567829][T16993] binder: 16984:16993 ioctl 4018620d 200000000040 returned -16 [ 1414.744523][T16994] netlink: 'syz.3.2025': attribute type 10 has an invalid length. [ 1414.754513][T16994] netlink: 'syz.3.2025': attribute type 10 has an invalid length. [ 1414.846164][T16981] kvm: pic: non byte write [ 1414.852296][T16981] kvm: pic: non byte write [ 1417.149703][ T5972] usb 5-1: USB disconnect, device number 56 [ 1417.357116][T17004] program syz.0.2028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1417.847208][T17018] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2031'. [ 1419.445344][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 1420.430019][T17043] delete_channel: no stack [ 1420.844819][T17050] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1420.912029][T17050] bond4 (unregistering): Released all slaves [ 1421.669244][ T5972] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1421.976122][ T5972] usb 2-1: config 0 has no interfaces? [ 1422.038432][ T5972] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1422.064485][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.114671][ T5972] usb 2-1: Product: syz [ 1422.134737][ T5972] usb 2-1: Manufacturer: syz [ 1422.150917][ T5972] usb 2-1: SerialNumber: syz [ 1422.160496][ T5972] usb 2-1: config 0 descriptor?? [ 1422.854738][T17074] xt_hashlimit: max too large, truncated to 1048576 [ 1423.915109][ T8837] usb 2-1: USB disconnect, device number 56 [ 1423.980478][T17078] syzkaller0: Caught tx_queue_len zero misconfig [ 1425.331761][T17094] batman_adv: batadv0: Adding interface: dummy0 [ 1425.364038][T17094] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.391779][T17094] batman_adv: batadv0: Interface activated: dummy0 [ 1425.476624][T17098] batadv0: mtu less than device minimum [ 1425.484445][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.496900][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.509102][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.521159][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.533304][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.545338][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.557523][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.569719][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.582018][T17098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1425.797317][T17097] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.807597][T17097] binder: 17085:17097 ioctl 4018620d 200000000040 returned -16 [ 1427.156245][T17106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1428.483650][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.500994][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.511959][T17131] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2049'. [ 1431.843473][T17158] xt_hashlimit: max too large, truncated to 1048576 [ 1431.959169][ T5972] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1432.118252][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 1432.173476][ T5972] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 1432.208941][ T5972] usb 3-1: config 0 has no interface number 0 [ 1432.254724][ T5972] usb 3-1: config 0 interface 23 has no altsetting 0 [ 1432.323281][ T5972] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1432.497049][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.534853][ T5972] usb 3-1: Product: syz [ 1432.558030][ T5972] usb 3-1: Manufacturer: syz [ 1432.602599][ T5972] usb 3-1: SerialNumber: syz [ 1432.649464][ T5972] usb 3-1: config 0 descriptor?? [ 1432.917421][T17152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2053'. [ 1433.026120][T17162] xt_hashlimit: max too large, truncated to 1048576 [ 1433.688483][T17168] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1433.716776][T17168] bond5 (unregistering): Released all slaves [ 1434.388302][ T8837] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1434.731027][ T8837] usb 5-1: config 0 has no interfaces? [ 1434.785727][ T8837] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1434.809702][ T8837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.872318][ T8837] usb 5-1: Product: syz [ 1434.900173][ T8837] usb 5-1: Manufacturer: syz [ 