last executing test programs: 19.374196828s ago: executing program 1 (id=3859): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) 16.142299617s ago: executing program 4 (id=3863): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) time(0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x86) fchdir(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, 0x0, 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.332153416s ago: executing program 3 (id=3864): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0xb, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x5}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x28a02, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000640)=0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) getsockopt$MRT(r7, 0x0, 0xce, 0x0, &(0x7f0000001100)) bpf$ITER_CREATE(0x21, &(0x7f0000001080)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) 15.330311582s ago: executing program 2 (id=3865): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$rds(0x15, 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x10, {0x2, 0x4e20, @rand_addr=0x64010104}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) dup(r4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) recvmsg(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x18, 0x0, 0x3d, 0x0, 0xfcc7}, 0x100) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r5, &(0x7f0000000340), 0x97) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x4}) close(r5) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0x2000006, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) 15.218508912s ago: executing program 0 (id=3867): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x800, @private1}, 0x1c, &(0x7f0000000040)}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x147f40, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x4070bd2f, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x8) preadv2(r2, 0x0, 0x0, 0x3, 0x0, 0x30) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000400)) getpid() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c00", @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e21"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 14.338583037s ago: executing program 3 (id=3868): r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r3, 0x8940, &(0x7f0000000000)=@buf={0x2, &(0x7f0000000080)="ce6c"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) sendmsg$IPVS_CMD_GET_SERVICE(r0, 0x0, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x80001) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x79}, 0x0, [0x0, 0x200000a, 0x1000, 0x0, 0xb3d, 0x7fffffff, 0x6, 0x0, 0xbc0, 0x7, 0x15c, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x5, 0x2000040, 0x10000000, 0x7, 0x80000000, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x8001, 0xffff8007, 0xe, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1fb, 0xfffffff8, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x81, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0xd, 0x7, 0x0, 0x1, 0x3, 0x6, 0xffff, 0x6, 0x8, 0x7fb, 0x4, 0xc9, 0xfd, 0x4, 0x3, 0xf86, 0x58a0, 0x1, 0x7, 0x895, 0x20008, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x800003, 0xfffffffa, 0x3, 0x3, 0x1, 0x2ba, 0x1, 0x80e, 0x5, 0x8, 0x2, 0xf2, 0x4, 0x1ff, 0x7, 0xfffffffe, 0x7, 0x6, 0x3]}) 13.58026945s ago: executing program 1 (id=3869): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r2) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000780)={0xcdc, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xc88, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c756a48acf9b2945cc32efb3277a3166c68eb2ac3112795bead06cd1821c10c4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e22f5a32021056eab3214c555aefc7eb7b8447f2c680ff2e9f9eb750d7f915ca"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc845}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3c0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x8}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @remote, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe, @remote, 0x3f35}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "71eb651b8ea0f1a0793faa5b4f7a2a807ee25d38d89c1d5a29e5deede2fd382e"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x47c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c912f38a286d238054e5d4674c96a731e9dc14abeb9bcee5361280bfdaec56fb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x248, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9886ba422ab3bf0466d9a5d5c978449d3a9cee445480c865d732230c7d1458bd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @empty, 0x130}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffc0}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) 11.984862514s ago: executing program 2 (id=3870): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x6e6bbf, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000480)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) process_madvise(r7, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="5b297eb99162bf8668778501ce5385511d7d796a0aed27798b84852b8a9e85799af33e5de7cedbf88498be3b0b5df9f8ef11583a3bc3bdb6a1e5875f7494479905ca1f1feab109950b1be9946ac49c25c786113854b30003b573910a764104358c8b5899a86d2c25b7a2886023cee43b19c199a7c14017514656dcfeca386529d78597365934ca776ce9b8ee9d9e8b6d8c0789555790eaf1c1e6d2707c80f2a1558e720cc345a467af3f378dba06074d8ad43d61a8707a864bf5b7ba049c2b5836366fac540084a1986d713c58a932892237198aef95b616eefe20457d0b28ab35b7e8beefe6990b9bbd1cbb0cda68fd1e20c91a6ccd555cfe9c51d4f7bf082301fc61db5c7afcaa0992098895487418b1e78576e7d8f0989c9f4aff953c2f76c014b559ff40416df4b460e7da2e299bc58c8f83c070a9cfd8e662bdf8e5169baa393b1f2bd2b7bdc7886c3002e81501cc20abbcf665957e1c4a514dd15634a07b5618fbf03d23a93d2829deaeec967fb8f7b05ab4944553e8b96c5700e388e55dc9c60c6948f9382583622a37b7c81dfa5cea56b8e060aac882d0117585e0508c929591a7f0be8dfa96204f7daf90ce74e1891ba5c3ddc17d42cfafc8e12ef4109b5ec4e687389e1f325a6f4325c0eb034306588050973a24d7bf0d0044243cdfd672f4acbc115e81a83170b43a03c713e61c6ba573ea54d59b49b516800d934ae5c48d51551af9ee1f6143f9c4924b842d43208d52e4a34b4ccf167f347608d9c69e3af1a9f5507e35c198be14cff8170c82daa48cea49bbc2db68d8e8bf5752f13ebd80d510799c54d0dbee1792499c71e5db084babf44a431a4728a0f6702b4ad93d1fb5ebfef6a24b1fa057a8511df4c022e818b7af2ec354b47d34653172f75498298f8dc9eca6f478b5f9dc78f7b60401cf27fe9b1eade2d6bf7f50cee7197cd507c2766cc6b2163bd511aaa8d69dcaea44a7f37401faa0979182e51c59cd7b3189d2e8956405a2f27ead1d48b5aa421f04fdd87ef4fb3125a7a84e98719a79608d4bc70424ddc55dab8cb2b144682bca8497add2445319aef1a6db595685f3e0b049da99940d2803bc1ecd976887476cfecbdc66eea6da65e0251cc881f3da972011f37d11bd8828bfb2be9940f2508dcfa8c0e34e9e7a3ea3e7bf04afffca71c03d978507d87ee84241e5dd781c0caa8ad5320f16ed28c89af73a9445fe4c425605f6b58653cbb0909cb9a857b0c0c115104e879e41a2e05ccfcd6866d24ebf622a85ab638eab2ee2a7cf2bbd017a1509d25f65af4f63ed5dcc9586b133d52fd487e4c5238adee5bed4811def93d6723a9d4093b717ffe89209b126feee98bb276851319c2bd94f8327019d130a282fc6cf26d14ed15da2d607937a117bb6ab67fe36fe01562669dd70c649f45cf13240eef58f86f5ef3ae28cdc3e43d9f9d2ba4325a76965a2975e8174503bdfa199a38e0b58db63bcf1e5eb12de33c64b2ef33669fc9949151d8ba011200c884c5be7b84c1754d1ca896ce4ee9d6fb2e6fd4ae106418c800f2f78a7aed2eacb6b70e5aa926d21508e946850d52fc33ca95d00a5ce212e7731228c2d42bfc2881fda943aa8410156694be406a5936ef6ebb26a0a60cdbd5fd960f52bc8e574e9acf24c4d73416d3ef68417a2fe221cfcbffbeb194cfcb9802a5204f01532f8970ede7b7f7b2e093ed20686b545ac67c8d0f628269b373502379f3f3a5bcf1bbf1181d3de177ff5f1e05783e959739468a351bf539913774349129cb27f8a30167d86d2659954ace32de6e92e3fad637031f8f4b75bbb419d30c44c8d35b3db0ec43e7aaeb826a20afd3419439dce1db6112b6c8c236f5d7d563b9f0233c78875e5502cccb45ef8cb6fbcc6da3882ba86e8daa6afbc70f5192e76151e9633069a7d6b94f7b44b95a62f01d554000558deac1bbac044267a4a544ab336e83db60ba9a828dd0cbdc709dd1147a9f5c4b29d1f40eb87b7bafe8a7e29fea3a0e586bf84bb5a2aeeaf6c389e7d48b52f77e53f5b6d30e4d37a19ec2739c6fc80773e29a74ad01d2862e9e249c54a3f845a3045d964e371350282d5ee63a33f5d9d5d2889e60677ad3a78d7e3936f0da3c2a26a7f74ab598a7a0da120c2fe531416750f7dac241fb94962db31a6de323931bd0645510eb72bbddf8ac9ecba6a4b2e4039e36b96354a12d34186c2cefeb434a273c9eba6cbe055527c59815b1ae0b1d845e6d7fa935d7240bb202d42327d45433f214d4e62cbb5b51f354c2d8d232ddeacb829c99c3f4366e4541003f25dda0dff6c38afba9f1eb0383d8d824aa43be4f9784fa9c5181f8a373c3a35c5151b0402399dde92d9a607dc2768b258c9014dfff807f8389f0b8bc913eb0eec400f986dbdce9c616b7b2f7c671625f6881a4350b04117c251f4cba880908a9b2c44b4e886a8f09f3f57da1b04d6f28dfe47e34f1f6d9f8cb23658ec21d36a48d2cc9348dbf4f067446b995138d9bf37f218ab4f5ccbc21f9bf8b904253764fc753113350b69c6701b72c98d2d3697f46431c9cce4c1d089e535fbb1904fa2ff17b3f611300b91316c7f150ae0c6fd2acdcff3b4f49dcabd4ad54632d3dd6ab48e75197c97a52b93a6d5b68acebddfc2bdad5bc0c5f4b2e8b77799e2051e7a6c3a869e0fa5ade0245881e196a9a09d39a638e8d13ee6e667e04128ad6c56d01f18c1f2f624e4dbcd35769de072db3d688d9d91e952666992f0d2717799ee42ebda848735da9fb6b5a99425b940290aa42046a915d952c551ac00215e7d3c6b25fce0f9ef6b6a015be9cb3f1ff234c672d9e34f5d90af85fd5d0660b82d4b7fe851b1e4028f0bf55646b0c0d7161f760a2e598c1703361edf16b0a337cf808eefafd75807bc8caf9599b5e4e13eeb34e574b45bba80dc87eed30555135278751b4f9577a330c832058c680aea14338eff9d74dc7ff736823f6be457f89d50d3a1ec6f3a7228a0f75438587667f4d1307fcb04859728bbc5e4dc08b0e731acef19f37bb3a111d4abdea5960162cfbf89c69a7ac0827a3be22a362bc26759779f516d49acb2bde5b2c6bc32bd822ec771b0d0f106d8cd1e7739407632bd0db40ebaadd0ddb237a0c83448a5f1a6c4c67b6619b930405ea33bf5f80f7979ca431c677f2d46164e890c646f5c385eecff870f61e0da713f15301a7b73027b5927f9db8ddde589fa6f425fa365e38721e0a448ea9fb0dd0988439462d27ad4c3240cb719c6c649e5a0978a5a462c0a4ef4771609f3270848d44f018a655d6571c8876029289de163717cc646ae2159e94505736332e49610d054e43ce5542bbd7f7c61cc30bcb773e79ec6aa05368fd15d88c5b998bf963eebbf934df25d9c9f59cea6b1df3a9000ee2ce057a695de1dc8a1534abc489862e25d9113a14792b271bfa079908bf08d0c6c4eaa4b35a32d56a16c2161fda15087a3fc9c0364915f997c0026ea6d9e7ef9b21d0ef700007aed76cc680990a3a6ea8980ace288f6c53e33b5ecb7c8d5ed3fc79376daa5221a687cc29f67fe85fc34f0eca6970aa4b5bc1ea0d154d7fe551be3659118537557979086791ec737ef6401323114dc7d7664cb7fcc72d48a7cc03ded28888cbafecdc92cfec2dc9f9babf1438b7ba5a947ba1a73f703e293734a2f39cdc9844f99383a604378862d91e86ed9cca7664ea5682d5724473574a206279b95fdbc6a4a3489aabb5847c0ed92c6b4774e3d0510604c379c129f7b23ee80594831d39b88d33e425b0c9aba6c87ddffe6acb9e85693e4f0e8c260786094e7eaf91d8b5cc641715c1455108227104cd8330144d3f300f88edc5bd4264148dcdb55136b596290194804ab82965943dd8e26bfdf31ad6a066a471caaa17752c82e16ad4457b64e05cd30ac3a4310d069fdbf3941ff99b9b9ea0c4c1abb6aaefbad1f6419396c266def91d82ca41dcd5423dbc3d6612a65513e5756d1fed8b8994ad822bba044f1cae538fdb2332eb7b536fca10256fd1a34485944d82a28a71060a0c4da91a8cec97c54d17421a9a365abacd045de779313c83d2901819cd348113eb02f882f49b117f6d4243ffce69a896d0fd27f8f57eca27181a12d60851c21faa3588cfa8777562ac41ae84f73ef0bbea69645630f34686bf8eefd2be84e24ad0705a32d5c064723cd587149b47924cf4e4949dc42a33d8dd10d846ac5d7f6de6a9115307bc6b1269bf2121101db29ceb2af0ab33037ca283f3c828485233435bc9dfcf94ebe51278fb40c83d5e3dcd05e40f7c876ee7e5ebc9dc74f7d1e1449f4dc6f563b26db4b09ed6b430dab97b184f579d2e92693daff76aa9dcfeb631bdbc3514ea131b947e7fa78e86138452c611980df77a6b79d00d2a072f54b2c10a1c41dbe7addd4af58c9d55f1994b6f7aa688f4dc76e9bd02bd0ca3c8d08f6c300459c7508198de70460f1e59e067a261b2da5ecfbc97e89ca5fa1ff3ad3c312f9c9d04d5883ea654d213dd951c8a89d9f4da04614fa6f590d588d337facbdd443f62f7d9e6f78e0f1257fe69ac21bcb1456ab0c5ab32a8f5842fb77704f0e218cb9947e65ec5e96d591fb16317a4e441b6fa1767db363c3c6171601925a245ba14e37def27392d6c2f9a80a628509e0efa5f490dd3fa713870814a06bbfddfa5cbb06383ad303d46e3fc4d89b5552158dc8cf704ec903371f302eb320e801aa1cde570aeb322b3f5c95cfed7b5e1222fa0c71bb550b79d5f18971cab1904ef371b9cfcee444d764d744e270dcf30a6552a15dd67865ea21ca1334845ac7b31b11e3d5b6bab70073fcd0ed9891b1e4ba9a616f01c74671e4b80239a97fe8df9de1bb7196b7e0017b3cfe8d58b570cf641450c7eb82a0dd2f3e784ae4e9b1696c7731f56e10914f40ce2f0231982a588d19216dc29166aca1e272c2532eab01cbfb9c85f5bd72a9ffb4973ee111fabd1ef30b49eb6b085ddf3802f180335375f29da76a29edd3de27deaf6789f09d19caf1e6b146125adf8ac5bf259158863211e692d250962462746cf851c9198f8e2c43a69748db7760d4e2f3a98aaf9233bca7a3f94b36fff09e2a3241308f49b7b45a26918842b65a6a7bde1a5511af94cec0f706bf79a633088afe0c46ae8d61ac33688245bd63a293019e94608ff03cff41c1f798fd54b1f30e35564130f27838108bb6bfdd4e91ffe9a76dbc83f4ccbf7eebb01032808e58de30eb9be1c51440b6619be93d6e7d014ddc7183a4e1817128310e42c9575035f914d76378a0a914d5077ebdddab617a10996b8f398eee59d3b59775dc1e4db102d358615aa9d11cf9a08980be3bfc745f559779b5d40cb6e7c459a16f556eab0175dc4349dcf0143f3dee7f245d2ceb806ce2e636ae725cc0216450b68b3bd0b044a6bf5473524767929e2d03c1b4bab7676fc21928b11ae6d825fc35390d3566dd0adb04fdd74f2c491976fe99c3b6b64133d48ab3a45802920484fcd48c1c6424e97cda1a908373b487e3fe20baba119e9e78058c87bd6739a0bc18c03711d2c67630b5e106cac711324562008bd1243de9762a319c95166896a1f1098ded95b894e91b9516c6ccefa7061cab567fe150fb9c2c30b885fa85307f2d14d35446304d4d77af46d312860887a7b3781b492d98322b2cbbbbf7aabd3974de1e5e4afe31fd401e4989bb42b75ebc4d0306b43c7cd7493a46b2d86b374160bfb63972edae4ce984392007afafdb424d85ad234b59c5f4b248674634acfe10739dfb1a829d7a118f3b8b7e2ee4f5b6622d1d43", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 11.981892631s ago: executing program 0 (id=3880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0x2, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fanotify_init(0x200, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f00000001c0)}, {0x0}], 0x2) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f00000000c0)='/sys/fs/smackfs/access\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0) read(r5, &(0x7f00000011c0)=""/221, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) 11.67278836s ago: executing program 4 (id=3871): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f00000002c0)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB='fil\x00'/20], &(0x7f0000000080)=0x24) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, &(0x7f0000000240)=0x8) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888) r7 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 10.005120944s ago: executing program 3 (id=3872): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x4, 0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x43c8, &(0x7f00000003c0)={0x0, 0x8402, 0x20001, 0x3, 0x279}, 0x0, &(0x7f0000000380), &(0x7f0000000300)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@ipv4={""/10, ""/2, @initdev}}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 9.44417958s ago: executing program 1 (id=3873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x41, '\x00', @local}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f80, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x41) openat$null(0xffffff9c, &(0x7f0000000100), 0x101800, 0x0) 8.956967575s ago: executing program 3 (id=3874): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000122000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000301000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00002ce000/0x1000)=nil, &(0x7f0000751000/0x4000)=nil, &(0x7f0000561000/0xf000)=nil, &(0x7f00006b5000/0x1000)=nil, &(0x7f000056f000/0x2000)=nil, &(0x7f000010e000/0x3000)=nil, &(0x7f00000003c0)="bdabc01ec1e72b705cc00606cb4509b89c8d327910186bf02226264104c70b8407ff11378e8bf65ed016a62f0bfcd736930d884e055b112626fb4dea3d491b6ebb983f4a39c37b9e3b01a952924adb0c1fb4243ca061634691f72ac013edc4dcec6a968e4aa32759c6d7697279e5ed1ce221abc6e0c5b02f38e4f57862d40cb6fcb3c1a64e5c7b100b19b6227b4d472c61268d8aba967779ba7e59be4174d543717e2e9db3ccf91b8625802320f02df0552bbc20526e0417960050109a316b9fc8d775369d39209a953ead94", 0xcc, r2}, 0x64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)=0x8000) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x6040}], 0x1, 0x0, 0x0, 0x0) write$dsp(r5, &(0x7f0000002200)="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", 0x1000) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) 8.274312261s ago: executing program 4 (id=3875): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x8, 0xc9}}}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x406, r0) syz_usb_connect(0x0, 0x2d, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x3, &(0x7f0000000040)=[{0xf0, 0x0, 0xfffffff4}, {0x6, 0x0, 0x7f}, {0x10, 0x0, 0xfe}]}, 0x1, 0x8, 0x7, 0x1, 0x0, 0x5e99, 0x100000000, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000180)) listns(&(0x7f0000000340)={0x20, 0x0, 0x1000, 0xf4240, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) openat$panthor(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140), 0x0, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) ptrace$setregs(0x2, 0x0, 0x5, &(0x7f0000000480)="d0a2ae1e4991194dede3fde6e2cedc987b200068aded79d640de58eb5858ad0dae629e9dd9546ff17328e199be1aba279bbe32b54b71346fee3d2b3a833df9439ec35764c7c40100a386221b030be2bfcc13a5cde60cf3fbd6d5521f465723d09907dc39dfcdbebd7715278888fa0a92aebbffb0d8a7212ee8f3983fb925dfdf2a6e1ab2321939b1460be1fc95d1f067d9dee73d3a48dc478a1e335722e4b3a74f1d84392bf0f2bd33645183098dc4b84875b0300d09ba7606171c27ffe5282367f23d1f") 7.886591567s ago: executing program 0 (id=3876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5d4d}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x0, 