last executing test programs: 4m46.489210076s ago: executing program 4 (id=129): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x3a793092580d796d, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x7, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r6, 0x3, 0x3) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4) 4m41.30049801s ago: executing program 4 (id=139): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20084084) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x9}, &(0x7f0000000140)=0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x7, 0x1, 0x800, 0x1, 'syz0\x00'}, 0x1, [0x1000, 0x101, 0x7, 0x1ff, 0x3, 0x5, 0x7fffffffffffffff, 0x1373, 0x5, 0x5, 0x1, 0x5, 0xb2bc, 0x6, 0x1, 0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x5, 0x1, 0x4, 0x9, 0xffffffffffffffff, 0x2, 0x377e, 0x1, 0x5, 0x47, 0x7, 0x94, 0xfffffffffffffffc, 0x100, 0x8000000000000001, 0xc, 0xf, 0x100000000000, 0x1, 0x5, 0xf447, 0x9, 0x6, 0x8, 0x2, 0x8, 0x100000000, 0x0, 0x3, 0xd, 0x6, 0x7, 0x1, 0x9, 0xa, 0x0, 0xd, 0x2, 0x8, 0x1, 0xb, 0x2, 0x5, 0x8000000000000000, 0x4, 0x9, 0x1, 0x6, 0x0, 0x4, 0xcc36, 0x7, 0x4, 0x55, 0xff, 0x7, 0xc, 0x3, 0x4, 0x178b, 0x7fffffff, 0x7, 0x4d800, 0x2, 0x1, 0x2, 0x6, 0x58c, 0x7, 0xed, 0x3, 0x5, 0x55, 0x6, 0xf3, 0x6, 0x1200000000, 0x499b, 0x2, 0x6, 0x3, 0x7, 0xea, 0x7, 0x86, 0x100000000, 0x6, 0x2, 0x3ff, 0x400, 0x7, 0x7fffffffffffffff, 0x4, 0xbf, 0x9, 0x10000000, 0x7, 0xfffffffffffffffb, 0x3, 0x8, 0xff0, 0x1, 0xfff, 0x0, 0x7, 0xf, 0x8, 0xb001, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m40.774504751s ago: executing program 4 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4m39.823513254s ago: executing program 4 (id=142): ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8, @ANYBLOB="05", @ANYRES16], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0xfffffffe, 0x83800000, 0xa, 0x0, 0x2]}, &(0x7f0000000080)=0x54) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private, 0x10000}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x201800) preadv(r2, &(0x7f0000000080), 0x0, 0x18, 0x2) 4m36.020788601s ago: executing program 4 (id=150): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20084084) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000300)) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x7, 0x1, 0x800, 0x1, 'syz0\x00'}, 0x1, [0x1000, 0x101, 0x7, 0x1ff, 0x3, 0x5, 0x7fffffffffffffff, 0x1373, 0x5, 0x5, 0x1, 0x5, 0xb2bc, 0x6, 0x1, 0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x5, 0x1, 0x4, 0x9, 0xffffffffffffffff, 0x2, 0x377e, 0x1, 0x5, 0x47, 0x7, 0x94, 0xfffffffffffffffc, 0x100, 0x8000000000000001, 0xc, 0xf, 0x100000000000, 0x1, 0x5, 0xf447, 0x9, 0x6, 0x8, 0x2, 0x8, 0x100000000, 0x0, 0x3, 0xd, 0x6, 0x7, 0x1, 0x9, 0xa, 0x0, 0xd, 0x2, 0x8, 0x1, 0xb, 0x2, 0x5, 0x8000000000000000, 0x4, 0x9, 0x1, 0x6, 0x0, 0x4, 0xcc36, 0x7, 0x4, 0x55, 0xff, 0x7, 0xc, 0x3, 0x4, 0x178b, 0x7fffffff, 0x7, 0x4d800, 0x2, 0x1, 0x2, 0x6, 0x58c, 0x7, 0xed, 0x3, 0x5, 0x55, 0x6, 0xf3, 0x6, 0x1200000000, 0x499b, 0x2, 0x6, 0x3, 0x7, 0xea, 0x7, 0x86, 0x100000000, 0x6, 0x2, 0x3ff, 0x400, 0x7, 0x7fffffffffffffff, 0x4, 0xbf, 0x9, 0x10000000, 0x7, 0xfffffffffffffffb, 0x3, 0x8, 0xff0, 0x1, 0xfff, 0x0, 0x7, 0xf, 0x8, 0xb001, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m35.664549787s ago: executing program 4 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0x1, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="183f0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32, @ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x8000b) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x5b0}, 0x20008001) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="ef38df273fc935b005d380e9f6696d255b9514052a1b756b91", 0x19}, {&(0x7f0000000600)="7e2f13319f5ba68052aecbc9e8faf501d6f209417f73bd29f751b420bf51f813683947e8e63f1888593969adf3913a215e5e150d309dbfd15334631756e76059d86e0d42c918f0bcb4cbc28a3d71a52285fd9045e3853cd3c0cfc76f71de7f2474c4c4bb6c201b43d80a509c9d0f1365b026ab41e2140695903b86e1d5a27a27fced6360709c662712c37ba3dd86d3a8ace3ffeeb108497f87b94cafd91d50956ba86714090c6bb902e9187a201fdf2b7034cc064d3bf4e40876b9acab7687258f6407e1d8613b8be94684f68cb76f202873fff97008614b2c110eebc8f4090480fbfe0361e1e65b97f19d6078ea6ec03c5ee3aaf8f0cc5300895134ab81087cc55161abc527331c03ecfa01ac01319d9ba949d4519c2b46a7dcaa9e87cc2b28181a9549b5bdc7192cb2a9398720ed1f01509561767f2d11ed4f52cbc6012dca85fbc6739a54562ede8ff2886adc1ba78363ba4528223e0e4977c5471383c8748e0afd2a4e65dd9584cbb7adc0678404c1e9c15e37c25ad4d5c9ddffabe101eb82321b79c36329e5ef9d783afb0add226b74a1e39b6d2cce3504411513e89e94612db022606db2af33b387bea85b317f803bf18e3ae361890ad1fabdb03d4e942d1dd623b649ced2c518e6a906f3c5c176fcb6cb7439a88fe77d828944edf63ca179412f7d91d636b69e0147cbf033d2393100d2844bd84fc8bc4d32757d158935a7efebe8419048082103be7864d16adc35cfa3b25d5bf6889f16b94e5745e24626ae4bea76684f93420ef4243d6ac80ef86088da3f59c64d776659fc4fedaccc02f51dc05db81e387c18766bd5dd3fe703d6a91f12406388e990e8c919f49ad7969459a0cfa291bd1440ae4208849e67984c7d9e0c8ed5e639eb77feb87bed3d08d2a89d504ab40e3f76d090e602604a973f4b1683347d1a53b4ce215b63b69079b76afc8b2ae199f88f7f87b90b2392f27293a79c40737ffa23f99c2880a64445f65dae56263a945a6e98ccc4a3febbd85fb837bdde5e0d4bf9bc4c801ac2afda5c2668da61ba526321600f1795a31fa067f337c7115eef024edb641c859f7ba1460adeef04da39e1376d5255a885bd01ae3c27dd2699bfc1ceae35008a61cee317a704eee9443d0d95a371be776e5646201e544bc19561a22ed7e82d41eac30dfbc26ac19af1b7ead8de446a0f290aafaced0d8db1b9a88ab0c3f77352a39149ae9bd1532f435083eb3deafbb78f43216be6f5cc164a6d67b2c87b6d319db9fce2023b6525ba888f727398ecd77c3dd36a4828cb613803600a3dd2beb0885b100bda9f6db1130c0cdc1faa3d03e6194abfe08d3b9a73585f40a2024f2e9a2e901dc1f88532c43e36a7e361212c419006a42e20092afc03715a1979ceaf2530d651231b61a2cefc8585f4c629a2853750bdf79495a896bf94793549aeacf6d0d0c2c860e976451177c0f736969b06da6c2f80ed40790fac339ee8aba0e9d6a394246486f5b0ebb1a66bd4a2fac1015e84af8be1ad7dd1c2bf96da9067fb18e798759eb02a81773462eaf9c71c007b1cc4df7f0e421063ad041c4d5b59f444d0fa9a952f9ed5b9dbab482928c9dd2ed960ed61f92c4ab7e3673c3a9430defdb6f16d555c5e1baa8d7c5bd705e53640951a84bc41942b7232eee96ec28599a37e32f02aa6e1e99ab41bd77613b0fd988b32ba2aecdfd03afc9df5a5389ed7db7cada460b02fcc5788990d82ab87ed95337b0dbbcd875a19fd2aaea69bdc0e6a4a62ae417e6abd393b7a42ebff7c2ef9bd702168a64fdebd22b154a75029e033ffeebbba83bf76428f4e1400ee54d13ee842646965a15cf63f34705d1fb63ddf4bd1caded6147b0d6a1acc6bac4e9ea4ae024d5c226554be37ab62b754bcbd71dbbaab17664267d035e31f", 0x54b}], 0x2}, 0x20008004) 4m20.510806689s ago: executing program 32 (id=152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0x1, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="183f0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32, @ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x8000b) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x5b0}, 0x20008001) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="ef38df273fc935b005d380e9f6696d255b9514052a1b756b91", 0x19}, {&(0x7f0000000600)="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", 0x54b}], 0x2}, 0x20008004) 24.38096373s ago: executing program 1 (id=628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='f', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0]) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x19}, &(0x7f0000000280)=""/215, 0xd7, &(0x7f00000001c0)=""/26, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x8, 0x3, 0x0, 0x4b, 0xd, r2}) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x8000000000000001, &(0x7f0000000480)=""/211) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000280)={0x50, 0x0, r8, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) write$FUSE_GETXATTR(r6, &(0x7f00000005c0)={0x18, 0x0, r8, {0x5}}, 0x18) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r9) 18.980543424s ago: executing program 3 (id=635): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.freeze\x00', 0x26e1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e2400000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f"], 