1434.918865][ T8837] usb 5-1: SerialNumber: syz [ 1435.016781][ T8837] usb 5-1: config 0 descriptor?? [ 1435.310557][T17183] xt_hashlimit: max too large, truncated to 1048576 [ 1435.653681][ T5972] usb 3-1: USB disconnect, device number 73 [ 1435.973622][T17188] binder: BINDER_SET_CONTEXT_MGR already set [ 1435.981925][T17188] binder: 17184:17188 ioctl 4018620d 200000000040 returned -16 [ 1436.584682][T17195] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 1436.900939][T17195] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2060'. [ 1437.539098][ T5972] usb 5-1: USB disconnect, device number 57 [ 1438.603412][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 1438.613368][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 1438.627951][T17209] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1439.818850][ T5972] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1439.917315][T17218] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2065'. [ 1440.121478][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1440.159026][ T5972] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1440.189048][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.245171][ T5972] usb 4-1: config 0 descriptor?? [ 1440.284120][T17214] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1440.777703][ T5972] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1441.281816][T17234] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1441.662797][T17240] xt_hashlimit: max too large, truncated to 1048576 [ 1442.000530][ T5972] usb 4-1: reset full-speed USB device number 69 using dummy_hcd [ 1442.410225][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2069'. [ 1443.430863][T17255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2070'. [ 1444.253528][ T5834] usb 4-1: USB disconnect, device number 69 [ 1444.375861][T17263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2071'. [ 1445.481396][T17270] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 1446.648637][T17286] binder: BINDER_SET_CONTEXT_MGR already set [ 1446.654875][T17286] binder: 17272:17286 ioctl 4018620d 200000000040 returned -16 [ 1448.358816][ T5834] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1448.518824][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 1448.527737][ T5834] usb 1-1: config 0 has no interfaces? [ 1448.939721][ T5834] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1448.969964][ T5834] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1448.999329][ T5834] usb 1-1: Manufacturer: syz [ 1449.024072][ T5834] usb 1-1: config 0 descriptor?? [ 1449.294752][T17292] net_ratelimit: 10 callbacks suppressed [ 1449.294785][T17292] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1449.323289][T17292] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1449.795626][T17310] netlink: 'syz.4.2079': attribute type 8 has an invalid length. [ 1449.840275][T17306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2078'. [ 1450.543341][T17319] usb usb8: usbfs: process 17319 (syz.3.2081) did not claim interface 0 before use [ 1450.668978][ T5834] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1451.107687][ T5834] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1451.164887][ T5834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.230715][ T5834] usb 3-1: config 0 has no interfaces? [ 1451.252812][ T5834] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1451.332494][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.431191][ T5834] usb 3-1: config 0 descriptor?? [ 1452.838862][T15352] usb 1-1: USB disconnect, device number 52 [ 1453.102950][T17331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 1453.260551][T17336] fuse: Bad value for 'fd' [ 1453.507863][T17340] ip6gretap0: entered promiscuous mode [ 1453.554605][T17340] macsec1: entered promiscuous mode [ 1453.589113][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 1453.647310][T17341] netlink: 'syz.0.2086': attribute type 18 has an invalid length. [ 1453.664900][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 1453.749494][T17340] ip6gretap0: left promiscuous mode [ 1455.129867][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 1455.139379][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 1455.715562][ T8837] usb 3-1: USB disconnect, device number 74 [ 1456.114506][T17369] fuse: Bad value for 'fd' [ 1456.303125][T17370] program syz.2.