0x1000000}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x94baca8f5aaf80e0}}]}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118bf1400000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x3, {0x0, 0x200000000, 0x1, 0x4, 0xb, 0x1, {0x1, 0x10001, 0x1fffffffffff, 0x2, 0x0, 0x100, 0x10000, 0x2, 0xc88, 0x0, 0xd, 0x0, 0x0, 0xffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1d}}]}, @lsrr={0x83, 0x7, 0x40, [@loopback]}, @generic={0x94, 0x2}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r6}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 7.379950238s ago: executing program 2 (id=3877): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x674081, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x8040480) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x44, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x4, r6, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x2, r6, 0x1}) fcntl$notify(r4, 0x402, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x4, 0xe, "03f37fe99f4da288"}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x6, 0x4, 0x2, r6}) unshare(0x2a020480) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000010140)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0xfffffffa, {0x0, 0x1}, 0x1b300000, 0x0, 0x0, 0x8000, 0x1f, '\x04nodev{cvf\x8ex%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\v\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'gre0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) write$dsp(r2, &(0x7f00000001c0), 0x0) 5.867927367s ago: executing program 1 (id=3878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 5.447758234s ago: executing program 0 (id=3879): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0xd, 0x8, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x4811) getdents(0xffffffffffffffff, &(0x7f00000003c0)=""/191, 0x76) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x2120, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000002d00)={0x0, {{0xa, 0x4e22, 0x4001000, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x5, @loopback, 0xae43}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc0000000000000000000000000000000a01010000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x40004) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2520, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x2) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000180)=r7) 3.439580332s ago: executing program 1 (id=3881): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$rds(0x15, 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x10, {0x2, 0x4e20, @rand_addr=0x64010104}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) dup(r4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) recvmsg(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x18, 0x0, 0x3d, 0x0, 0xfcc7}, 0x100) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r5, &(0x7f0000000340), 0x97) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x4}) close(r5) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0x2000006, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) 3.438379068s ago: executing program 4 (id=3882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000180)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20004040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893", 0x10}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9", 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000280)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r6, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0) 3.435527603s ago: executing program 2 (id=3883): socket$inet6(0xa, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x5368, &(0x7f0000000100)={0x0, 0x2503, 0x2, 0x2, 0x31a}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101080) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001880)={{r3}, "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"}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x440) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000844) pselect6(0x40, &(0x7f0000001380)={0x6, 0x9b, 0x9, 0x5d7, 0x40000000000006, 0x8, 0x5}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x9}, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 3.273412706s ago: executing program 3 (id=3884): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0xb], 0x1}}, 0x8}) socket(0x1d, 0x5, 0x26) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000200)=0x20022a, 0x4) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) syz_open_dev$evdev(0x0, 0x1, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r4, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x10010, r4, 0x8) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb380400f6f2e156f59e5c708b40ddb9000000009a8afaea3096d9061a2df0c1", 0x2, 0x1, 0x5, 0x8, 0x1000, 0xc, 0x400008, 0x8, [0x2, 0x2, 0x4, 0xe]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0xf, 0x2}, 0x20) 2.335904906s ago: executing program 4 (id=3885): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x7, 0x0, 0x1, 0x12, 0xd7}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) r3 = syz_open_dev$dri(0x0, 0x1, 0x10800) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x3}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) socket$inet6(0xa, 0x1, 0x0) ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x266) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2040000, &(0x7f0000003700)) fstatfs(r4, &(0x7f0000000140)=""/83) r7 = getpid() syz_open_procfs(r7, 0x0) 2.259397301s ago: executing program 0 (id=3886): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0xb, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x5}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x28a02, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000640)=0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) getsockopt$MRT(r7, 0x0, 0xce, 0x0, &(0x7f0000001100)) bpf$ITER_CREATE(0x21, &(0x7f0000001080)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) 1.569301512s ago: executing program 2 (id=3887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x6e0, 0x0, 0x200}]}) r11 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r11, 0xffff) fcntl$addseals(r11, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000040)={0x0, 0x2, [{r11, 0x0, 0x0, 0x8000}, {r11, 0x0, 0x1000, 0x1000}]}) dup3(r3, r4, 0x80000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x3f, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r12 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, 0x0, &(0x7f0000000040)=0x5d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x1c}}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 6.289091ms ago: executing program 4 (id=3888): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x80\x00') r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) close(r5) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) unshare(0xa000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 4.186785ms ago: executing program 1 (id=3898): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r5, 0xfffffffffffffff5, 0x1) read$FUSE(r5, &(0x7f0000002d80)={0x2020}, 0x2020) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x800, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4000) r8 = syz_open_dev$sg(0x0, 0x0, 0x103302) ioctl$SG_IO(r8, 0x2285, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002240)=ANY=[@ANYBLOB="44000000210001042fbd7000fedbdf250a2020caff0000011a00000014000100fe8000000000000000000000000000bb14000200fc000000000000000000000000000001a76f8f1672d328693784029b930a6660e5ad0e207a014f83f5e0a65aeaf386f5c49e655c18db266441b753ab12a040ad507d97666f06ffe9096545786da2929ec25d937060d5877aa6e6056e8d086d31da2241b47891a35ac90f2d634faf"], 0x44}}, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_settings={0x80000000, 0x3, @sync=0x0}}) 2.611327ms ago: executing program 0 (id=3889): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='qnx6\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x20002}]}, 0x44}}, 0x4008040) r6 = fsmount(r3, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1.503121ms ago: executing program 2 (id=3890): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r2) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000780)={0xe18, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xdc4, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c756a48acf9b2945cc32efb3277a3166c68eb2ac3112795bead06cd1821c10c4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e22f5a32021056eab3214c555aefc7eb7b8447f2c680ff2e9f9eb750d7f915ca"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc845}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x8}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @remote, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe, @remote, 0x3f35}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "71eb651b8ea0f1a0793faa5b4f7a2a807ee25d38d89c1d5a29e5deede2fd382e"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffd}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4c4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x300, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c912f38a286d238054e5d4674c96a731e9dc14abeb9bcee5361280bfdaec56fb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x2fc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9886ba422ab3bf0466d9a5d5c978449d3a9cee445480c865d732230c7d1458bd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @empty, 0x130}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffc0}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) 0s ago: executing program 3 (id=3891): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000700)='./file0\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x7, 0x2, 0x0, 0x0, @adapter={0x9, 0xe327, 0x4, 0x2, 0xc13f}}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x621) open$dir(&(0x7f0000000380)='./file0\x00', 0x48000, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/locks\x00', 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x5, 0x80) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) r8 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0xa557, 0x0, 0x2, 0x94}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rename(&(0x7f0000000140)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@filename='./file0\x00', 0xee00, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000d40)={0x33, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffff00]}, 0x20) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb) kernel console output (not intermixed with test programs): 0 descriptor?? [ 1465.699508][T17299] usb 2-1: expecting 3 got 0 endpoints! Bailing out. [ 1465.711500][T20499] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1465.791371][ T187] hub 4-1:0.0: 1 port detected [ 1465.931333][T17299] usb 1-1: USB disconnect, device number 10 [ 1466.137744][ T996] usb 2-1: USB disconnect, device number 18 [ 1466.225883][T20495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.240054][T20495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.488206][ T187] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1466.488623][ T996] usb 4-1: USB disconnect, device number 2 [ 1466.591671][T20506] syzkaller0: entered promiscuous mode [ 1466.599495][T20506] syzkaller0: entered allmulticast mode [ 1466.619804][T20506] tipc: Enabled bearer , priority 0 [ 1466.629978][T20505] tipc: Resetting bearer [ 1466.692965][T20505] tipc: Disabling bearer [ 1466.845546][T20511] tipc: Enabled bearer , priority 0 [ 1466.874320][T20511] syzkaller0: entered promiscuous mode [ 1466.890961][T20511] syzkaller0: entered allmulticast mode [ 1466.898933][T20513] syzkaller0: entered promiscuous mode [ 1466.906328][T20513] syzkaller0: entered allmulticast mode [ 1466.920513][T20511] tipc: Resetting bearer [ 1466.951638][T20510] tipc: Resetting bearer [ 1466.985544][T20510] tipc: Disabling bearer [ 1467.031927][T20515] tipc: Enabled bearer , priority 0 [ 1467.046944][T20515] syzkaller0: entered promiscuous mode [ 1467.062328][T20515] syzkaller0: entered allmulticast mode [ 1467.149195][T20515] tipc: Resetting bearer [ 1467.172823][T20514] tipc: Resetting bearer [ 1467.218604][T20514] tipc: Disabling bearer [ 1467.321948][T20525] syzkaller0: entered promiscuous mode [ 1467.329062][T20525] syzkaller0: entered allmulticast mode [ 1467.433281][ T187] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1467.628770][ T187] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1467.643315][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.665352][ T187] usb 4-1: Product: syz [ 1467.671564][ T187] usb 4-1: Manufacturer: syz [ 1467.683299][ T187] usb 4-1: SerialNumber: syz [ 1467.720041][T20533] binder_alloc: 20532: pid 20532 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1467.745898][T20533] binder_alloc: 20532: pid 20532 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1468.131040][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1468.145178][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1468.908827][T20550] syz_tun: entered allmulticast mode [ 1468.929539][T20549] syz_tun: left allmulticast mode [ 1468.963259][ T996] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1469.023438][T20554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3433'. [ 1469.417394][ T996] usb 1-1: Using ep0 maxpacket: 32 [ 1469.432567][ T996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1469.449577][ T996] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1469.465672][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.489387][ T996] usb 1-1: Product: syz [ 1469.501640][ T996] usb 1-1: Manufacturer: syz [ 1469.512617][ T996] usb 1-1: SerialNumber: syz [ 1469.604450][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1469.618434][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1470.445117][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1470.478363][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1470.559454][ T187] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1470.597818][ T187] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1470.654731][ T187] usb 4-1: USB disconnect, device number 3 [ 1471.463223][T11680] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1471.635743][T11680] usb 4-1: config 0 has no interfaces? [ 1471.653571][T11680] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1471.673240][T11680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.706030][T11680] usb 4-1: config 0 descriptor?? [ 1471.970832][T11680] usb 4-1: USB disconnect, device number 4 [ 1472.433266][T11680] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1472.605281][T11680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1472.624800][T11680] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1472.650458][T11680] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1472.677245][T11680] usb 4-1: string descriptor 0 read error: -22 [ 1472.687203][T11680] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1472.703739][T11680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.939918][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.947723][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.953902][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.960026][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.966166][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.972315][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.978553][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.984700][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.990848][T20569] tc action pedit 'at' offset 5 out of bounds [ 1472.997028][T20569] tc action pedit 'at' offset 5 out of bounds [ 1473.003194][T20569] 0: reclassify loop, rule prio 0, protocol 800 [ 1473.017444][T11680] usb 4-1: Can't get UAC3 power state for id 10 [ 1473.198950][T20573] syzkaller0: entered promiscuous mode [ 1473.211461][T20573] syzkaller0: entered allmulticast mode [ 1473.638694][T11680] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 1474.403505][T20582] syzkaller0: entered promiscuous mode [ 1474.425062][T20582] syzkaller0: entered allmulticast mode [ 1474.963639][T11680] usb 4-1: USB disconnect, device number 5 [ 1475.098710][T20584] syzkaller0: entered promiscuous mode [ 1475.142180][T20584] syzkaller0: entered allmulticast mode [ 1475.234853][ T996] usb 1-1: USB disconnect, device number 11 [ 1476.714564][T20595] tipc: Enabled bearer , priority 0 [ 1476.743517][T20595] syzkaller0: entered promiscuous mode [ 1476.758003][T20595] syzkaller0: entered allmulticast mode [ 1476.789038][T20595] tipc: Resetting bearer [ 1476.810685][T20594] tipc: Resetting bearer [ 1476.866403][T20594] tipc: Disabling bearer [ 1477.381725][T20601] netlink: 'syz.1.3447': attribute type 13 has an invalid length. [ 1478.859631][T20610] netlink: 'syz.3.3449': attribute type 4 has an invalid length. [ 1478.901281][T20610] netlink: 'syz.3.3449': attribute type 4 has an invalid length. [ 1479.126307][T20614] syzkaller0: entered promiscuous mode [ 1479.134265][T20614] syzkaller0: entered allmulticast mode [ 1479.506056][T20616] binder_alloc: 20615: pid 20615 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1479.519306][T20616] binder_alloc: 20615: pid 20615 