0xd8}}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b27, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e24, @empty}}, 0xfffc}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x40, 0xde4}, &(0x7f0000000100)=0x8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'lo\x00', @remote}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000540)=""/47, 0x2f}], 0x2, 0xa3, 0xd) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20d3, &(0x7f0000000300)=[{&(0x7f0000000400)=""/110, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f00000006c0)=""/118, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x53}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000001fc0)=""/191, 0xffffffffffffff52}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18.929376699s ago: executing program 0 (id=636): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010300000000000000000100000a20000000000ad68fc2122e01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900810073797a30000000000900030073797a320000000028000000060a010300000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000"], 0x9c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @private1, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 18.223803668s ago: executing program 1 (id=638): futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=&(0x7f00000000c0)}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000700)='.-^\x00', 0x121800, &(0x7f0000000740)={@_ha_fsid={[0x147, 0x80]}, {0xfff3, 0x61, 0x6, 0x6}}, 0x7fff, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000007c0)=0x22acd7f6}) pread64(r6, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) 17.691345019s ago: executing program 3 (id=639): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc40, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) kexec_load(0x3, 0x0, 0x0, 0x3e0000) sched_setattr(0xffffffffffffffff, &(0x7f0000000340)={0x38, 0x5, 0x20000028, 0x2, 0x0, 0x0, 0x1, 0xd23, 0x0, 0x100007}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='s\xefurce', &(0x7f0000000280)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x8d\xd7x\x0e\xbf+\xb2_\xbb8\x8f+F\xdcU=\x01\xd6\a\xfe\xb8\xac\xd8\xd6\xd9\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4', 0x0) userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x4000084) close(0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x30080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x423ff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x5100, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 14.230286099s ago: executing program 2 (id=642): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x83, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb48, 0x9, 0x8, 0x2, 0x21}, 0x0) mkdir(0x0, 0x22) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8953, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14.135775284s ago: executing program 1 (id=643): openat$sequencer(0xffffffffffffff9c, 0x0, 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x40, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r3 = fsmount(0xffffffffffffffff, 0x0, 0x8f) fchdir(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x9) close(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa8, 0x0, "53bb467d04f14562c5f463273ef4a720564f485af2"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a00090504"], 0x0) 14.031003689s ago: executing program 3 (id=644): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000240)={0x1, 0x6576, 0x9}) 12.151959037s ago: executing program 5 (id=645): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000440)=0xffffffffffffff91) socket$inet6(0xa, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r5 = memfd_create(&(0x7f0000000200)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xd8\xdfa\xea62\x90\xfc\x10\xfd\xd8\x06hTa2\xd8\xf9\"N\x8f04\xf5\xcczg\xa0Y\xc5?E\xe8\x0e\x14R`b\xa6\xf1w\xe2\xc0\xe2\xea\a\x02\x15\xb0\xf2\x82\f9b\xc9P\xe21L\xf1NKN\xce\xbd\x18\x1a\xd6\x12\xe6\xc9\xf3\xba\x02 \xed\xf9\xb6\x0f\x15a3\xd9\xa8?\xc4\xc2\x87\xd6\x97=\x06\x93\x06\xf74h\xa8o`\xd0\xdfA\xa8\x9b\xce\"\x01v+j\x19&\xf6yq:\x94\x10#\x89Sp\x8f\xd7\x92\xa1S9\xf2\xb0\xdd:t=\n', 0x6) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x20000) lseek(r5, 0x0, 0x4) socket$packet(0x11, 0x2, 0x300) 11.96460688s ago: executing program 0 (id=646): socket(0x11, 0x3, 0xfffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', '\x00', "00000200", "b08068ebce17ab00"}, 0x28) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000100)={0x1, 0xb, 0x3f16}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x0, @dev}}) 11.254491245s ago: executing program 0 (id=647): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc}, 0xc) syz_emit_ethernet(0x36, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) dup2(r1, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000013, 0x810, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x82) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 10.20165041s ago: executing program 2 (id=648): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 9.438922418s ago: executing program 2 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x1, 0x7, 0xc, 0x2d, 0x7f, 0x6, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0x4, 0x9, 0x8, 0xe, 0xc, 0x1, 0x8, 0x3, 0x46, 0xe8}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2}], 0xf}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x73}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4880) r8 = socket$kcm(0x2, 0x3, 0x2) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x73) poll(&(0x7f0000000a80)=[{r9, 0x101}], 0x1, 0x9) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @ssrr={0x89, 0x3, 0xbc}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 9.232340219s ago: executing program 3 (id=650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000100), &(0x7f0000000140), 0x0, {0x19}, &(0x7f0000000280)=""/215, 0xd7, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) r4 = timerfd_create(0x0, 0x80800) timerfd_settime(r4, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f00000000c0)={{0x77359400}}, 0x0) r5 = gettid() r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000ffe000/0x2000)=nil) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x8000000000000001, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='iocharset', &(0x7f00000005c0)='io#harset', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) 9.054511039s ago: executing program 5 (id=651): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) epoll_wait(r4, 0x0, 0x0, 0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002400)={0x4c, 0x0, &(0x7f00000022c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.659984421s ago: executing program 1 (id=652): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010300000000000000000100000a20000000000ad68fc2122e01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900810073797a30000000000900030073797a320000000028000000060a010300000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000"], 0x9c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @private1, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 8.574355429s ago: executing program 5 (id=653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000002300)=""/4108, 0x100c) r2 = epoll_create1(0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c0000001200e3d86e08000a076b876c1d0048007ea60864160af36504001a0038001d006286b6c74c2dda2b1449b39385515b992bf857f421", 0x39}, {&(0x7f0000000080)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x40084149, &(0x7f0000000000)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 8.107736445s ago: executing program 2 (id=654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0x12, 0x0, 0x8, 0x4, 0x6, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) pipe2$watch_queue(&(0x7f00000002c0), 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0xfffe) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000200000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e1d, @broadcast}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r0, 