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1456.541811][T17370] syz.2.2091 (17370): drop_caches: 2 [ 1457.724681][T17388] xt_hashlimit: max too large, truncated to 1048576 [ 1462.967399][T17434] input: syz1 as /devices/virtual/input/input34 [ 1463.554577][T17434] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 1466.974317][T17469] xt_hashlimit: max too large, truncated to 1048576 [ 1468.057562][T17477] netlink: 'syz.1.2111': attribute type 10 has an invalid length. [ 1468.124277][T17477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.190451][T17477] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1468.392517][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2122'. [ 1468.848696][ T5972] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1469.038981][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 1469.150630][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1469.221049][ T5972] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1469.300834][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.316066][ T5972] usb 4-1: Product: syz [ 1469.324712][ T5972] usb 4-1: Manufacturer: syz [ 1469.331722][ T5972] usb 4-1: SerialNumber: syz [ 1469.380234][ T5972] usb 4-1: config 0 descriptor?? [ 1469.671581][ T5972] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1471.039493][ T3427] usb 4-1: Failed to submit usb control message: -110 [ 1471.046656][ T3427] usb 4-1: unable to send the bmi data to the device: -110 [ 1471.102275][ T3427] usb 4-1: unable to get target info from device [ 1471.117056][ T3427] usb 4-1: could not get target info (-110) [ 1471.182389][ T3427] usb 4-1: could not probe fw (-110) [ 1471.518622][T17506] syzkaller0: entered promiscuous mode [ 1471.529137][T17506] syzkaller0: entered allmulticast mode [ 1473.663268][T17538] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2119'. [ 1473.945842][T15352] usb 4-1: USB disconnect, device number 70 [ 1477.863776][T17572] : renamed from vlan0 [ 1477.995909][ T5972] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1478.280652][ T5972] usb 1-1: Using ep0 maxpacket: 32 [ 1478.354324][ T5972] usb 1-1: config 8 has an invalid interface number: 134 but max is 0 [ 1478.364239][ T5972] usb 1-1: config 8 has no interface number 0 [ 1478.433711][ T5972] usb 1-1: config 8 interface 134 has no altsetting 0 [ 1478.496217][ T5972] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 1478.539761][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.579111][ T5972] usb 1-1: Product: syz [ 1478.583346][ T5972] usb 1-1: Manufacturer: syz [ 1478.634338][ T5972] usb 1-1: SerialNumber: syz [ 1478.909906][T17571] netlink: 'syz.0.2127': attribute type 46 has an invalid length. [ 1478.925876][T17571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.945235][T17571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.003842][T17571] tmpfs: Unknown parameter 'J b]jV0A;0< arڶ˵;')?EX' [ 1479.123553][ T5972] gspca_main: benq-2.14.0 probing 04a5:3035 [ 1479.212485][ T5972] usb 1-1: USB disconnect, device number 53 [ 1481.300306][T17598] loop6: detected capacity change from 0 to 524288000 [ 1482.176776][T17612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 1482.298796][ T5972] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1482.499895][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 1482.587422][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.602361][ T5972] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1482.944066][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.129645][ T5972] usb 3-1: config 0 descriptor?? [ 1486.426131][ T8837] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1486.500795][T17651] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2139'. [ 1486.580939][T15352] usb 3-1: USB disconnect, device number 75 [ 1486.740841][ T8837] usb 1-1: Using ep0 maxpacket: 32 [ 1486.761701][ T8837] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 1486.770768][ T8837] usb 1-1: config 0 has no interface number 0 [ 1486.777170][ T8837] usb 1-1: config 0 