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1479.541941][T20620] syzkaller0: entered promiscuous mode [ 1479.563583][T20620] syzkaller0: entered allmulticast mode [ 1479.733231][ T996] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1479.854417][T20625] syzkaller0: entered promiscuous mode [ 1479.864767][T20625] syzkaller0: entered allmulticast mode [ 1479.893241][ T996] usb 1-1: Using ep0 maxpacket: 16 [ 1479.901503][ T996] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.935481][ T996] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1479.955341][ T996] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1479.983277][ T996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.005129][ T996] usb 1-1: config 0 descriptor?? [ 1480.413043][T20634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.421728][T20631] syzkaller0: entered promiscuous mode [ 1480.433987][T20631] syzkaller0: entered allmulticast mode [ 1480.466335][ T996] nzxt-smart2 0003:1E71:2009.004B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1480.504931][T20634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.021489][T20638] syzkaller0: entered promiscuous mode [ 1481.032101][T20638] syzkaller0: entered allmulticast mode [ 1481.236534][T20640] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1481.278905][T20640] syzkaller0: entered promiscuous mode [ 1481.295719][T20640] syzkaller0: entered allmulticast mode [ 1481.483343][ T996] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1481.511576][T11680] usb 1-1: USB disconnect, device number 12 [ 1481.656885][ T996] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1481.668500][ T996] usb 4-1: config 8 has an invalid interface number: 141 but max is 0 [ 1481.683406][ T996] usb 4-1: config 8 has no interface number 0 [ 1481.710207][ T996] usb 4-1: config 8 interface 141 has no altsetting 0 [ 1481.721338][ T996] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd [ 1481.730907][ T996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.739965][ T996] usb 4-1: Product: syz [ 1481.750485][ T996] usb 4-1: Manufacturer: syz [ 1481.756772][ T996] usb 4-1: SerialNumber: syz [ 1482.022979][ T996] int51x1 4-1:8.141: probe with driver int51x1 failed with error -71 [ 1482.044306][ T996] usb 4-1: USB disconnect, device number 6 [ 1482.507397][T20653] binder_alloc: 20652: pid 20652 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1482.522095][T20653] binder_alloc: 20652: pid 20652 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1482.733277][T20660] tipc: Enabled bearer , priority 0 [ 1482.758919][T20660] syzkaller0: entered promiscuous mode [ 1482.774144][T20660] syzkaller0: entered allmulticast mode [ 1482.870294][T20660] tipc: Resetting bearer [ 1482.887387][T20659] tipc: Resetting bearer [ 1482.948352][T20659] tipc: Disabling bearer [ 1483.079000][T20665] vlan4: entered allmulticast mode [ 1483.088710][T20665] veth0_to_bond: entered allmulticast mode [ 1483.330299][T20670] input: syz0 as /devices/virtual/input/input94 [ 1483.617581][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1483.759901][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1484.149591][T20686] syzkaller0: entered promiscuous mode [ 1484.163757][T20686] syzkaller0: entered allmulticast mode [ 1484.610263][T20690] tipc: Enabled bearer , priority 0 [ 1484.630449][T20690] syzkaller0: entered promiscuous mode [ 1484.644713][T20690] syzkaller0: entered allmulticast mode [ 1484.667527][T20690] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1484.726686][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.734713][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.759718][T11336] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1484.783412][T11336] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1484.817068][T11336] usb 3-1: USB disconnect, device number 3 [ 1484.824510][T20690] tipc: Resetting bearer [ 1484.882421][T20689] tipc: Resetting bearer [ 1485.111757][T20693] binder_alloc: 20692: pid 20692 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1485.139237][T20689] tipc: Disabling bearer [ 1485.164784][T20693] binder_alloc: 20692: pid 20692 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1485.463678][T11680] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1485.548798][T20699] syzkaller0: entered promiscuous mode [ 1485.571761][T20699] syzkaller0: entered allmulticast mode [ 1485.643222][T11680] usb 4-1: Using ep0 maxpacket: 16 [ 1485.692664][T11680] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1485.709098][T11680] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1485.735435][T11680] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1485.757401][T11680] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.792362][T11680] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1485.832961][T11680] usb 4-1: config 0 has no interface number 0 [ 1485.876835][T11680] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1485.906702][T11680] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1485.937427][T11680] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1485.963507][T20704] syzkaller0: entered promiscuous mode [ 1485.970774][T11680] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1485.992529][T20704] syzkaller0: entered allmulticast mode [ 1486.007439][T11680] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1486.036217][T11680] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1486.060409][T11680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.105762][T11680] usb 4-1: Product: syz [ 1486.129041][T11680] usb 4-1: Manufacturer: syz [ 1486.150994][T11680] usb 4-1: SerialNumber: syz [ 1486.178605][T11680] usb 4-1: config 0 descriptor?? [ 1486.291302][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1486.320121][T20709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1486.462038][T20709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1486.734839][T11336] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1486.904256][T11336] usb 3-1: Using ep0 maxpacket: 32 [ 1486.932237][T11336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1486.974879][T11336] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1487.007907][T11336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.023696][T11336] usb 3-1: Product: syz [ 1487.034215][T11336] usb 3-1: Manufacturer: syz [ 1487.058733][T11336] usb 3-1: SerialNumber: syz [ 1487.228372][T20731] syzkaller0: entered promiscuous mode [ 1487.249092][T20731] syzkaller0: entered allmulticast mode [ 1487.591619][T11336] usb 3-1: unit 0 not found! [ 1488.058931][T20709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1488.255775][T11336] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1488.321438][T11680] usb 4-1: USB disconnect, device number 7 [ 1488.404639][T11336] usb 3-1: unit 0 not found! [ 1488.464090][T11336] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1488.550405][T11336] usb 3-1: unit 0 not found! [ 1488.853330][T11680] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1488.977118][T11336] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1489.039680][T11336] usb 3-1: USB disconnect, device number 4 [ 1489.057858][T11680] usb 4-1: Using ep0 maxpacket: 32 [ 1489.090488][T11680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1489.137092][T11680] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1489.190958][T11680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.234902][T12465] udevd[12465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1489.263032][T11680] usb 4-1: Product: syz [ 1489.274757][T11680] usb 4-1: Manufacturer: syz [ 1489.302321][T11680] usb 4-1: SerialNumber: syz [ 1489.871615][T11680] usb 4-1: USB disconnect, device number 8 [ 1489.920149][T20755] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1490.096773][T12462] udevd[12462]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1490.140630][T20755] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1490.251830][T20762] syzkaller0: entered promiscuous mode [ 1490.298789][T20762] syzkaller0: entered allmulticast mode [ 1490.843616][T11336] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1491.058349][T11336] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1491.085208][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1491.124279][T11336] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1491.158814][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1491.213209][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1491.294549][T11336] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1491.331774][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1491.381317][T11336] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1491.436596][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1491.492711][T20771] syzkaller0: entered promiscuous mode [ 1491.499106][T20771] syzkaller0: entered allmulticast mode [ 1491.499123][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1491.569769][T11336] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1491.598674][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1491.681340][T11336] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1491.695538][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1491.710607][T11336] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1491.732231][T11336] usb 4-1: string descriptor 0 read error: -22 [ 1491.739638][T11336] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1491.752745][T11336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.793176][ T996] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1491.875280][T11336] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1492.068951][T20780] tipc: Enabled bearer , priority 0 [ 1492.101558][T20780] syzkaller0: entered promiscuous mode [ 1492.137720][T20780] syzkaller0: entered allmulticast mode [ 1492.169729][T20782] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1492.354173][T20780] tipc: Resetting bearer [ 1492.432057][T20778] tipc: Resetting bearer [ 1492.540433][T20778] tipc: Disabling bearer [ 1494.247994][T20795] tipc: Enabled bearer , priority 0 [ 1494.285349][T20795] syzkaller0: entered promiscuous mode [ 1494.313367][T20795] syzkaller0: entered allmulticast mode [ 1494.352457][T20795] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1494.592713][T20795] tipc: Resetting bearer [ 1494.643474][T20800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3507'. [ 1494.683406][T20800] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1494.708061][T20794] tipc: Resetting bearer [ 1494.828650][T20794] tipc: Disabling bearer [ 1495.132488][T20798] could not allocate digest TFM handle nhpoly1305-sse2 [ 1495.299629][ T30] audit: type=1326 audit(1783803738.583:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20804 comm="syz.4.3508" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x0 [ 1495.643815][T20810] batadv_slave_1: entered promiscuous mode [ 1495.653664][ T996] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1495.668165][ T996] usb 3-1: no configurations [ 1495.687464][ T996] usb 3-1: can't read configurations, error -22 [ 1495.731803][T20809] batadv_slave_1: left promiscuous mode [ 1495.845199][T18125] usb 4-1: USB disconnect, device number 9 [ 1496.923284][ T996] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1496.973179][T18125] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1497.095288][ T996] usb 2-1: Using ep0 maxpacket: 32 [ 1497.110836][ T996] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1497.145724][T18125] usb 4-1: Using ep0 maxpacket: 32 [ 1497.151490][ T996] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1497.167022][T18125] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1497.178990][ T996] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1497.191757][T18125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.206888][ T996] usb 2-1: Product: syz [ 1497.222119][ T996] usb 2-1: Manufacturer: syz [ 1497.229183][T18125] usb 4-1: config 0 has no interface number 0 [ 1497.239034][ T996] usb 2-1: SerialNumber: syz [ 1497.249370][T18125] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1497.269821][ T996] usb 2-1: config 0 descriptor?? [ 1497.286019][T18125] usb 4-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1497.299860][T20817] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1497.321027][T18125] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1497.350136][T18125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.385010][T18125] usb 4-1: Product: syz [ 1497.407114][T18125] usb 4-1: Manufacturer: syz [ 1497.423829][T18125] usb 4-1: SerialNumber: syz [ 1497.449728][T18125] usb 4-1: config 0 descriptor?? [ 1497.464946][T18125] usb 4-1: expecting 3 got 0 endpoints! Bailing out. [ 1497.725198][T20836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.757194][T20836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.024848][T18125] usb 4-1: USB disconnect, device number 10 [ 1498.138121][T11336] usb 2-1: USB disconnect, device number 19 [ 1498.711845][T11336] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1498.758685][T20855] syzkaller0: entered promiscuous mode [ 1498.769315][T20855] syzkaller0: entered allmulticast mode [ 1498.896699][T11336] usb 3-1: config 0 has no interfaces? [ 1498.905939][T11336] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1498.918151][T11336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.927234][T11336] usb 3-1: Product: syz [ 1498.932935][T11336] usb 3-1: Manufacturer: syz [ 1498.938699][T11336] usb 3-1: SerialNumber: syz [ 1498.943295][T18125] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1498.959377][T11336] usb 3-1: config 0 descriptor?? [ 1499.098723][T18125] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1499.108160][T18125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.116994][T18125] usb 1-1: Product: syz [ 1499.121217][T18125] usb 1-1: Manufacturer: syz [ 1499.125936][T18125] usb 1-1: SerialNumber: syz [ 1499.223268][ T996] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1499.361491][T20846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1499.442401][T11336] usb 3-1: USB disconnect, device number 7 [ 1499.565415][T18125] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1499.578430][T18125] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1499.753833][T11680] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1499.808158][T20865] syzkaller0: entered promiscuous mode [ 1499.825561][T20865] syzkaller0: entered allmulticast mode [ 1499.926981][T11680] usb 4-1: Using ep0 maxpacket: 16 [ 1499.942465][T11680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1499.969259][T11680] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1500.005766][T11680] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1500.028883][T11680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.055248][T11680] usb 4-1: Product: syz [ 1500.064386][T11680] usb 4-1: Manufacturer: syz [ 1500.090827][T11680] usb 4-1: SerialNumber: syz [ 1500.413996][T11680] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1500.458613][T11680] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1500.585077][T11680] usb 4-1: 2:1 : can't get High Capability descriptor [ 1500.838653][T18125] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1500.895188][T11680] usb 4-1: USB disconnect, device number 11 [ 1500.929315][T18125] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1501.139094][T12097] udevd[12097]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.826815][T18125] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1501.888362][T18125] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1501.954545][T18125] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1502.006011][T18125] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1502.039761][T20878] tipc: Enabled bearer , priority 0 [ 1502.049606][T20878] syzkaller0: entered promiscuous mode [ 1502.061720][T20878] syzkaller0: entered allmulticast mode [ 1502.076206][T18125] usb 1-1: USB disconnect, device number 13 [ 1502.269083][T20878] tipc: Resetting bearer [ 1502.323277][T20877] tipc: Resetting bearer [ 1502.378792][ T996] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1502.389079][T20888] netlink: 'syz.3.3528': attribute type 1 has an invalid length. [ 1502.405258][T20888] netlink: 'syz.3.3528': attribute type 2 has an invalid length. [ 1502.414063][ T996] usb 2-1: no configurations [ 1502.419273][ T996] usb 2-1: can't read configurations, error -22 [ 1502.430134][T20877] tipc: Disabling bearer [ 1502.922896][T20893] sctp: [Deprecated]: syz.0.3531 (pid 20893) Use of int in maxseg socket option. [ 1502.922896][T20893] Use struct sctp_assoc_value instead [ 1503.073642][T18125] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1503.245354][T18125] usb 3-1: Using ep0 maxpacket: 32 [ 1503.265865][T18125] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1503.296157][T18125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.335404][T18125] usb 3-1: config 0 has no interface number 0 [ 1503.357693][T18125] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1503.385034][T18125] usb 3-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1503.459879][T18125] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1503.483860][T18125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.518736][T18125] usb 