0x0, 0x0) 7.031048167s ago: executing program 0 (id=655): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)}}], 0x1, 0x20008000) shutdown(r3, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001600010027bd7000ffdbdf250a3888", @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0xba01, 0x0, 0x40041}, 0x4048) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(r4, r6, 0x0, 0x201f00) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r8 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r8, 0x0, 0x0, 0x80000001, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 5.192527376s ago: executing program 2 (id=656): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="100000000000438717c2f20def030000"], 0x10}, 0x20004081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x129640) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80044100, &(0x7f0000001a80)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.513786997s ago: executing program 5 (id=657): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7, 0x1, 0x75cfd99a, 0xfffffffffffffff7, 0xf9, 0x800, 0x9, 0x8}, &(0x7f0000000140)={0xa, 0x8, 0x7f, 0x1, 0x4, 0x6a9a, 0x8, 0x4}, 0x0, 0x0, &(0x7f0000000400)={0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000040000000000000000000500000a200000e8ff0a05000000000000000000070000000900010073c5acd0c98c217797000000090a010400000000000000000700ffff08000a40000000000900020073797a31000000000900010073797a300000000008000540000000212fffffe70c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000004000380140000001000010000000000000000000084000a"], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r9, 0x7}}, 0x10) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x7, 0xb, 0x5}}]}) flock(r0, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x8000, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) 4.323554711s ago: executing program 3 (id=658): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e6c74636b206d656d00e24b67ab4cd934220544a4c0f7ed3e38b1d08cafad1151febda9a65aa22fccd14b33f228af1f4ab80875db9cd5d6d704d4d6a97620c0119627"], 0xb) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 3.554167488s ago: executing program 0 (id=659): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = open(0x0, 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x8, 0x8001, 0x3, 0xa, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000004000000000000000000", @ANYRES64=r3, @ANYRES16], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r4}, 0x38) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.152645251s ago: executing program 5 (id=660): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000020900010073797a30000000002c0000001a0a0101000b000000000000010000000900010073797a30"], 0x74}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000440)=0xc) r3 = syz_open_dev$video(&(0x7f0000000240), 0x80000000a7, 0x40801) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0xe, 0x40, 0x47524247, 0x2, 0x9, [{0x3, 0x4}, {0x5, 0x4}, {0x3, 0x3}, {0xbc, 0x6}, {0x8, 0x30000000}, {0xfffffffe, 0x38}, {0xe, 0x2}, {0x80000001, 0x15}], 0x49, 0x6, 0x8, 0x0, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r0, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="cb020000000000000002470000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004860}, 0x20050050) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f000000089090000000283fcf91a82963d2bd4b836954268e611", 0x2c}, {&(0x7f0000000240)="7cdb015fbb1990080000006a837b6487d32d2fb46cbd1523147f0741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b4a6efb03d0a69ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe98ba01cb61fdd3c53bdba305901d7103513c9c2b71ea428a38f832416f3ca22ccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68ddff0edf9f2d21b53644c04dee00e429612b41cd862603e9abc6533e101497f9c870000ccc84a51ff1f965d390a4d51d9353d0d2717fa6ff8ee2132fa71c2cfc5db5e8cdf2f", 0xf0}, {&(0x7f0000001b40)="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", 0xe2e}], 0x3}, 0x2004408d) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd21, 0xfd40, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/161, 0xa1, 0x1, 0x2c}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 2.612666839s ago: executing program 1 (id=661): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) syz_usb_disconnect(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x3c}}, 0x0) r5 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x14c, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf0, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe7, 0x1, "d04abd6a022dfcedf0a143deb8ff1ef66941c38898035a480a991f34d8659c8a81c8957bd8481e53a8d8c8f08946b3e420c492ac869252c503b48420fab7efc1257d0ccac6ab6d30cbe2c2bc359e0818b6fd8601b0dbbf1b4323bf146b4e3f9f466133739a93a08dad89dbd8e35cc036dfbf2b0fb2ccd282af282d8e1613930d8a01eb3a474138ade8fdc29f924147b7927a7d2e9d28caf6ff926f1800f25b6c85490076cf8ed2235554d48770fb56cd08f7a7d33dbdfa6ab71c96d33024d4c9273ba7590ebbfecc94a62da516a41d47b8bf9f1fc1cb40cd04a7019cbb494ecd8f47fc"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4c9c}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40081}, 0x81) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) accept$unix(r6, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 1.733427807s ago: executing program 0 (id=662): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 951.630615ms ago: executing program 3 (id=663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @remote, 0x81}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x4}, 0x8}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040381010140000000000010902240001"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x0, 0x15, 0x2, "912f"}, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0xc040) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x40043d14, &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000979000/0x1000)=nil}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 343.369318ms ago: executing program 5 (id=664): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlink(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000cc0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {0x0}, {0x0}], 0x3) read(r6, &(0x7f0000000240)=""/28, 0xffd2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) 98.559059ms ago: executing program 2 (id=665): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=666): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x4, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100]}, 0x20) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) r5 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.2.20'. [ 95.799062][ T5832] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(10) [ 95.805707][ T5832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.846903][ T5832] vhci_hcd vhci_hcd.0: Device attached [ 95.907107][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.971084][ T5817] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.012715][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.046069][ T5830] bond0 (unregistering): Released all slaves [ 96.056633][ T5820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.110512][ T5820] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(20) [ 96.117161][ T5820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.257478][ T5820] vhci_hcd vhci_hcd.0: Device attached [ 96.865863][ T5851] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 96.910823][ T5833] vhci_hcd: connection closed [ 96.912963][ T3260] vhci_hcd vhci_hcd.1: stop threads [ 96.913005][ T5838] vhci_hcd: connection closed [ 96.946385][ T5823] vhci_hcd: connection closed [ 96.951386][ T5818] vhci_hcd: connection reset by peer [ 96.961876][ T5821] vhci_hcd: connection closed [ 96.973838][ T5828] vhci_hcd: connection closed [ 96.987205][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 97.010484][ T3260] vhci_hcd