interface 23 has no altsetting 0 [ 1486.867279][ T8837] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1486.952837][ T8837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.003126][ T8837] usb 1-1: Product: syz [ 1487.221653][ T8837] usb 1-1: Manufacturer: syz [ 1487.297193][ T8837] usb 1-1: SerialNumber: syz [ 1487.366450][ T8837] usb 1-1: config 0 descriptor?? [ 1487.790108][T17645] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2138'. [ 1488.339742][ T5972] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1488.575245][ T5972] usb 3-1: config 0 has no interfaces? [ 1488.592865][ T5972] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1488.605964][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.676325][ T5972] usb 3-1: Product: syz [ 1488.699743][ T5972] usb 3-1: Manufacturer: syz [ 1488.709127][ T5972] usb 3-1: SerialNumber: syz [ 1488.720652][ T5972] usb 3-1: config 0 descriptor?? [ 1489.505850][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1489.505870][ T30] audit: type=1400 audit(1766155734.032:1572): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=17670 comm="syz.4.2141" [ 1490.314371][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.648960][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.024855][ T8837] usb 1-1: USB disconnect, device number 54 [ 1492.849956][ T5972] usb 3-1: USB disconnect, device number 76 [ 1493.786096][T17704] netlink: 'syz.3.2146': attribute type 4 has an invalid length. [ 1494.378980][ T8837] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1494.667888][ T8837] usb 4-1: Using ep0 maxpacket: 16 [ 1494.696989][ T8837] usb 4-1: config 0 has no interfaces? [ 1494.870693][ T8837] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1495.039163][ T8837] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1495.047261][ T8837] usb 4-1: Manufacturer: syz [ 1495.062544][ T8837] usb 4-1: config 0 descriptor?? [ 1495.179490][T17712] loop6: detected capacity change from 0 to 524288000 [ 1495.457747][T17704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.477501][T17704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.145092][T17728] kAFS: unable to lookup cell '(,' [ 1497.347658][ T5972] usb 4-1: USB disconnect, device number 71 [ 1499.218228][ T8837] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1499.384056][ T8837] usb 2-1: Using ep0 maxpacket: 32 [ 1499.427245][ T8837] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 1499.618327][ T8837] usb 2-1: config 0 has no interface number 0 [ 1499.653036][ T8837] usb 2-1: config 0 interface 23 has no altsetting 0 [ 1499.880449][ T8837] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1499.932305][ T8837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.010214][ T8837] usb 2-1: Product: syz [ 1500.014749][ T8837] usb 2-1: Manufacturer: syz [ 1500.023191][ T8837] usb 2-1: SerialNumber: syz [ 1500.052342][ T8837] usb 2-1: config 0 descriptor?? [ 1500.407331][T17742] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1502.490816][ T8837] usb 2-1: USB disconnect, device number 57 [ 1504.205067][T17785] fuse: Bad value for 'fd' [ 1504.478497][T17789] netlink: 'syz.2.2163': attribute type 4 has an invalid length. [ 1504.861369][ T5972] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1505.099012][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 1505.456582][ T5972] usb 3-1: config 0 has no interfaces? [ 1505.490096][ T5972] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1505.499980][ T5972] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1505.508065][ T5972] usb 3-1: Manufacturer: syz [ 1505.539894][ T5972] usb 3-1: config 0 descriptor?? [ 1505.951101][T17789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.063777][T17789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.167995][T17799] binder: BINDER_SET_CONTEXT_MGR already set [ 1507.177414][T17799] binder: 17793:17799 ioctl 4018620d 200000000040 returned -16 [ 1507.311319][T17801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2165'. [ 1507.429777][T17802] binder: 17793:17802 ioctl c0306201 0 returned -14 [ 1508.029020][T15352] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1508.095949][T17811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2166'. [ 