3-1: Product: syz [ 1503.543242][T18125] usb 3-1: Manufacturer: syz [ 1503.580535][T18125] usb 3-1: SerialNumber: syz [ 1503.627494][T18125] usb 3-1: config 0 descriptor?? [ 1503.668549][T18125] usb 3-1: expecting 3 got 0 endpoints! Bailing out. [ 1504.034848][T20915] syzkaller0: entered promiscuous mode [ 1504.052245][T20915] syzkaller0: entered allmulticast mode [ 1504.117800][ T30] audit: type=1326 audit(1783803747.403:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.174539][T18125] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1504.236721][ T30] audit: type=1326 audit(1783803747.403:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.412886][T18125] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1504.442877][ T30] audit: type=1326 audit(1783803747.433:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.479873][T18125] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1504.484222][T11336] usb 3-1: USB disconnect, device number 8 [ 1504.515428][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1504.548243][T18125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1504.560444][ T30] audit: type=1326 audit(1783803747.433:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.595001][ T30] audit: type=1326 audit(1783803747.433:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.628342][ T30] audit: type=1326 audit(1783803747.433:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.633231][T18125] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1504.732613][ T30] audit: type=1326 audit(1783803747.433:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.774524][ T30] audit: type=1326 audit(1783803747.433:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.804271][ T30] audit: type=1326 audit(1783803747.433:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.866310][ T30] audit: type=1326 audit(1783803747.873:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20913 comm="syz.4.3534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1504.892606][T18125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.908966][T18125] usb 2-1: config 0 descriptor?? [ 1505.000502][T20911] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1505.203241][ T996] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1505.368048][ T996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1505.411076][ T996] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 1505.443677][ T996] usb 1-1: config 189 has no interface number 0 [ 1505.477711][ T996] usb 1-1: config 189 interface 127 has no altsetting 0 [ 1505.478836][T20924] loop9: detected capacity change from 0 to 7 [ 1505.524740][ T996] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1505.550690][ C0] blk_print_req_error: 5 callbacks suppressed [ 1505.550725][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1505.567953][ C0] buffer_io_error: 11 callbacks suppressed [ 1505.567966][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1505.598632][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1505.609076][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1505.638253][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1505.648674][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1505.687194][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.703895][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1505.714211][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1505.755074][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1505.765398][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1505.792855][ T996] usb 1-1: Product: syz [ 1505.826192][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1505.836429][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1505.856413][ T996] usb 1-1: Manufacturer: syz [ 1505.872519][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1505.882905][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1505.894616][T20924] ldm_validate_partition_table(): Disk read failed. [ 1505.906127][ T996] usb 1-1: SerialNumber: syz [ 1506.004964][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1506.015353][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1506.062503][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1506.072888][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1506.116672][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1506.126959][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1506.140666][T20924] Dev loop9: unable to read RDB block 0 [ 1506.158629][T20924] loop9: unable to read partition table [ 1506.177474][T20924] loop9: partition table beyond EOD, truncated [ 1506.203551][T20924] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1506.236811][ T996] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1506.332608][ T996] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1506.402500][ T996] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 1506.437309][ T996] safe_serial 1-1:189.127: safe_serial converter detected [ 1506.469740][ T996] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 1506.538198][ T996] usb 1-1: USB disconnect, device number 14 [ 1506.605535][T20934] tipc: Enabled bearer , priority 0 [ 1506.672019][T20934] syzkaller0: entered promiscuous mode [ 1506.691630][T20934] syzkaller0: entered allmulticast mode [ 1506.737457][T20935] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1506.970486][T20934] tipc: Resetting bearer [ 1507.034640][T20933] tipc: Resetting bearer [ 1507.146841][T20933] tipc: Disabling bearer [ 1507.359512][T20945] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1508.564286][T18125] usbhid 2-1:0.0: can't add hid device: -71 [ 1508.590688][T18125] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1508.651850][T18125] usb 2-1: USB disconnect, device number 22 [ 1508.669819][T20958] random: crng reseeded on system resumption [ 1508.852407][T20958] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1508.913909][T20958] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1509.973921][T17299] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1510.153665][T17299] usb 1-1: Using ep0 maxpacket: 32 [ 1510.192419][T17299] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1510.235117][T17299] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1510.259771][T17299] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1510.298888][T17299] usb 1-1: Product: syz [ 1510.305936][T17299] usb 1-1: Manufacturer: syz [ 1510.324875][T17299] usb 1-1: SerialNumber: syz [ 1510.342067][T20970] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1510.377601][T17299] usb 1-1: config 0 descriptor?? [ 1510.389618][T20970] netlink: 'syz.3.3551': attribute type 2 has an invalid length. [ 1510.402744][T20963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1510.427903][T20970] netlink: 'syz.3.3551': attribute type 2 has an invalid length. [ 1510.898302][T20976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.987965][T20976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.218943][T20979] syzkaller0: entered promiscuous mode [ 1511.244451][T20979] syzkaller0: entered allmulticast mode [ 1511.352584][T20979] tipc: Enabled bearer , priority 0 [ 1511.416079][T20978] tipc: Resetting bearer [ 1511.536895][T20978] tipc: Disabling bearer [ 1511.601034][T18125] usb 1-1: USB disconnect, device number 15 [ 1511.623279][T17299] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1511.738312][T20984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3555'. [ 1511.829602][T17299] usb 4-1: config 0 has no interfaces? [ 1511.866623][T20984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.878774][T17299] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1511.879019][T20984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.910246][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 1511.911115][T17299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.940419][T17299] usb 4-1: Product: syz [ 1511.950908][T17299] usb 4-1: Manufacturer: syz [ 1511.966275][T17299] usb 4-1: SerialNumber: syz [ 1511.974976][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 1511.988154][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 1512.011167][T17299] usb 4-1: config 0 descriptor?? [ 1512.040894][T20990] netlink: 'syz.2.3556': attribute type 10 has an invalid length. [ 1512.281726][T20987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.409485][T20982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1512.616897][T17299] usb 4-1: USB disconnect, device number 12 [ 1512.821955][T21005] Set syz0 is full, maxelem 0 reached [ 1515.642623][T21027] bridge_slave_1: left allmulticast mode [ 1515.664579][T21027] bridge_slave_1: left promiscuous mode [ 1515.683753][T21027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.985019][T21027] bridge_slave_0: left allmulticast mode [ 1516.005865][T21027] bridge_slave_0: left promiscuous mode [ 1516.018211][T21027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.902684][T21036] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 1517.015840][T21037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1517.243261][ T996] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1517.423260][ T996] usb 4-1: Using ep0 maxpacket: 32 [ 1517.463005][ T996] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1517.640431][ T996] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1517.671655][ T996] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1517.851920][ T996] usb 4-1: Product: syz [ 1517.865754][ T996] usb 4-1: Manufacturer: syz [ 1517.895331][ T996] usb 4-1: SerialNumber: syz [ 1517.907690][ T996] usb 4-1: config 0 descriptor?? [ 1517.934309][T21039] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1518.216291][T21053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.316993][T21036] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1518.356425][T21053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.416811][T21056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.469146][T21056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.706956][T17299] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1518.772098][T21060] netlink: 'syz.4.3573': attribute type 1 has an invalid length. [ 1518.868261][T21064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1518.889247][T11336] usb 4-1: USB disconnect, device number 13 [ 1518.933291][T17299] usb 2-1: Using ep0 maxpacket: 32 [ 1518.942631][T17299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1518.976610][T21060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1519.014128][T17299] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1519.048267][T17299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.057709][T17299] usb 2-1: Product: syz [ 1519.063021][T17299] usb 2-1: Manufacturer: syz [ 1519.068748][T17299] usb 2-1: SerialNumber: syz [ 1519.114810][T21066] bond1: (slave ip6gretap0): making interface the new active one [ 1519.126630][T21066] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1519.224280][T21065] macvlan2: entered promiscuous mode [ 1519.233289][T21065] macvlan2: entered allmulticast mode [ 1519.248750][T21065] bond1: entered allmulticast mode [ 1519.260662][T21065] ip6gretap0: entered allmulticast mode [ 1519.268969][T21065] ip6gretap0: entered promiscuous mode [ 1519.296312][T21065] bond1: entered promiscuous mode [ 1519.331915][T21065] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1519.341894][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1519.357594][T21065] team0: Port device macvlan2 added [ 1519.558251][T17299] usb 2-1: unit 0 not found! [ 1519.582845][T21073] bond0: entered allmulticast mode [ 1519.607815][T21073] ip6gre1: entered allmulticast mode [ 1519.718895][T21072] bond0: left allmulticast mode [ 1519.735190][T21072] ip6gre1: left allmulticast mode [ 1519.967939][T21078] loop9: detected capacity change from 0 to 7 [ 1520.018744][T21052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.115128][T17299] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1520.195874][ C1] blk_print_req_error: 10 callbacks suppressed [ 1520.195895][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.211463][ C1] buffer_io_error: 10 callbacks suppressed [ 1520.211480][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.252225][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.261568][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.270886][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.278095][T17299] usb 2-1: unit 0 not found! [ 1520.280329][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.297743][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.307065][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.315377][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.325332][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.370861][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.380781][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.422867][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.432750][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.441283][T21078] ldm_validate_partition_table(): Disk read failed. [ 1520.450688][T17299] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1520.460840][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.470738][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.488992][T17299] usb 2-1: unit 0 not found! [ 1520.497264][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.506612][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.515234][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1520.524511][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1520.533532][T21078] Dev loop9: unable to read RDB block 0 [ 1520.562824][T21078] loop9: unable to read partition table [ 1520.576722][T21078] loop9: partition table beyond EOD, truncated [ 1520.613295][T21078] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1520.966490][T17299] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1521.018113][T17299] usb 2-1: USB disconnect, device number 23 [ 1521.274537][T12465] udevd[12465]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1521.593444][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1521.593497][ T30] audit: type=1326 audit(1783803764.883:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.4.3581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1521.698823][ T30] audit: type=1326 audit(1783803764.883:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.4.3581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1521.731006][ T30] audit: type=1326 audit(1783803764.883:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.4.3581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1521.823333][ T30] audit: type=1326 audit(1783803764.883:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.4.3581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1521.882399][T21096] syzkaller0: entered promiscuous mode [ 1521.889547][ T30] audit: type=1326 audit(1783803764.883:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.4.3581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1521.933479][T21096] syzkaller0: entered allmulticast mode [ 1521.970642][T21097] tipc: Enabled bearer , priority 0 [ 1521.993482][T21091] kvm: kvm [21090]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc2) = 0xffff0ff000000006 [ 1522.020220][ T30] audit: type=1326 audit(1783803764.883:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.4.3581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1522.132956][T21096] tipc: Resetting bearer [ 1522.140750][ T30] audit: type=1326 audit(1783803764.923:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21090 comm="syz.4.3581" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1522.224339][T21095] tipc: Resetting bearer [ 1522.365329][T21095] tipc: Disabling bearer [ 1525.376100][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1525.379900][T21122] loop9: detected capacity change from 0 to 7 [ 1525.393699][ C1] blk_print_req_error: 10 callbacks suppressed [ 1525.393717][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.401023][T21121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.409378][ C1] buffer_io_error: 10 callbacks suppressed [ 1525.409396][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.416376][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.442041][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.452160][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.461421][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.497781][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.507113][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.516336][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.525642][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.536001][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.545304][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.554073][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.563318][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.571416][T21122] ldm_validate_partition_table(): Disk read failed. [ 