vhci_hcd.1: release socket [ 97.034318][ T3260] vhci_hcd vhci_hcd.1: disconnect device [ 97.050362][ T3260] vhci_hcd vhci_hcd.1: stop threads [ 97.107521][ T3260] vhci_hcd vhci_hcd.1: release socket [ 97.130195][ T3260] vhci_hcd vhci_hcd.1: disconnect device [ 97.156072][ T3260] vhci_hcd vhci_hcd.1: stop threads [ 97.163229][ T3260] vhci_hcd vhci_hcd.1: release socket [ 97.170896][ T3260] vhci_hcd vhci_hcd.1: disconnect device [ 97.179010][ T3260] vhci_hcd vhci_hcd.1: stop threads [ 97.184409][ T3260] vhci_hcd vhci_hcd.1: release socket [ 97.191434][ T3260] vhci_hcd vhci_hcd.1: disconnect device [ 97.227855][ T3260] vhci_hcd vhci_hcd.1: stop threads [ 97.241036][ T3260] vhci_hcd vhci_hcd.1: release socket [ 97.254112][ T3260] vhci_hcd vhci_hcd.1: disconnect device [ 97.264361][ T3260] vhci_hcd vhci_hcd.1: stop threads [ 97.282746][ T3260] vhci_hcd vhci_hcd.1: release socket [ 97.293061][ T3260] vhci_hcd vhci_hcd.1: disconnect device [ 98.865561][ T5881] netlink: 'syz.1.27': attribute type 3 has an invalid length. [ 98.886417][ T5880] veth1_macvtap: left promiscuous mode [ 98.902644][ T5880] macsec0: entered promiscuous mode [ 98.921660][ T5881] netlink: 666 bytes leftover after parsing attributes in process `syz.1.27'. [ 99.014213][ T5880] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 99.040678][ T5883] veth1_macvtap: entered promiscuous mode [ 99.103413][ T5883] macsec0: left promiscuous mode [ 99.164760][ T5884] netlink: 92 bytes leftover after parsing attributes in process `syz.1.27'. [ 100.216224][ T5896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.247725][ T5898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.32'. [ 100.629017][ T5719] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.817962][ T5719] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 100.828439][ T42] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 100.851853][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.881414][ T5719] usb 1-1: config 0 descriptor?? [ 101.120347][ T5719] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 101.165230][ T5719] [drm:udl_init] *ERROR* Selecting channel failed [ 101.361403][ T5719] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 101.375662][ T5719] [drm] Initialized udl on minor 2 [ 101.388086][ T5719] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.403399][ T5719] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 101.424835][ T5712] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.438533][ T5719] usb 1-1: USB disconnect, device number 2 [ 101.446588][ T5712] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 102.385609][ T5919] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 102.792018][ T5927] syzkaller0: entered promiscuous mode [ 102.834421][ T5931] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 102.834421][ T5931] The task syz.3.40 (5931) triggered the difference, watch for misbehavior. [ 102.834977][ T5927] syzkaller0: entered allmulticast mode [ 103.872063][ T5943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.45'. [ 104.228824][ T5712] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.428872][ T5712] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 104.464098][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.515385][ T5712] usb 3-1: config 0 descriptor?? [ 104.919958][ T5712] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 104.948873][ T5712] [drm:udl_init] *ERROR* Selecting channel failed [ 104.982288][ T5712] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 104.998617][ T5712] [drm] Initialized udl on minor 2 [ 105.040940][ T5712] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.087762][ T5712] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 105.095707][ T5690] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.215773][ T5690] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.263035][ T5712] usb 3-1: USB disconnect, device number 2 [ 105.271090][ T5690] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 105.383597][ T5957] input: syz1 as /devices/virtual/input/input5 [ 106.417256][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.425807][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.634102][ T5977] fuse: Bad value for 'fd' [ 106.663765][ T5977] Zero length message leads to an empty skb [ 106.896453][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.992596][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.733329][ T3296] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.762743][ T3296] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.810439][ T3296] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.834653][ T3296] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.394681][ T5995] netlink: 'syz.1.52': attribute type 12 has an invalid length. [ 109.127769][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.409150][ T5720] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.588228][ T5720] usb 4-1: Using ep0 maxpacket: 8 [ 109.664640][ T5720] usb 4-1: config 4 has an invalid interface number: 38 but max is 0 [ 109.693245][ T5720] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 109.797343][ T5720] usb 4-1: config 4 has no interface number 0 [ 109.850010][ T5720] usb 4-1: config 4 interface 38 altsetting 1 endpoint 0x3 has invalid maxpacket 33022, setting to 64 [ 109.900496][ T5720] usb 4-1: config 4 interface 38 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.946284][ T5720] usb 4-1: config 4 interface 38 has no altsetting 0 [ 109.973545][ T5720] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58 [ 109.983576][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.003036][ T5720] usb 4-1: Product: syz [ 110.023764][ T5720] usb 4-1: Manufacturer: syz [ 110.053406][ T5720] usb 4-1: SerialNumber: syz [ 110.531350][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'. [ 112.025822][ T6040] syz.2.63 uses obsolete (PF_INET,SOCK_PACKET) [ 112.044193][ T6040] syzkaller1: entered promiscuous mode [ 112.056905][ T6040] syzkaller1: entered allmulticast mode [ 112.093366][ T6040] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 112.360029][ T5720] usb 4-1: USB disconnect, device number 3 [ 112.360229][ T5698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.678482][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 112.702162][ T5698] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 112.723687][ T5698] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 112.770135][ T5698] usb 3-1: config 1 has no interface number 1 [ 112.795553][ T5698] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.866061][ T5698] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.927927][ T5698] usb 3-1: config 1 interface 105 has no altsetting 0 [ 112.972626][ T5698] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 113.013218][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.053040][ T5698] usb 3-1: Product: syz [ 113.079926][ T5698] usb 3-1: Manufacturer: syz [ 113.110714][ T5698] usb 3-1: SerialNumber: syz [ 113.202275][ T6040] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.474540][ T5698] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 113.758215][ T5698] usb 3-1: USB disconnect, device number 3 [ 114.225125][ T6066] mmap: syz.0.69 (6066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.971434][ T6083] batman_adv: batadv0: Adding interface: macvlan2 [ 115.987130][ T6083] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.046410][ T6083] batman_adv: batadv0: Interface activated: macvlan2 [ 116.538304][ T5698] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.557688][ T6091] binder_alloc: 6089: binder_alloc_buf size -488 failed, no address space [ 116.570902][ T6091] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 116.700599][ T5698] usb 1-1: Using ep0 maxpacket: 8 [ 116.717068][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.751633][ T5698] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 