1508.266476][T15352] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1508.333825][T15352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.351837][T15352] usb 4-1: config 0 has no interfaces? [ 1508.358460][T15352] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1508.369157][T15352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.484258][T15352] usb 4-1: config 0 descriptor?? [ 1508.537865][ T8837] usb 3-1: USB disconnect, device number 77 [ 1509.211386][T17816] binder: BINDER_SET_CONTEXT_MGR already set [ 1509.217513][T17816] binder: 17813:17816 ioctl 4018620d 200000000040 returned -16 [ 1509.367901][T17816] syz.2.2168 (17816): drop_caches: 2 [ 1510.956140][T15352] usb 4-1: USB disconnect, device number 72 [ 1511.442805][T17831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2171'. [ 1516.380335][T17875] binder: BINDER_SET_CONTEXT_MGR already set [ 1516.387951][T17875] binder: 17867:17875 ioctl 4018620d 200000000040 returned -16 [ 1516.450334][T17875] binder: 17867:17875 ioctl c0306201 0 returned -14 [ 1519.844951][T17895] loop6: detected capacity change from 0 to 524288000 [ 1520.320111][T17895] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2183'. [ 1520.327675][T17896] bond4: option ad_user_port_key: invalid value (45927) [ 1520.458323][T17896] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 1520.500153][ T30] audit: type=1326 audit(1766155765.022:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1520.558890][ T30] audit: type=1326 audit(1766155765.022:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1520.582580][T17896] bond4 (unregistering): Released all slaves [ 1520.694886][ T30] audit: type=1326 audit(1766155765.022:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1520.858877][T17901] tipc: Enabling of bearer rejected, failed to enable media [ 1521.440337][ T30] audit: type=1326 audit(1766155765.022:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1521.512607][ T30] audit: type=1326 audit(1766155765.022:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc261b8f749 code=0x7ffc0000 [ 1521.764481][ T30] audit: type=1326 audit(1766155765.022:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc261b91667 code=0x7ffc0000 [ 1521.918626][ T30] audit: type=1326 audit(1766155765.022:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc261b915dc code=0x7ffc0000 [ 1521.947832][ T30] audit: type=1326 audit(1766155765.022:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc261b91514 code=0x7ffc0000 [ 1521.977940][ T30] audit: type=1326 audit(1766155765.022:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc261b91514 code=0x7ffc0000 [ 1522.009286][ T30] audit: type=1326 audit(1766155765.022:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17898 comm="syz.0.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc261b8e3aa code=0x7ffc0000 [ 1523.979540][T17934] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1524.734578][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'. [ 1524.827946][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'. [ 1526.540781][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2192'. [ 1526.550134][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2192'. [ 1527.050835][T17955] binder: 17946:17955 ioctl c0306201 0 returned -14 [ 1527.723226][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1527.749873][ T30] audit: type=1326 audit(1766155772.092:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.268266][ T30] audit: type=1326 audit(1766155772.092:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.330307][ T30] audit: type=1326 audit(1766155772.092:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.358883][ T30] audit: type=1326 audit(1766155772.092:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.383170][ T30] audit: type=1326 audit(1766155772.092:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.431119][ T30] audit: type=1326 audit(1766155772.092:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.483572][ T5834] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1528.570949][ T30] audit: type=1326 audit(1766155772.092:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.668434][ T30] audit: type=1326 audit(1766155772.092:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.732340][ T30] audit: type=1326 audit(1766155772.092:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1528.955332][ T30] audit: type=1326 audit(1766155772.092:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17957 comm="syz.3.2195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa458f749 code=0x7ffc0000 [ 1529.026230][T17968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2195'. [ 1529.035500][T17968] netlink: 'syz.3.2195': attribute type 7 has an invalid length. [ 1529.043624][T17968] netlink: 'syz.3.2195': attribute type 8 has an invalid length. [ 1529.051499][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2195'. [ 1529.299514][ T5834] usb 2-1: config 0 has no interfaces? [ 1529.426329][ T5834] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1529.520702][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.558966][ T5834] usb 2-1: Product: syz [ 1529.580831][ T5834] usb 2-1: Manufacturer: syz [ 1529.600450][ T5834] usb 2-1: SerialNumber: syz [ 1529.626237][ T5834] usb 2-1: config 0 descriptor?? [ 1529.953936][T17967] loop6: detected capacity change from 0 to 524288000 [ 1530.085012][T17967] support for the xor transformation has been removed. [ 1532.332511][ T5834] usb 2-1: USB disconnect, device number 58 [ 1533.193858][T18015] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1533.482857][T18015] bond4 (unregistering): Released all slaves [ 1533.730062][ T3427] ================================================================== [ 1533.738190][ T3427] BUG: KASAN: slab-use-after-free in __linkwatch_run_queue+0x5b6/0x7e0 [ 1533.746471][ T3427] Read of size 8 at addr ffff8880576a0b88 by task kworker/u8:11/3427 [ 1533.754557][ T3427] [ 1533.757076][ T3427] CPU: 0 UID: 0 PID: 3427 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 1533.757098][ T3427] Tainted: [L]=SOFTLOCKUP [ 1533.757104][ T3427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1533.757115][ T3427] Workqueue: events_unbound linkwatch_event [ 1533.757141][ T3427] Call Trace: [ 1533.757150][ T3427] [ 1533.757158][ T3427] dump_stack_lvl+0x189/0x250 [ 1533.757178][ T3427] ? __kasan_check_byte+0x12/0x40 [ 1533.757197][ T3427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1533.757214][ T3427] ? lock_release+0x4b/0x3b0 [ 1533.757232][ T3427] ? __virt_addr_valid+0x4a5/0x5c0 [ 1533.757253][ T3427] print_report+0xca/0x240 [ 1533.757268][ T3427] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 1533.757288][ T3427] kasan_report+0x118/0x150 [ 1533.757306][ T3427] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 1533.757330][ T3427] __linkwatch_run_queue+0x5b6/0x7e0 [ 1533.757353][ T3427] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1533.757375][ T3427] ? _raw_spin_unlock_irq+0x23/0x50 [ 1533.757398][ T3427] ? process_scheduled_works+0x9ef/0x1770 [ 1533.757413][ T3427] ? process_scheduled_works+0x9ef/0x1770 [ 1533.757429][ T3427] linkwatch_event+0x4c/0x60 [ 1533.757453][ T3427] process_scheduled_works+0xad1/0x1770 [ 1533.757479][ T3427] ? __pfx_process_scheduled_works+0x10/0x10 [ 1533.757500][ T3427] worker_thread+0x8a0/0xda0 [ 1533.757517][ T3427] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1533.757543][ T3427] ? __kthread_parkme+0x7b/0x200 [ 1533.757564][ T3427] kthread+0x711/0x8a0 [ 1533.757584][ T3427] ? __pfx_worker_thread+0x10/0x10 [ 1533.757600][ T3427] ? __pfx_kthread+0x10/0x10 [ 1533.757619][ T3427] ? _raw_spin_unlock_irq+0x23/0x50 [ 1533.757648][ T3427] ? lockdep_hardirqs_on+0x98/0x140 [ 1533.757662][ T3427] ? __pfx_kthread+0x10/0x10 [ 1533.757681][ T3427] ret_from_fork+0x599/0xb30 [ 1533.757700][ T3427] ? __pfx_ret_from_fork+0x10/0x10 [ 1533.757718][ T3427] ? __switch_to_asm+0x39/0x70 [ 1533.757736][ T3427] ? __switch_to_asm+0x33/0x70 [ 1533.757755][ T3427] ? __pfx_kthread+0x10/0x10 [ 1533.757774][ T3427] ret_from_fork_asm+0x1a/0x30 [ 1533.757801][ T3427] [ 1533.757808][ T3427] [ 1533.962618][ T3427] Allocated by task 18015: [ 1533.967131][ T3427] kasan_save_track+0x3e/0x80 [ 1533.971832][ T3427] __kasan_kmalloc+0x93/0xb0 [ 1533.976457][ T3427] __kvmalloc_node_noprof+0x5d5/0x920 [ 1533.981836][ T3427] alloc_netdev_mqs+0xa6/0x11b0 [ 1533.986703][ T3427] rtnl_create_link+0x31f/0xcf0 [ 1533.991576][ T3427] rtnl_newlink_create+0x25c/0xb00 [ 1533.996791][ T3427] rtnl_newlink+0x16e7/0x1c90 [ 1534.001483][ T3427] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1534.006463][ T3427] netlink_rcv_skb+0x208/0x470 [ 1534.011257][ T3427] netlink_unicast+0x82f/0x9e0 [ 1534.016032][ T3427] netlink_sendmsg+0x805/0xb30 [ 1534.020804][ T3427] __sock_sendmsg+0x21c/0x270 [ 1534.025517][ T3427] ____sys_sendmsg+0x505/0x820 [ 1534.030376][ T3427] ___sys_sendmsg+0x21f/0x2a0 [ 1534.035101][ T3427] __x64_sys_sendmsg+0x19b/0x260 [ 1534.040050][ T3427] do_syscall_64+0xfa/0xf80 [ 1534.044561][ T3427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.050461][ T3427] [ 1534.052784][ T3427] Freed by task 18015: [ 1534.056854][ T3427] kasan_save_track+0x3e/0x80 [ 1534.061560][ T3427] kasan_save_free_info+0x46/0x50 [ 1534.066631][ T3427] __kasan_slab_free+0x5c/0x80 [ 1534.071422][ T3427] kfree+0x1c0/0x660 [ 1534.075336][ T3427] device_release+0x9e/0x1d0 [ 1534.080037][ T3427] kobject_put+0x228/0x570 [ 1534.084492][ T3427] netdev_run_todo+0xd2c/0xea0 [ 1534.089305][ T3427] rtnl_newlink+0x178c/0x1c90 [ 1534.094037][ T3427] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1534.099002][ T3427] netlink_rcv_skb+0x208/0x470 [ 1534.103781][ T3427] netlink_unicast+0x82f/0x9e0 [ 1534.108581][ T3427] netlink_sendmsg+0x805/0xb30 [ 1534.113365][ T3427] __sock_sendmsg+0x21c/0x270 [ 1534.118198][ T3427] ____sys_sendmsg+0x505/0x820 [ 1534.123016][ T3427] ___sys_sendmsg+0x21f/0x2a0 [ 1534.127720][ T3427] __x64_sys_sendmsg+0x19b/0x260 [ 1534.132676][ T3427] do_syscall_64+0xfa/0xf80 [ 1534.137227][ T3427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.143164][ T3427] [ 1534.145851][ T3427] The buggy address belongs to the object at ffff8880576a0000 [ 1534.145851][ T3427] which belongs to the cache kmalloc-cg-8k of size 8192 [ 1534.160187][ T3427] The buggy address is located 2952 bytes inside of [ 1534.160187][ T3427] freed 8192-byte region [ffff8880576a0000, ffff8880576a2000) [ 1534.174273][ T3427] [ 1534.176639][ T3427] The buggy address belongs to the physical page: [ 1534.183089][ T3427] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x576a0 [ 1534.191898][ T3427] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1534.200418][ T3427] memcg:ffff88807f33fc81 [ 1534.204667][ T3427] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1534.212227][ T3427] page_type: f5(slab) [ 1534.216213][ T3427] raw: 00fff00000000040 ffff88813ffb0640 ffffea0001078400 0000000000000004 [ 1534.224806][ T3427] raw: 0000000000000000 0000000000020002 00000000f5000000 ffff88807f33fc81 [ 1534.233398][ T3427] head: 00fff00000000040 ffff88813ffb0640 ffffea0001078400 0000000000000004 [ 1534.242077][ T3427] head: 0000000000000000 0000000000020002 00000000f5000000 ffff88807f33fc81 [ 1534.250756][ T3427] head: 00fff00000000003 ffffea00015da801 00000000ffffffff 00000000ffffffff [ 1534.259435][ T3427] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1534.268121][ T3427] page dumped because: kasan: bad access detected [ 1534.274557][ T3427] page_owner tracks the page as allocated [ 1534.280278][ T3427] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6134, tgid 6130 (syz.1.34), ts 123155698700, free_ts 123070055898 [ 1534.301473][ T3427] post_alloc_hook+0x234/0x290 [ 1534.306261][ T3427] get_page_from_freelist+0x2365/0x2440 [ 1534.311836][ T3427] __alloc_frozen_pages_noprof+0x181/0x370 [ 1534.317689][ T3427] alloc_pages_mpol+0x232/0x4a0 [ 1534.322567][ T3427] allocate_slab+0x86/0x3b0 [ 1534.327097][ T3427] ___slab_alloc+0xf2b/0x1960 [ 1534.331791][ T3427] __slab_alloc+0x65/0x100 [ 1534.336216][ T3427] __kmalloc_noprof+0x47d/0x800 [ 1534.341074][ T3427] __register_sysctl_table+0x72/0x1340 [ 1534.346583][ T3427] ipv4_sysctl_init_net+0x1fd/0x3b0 [ 1534.351829][ T3427] ops_init+0x35c/0x5c0 [ 1534.356084][ T3427] setup_net+0x110/0x330 [ 1534.360335][ T3427] copy_net_ns+0x3e3/0x570 [ 1534.364757][ T3427] create_new_namespaces+0x3e7/0x6a0 [ 1534.370051][ T3427] unshare_nsproxy_namespaces+0x11c/0x170 [ 1534.375801][ T3427] ksys_unshare+0x4c8/0x8c0 [ 1534.380316][ T3427] page last free pid 5844 tgid 5844 stack trace: [ 1534.386647][ T3427] __free_frozen_pages+0xbc8/0xd30 [ 1534.391783][ T3427] __put_partials+0x146/0x170 [ 1534.396474][ T3427] put_cpu_partial+0x1f2/0x2d0 [ 1534.401366][ T3427] __slab_free+0x288/0x2a0 [ 1534.405823][ T3427] qlist_free_all+0x97/0x100 [ 1534.410419][ T3427] kasan_quarantine_reduce+0x148/0x160 [ 1534.415886][ T3427] __kasan_slab_alloc+0x22/0x80 [ 1534.420756][ T3427] __kmalloc_noprof+0x3cf/0x800 [ 1534.425630][ T3427] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1534.431195][ T3427] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1534.437099][ T3427] security_file_open+0xb1/0x270 [ 1534.442045][ T3427] do_dentry_open+0x34e/0x1420 [ 1534.446818][ T3427] vfs_open+0x3b/0x340 [ 1534.450896][ T3427] path_openat+0x340e/0x3dd0 [ 1534.455767][ T3427] do_filp_open+0x1fa/0x410 [ 1534.460550][ T3427] do_sys_openat2+0x121/0x200 [ 1534.465317][ T3427] [ 1534.467734][ T3427] Memory state around the buggy address: [ 1534.473413][ T3427] ffff8880576a0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1534.481491][ T3427] ffff8880576a0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1534.489563][ T3427] >ffff8880576a0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1534.497637][ T3427] ^ [ 1534.501986][ T3427] ffff8880576a0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1534.510056][ T3427] ffff8880576a0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1534.518123][ T3427] ================================================================== [ 1535.072421][ T3427] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1535.079688][ T3427] CPU: 0 UID: 0 PID: 3427 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.090812][ T3427] Tainted: [L]=SOFTLOCKUP [ 1535.095537][ T3427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1535.105617][ T3427] Workqueue: events_unbound linkwatch_event [ 1535.111552][ T3427] Call Trace: [ 1535.114872][ T3427] [ 1535.117820][ T3427] dump_stack_lvl+0x99/0x250 [ 1535.122441][ T3427] ? __asan_memcpy+0x40/0x70 [ 1535.127044][ T3427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1535.132266][ T3427] ? __pfx__printk+0x10/0x10 [ 1535.136906][ T3427] vpanic+0x237/0x6d0 [ 1535.140927][ T3427] ? __pfx_vpanic+0x10/0x10 [ 1535.145465][ T3427] ? preempt_schedule+0xae/0xc0 [ 1535.150348][ T3427] ? __pfx_preempt_schedule+0x10/0x10 [ 1535.155751][ T3427] panic+0xb9/0xc0 [ 1535.159503][ T3427] ? __pfx_panic+0x10/0x10 [ 1535.163956][ T3427] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1535.169887][ T3427] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 1535.175383][ T3427] check_panic_on_warn+0x89/0xb0 [ 1535.180355][ T3427] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 1535.185849][ T3427] end_report+0x6f/0x140 [ 1535.190121][ T3427] kasan_report+0x129/0x150 [ 1535.194664][ T3427] ? __linkwatch_run_queue+0x5b6/0x7e0 [ 1535.200175][ T3427] __linkwatch_run_queue+0x5b6/0x7e0 [ 1535.205498][ T3427] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1535.211353][ T3427] ? _raw_spin_unlock_irq+0x23/0x50 [ 1535.216853][ T3427] ? process_scheduled_works+0x9ef/0x1770 [ 1535.222599][ T3427] ? process_scheduled_works+0x9ef/0x1770 [ 1535.228387][ T3427] linkwatch_event+0x4c/0x60 [ 1535.233034][ T3427] process_scheduled_works+0xad1/0x1770 [ 1535.238628][ T3427] ? __pfx_process_scheduled_works+0x10/0x10 [ 1535.244645][ T3427] worker_thread+0x8a0/0xda0 [ 1535.249268][ T3427] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1535.255640][ T3427] ? __kthread_parkme+0x7b/0x200 [ 1535.260623][ T3427] kthread+0x711/0x8a0 [ 1535.264733][ T3427] ? __pfx_worker_thread+0x10/0x10 [ 1535.269877][ T3427] ? __pfx_kthread+0x10/0x10 [ 1535.274496][ T3427] ? _raw_spin_unlock_irq+0x23/0x50 [ 1535.279737][ T3427] ? lockdep_hardirqs_on+0x98/0x140 [ 1535.285000][ T3427] ? __pfx_kthread+0x10/0x10 [ 1535.289637][ T3427] ret_from_fork+0x599/0xb30 [ 1535.294278][ T3427] ? __pfx_ret_from_fork+0x10/0x10 [ 1535.299462][ T3427] ? __switch_to_asm+0x39/0x70 [ 1535.304260][ T3427] ? __switch_to_asm+0x33/0x70 [ 1535.309059][ T3427] ? __pfx_kthread+0x10/0x10 [ 1535.313684][ T3427] ret_from_fork_asm+0x1a/0x30 [ 1535.318519][ T3427] [ 1535.322269][ T3427] Kernel Offset: disabled [ 1535.326615][ T3427] Rebooting in 86400 seconds..