1525.579713][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.589544][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.598179][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.607989][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.618641][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.627960][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1525.636162][ T996] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1525.649738][T21122] Dev loop9: unable to read RDB block 0 [ 1525.663653][T21122] loop9: unable to read partition table [ 1525.673477][ T187] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1525.682916][T21122] loop9: partition table beyond EOD, truncated [ 1525.701354][T21122] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1525.797451][ T996] usb 3-1: Using ep0 maxpacket: 32 [ 1525.809212][ T996] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1525.829637][ T996] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1525.849660][ T996] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1525.853310][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 1525.864782][ T996] usb 3-1: Product: syz [ 1525.869143][ T996] usb 3-1: Manufacturer: syz [ 1525.880552][ T996] usb 3-1: SerialNumber: syz [ 1525.885154][ T187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.885221][ T187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1525.885330][ T187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1525.906672][ T996] usb 3-1: config 0 descriptor?? [ 1525.907539][T21117] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1525.927069][ T187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1525.948584][ T187] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1525.962463][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.040196][ T187] hub 4-1:1.0: bad descriptor, ignoring hub [ 1526.050583][ T187] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1526.064066][ T187] cdc_wdm 4-1:1.0: skipping garbage [ 1526.072348][ T187] cdc_wdm 4-1:1.0: skipping garbage [ 1526.104615][ T187] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1526.116743][ T187] cdc_wdm 4-1:1.0: Unknown control protocol [ 1526.465233][ T30] audit: type=1326 audit(1783803769.753:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1526.509243][ T30] audit: type=1326 audit(1783803769.753:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1526.537558][ T30] audit: type=1326 audit(1783803769.753:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1526.614690][ T30] audit: type=1326 audit(1783803769.783:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1526.647347][T21137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.667316][ T30] audit: type=1326 audit(1783803769.783:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1526.697584][T21137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.699587][ T30] audit: type=1326 audit(1783803769.783:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1526.756720][ T187] usb 4-1: USB disconnect, device number 14 [ 1526.831231][ T30] audit: type=1326 audit(1783803769.823:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1526.893707][ T996] usb 3-1: USB disconnect, device number 9 [ 1526.991342][ T30] audit: type=1326 audit(1783803770.273:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1527.103319][ T30] audit: type=1326 audit(1783803770.273:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.4.3592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1527.721915][T21148] syzkaller0: entered promiscuous mode [ 1527.739476][T21148] syzkaller0: entered allmulticast mode [ 1527.993229][ T996] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1528.157389][ T996] usb 4-1: Using ep0 maxpacket: 8 [ 1528.195742][ T996] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.256836][ T996] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1528.309598][ T996] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1528.354627][ T996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.450680][ T996] usb 4-1: config 0 descriptor?? [ 1528.789691][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1528.937531][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3601'. [ 1528.991372][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1529.003148][ T996] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1529.077243][ T187] usb 4-1: USB disconnect, device number 15 [ 1529.193687][ T996] usb 2-1: Using ep0 maxpacket: 16 [ 1529.208444][ T996] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1529.237515][ T996] usb 2-1: config 0 has no interface number 0 [ 1529.253101][ T996] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1529.276428][ T996] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1529.309214][ T996] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1529.331553][ T996] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1529.356633][ T996] usb 2-1: Product: syz [ 1529.361975][ T996] usb 2-1: SerialNumber: syz [ 1529.399333][ T996] usb 2-1: config 0 descriptor?? [ 1529.434604][ T996] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1529.471550][ T996] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input96 [ 1529.728173][T21157] lo: Caught tx_queue_len zero misconfig [ 1529.878861][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.889052][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.896631][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.904924][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.912132][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.920208][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.927517][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.934998][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.945627][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.952750][ T996] usb 2-1: USB disconnect, device number 24 [ 1529.952818][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1529.952832][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1530.061442][ T996] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1530.295366][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'. [ 1530.355180][T21173] sctp: [Deprecated]: syz.2.3603 (pid 21173) Use of int in maxseg socket option. [ 1530.355180][T21173] Use struct sctp_assoc_value instead [ 1530.594782][T21179] netlink: 'syz.2.3605': attribute type 1 has an invalid length. [ 1530.745740][T21179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1530.845620][T21182] bond1: (slave geneve4): making interface the new active one [ 1530.855872][T21182] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 1530.867279][ T1116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.891830][ T1116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.913300][ T1116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.566555][T21211] netlink: 'syz.3.3609': attribute type 2 has an invalid length. [ 1531.593398][T21211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1532.459960][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1532.853225][ T996] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1533.147503][ T996] usb 3-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.173512][ T996] usb 3-1: config 10 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1533.223499][ T996] usb 3-1: config 10 interface 0 has no altsetting 0 [ 1533.324919][ T996] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1533.400746][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.435366][ T996] usb 3-1: Product: syz [ 1533.462874][ T996] usb 3-1: Manufacturer: syz [ 1533.586229][ T996] usb 3-1: SerialNumber: syz [ 1533.889352][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 1533.970308][ T996] ims_pcu 3-1:10.0: Missing CDC union descriptor [ 1534.024573][ T996] ims_pcu 3-1:10.0: probe with driver ims_pcu failed with error -22 [ 1534.077991][ T996] usb 3-1: USB disconnect, device number 10 [ 1535.123434][ T996] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1535.255028][T21223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3613'. [ 1535.295390][ T996] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x7B, changing to 0xB [ 1535.344205][ T996] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1535.380645][ T996] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid wMaxPacketSize 0 [ 1535.411005][ T996] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1535.435893][ T996] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1535.451637][ T996] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1535.478193][ T996] usb 3-1: Product: syz [ 1535.488308][ T996] usb 3-1: Manufacturer: syz [ 1535.515462][ T996] usb 3-1: SerialNumber: syz [ 1535.555069][ T996] usb 3-1: config 0 descriptor?? [ 1535.579563][ T996] usb 3-1: selecting invalid altsetting 0 [ 1535.883358][T21235] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3618'. [ 1535.953195][T18125] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1535.994126][ T187] usb 3-1: USB disconnect, device number 11 [ 1536.113350][T18125] usb 4-1: Using ep0 maxpacket: 32 [ 1536.121063][T18125] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1536.131138][T18125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.146890][ T996] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1536.162240][T18125] usb 4-1: config 0 descriptor?? [ 1536.176292][T18125] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1536.323724][ T996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1536.340629][ T996] usb 1-1: not running at top speed; connect to a high speed hub [ 1536.351027][ T996] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.362083][ T996] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1536.374569][ T996] usb 1-1: too many endpoints for config 1 interface 0 altsetting 188: 231, using maximum allowed: 30 [ 1536.393226][ T996] usb 1-1: config 1 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 1536.410273][ T996] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1536.420341][ T996] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1536.431162][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.439632][ T996] usb 1-1: Product: syz [ 1536.444521][ T996] usb 1-1: Manufacturer: syz [ 1536.449666][ T996] usb 1-1: SerialNumber: syz [ 1536.617497][T21233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.644670][T21233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.697363][ T996] usb 1-1: invalid UAC_HEADER (v1) [ 1536.774519][ T996] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1536.786687][ T996] usb 1-1: USB disconnect, device number 16 [ 1536.848776][T10132] udevd[10132]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1536.951701][T21233] netlink: 10184 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1536.962694][T21233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1537.057867][T18125] gspca_nw80x: reg_w err -71 [ 1537.065599][T18125] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1537.092888][T18125] usb 4-1: USB disconnect, device number 16 [ 1537.152829][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'. [ 1537.213923][T21246] Set syz0 is full, maxelem 0 reached [ 1538.594192][T21278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3626'. [ 1538.622180][T21278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.741750][T21283] loop9: detected capacity change from 0 to 7 [ 1538.786644][ C0] blk_print_req_error: 10 callbacks suppressed [ 1538.786700][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1538.804588][ C0] buffer_io_error: 10 callbacks suppressed [ 1538.804623][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1538.839942][T21278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.881049][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1538.891691][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1538.913642][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1538.924050][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.048790][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1539.059400][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.103379][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1539.114046][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.135716][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1539.146025][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.155094][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1539.165179][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.176524][T21283] ldm_validate_partition_table(): Disk read failed. [ 1539.199095][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1539.208437][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.217566][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1539.226847][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.251095][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1539.260471][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1539.287580][T21283] Dev loop9: unable to read RDB block 0 [ 1539.313325][T21283] loop9: unable to read partition table [ 1539.336102][T21283] loop9: partition table beyond EOD, truncated [ 1539.367538][T21283] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1539.756903][T21291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3628'. [ 1539.794801][T21291] netlink: 'syz.4.3628': attribute type 8 has an invalid length. [ 1541.927755][T21302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1541.942283][T21301] syzkaller0: entered promiscuous mode [ 1541.950657][T21301] syzkaller0: entered allmulticast mode [ 1541.988780][T21301] tipc: Enabled bearer , priority 0 [ 1542.020034][T21302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1542.039149][T21301] tipc: Resetting bearer [ 1542.061410][T21298] tipc: Resetting bearer [ 1542.148503][T21298] tipc: Disabling bearer [ 1542.334312][T18125] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1542.345747][ T30] audit: type=1326 audit(1783803785.623:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.380213][T21313] random: crng reseeded on system resumption [ 1542.407496][T21313] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1542.417372][T21315] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 1542.432325][T21313] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1542.458801][ T30] audit: type=1326 audit(1783803785.663:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.524159][T18125] usb 1-1: Using ep0 maxpacket: 32 [ 1542.533423][T18125] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1542.534784][ T30] audit: type=1326 audit(1783803785.673:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.599552][T21309] IPVS: stopping backup sync thread 21315 ... [ 1542.608158][T18125] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1542.634761][ T30] audit: type=1326 audit(1783803785.673:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.635863][T18125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.709052][ T30] audit: type=1326 audit(1783803785.673:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.744499][T18125] usb 1-1: Product: syz [ 1542.769151][T18125] usb 1-1: Manufacturer: syz [ 1542.788845][T18125] usb 1-1: SerialNumber: syz [ 1542.792968][ T30] audit: type=1326 audit(1783803785.673:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.847096][T21318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1542.874764][ T30] audit: type=1326 audit(1783803785.683:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.947195][ T30] audit: type=1326 audit(1783803785.693:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1542.976510][ T30] audit: type=1326 audit(1783803786.263:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1543.052931][ T30] audit: type=1326 audit(1783803786.263:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21305 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 1543.187092][T21320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1543.262989][T21320] input: syz0 as /devices/virtual/input/input98 [ 1543.279369][T18125] usb 1-1: unit 0 not found! [ 1543.705004][ T187] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1543.732885][T21302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.759464][T18125] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1543.788579][T18125] usb 1-1: unit 0 not found! [ 1543.809238][T18125] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1543.833745][T11336] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1543.844665][T18125] usb 1-1: unit 0 not found! [ 1543.878751][ T187] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1543.889956][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.920949][ T187] usb 2-1: config 0 descriptor?? [ 1543.930255][T18125] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1543.959717][T18125] usb 1-1: USB disconnect, device number 17 [ 1544.009954][T11336] usb 4-1: config 0 has no interfaces? [ 1544.050740][T12465] udevd[12465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.064407][T11336] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1544.085575][T11336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.095290][T11336] usb 4-1: Product: syz [ 1544.099488][T11336] usb 4-1: Manufacturer: syz [ 1544.105900][T11336] usb 4-1: SerialNumber: syz [ 