116.785587][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.806448][ T5698] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 116.826115][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 116.859423][ T5698] usb 1-1: Product: syz [ 116.872542][ T5698] usb 1-1: Manufacturer: syz [ 116.882355][ T5698] usb 1-1: SerialNumber: syz [ 116.909408][ T5698] usb 1-1: config 0 descriptor?? [ 117.110250][ T5698] rc_core: IR keymap rc-imon-rsc not found [ 117.137212][ T5698] Registered IR keymap rc-empty [ 117.181224][ T5698] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 117.235749][ T5698] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 117.368076][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.418119][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.952193][ T6115] netlink: 388 bytes leftover after parsing attributes in process `syz.2.83'. [ 118.054311][ T6098] syz.4.81 (6098): drop_caches: 2 [ 118.374236][ T6114] bond0: option ad_user_port_key: invalid value (36984) [ 118.392363][ T6114] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 118.458404][ T6114] bond0 (unregistering): Released all slaves [ 119.145588][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 119.168762][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 119.921651][ T6141] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6141 comm: syz.3.88) [ 120.010756][ T29] audit: type=1800 audit(1778533810.318:2): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.88" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=10818 res=0 errno=0 [ 120.628499][ T6151] netlink: 'syz.0.90': attribute type 12 has an invalid length. [ 121.058434][ T5974] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.220356][ T5974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.264247][ T5974] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.327392][ T5974] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 121.366797][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.443170][ T5974] usb 3-1: config 0 descriptor?? [ 121.530244][ T5974] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 121.767460][ T5974] usb 3-1: USB disconnect, device number 4 [ 122.268606][ T5974] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.454093][ T5974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.495968][ T5974] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.530701][ T5974] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 122.574673][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.643813][ T5974] usb 3-1: config 0 descriptor?? [ 122.691939][ T5974] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 123.106287][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 123.138490][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 123.373155][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 123.591167][ T6172] team0: Port device team_slave_0 removed [ 123.950503][ T5972] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.990983][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.030252][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.123698][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 124.142163][ T5972] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 124.169302][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.285335][ T5972] usb 4-1: selecting invalid altsetting 3 [ 124.307317][ T6183] syzkaller1: entered promiscuous mode [ 124.315656][ T5972] comedi comedi5: could not set alternate setting 3 in high speed [ 124.329078][ T6183] syzkaller1: entered allmulticast mode [ 124.341232][ T5972] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 124.387633][ T5972] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 124.418019][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.438180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 124.486802][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.503163][ T5974] IPVS: starting estimator thread 0... [ 124.512756][ T6179] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 124.536616][ T6179] IPVS: sed: FWM 3 0x00000003 - no destination available [ 124.552984][ T5974] usb 4-1: USB disconnect, device number 4 [ 124.564850][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.607593][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.630782][ T6189] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.639802][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 124.649561][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 125.138834][ T5975] usb 3-1: USB disconnect, device number 5 [ 125.677614][ T6202] netlink: 'syz.3.103': attribute type 303 has an invalid length. [ 127.158193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.558180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.950516][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.019844][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.175661][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.252865][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.268187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 131.570772][ T6253] lo: entered allmulticast mode [ 131.630321][ T6253] tunl0: entered allmulticast mode [ 131.698864][ T6253] gre0: entered allmulticast mode [ 131.798476][ T6253] gretap0: entered allmulticast mode [ 131.820875][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 131.888072][ T6253] erspan0: entered allmulticast mode [ 131.941499][ T6253] ip_vti0: entered allmulticast mode [ 131.985360][ T6253] ip6_vti0: entered allmulticast mode [ 132.029396][ T6253] sit0: entered allmulticast mode [ 132.083076][ T6253] ip6tnl0: entered allmulticast mode [ 132.146007][ T6253] ip6gre0: entered allmulticast mode [ 132.182629][ T6261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.218446][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 132.255906][ T6253] syz_tun: entered allmulticast mode [ 132.320323][ T6253] ip6gretap0: entered allmulticast mode [ 132.370293][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.377959][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.469846][ T6253] bridge0: entered allmulticast mode [ 132.535697][ T6253] vcan0: entered allmulticast mode [ 132.564170][ T6253] bond0: entered allmulticast mode [ 132.602285][ T6253] bond_slave_0: entered allmulticast mode [ 132.630192][ T6253] bond_slave_1: entered allmulticast mode [ 132.693875][ T6253] team0: entered allmulticast mode [ 132.707402][ T6253] team_slave_0: entered allmulticast mode [ 132.735712][ T6253] team_slave_1: entered allmulticast mode [ 132.781478][ T6253] dummy0: entered allmulticast mode [ 132.823603][ T6253] nlmon0: entered allmulticast mode [ 132.851541][ T6253] batadv0: entered allmulticast mode [ 132.899704][ T6253] vxcan0: entered allmulticast mode [ 132.906091][ T6253] vxcan1: entered allmulticast mode [ 132.967660][ T6253] veth0: entered allmulticast mode [ 132.993356][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.004274][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.030435][ T6253] veth1: entered allmulticast mode [ 133.082749][ T6253] wg0: entered allmulticast mode [ 133.135035][ T6253] wg1: entered allmulticast mode [ 133.217484][ T6253] wg2: entered allmulticast mode [ 133.247713][ T6253] veth0_to_bridge: entered allmulticast mode [ 133.297578][ T6253] veth1_to_bridge: entered allmulticast mode [ 133.352840][ T6253] veth0_to_bond: entered allmulticast mode [ 133.398746][ T6253] veth1_to_bond: entered allmulticast mode [ 133.437720][ T6253] veth0_to_team: entered allmulticast mode [ 133.498866][ T6253] veth1_to_team: entered allmulticast mode [ 133.562390][ T6253] veth0_to_batadv: entered allmulticast mode [ 133.606794][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.647178][ T6253] batadv_slave_0: entered allmulticast mode [ 133.690699][ T6253] veth1_to_batadv: entered allmulticast mode [ 133.732240][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.772486][ T6253] batadv_slave_1: entered allmulticast mode [ 133.824703][ T6253] xfrm0: entered allmulticast mode [ 133.856871][ T6253] veth0_to_hsr: entered allmulticast mode [ 133.904061][ T6253] hsr_slave_0: entered allmulticast mode [ 133.938528][ T6253] veth1_to_hsr: entered allmulticast mode [ 133.974904][ T6253] hsr_slave_1: entered allmulticast mode [ 134.012617][ T6253] hsr0: entered allmulticast mode [ 134.049200][ T6253] veth1_virt_wifi: entered allmulticast mode [ 134.104630][ T6253] veth0_virt_wifi: entered allmulticast mode [ 134.136287][ T6253] virt_wifi0: entered allmulticast mode [ 134.162459][ T6253] veth1_vlan: entered allmulticast mode [ 134.194859][ T6253] veth0_vlan: entered allmulticast mode [ 134.267352][ T6253] vlan0: entered allmulticast mode [ 134.340806][ T6253] vlan1: entered allmulticast mode [ 134.362534][ T6253] macvlan0: entered allmulticast mode [ 134.392453][ T6253] macvlan1: entered allmulticast mode [ 134.440726][ T6253] ipvlan0: entered allmulticast mode [ 134.456842][ T6253] ipvlan1: entered allmulticast mode [ 134.480404][ T6253] veth1_macvtap: entered allmulticast mode [ 134.515363][ T6253] veth0_macvtap: entered allmulticast mode [ 134.563921][ T6253] macvtap0: entered allmulticast mode [ 134.596502][ T6253] macsec0: entered allmulticast mode [ 134.630333][ T6253] geneve0: entered allmulticast mode [ 134.656515][ T6253] geneve1: entered allmulticast mode [ 134.687036][ T6253] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 134.738594][ T6253] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 134.787949][ T6253] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 134.833886][ T6253] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 134.907106][ T6253] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 134.985269][ T6253] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 135.017849][ T6253] ipvlan2: entered allmulticast mode [ 135.041907][ T6253] batman_adv: batadv0: Interface deactivated: macvlan2 [ 135.059361][ T6253] macvlan2: entered allmulticast mode [ 135.322115][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.410564][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.453661][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.570724][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.205878][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.264340][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.314989][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.383752][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.991430][ T6357] netlink: 'syz.2.123': attribute type 11 has an invalid length. [ 138.475329][ T6398] netlink: 149 bytes leftover after parsing attributes in process `syz.3.128'. [ 138.661204][ T6406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 139.208178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 139.248476][ T5965] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.428233][ T5965] usb 5-1: Using ep0 maxpacket: 32 [ 139.467880][ T5965] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.525565][ T5965] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.552492][ T5965] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 139.596354][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.650051][ T5965] usb 5-1: config 0 descriptor?? [ 140.214739][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.238185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.292924][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.326682][ T5983] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.377095][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.437871][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.559406][ T5983] usb 4-1: Using ep0 maxpacket: 32 [ 140.600606][ T5983] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.633342][ T5983] usb 4-1: config 0 has no interface number 0 [ 140.675065][ T5983] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 140.712373][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.745183][ T5983] usb 4-1: Product: syz [ 140.774123][ T5983] usb 4-1: Manufacturer: syz [ 140.792566][ T5983] usb 4-1: SerialNumber: syz [ 140.861054][ T5983] usb 4-1: config 0 descriptor?? [ 140.920488][ T5983] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 141.001276][ T5983] usb 4-1: selecting invalid altsetting 1 [ 141.018182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.042810][ T5983] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 141.196437][ T5983] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.315413][ T5983] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 141.428624][ T5983] usb 4-1: media controller created [ 141.458187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.558740][ T5983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.045340][ T5983] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 142.053288][ T29] audit: type=1400 audit(1778533832.278:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=6474 comm="syz.0.137" [ 142.327448][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'. [ 142.419363][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.137'. [ 142.493860][ T5983] usb 4-1: USB disconnect, device number 5 [ 142.588162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.618139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.004270][ T6485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.463036][ T5965] usbhid 5-1:0.0: can't add hid device: -71 [ 143.565276][ T5965] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 143.757535][ T5965] usb 5-1: USB disconnect, device number 2 [ 144.453051][ T6530] netlink: 76 bytes leftover after parsing attributes in process `syz.4.140'. [ 146.928536][ T5986] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.038306][ T5691] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.102545][ T5986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.143674][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.184728][ T5986] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.212874][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.235668][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 147.254010][ T5986] usb 5-1: SerialNumber: syz [ 147.277970][ T5691] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 147.310510][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.481509][ T5691] usb 3-1: selecting invalid altsetting 3 [ 147.487829][ T5691] comedi comedi5: could not set alternate setting 3 in high speed [ 147.505814][ T5691] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 147.542343][ T5691] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -22 [ 147.652982][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.664108][ T5986] usb 5-1: 0:2 : does not exist [ 147.713608][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.763238][ T5971] usb 3-1: USB disconnect, device number 6 [ 148.046704][ T5986] usb 5-1: USB disconnect, device number 3 [ 148.422150][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.540790][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.148'. [ 149.577699][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 149.589147][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 150.812190][ T6710] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 150.881687][ T6710] File: /newroot/dev/nullb0 PID: 6710 Comm: syz.2.155 [ 151.641828][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.649509][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.706784][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'. [ 152.141479][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.219877][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.923569][ T1104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.938004][ T1104] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.971624][ T1104] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.017695][ T1104] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.668285][ T5971] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.837297][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'. [ 