1544.127682][T11336] usb 4-1: config 0 descriptor?? [ 1544.209081][ T187] usb 2-1: Cannot read MAC address [ 1544.219507][ T187] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1544.239625][ T187] usb 2-1: USB disconnect, device number 25 [ 1544.470482][T21327] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.529157][T21327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1544.584694][ T996] usb 4-1: USB disconnect, device number 17 [ 1544.804114][T18125] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1544.828935][T21336] syz_tun: entered allmulticast mode [ 1544.868082][T21335] syz_tun: left allmulticast mode [ 1544.963426][T18125] usb 3-1: Using ep0 maxpacket: 8 [ 1544.974508][T18125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.992384][T18125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1545.013288][T18125] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1545.051630][T18125] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1545.066065][T18125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.083827][T18125] usb 3-1: Product: syz [ 1545.088096][T18125] usb 3-1: Manufacturer: syz [ 1545.092708][T18125] usb 3-1: SerialNumber: syz [ 1545.106989][T18125] usb 3-1: config 0 descriptor?? [ 1545.147806][T18125] radioshark 3-1:0.0: Invalid radioSHARK device [ 1545.160927][T18125] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 1545.184172][T18125] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1545.223386][ T187] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1545.345879][T21344] netlink: 'syz.3.3645': attribute type 4 has an invalid length. [ 1545.422910][ T187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1545.439411][T11336] usb 3-1: USB disconnect, device number 12 [ 1545.451616][ T187] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1576, setting to 1024 [ 1545.492291][ T187] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1545.510319][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.522830][ T187] usb 2-1: Product: syz [ 1545.528306][ T187] usb 2-1: Manufacturer: syz [ 1545.533214][ T187] usb 2-1: SerialNumber: syz [ 1546.172804][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.187512][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.306625][ T187] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1546.330482][ T187] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1546.380226][ T187] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1546.731248][ T187] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1546.792320][ T187] usb 2-1: USB disconnect, device number 26 [ 1547.012374][T10132] udevd[10132]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1548.676246][ T5290] 8021q: adding VLAN 0 to HW filter on device dev66 [ 1548.713631][T21383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1548.720214][T21383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1548.781582][T21383] vhci_hcd vhci_hcd.0: Device attached [ 1549.532978][T21384] vhci_hcd: connection closed [ 1549.533715][T17125] vhci_hcd vhci_hcd.4: stop threads [ 1549.578517][T17125] vhci_hcd vhci_hcd.4: release socket [ 1549.606458][T17125] vhci_hcd vhci_hcd.4: disconnect device [ 1550.227202][T21397] dvmrp8: left allmulticast mode [ 1550.394489][T11336] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1550.570403][T11336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.602378][T11336] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1550.620594][T11336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.641869][T11336] usb 1-1: Product: syz [ 1550.659475][T11336] usb 1-1: Manufacturer: syz [ 1550.686429][T11336] usb 1-1: SerialNumber: syz [ 1550.712521][T11336] usb 1-1: config 0 descriptor?? [ 1550.746400][T11336] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1550.832850][T21404] Set syz0 is full, maxelem 0 reached [ 1550.893141][T18125] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1551.004051][T21395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.021342][T21395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.068350][T18125] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1551.112195][T18125] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1551.169562][T18125] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1551.214295][T18125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.577225][T18125] usb 2-1: GET_CAPABILITIES returned 5e [ 1551.591563][T18125] usbtmc 2-1:16.0: can't read capabilities [ 1551.778171][T21414] dvmrp8: left allmulticast mode [ 1551.828989][T18125] usb 2-1: USB disconnect, device number 27 [ 1551.842095][T21395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.881565][T21395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.974812][T21395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.022166][T21395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.117059][T11336] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1552.136234][T11336] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1552.164778][T11336] usb 1-1: USB disconnect, device number 18 [ 1552.977205][T21431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1553.061560][T21431] netlink: 'syz.0.3663': attribute type 8 has an invalid length. [ 1553.853651][T11336] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1553.893670][T17299] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1554.054369][T11336] usb 3-1: Using ep0 maxpacket: 32 [ 1554.100754][T11336] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1554.119479][T17299] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1554.134849][T11336] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1554.150771][T17299] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1554.169120][T11336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1554.200207][T17299] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1554.217297][T11336] usb 3-1: config 1 has no interface number 0 [ 1554.237635][T11336] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1554.270142][T17299] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1554.301995][T11336] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1554.316379][T17299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.336473][T17299] usb 2-1: Product: syz [ 1554.358133][T17299] usb 2-1: Manufacturer: syz [ 1554.364550][T11336] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1554.380939][T17299] usb 2-1: SerialNumber: syz [ 1554.390473][T11336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.408872][T17299] usb 2-1: config 0 descriptor?? [ 1554.433667][T21442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1554.453558][T21442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1554.478624][T11336] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1554.489298][T17299] usb 2-1: ucan: probing device on interface #0 [ 1554.791532][T17299] usb 2-1: ucan: could not read protocol version, ret=-71 [ 1554.828856][T17299] usb 2-1: ucan: probe failed; try to update the device firmware [ 1554.908825][T17299] usb 2-1: USB disconnect, device number 28 [ 1555.143570][T11336] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1556.167707][T11336] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1556.409974][T21455] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 1556.438221][T21459] Set syz0 is full, maxelem 0 reached [ 1556.511493][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3671'. [ 1557.817953][T18125] usb 3-1: USB disconnect, device number 13 [ 1557.848721][T18125] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1557.974475][T21473] hub 8-0:1.0: USB hub found [ 1557.990170][T21473] hub 8-0:1.0: 1 port detected [ 1558.223292][T11336] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1558.303163][T18125] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1558.404016][T11336] usb 1-1: Using ep0 maxpacket: 32 [ 1558.430995][T11336] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1558.455166][T11336] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1558.480873][T18125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.505994][T11336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1558.529568][T11336] usb 1-1: config 1 has no interface number 0 [ 1558.544514][T18125] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1558.567220][T18125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.567531][T11336] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.616092][T18125] usb 3-1: Product: syz [ 1558.625810][T18125] usb 3-1: Manufacturer: syz [ 1558.642682][T18125] usb 3-1: SerialNumber: syz [ 1558.642737][T11336] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1558.692271][T18125] usb 3-1: config 0 descriptor?? [ 1558.740053][T18125] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1558.745011][T11336] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1558.782834][T11336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.845159][T11336] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1558.950638][T21476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.980870][T21476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.284737][T18125] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1559.324223][T18125] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1559.755048][T11336] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1560.543382][T18125] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1560.590941][T21491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.616782][T21491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.659578][T21491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.687880][T21491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.707884][T18125] usb 2-1: Using ep0 maxpacket: 8 [ 1560.725006][T18125] usb 2-1: config 162 has an invalid interface number: 84 but max is 2 [ 1560.751557][T18125] usb 2-1: config 162 has an invalid interface number: 3 but max is 2 [ 1560.773141][T18125] usb 2-1: config 162 has no interface number 0 [ 1560.791793][T18125] usb 2-1: config 162 has no interface number 1 [ 1560.803952][T11336] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1560.835034][T18125] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1560.868746][T18125] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1560.907534][T18125] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1560.948208][T18125] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1560.990363][T18125] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1561.021275][T18125] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1561.068537][T18125] usb 2-1: config 162 interface 84 has no altsetting 0 [ 1561.092195][T18125] usb 2-1: config 162 interface 2 has no altsetting 0 [ 1561.116622][T18125] usb 2-1: config 162 interface 3 has no altsetting 0 [ 1561.139339][T18125] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1561.161454][T18125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.187892][T18125] usb 2-1: Product: syz [ 1561.198784][T18125] usb 2-1: Manufacturer: syz [ 1561.212865][T18125] usb 2-1: SerialNumber: syz [ 1561.502212][T21485] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1562.042585][ T5628] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1562.076575][T18125] usb 2-1: USB disconnect, device number 29 [ 1562.150405][T11336] usb 3-1: USB disconnect, device number 14 [ 1562.909106][ T996] usb 1-1: USB disconnect, device number 19 [ 1562.928072][ T996] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1563.383729][ T996] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1563.463555][T11336] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1563.533401][ T996] usb 1-1: Using ep0 maxpacket: 32 [ 1563.536956][ T996] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1563.536986][ T996] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.537007][ T996] usb 1-1: config 0 has no interface number 0 [ 1563.537049][ T996] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1563.537071][ T996] usb 1-1: config 0 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1563.539302][ T996] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1563.539333][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.539354][ T996] usb 1-1: Product: syz [ 1563.539369][ T996] usb 1-1: Manufacturer: syz [ 1563.539385][ T996] usb 1-1: SerialNumber: syz [ 1563.551845][ T996] usb 1-1: config 0 descriptor?? [ 1563.572197][ T996] usb 1-1: expecting 3 got 0 endpoints! Bailing out. [ 1563.643555][T11336] usb 3-1: Using ep0 maxpacket: 16 [ 1563.652757][T11336] usb 3-1: config index 0 descriptor too short (expected 526, got 367) [ 1563.652827][T11336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.659324][T11336] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 1563.659378][T11336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.659422][T11336] usb 3-1: Product: syz [ 1563.659479][T11336] usb 3-1: Manufacturer: syz [ 1563.659515][T11336] usb 3-1: SerialNumber: syz [ 1563.668358][T11336] usb 3-1: config 0 descriptor?? [ 1563.686738][T21493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1563.896134][ T996] usb 3-1: USB disconnect, device number 15 [ 1564.838741][T18125] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1564.916018][ T996] usb 1-1: USB disconnect, device number 20 [ 1565.004016][T18125] usb 2-1: Using ep0 maxpacket: 8 [ 1565.013365][T18125] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.034602][T18125] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1565.053188][T18125] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1565.081210][T18125] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1565.104076][T18125] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1565.123345][T18125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.142631][T18125] hub 2-1:1.0: bad descriptor, ignoring hub [ 1565.166563][T18125] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1565.175428][T18125] cdc_wdm 2-1:1.0: skipping garbage [ 1565.193162][T18125] cdc_wdm 2-1:1.0: skipping garbage [ 1565.202726][T18125] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1565.213400][T18125] cdc_wdm 2-1:1.0: Unknown control protocol [ 1565.303378][T11680] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1565.463713][T11680] usb 4-1: Using ep0 maxpacket: 8 [ 1565.494986][T11680] usb 4-1: config 0 has no interfaces? [ 1565.525346][T11680] usb 4-1: config 0 has no interfaces? [ 1565.556431][T11680] usb 4-1: config 0 has no interfaces? [ 1565.597284][T11680] usb 4-1: config 0 has no interfaces? [ 1565.631463][T11680] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1565.680179][T11680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.739773][T11680] usb 4-1: config 0 descriptor?? [ 1565.934079][T18125] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1566.026052][T11680] usb 4-1: USB disconnect, device number 18 [ 1566.119635][T18125] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 1566.136191][T18125] usb 1-1: config 2 has no interface number 0 [ 1566.153120][T18125] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1566.173848][T11336] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1566.175546][T18125] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 1566.213135][T18125] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1566.242445][T18125] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1566.263671][T18125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.278179][T18125] usb 1-1: Product: syz [ 1566.293319][T18125] usb 1-1: Manufacturer: syz [ 1566.302794][T18125] usb 1-1: SerialNumber: syz [ 1566.320733][T21525] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1566.364539][T21525] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1566.417916][T11336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.455694][T11336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.509307][T11336] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1566.521046][T11336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.534642][T11336] usb 3-1: config 0 descriptor?? [ 1566.907459][T21535] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3691'. [ 1567.223398][T11680] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1567.289619][T18125] usb 1-1: probing VID:PID(0424:012C) [ 1567.341611][T18125] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E [ 1567.364933][T18125] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 1567.381591][T18125] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1567.396223][T11680] usb 4-1: Using ep0 maxpacket: 16 [ 1567.412742][T11680] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1567.423880][T18125] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 1567.439632][T11680] usb 4-1: config 0 has no interface number 0 [ 1567.452601][T18125] usb 1-1: USB disconnect, device number 21 [ 1567.459600][T11680] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1567.486294][T11680] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1567.532541][ T996] usb 2-1: USB disconnect, device number 30 [ 1567.557733][T11680] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1567.598083][T11680] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1567.645255][T11680] usb 4-1: Product: syz [ 1567.669490][T11680] usb 4-1: SerialNumber: syz [ 1567.722082][T11680] usb 4-1: config 0 descriptor?? [ 1567.772751][T11680] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1567.802448][T11680] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input99 [ 1568.123755][T11680] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1568.268946][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.276556][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.284187][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.291366][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.299161][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.306520][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.313731][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.321246][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.328610][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.336533][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1568.340985][T17299] usb 4-1: USB disconnect, device number 19 [ 1568.343518][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1568.363458][T11680] usb 2-1: Using ep0 maxpacket: 32 [ 1568.371730][T11680] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1568.381803][T11680] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1568.411562][T11680] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1568.428027][T11680] usb 2-1: config 1 has no interface number 0 [ 1568.450546][T11680] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1568.452537][T17299] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1568.482470][T11680] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1568.514965][T11680] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1568.545532][T11680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.579638][T11680] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1569.072719][T11336] usbhid 3-1:0.0: can't add hid device: -71 [ 1569.102473][T11336] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1569.176763][T11336] usb 3-1: USB disconnect, device number 16 [ 1569.341424][T11680] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1569.532286][T21550] bridge0: entered promiscuous mode [ 1569.551837][T21550] bridge0: entered allmulticast mode [ 1570.403974][ T996] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1570.720044][T21565] netlink: 'syz.3.3697': attribute type 1 has an invalid length. [ 1571.049675][T21565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1571.438993][T21567] macvlan2: entered promiscuous mode [ 1571.553924][T21567] macvlan2: entered allmulticast mode [ 1572.410235][T11680] usb 2-1: USB disconnect, device number 31 [ 1572.474301][T11680] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1572.485117][T21568] bond5: (slave ip6gretap0): making interface the new active one [ 1572.554079][T21568] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1574.293465][T11680] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1574.483613][T11680] usb 3-1: Using ep0 maxpacket: 8 [ 1574.500088][T11680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.528727][T11680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1574.560474][T11680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.609933][T11680] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1574.641289][T11680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.671963][T11680] usb 3-1: Product: syz [ 1574.685466][T11680] usb 3-1: Manufacturer: syz [ 1574.755954][T11680] usb 3-1: SerialNumber: syz [ 1574.765787][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'. [ 1574.789596][T11680] usb 3-1: config 0 descriptor?? [ 1574.824630][T11680] radioshark 3-1:0.0: Invalid radioSHARK device [ 1574.845233][T11680] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 1574.876334][T11680] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1575.185217][T11680] usb 3-1: USB disconnect, device number 17 [ 1576.603473][T11680] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1576.844215][T11680] usb 3-1: Using ep0 maxpacket: 16 [ 1577.211904][T11680] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1577.235699][T11680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.273797][T11680] usb 3-1: Product: syz [ 1577.290736][T11680] usb 3-1: Manufacturer: syz [ 1577.305967][T11680] usb 3-1: SerialNumber: syz [ 1578.045524][T11680] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1578.182789][T11680] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1578.270756][T11680] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1578.319115][T11680] usb 3-1: media controller created [ 1578.490420][T11680] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1578.956106][T11680] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1579.302100][T11680] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1580.243529][T11680] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1580.621668][T11680] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.633819][T11680] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1580.648181][T11680] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1580.883697][T11680] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1580.921039][T11680] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1581.093990][T11680] usb 4-1: Product: syz [ 1581.309943][T11680] usb 4-1: Manufacturer: syz [ 1581.315457][T11680] usb 4-1: SerialNumber: syz [ 1581.327749][T11680] usb 4-1: config 0 descriptor?? [ 1581.784031][T21652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.833790][T11680] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1581.883878][T21652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.236547][T11336] usb 3-1: USB disconnect, device number 18 [ 1582.462757][T17299] usb 4-1: USB disconnect, device number 20 [ 1582.573882][T10132] udevd[10132]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1582.648915][T21661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3714'. [ 1586.063793][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 1586.263445][T11680] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1586.445935][T11680] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1586.490853][T11680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.526519][T11680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.568745][T11680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1586.620771][T11680] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1586.655991][T11680] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1586.679760][T11680] usb 3-1: Manufacturer: syz [ 1586.703102][T11680] usb 3-1: config 0 descriptor?? [ 1587.271450][T11680] appleir 0003:05AC:8243.004C: unknown main item tag 0x0 [ 1587.455955][T11680] appleir 0003:05AC:8243.004C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1587.635334][T21718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1587.696245][T11680] usb 3-1: USB disconnect, device number 19 [ 1587.928021][T21719] fido_id[21719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1589.545992][T21734] macsec2: entered promiscuous mode [ 1589.557284][T21734] veth1_to_hsr: entered promiscuous mode [ 1589.578017][T21734] macsec2: entered allmulticast mode [ 1589.583924][T21734] veth1_to_hsr: entered allmulticast mode [ 1589.955157][T21738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3730'. [ 1590.102559][T21738] input: syz0 as /devices/virtual/input/input100 [ 1591.335147][T17299] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1591.507147][T17299] usb 4-1: Using ep0 maxpacket: 16 [ 1591.531471][T17299] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.543005][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3735'. [ 1591.555648][T17299] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1591.573897][T17299] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1591.603785][T17299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.686656][T17299] usb 4-1: config 0 descriptor?? [ 1593.074057][T21790] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3736'. [ 1593.274922][T21790] EXT4-fs: Conflicting test_dummy_encryption options [ 1594.062163][T21799] netlink: 'syz.1.3737': attribute type 22 has an invalid length. [ 1594.634426][T21800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.697492][T21800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.161972][T21800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1595.207744][T21800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1595.413380][T11680] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1595.550128][T21800] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1595.601780][T11680] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1595.616566][T11680] usb 1-1: not running at top speed; connect to a high speed hub [ 1595.634437][T11680] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.666804][T11680] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1595.724531][T11680] usb 1-1: too many endpoints for config 1 interface 0 altsetting 188: 231, using maximum allowed: 30 [ 1595.762835][T11680] usb 1-1: config 1 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 1595.823881][T11680] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1595.859493][T11680] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1595.884673][T11680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.917460][T11680] usb 1-1: Product: syz [ 1595.930097][T11680] usb 1-1: Manufacturer: syz [ 1595.951174][T11680] usb 1-1: SerialNumber: syz [ 1596.111166][T21807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3750'. [ 1596.219986][T21809] netlink: 'syz.2.3750': attribute type 8 has an invalid length. [ 1596.312643][T11680] usb 1-1: invalid UAC_HEADER (v1) [ 1596.467547][T18125] usb 4-1: USB disconnect, device number 21 [ 1596.528976][T11680] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1596.565141][T11680] usb 1-1: USB disconnect, device number 22 [ 1596.602165][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 1596.625842][T10132] udevd[10132]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1597.025828][T21819] tipc: Failed to remove unknown binding: 66,0,0/0:2756017460/2756017462 [ 1597.055595][T21818] tipc: Failed to remove unknown binding: 66,0,0/0:723860789/723860790 [ 1597.068940][T21818] tipc: Failed to remove unknown binding: 66,0,0/0:723860789/723860790 [ 1600.764049][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1601.073470][T11336] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1601.264770][T11336] usb 1-1: Using ep0 maxpacket: 16 [ 1601.321957][T11336] usb 1-1: config index 0 descriptor too short (expected 526, got 367) [ 1601.350553][T11336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.422910][T11336] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 1601.444217][T11336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.472682][T11336] usb 1-1: Product: syz [ 1601.489801][T11336] usb 1-1: Manufacturer: syz [ 1601.519983][T11336] usb 1-1: SerialNumber: syz [ 1601.648766][T11336] usb 1-1: config 0 descriptor?? [ 1602.125748][T11336] usb 1-1: USB disconnect, device number 23 [ 1603.993997][ T30] audit: type=1326 audit(1783803847.243:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1604.128325][ T30] audit: type=1326 audit(1783803847.243:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1604.241249][ T30] audit: type=1326 audit(1783803847.253:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1604.679500][ T30] audit: type=1326 audit(1783803847.943:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1604.811746][ T30] audit: type=1326 audit(1783803847.943:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1604.941915][ T30] audit: type=1326 audit(1783803848.163:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1605.066073][ T30] audit: type=1326 audit(1783803848.183:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1605.161863][ T30] audit: type=1326 audit(1783803848.183:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1605.256570][ T30] audit: type=1326 audit(1783803848.193:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1605.306464][ T30] audit: type=1326 audit(1783803848.203:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21888 comm="syz.4.3755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f140ec code=0x7ffc0000 [ 1605.533398][T11336] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1605.549606][T21896] netlink: 'syz.1.3757': attribute type 1 has an invalid length. [ 1605.560332][T21896] netlink: 'syz.1.3757': attribute type 8 has an invalid length. [ 1605.716540][T11336] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x7B, changing to 0xB [ 1605.734337][T11336] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1605.785391][T11336] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0xB has invalid wMaxPacketSize 0 [ 1605.829660][T11336] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1605.864750][T11336] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1605.890205][T11336] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1605.932910][T11336] usb 4-1: Product: syz [ 1605.932976][T11336] usb 4-1: Manufacturer: syz [ 1605.935333][T11336] usb 4-1: SerialNumber: syz [ 1605.950705][T11336] usb 4-1: config 0 descriptor?? [ 1605.961061][T11336] usb 4-1: selecting invalid altsetting 0 [ 1606.408182][T11336] usb 4-1: USB disconnect, device number 22 [ 1606.971001][T21917] netlink: 'syz.2.3763': attribute type 2 has an invalid length. [ 1607.006498][T21917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1607.158237][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1607.621175][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.637813][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.093167][T11336] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1613.336606][T11336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.399255][T11336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.444605][T21972] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1613.479909][T11336] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1613.522572][T21972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1613.550099][T11336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.643582][T11336] usb 4-1: config 0 descriptor?? [ 1615.168106][T21979] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1615.232545][T21979] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1615.328159][T21979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3773'. [ 1615.390694][T21979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3773'. [ 1615.415178][T21979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3773'. [ 1616.110335][T11336] usbhid 4-1:0.0: can't add hid device: -71 [ 1616.118057][T11336] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1616.168668][T11336] usb 4-1: USB disconnect, device number 23 [ 1617.833584][T22000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3775'. [ 1618.110217][T22000] usb usb8: usbfs: process 22000 (syz.2.3775) did not claim interface 0 before use [ 1618.460894][T22005] IPVS: set_ctl: invalid protocol: 189 172.20.20.17:19998 [ 1618.529701][T22005] random: crng reseeded on system resumption [ 1618.577504][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 1626.274888][T22052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3789'. [ 1626.759531][T17299] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1627.063693][T17299] usb 3-1: Using ep0 maxpacket: 32 [ 1627.271814][T17299] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1627.290754][T17299] usb 3-1: config 0 has no interface number 0 [ 1627.328218][T17299] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1627.368972][T17299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.406854][T17299] usb 3-1: Product: syz [ 1627.427337][T17299] usb 3-1: Manufacturer: syz [ 1627.471793][T17299] usb 3-1: SerialNumber: syz [ 1627.524189][T17299] usb 3-1: config 0 descriptor?? [ 1627.570834][T17299] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1627.876816][T17299] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1627.955436][T17299] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1628.587593][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 1628.794390][T22055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1628.879666][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1628.880082][T18125] usb 3-1: USB disconnect, device number 20 [ 1628.955793][T18125] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1629.018133][T18125] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1629.086334][T18125] quatech2 3-1:0.51: device disconnected [ 1630.885053][T18125] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1631.054593][T18125] usb 1-1: Using ep0 maxpacket: 16 [ 1631.069525][T18125] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1631.097071][T18125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.131533][T18125] usb 1-1: config 0 has no interface number 0 [ 1631.167588][T18125] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1631.207869][T22088] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1631.224105][T18125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.259127][T18125] usb 