153.849910][ T5971] usb 4-1: Using ep0 maxpacket: 16 [ 153.887589][ T5971] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.935646][ T5971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 153.970177][ T5971] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 154.002300][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.056401][ T5971] usb 4-1: config 0 descriptor?? [ 154.079822][ T6758] netlink: 'syz.2.160': attribute type 5 has an invalid length. [ 154.110653][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 154.627642][ T5971] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 155.546705][ T5359] usb 4-1: USB disconnect, device number 6 [ 155.622979][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.630461][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.000768][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.058221][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.766817][ T6837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 157.074020][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.131847][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.198567][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.263989][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.570992][ T6877] veth0_vlan: entered allmulticast mode [ 158.592677][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 158.698245][ T5971] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 158.721312][ T6877] veth0_vlan (unregistering): left allmulticast mode [ 158.761703][ T6892] netlink: 80 bytes leftover after parsing attributes in process `syz.2.174'. [ 158.883960][ T5971] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 158.904244][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.922275][ T5971] usb 2-1: Product: syz [ 158.930479][ T5971] usb 2-1: Manufacturer: syz [ 158.939337][ T5971] usb 2-1: SerialNumber: syz [ 158.959502][ T5971] usb 2-1: config 0 descriptor?? [ 159.202308][ T5971] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.012667][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.025022][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.136679][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 161.049165][ T5971] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 161.096111][ T5971] usb 2-1: USB disconnect, device number 2 [ 161.690423][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.698750][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.437457][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.477630][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.936622][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.976195][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.009135][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.046916][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.403845][ T7012] netlink: 'syz.3.181': attribute type 11 has an invalid length. [ 163.744614][ T7025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 165.059440][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.070237][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.082486][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.129712][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.139003][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.574284][ T7129] capability: warning: `syz.1.189' uses 32-bit capabilities (legacy support in use) [ 166.674693][ T7132] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 166.681249][ T7132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.744455][ T7132] vhci_hcd vhci_hcd.0: Device attached [ 166.938867][ T5983] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.993200][ T5971] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 167.098745][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.118230][ T5983] usb 4-1: Using ep0 maxpacket: 8 [ 167.158738][ T5983] usb 4-1: config 0 has no interfaces? [ 167.170598][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.215479][ T7048] bridge_slave_0: entered allmulticast mode [ 167.228507][ T5983] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.230804][ T50] Bluetooth: hci5: command tx timeout [ 167.257681][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.295531][ T7048] bridge_slave_0: entered promiscuous mode [ 167.321333][ T5983] usb 4-1: config 0 descriptor?? [ 167.416808][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.474426][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.524379][ T7048] bridge_slave_1: entered allmulticast mode [ 167.593174][ T7048] bridge_slave_1: entered promiscuous mode [ 167.622691][ T7181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.652193][ T7137] usb 39-1: recv xbuf, 0 [ 167.704112][ T58] vhci_hcd vhci_hcd.3: stop threads [ 167.743928][ T58] vhci_hcd vhci_hcd.3: release socket [ 167.795283][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 167.831154][ T5966] usb 4-1: USB disconnect, device number 7 [ 167.846789][ T5971] usb 39-1: device descriptor read/64, error -71 [ 167.907691][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.977847][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.058245][ T5971] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 168.364976][ T7048] team0: Port device team_slave_0 added [ 168.408260][ T7048] team0: Port device team_slave_1 added [ 168.409598][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 168.443937][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 168.590095][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.622649][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.722072][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.777054][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.786650][ T5974] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 168.811144][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.883760][ T5974] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.932048][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.322482][ T50] Bluetooth: hci5: command tx timeout [ 169.457511][ T7048] hsr_slave_0: entered promiscuous mode [ 169.496643][ T7048] hsr_slave_1: entered promiscuous mode [ 169.533723][ T7048] debugfs: 'hsr0' already exists in 'hsr' [ 169.572839][ T7048] Cannot create hsr debugfs directory [ 171.334770][ T7048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.388596][ T50] Bluetooth: hci5: command tx timeout [ 171.452767][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.522151][ T7048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.342319][ T7413] vivid-004: disconnect [ 172.682412][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.707623][ T7416] loop4: detected capacity change from 0 to 7 [ 172.783949][ T7048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.837286][ T7416] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 172.858818][ T7416] loop4: partition table partially beyond EOD, truncated [ 172.887243][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.924074][ T7416] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 172.947861][ T7048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.042999][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.478530][ T50] Bluetooth: hci5: command tx timeout [ 173.569018][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 173.589054][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 173.827465][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.013635][ T7048] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.092157][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.099337][ T3260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.185054][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.192179][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.438236][ T5978] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.458444][ T5974] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.593494][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.608428][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 