1-1: Product: syz [ 1631.271303][T18125] usb 1-1: Manufacturer: syz [ 1631.284820][T18125] usb 1-1: SerialNumber: syz [ 1631.312904][T18125] usb 1-1: config 0 descriptor?? [ 1631.343333][T22088] bond3: (slave lo): Enslaving as an active interface with an up link [ 1631.360401][T18125] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1631.378034][T22088] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1631.396136][T18125] uvcvideo 1-1:0.105: No valid video chain found. [ 1633.195588][T11336] usb 1-1: USB disconnect, device number 24 [ 1636.529154][T22126] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3803'. [ 1636.560957][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3803'. [ 1638.911138][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3807'. [ 1640.827283][T22159] netlink: 'syz.2.3809': attribute type 1 has an invalid length. [ 1640.867872][T22159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1642.242404][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3820'. [ 1642.409165][T22170] usb usb8: usbfs: process 22170 (syz.0.3820) did not claim interface 0 before use [ 1644.296622][T22187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3814'. [ 1644.503451][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3815'. [ 1646.349872][T22201] fuse: Unknown parameter 'use00000000000000000000' [ 1647.422284][T22204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.512244][T22204] dummy0: left promiscuous mode [ 1647.695497][T22204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.901597][T22219] vivid-004: disconnect [ 1647.968640][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3821'. [ 1648.069684][T22204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1648.120128][T22204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1648.197795][T22204] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1649.300082][T22237] netlink: 'syz.1.3823': attribute type 1 has an invalid length. [ 1649.338019][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3823'. [ 1649.547266][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1650.208232][T22207] vivid-004: reconnect [ 1652.905169][T22256] input: syz0 as /devices/virtual/input/input103 [ 1654.842649][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3830'. [ 1655.049004][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3831'. [ 1656.248866][T22285] binder: 22278:22285 ioctl c0306201 800003c0 returned -14 [ 1657.063404][T22286] netlink: 'syz.2.3833': attribute type 62 has an invalid length. [ 1658.731516][T22313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1658.761925][T22313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1659.173243][T11680] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1659.298514][T22324] netlink: 'syz.4.3837': attribute type 22 has an invalid length. [ 1659.370084][T11680] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1659.392912][T11680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.452130][T11680] usb 3-1: config 0 has no interfaces? [ 1659.481295][T11680] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1659.522545][T11680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.570755][T11680] usb 3-1: config 0 descriptor?? [ 1662.348567][T11680] usb 3-1: USB disconnect, device number 21 [ 1662.568786][T22338] netlink: 'syz.1.3841': attribute type 2 has an invalid length. [ 1662.631975][T22338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3841'. [ 1665.033375][T11336] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1665.213480][T11336] usb 1-1: Using ep0 maxpacket: 8 [ 1665.237338][T11336] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1665.265750][T11336] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 1665.311097][T11336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.321690][T22354] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1665.353833][T11336] usb 1-1: Product: syz [ 1665.359658][T11336] usb 1-1: Manufacturer: syz [ 1665.387646][T11336] usb 1-1: SerialNumber: syz [ 1665.513320][T17299] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1665.709146][T17299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.896750][T17299] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1665.913155][T17299] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1665.925459][T17299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.016783][T17299] usb 3-1: config 0 descriptor?? [ 1666.775022][T17299] ath6kl: Failed to submit usb control message: -71 [ 1666.858915][T17299] ath6kl: unable to send the bmi data to the device: -71 [ 1666.903473][T17299] ath6kl: Unable to send get target info: -71 [ 1666.936447][T17299] ath6kl: Failed to init ath6kl core: -71 [ 1666.947161][T17299] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1667.090500][T17299] usb 3-1: USB disconnect, device number 22 [ 1667.605982][T22348] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1667.709822][T22348] bond7 (unregistering): Released all slaves [ 1668.095311][T11336] usbhid 1-1:1.0: can't add hid device: -71 [ 1668.140168][T11336] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1668.235015][T11336] usb 1-1: USB disconnect, device number 25 [ 1669.048146][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.055808][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.183813][T11680] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1669.358097][T11680] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1669.396694][T11680] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1669.452821][T11680] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1669.484956][T11680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.748736][T11680] usb 2-1: usb_control_msg returned -32 [ 1669.764709][T11680] usbtmc 2-1:16.0: can't read capabilities [ 1669.774259][T11336] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1669.973270][T11336] usb 4-1: Using ep0 maxpacket: 32 [ 1670.006230][T11336] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1670.018214][T11336] usb 4-1: config 0 has no interface number 0 [ 1670.058156][T11336] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1670.093604][T11336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.129090][T11336] usb 4-1: Product: syz [ 1670.138694][T11336] usb 4-1: Manufacturer: syz [ 1670.147879][T11336] usb 4-1: SerialNumber: syz [ 1670.199895][T11336] usb 4-1: config 0 descriptor?? [ 1670.252139][T11336] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1670.564126][T11336] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1670.647562][T11336] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1670.742765][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 1671.065700][T22378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3851'. [ 1671.204306][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1671.292431][T11680] usb 4-1: USB disconnect, device number 24 [ 1671.311539][T11680] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1671.372826][T11680] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1671.449305][T11680] quatech2 4-1:0.51: device disconnected [ 1671.961511][T11680] usb 2-1: USB disconnect, device number 32 [ 1673.448936][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1673.497747][T22407] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1673.522259][T22407] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1676.229660][T22423] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1676.542185][T22423] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1676.754426][T22423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1676.922266][T22423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1676.948815][T22423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1678.718710][T22436] loop8: detected capacity change from 0 to 8 [ 1678.806538][T22436] Dev loop8: unable to read RDB block 8 [ 1678.842620][T22436] loop8: unable to read partition table [ 1678.874416][T22436] loop8: partition table beyond EOD, truncated [ 1678.903178][T22436] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1683.380747][T22473] veth1_to_bond: entered allmulticast mode [ 1685.628858][T22466] veth1_to_bond: left allmulticast mode [ 1689.910552][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1690.607287][T22523] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1690.673186][T22523] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3879'. [ 1695.284035][ T31] INFO: task kworker/0:2:187 blocked for more than 143 seconds. [ 1695.307015][ T31] Tainted: G L syzkaller #0 [ 1695.354197][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1695.376064][ T31] task:kworker/0:2 state:D stack:19936 pid:187 tgid:187 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1695.426910][ T31] Workqueue: usb_hub_wq hub_event [ 1695.432812][ T31] Call Trace: [ 1695.437258][ T31] [ 1695.440845][ T31] __schedule+0x17d9/0x56c0 [ 1695.451068][ T31] ? wq_worker_sleeping+0x101/0x250 [ 1695.461674][ T31] ? __pfx___schedule+0x10/0x10 [ 1695.468728][ T31] ? schedule+0x90/0x2b0 [ 1695.474426][ T31] schedule+0x164/0x2b0 [ 1695.489598][ T31] schedule_preempt_disabled+0x13/0x30 [ 1695.499823][ T31] __mutex_lock+0x7bf/0x1550 [ 1695.529870][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1695.533123][T11680] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1695.558287][ T31] ? hub_event+0x20c9/0x4d30 [ 1695.580440][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1695.616848][ T31] hub_event+0x20c9/0x4d30 [ 1695.630311][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1695.645640][ T31] ? register_lock_class+0x31/0x2e0 [ 1695.670423][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1695.700206][ T31] ? __pfx_hub_event+0x10/0x10 [ 1695.710477][T11680] usb 4-1: config 0 has no interfaces? [ 1695.731977][T11680] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1695.743496][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1695.757286][ T31] ? rcu_is_watching+0x15/0xb0 [ 1695.778266][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1695.788407][T11680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.822669][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1695.861794][T11680] usb 4-1: config 0 descriptor?? [ 1695.917205][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1695.957404][ T31] ? assign_work+0x3cf/0x5d0 [ 1695.967770][ T31] worker_thread+0xa47/0xfb0 [ 1695.982207][ T31] kthread+0x388/0x470 [ 1695.991065][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1696.006327][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.014162][ T31] ret_from_fork+0x514/0xb70 [ 1696.027737][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1696.032935][ T31] ? __switch_to+0xc89/0x1420 [ 1696.081729][ T31] ? __pfx_kthread+0x10/0x10 [ 1696.095668][ T31] ret_from_fork_asm+0x1a/0x30 [ 1696.137666][ T31] [ 1696.175753][ T31] [ 1696.175753][ T31] Showing all locks held in the system: [ 1696.219205][ T31] 1 lock held by khungtaskd/31: [ 1696.247814][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1696.290272][ T31] 5 locks held by kworker/0:2/187: [ 1696.307005][ T31] #0: ffff8880206e2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1696.354734][ T31] #1: ffffc90002fefc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1696.413158][ T31] #2: ffff888020b391d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1696.439631][ T31] #3: ffff888020b3e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1696.485939][ T31] #4: ffff88802b7c4460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1696.536235][ T31] 2 locks held by getty/5383: [ 1696.559964][ T31] #0: ffff888032cfe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1696.600108][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1696.639496][ T31] 5 locks held by kworker/0:5/5701: [ 1696.665811][ T31] #0: ffff8880206e2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1696.716960][ T31] #1: ffffc900050dfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1696.758804][ T31] #2: ffff8880213881d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1696.791772][ T31] #3: ffff88802138d568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1696.856990][ T31] #4: ffff88802b7c4460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1696.916064][ T31] 2 locks held by kworker/1:6/5710: [ 1696.937967][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1696.999562][ T31] #1: ffffc9000524fc40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1697.038618][ T31] 1 lock held by syz.2.3890/22572: [ 1697.064867][ T31] 1 lock held by syz.0.3889/22567: [ 1697.095450][ T31] 1 lock held by syz.1.3898/22563: [ 1697.122274][ T31] 1 lock held by syz.4.3888/22564: [ 1697.132243][ T31] 1 lock held by syz.3.3891/22562: [ 1697.151499][ T31] #0: ffff888028650450 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1697.187258][ T31] 1 lock held by syz.3.3891/22571: [ 1697.215941][ T31] #0: ffff888028650450 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1697.280268][ T31] [ 1697.285333][ T31] ============================================= [ 1697.285333][ T31] [ 1697.302155][ T31] NMI backtrace for cpu 0 [ 1697.302184][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.302214][ T31] Tainted: [L]=SOFTLOCKUP [ 1697.302221][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1697.302231][ T31] Call Trace: [ 1697.302237][ T31] [ 1697.302243][ T31] dump_stack_lvl+0xe8/0x150 [ 1697.302266][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1697.302353][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1697.302371][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1697.302386][ T31] sys_info+0x135/0x170 [ 1697.302398][ T31] watchdog+0xfd7/0x1030 [ 1697.302416][ T31] ? watchdog+0x1c7/0x1030 [ 1697.302433][ T31] kthread+0x388/0x470 [ 1697.302448][ T31] ? __pfx_watchdog+0x10/0x10 [ 1697.302460][ T31] ? __pfx_kthread+0x10/0x10 [ 1697.302476][ T31] ret_from_fork+0x514/0xb70 [ 1697.302494][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1697.302516][ T31] ? __switch_to+0xc89/0x1420 [ 1697.302531][ T31] ? __pfx_kthread+0x10/0x10 [ 1697.302547][ T31] ret_from_fork_asm+0x1a/0x30 [ 1697.302566][ T31] [ 1697.302615][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1697.428164][ C1] NMI backtrace for cpu 1 [ 1697.428188][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.428212][ C1] Tainted: [L]=SOFTLOCKUP [ 1697.428218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1697.428228][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1697.428257][ C1] Code: 7c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 5a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1697.428272][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 1697.428288][ C1] RAX: 0000000001c0ce7f RBX: ffffffff819ab450 RCX: 0000000080000001 [ 1697.428301][ C1] RDX: 0000000000000001 RSI: ffffffff8e22acf9 RDI: ffffffff8c4bd780 [ 1697.428313][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 1697.428328][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 1697.428340][ C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 1697.428352][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 1697.428366][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1697.428378][ C1] CR2: 000000008011e018 CR3: 000000001b1a8000 CR4: 00000000003526f0 [ 1697.428395][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1697.428405][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1697.428416][ C1] Call Trace: [ 1697.428424][ C1] [ 1697.428431][ C1] default_idle+0x9/0x20 [ 1697.428447][ C1] default_idle_call+0x72/0xb0 [ 1697.428464][ C1] do_idle+0x2e0/0x540 [ 1697.428486][ C1] ? __pfx_do_idle+0x10/0x10 [ 1697.428511][ C1] cpu_startup_entry+0x43/0x60 [ 1697.428532][ C1] start_secondary+0x101/0x110 [ 1697.428552][ C1] common_startup_64+0x13e/0x157 [ 1697.428578][ C1] [ 1697.807521][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1697.814448][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.825174][ T31] Tainted: [L]=SOFTLOCKUP [ 1697.829556][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1697.839786][ T31] Call Trace: [ 1697.843078][ T31] [ 1697.846034][ T31] vpanic+0x56c/0xa60 [ 1697.850161][ T31] ? __pfx___schedule+0x10/0x10 [ 1697.855038][ T31] ? __pfx_vpanic+0x10/0x10 [ 1697.859577][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1697.865756][ T31] panic+0xc5/0xd0 [ 1697.869613][ T31] ? __pfx_panic+0x10/0x10 [ 1697.874131][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1697.879603][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1697.884983][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1697.891512][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1697.897963][ T31] watchdog+0x1030/0x1030 [ 1697.902313][ T31] ? watchdog+0x1c7/0x1030 [ 1697.906748][ T31] kthread+0x388/0x470 [ 1697.911006][ T31] ? __pfx_watchdog+0x10/0x10 [ 1697.915691][ T31] ? __pfx_kthread+0x10/0x10 [ 1697.920319][ T31] ret_from_fork+0x514/0xb70 [ 1697.924954][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1697.930108][ T31] ? __switch_to+0xc89/0x1420 [ 1697.934806][ T31] ? __pfx_kthread+0x10/0x10 [ 1697.939414][ T31] ret_from_fork_asm+0x1a/0x30 [ 1697.944199][ T31] [ 1697.947569][ T31] Kernel Offset: disabled [ 1697.951896][ T31] Rebooting in 86400 seconds..