174.626027][ T5978] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.639487][ T5974] usb 4-1: Using ep0 maxpacket: 32 [ 174.639495][ T5978] usb 2-1: config 0 has no interface number 0 [ 174.653496][ T5978] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.693999][ T5978] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.711696][ T5978] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.730335][ T5978] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.748719][ T5974] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 174.750179][ T5978] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.770530][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.813060][ T5978] usb 2-1: config 0 descriptor?? [ 174.827549][ T5974] usb 4-1: config 0 has no interface number 0 [ 174.853128][ T5974] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.907853][ T5974] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 174.931470][ T7048] veth0_vlan: entered promiscuous mode [ 174.949614][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.986881][ T7048] veth1_vlan: entered promiscuous mode [ 174.994186][ T5974] usb 4-1: Product: syz [ 175.007215][ T5974] usb 4-1: Manufacturer: syz [ 175.036415][ T5974] usb 4-1: SerialNumber: syz [ 175.107801][ T5974] usb 4-1: config 0 descriptor?? [ 175.199685][ T5974] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 175.201849][ T5978] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.255157][ T7048] veth0_macvtap: entered promiscuous mode [ 175.264862][ T5974] em28xx 4-1:0.132: Video interface 132 found: [ 175.378882][ T7048] veth1_macvtap: entered promiscuous mode [ 175.546565][ T5974] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 175.643437][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.829944][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.968429][ T3260] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.992947][ T5974] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 176.039034][ T5983] usb 2-1: USB disconnect, device number 3 [ 176.039102][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 176.069614][ T3260] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.102556][ T3260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.134102][ T5974] em28xx 4-1:0.132: board has no eeprom [ 176.145201][ T5983] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 176.160148][ T3260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.207143][ T7440] ldusb: No device or device unplugged -19 [ 176.249314][ T5974] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 176.309530][ T5974] em28xx 4-1:0.132: analog set to bulk mode. [ 176.346070][ T5986] em28xx 4-1:0.132: Registering V4L2 extension [ 176.378858][ T5974] usb 4-1: USB disconnect, device number 8 [ 176.414802][ T5974] em28xx 4-1:0.132: Disconnecting em28xx [ 176.937586][ T5986] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 176.963411][ T5986] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 176.993269][ T5986] em28xx 4-1:0.132: No AC97 audio processor [ 177.107488][ T5986] usb 4-1: Decoder not found [ 177.136573][ T5986] em28xx 4-1:0.132: failed to create media graph [ 177.170974][ T5986] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 177.351401][ T5986] em28xx 4-1:0.132: Remote control support is not available for this card. [ 177.372612][ T5974] em28xx 4-1:0.132: Closing input extension [ 177.557345][ T7485] block device autoloading is deprecated and will be removed. [ 177.607338][ T5974] em28xx 4-1:0.132: Freeing device [ 177.958713][ T5974] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 178.130726][ T5974] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 178.168792][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 178.194798][ T5974] usb 4-1: Product: syz [ 178.216130][ T5974] usb 4-1: SerialNumber: syz [ 178.275055][ T5974] usb 4-1: config 0 descriptor?? [ 178.542175][ T5986] IPVS: starting estimator thread 0... [ 178.604252][ T5974] usb 4-1: USB disconnect, device number 9 [ 178.658918][ T7563] IPVS: using max 51 ests per chain, 122400 per kthread [ 179.201713][ T7575] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 179.228680][ T7575] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 183.694980][ T7573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.213'. [ 183.782916][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.876772][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.222588][ T7621] input: syz1 as /devices/virtual/input/input11 [ 184.257978][ T7622] input: syz0 as /devices/virtual/input/input12 [ 184.318514][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.364830][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.455941][ T7622] vivid-000: disconnect [ 184.505554][ T7638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.575078][ T7620] vivid-000: reconnect [ 184.858238][ T5986] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 185.075188][ T5986] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 185.117751][ T7656] loop7: detected capacity change from 0 to 16384 [ 185.135125][ T5986] usb 3-1: config 0 has no interface number 0 [ 185.166806][ T5986] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 185.219040][ T7662] loop7: detected capacity change from 16384 to 0 [ 185.241720][ T5986] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.277930][ T5986] usb 3-1: config 0 interface 113 has no altsetting 0 [ 185.324016][ T5986] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 185.359544][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.379368][ T5974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.393758][ T5986] usb 3-1: Product: syz [ 185.416337][ T5986] usb 3-1: Manufacturer: syz [ 185.433129][ T5986] usb 3-1: SerialNumber: syz [ 185.454540][ T5986] usb 3-1: config 0 descriptor?? [ 185.468238][ T5971] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.493313][ T5986] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 185.574980][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 185.599662][ T5974] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.625554][ T5974] usb 6-1: config 0 has no interface number 0 [ 185.652251][ T5971] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 185.676665][ T5974] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 185.699951][ T5971] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 185.726075][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.772844][ T5971] usb 2-1: config 220 interface 0 has no altsetting 0 [ 185.783293][ T5974] usb 6-1: Product: syz [ 185.795413][ T5974] usb 6-1: Manufacturer: syz [ 185.806420][ T5971] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.826107][ T5974] usb 6-1: SerialNumber: syz [ 185.833623][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.851921][ T5974] usb 6-1: config 0 descriptor?? [ 185.859261][ T5971] usb 2-1: Product: syz [ 185.880561][ T5974] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 185.891976][ T5971] usb 2-1: Manufacturer: syz [ 185.919930][ T5971] usb 2-1: SerialNumber: syz [ 185.950571][ T5974] usb 6-1: selecting invalid altsetting 1 [ 185.985178][ T5974] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 186.071847][ T5974] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.135185][ T5974] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 186.212885][ T5974] usb 6-1: media controller created [ 186.217190][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.295412][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.487730][ T5971] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22 [ 186.501184][ T5974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.541984][ T5971] usb 2-1: USB disconnect, device number 4 [ 186.686501][ T5974] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 186.703371][ T5974] zl10353_read_register: readreg error (reg=127, ret==-71) [ 186.728879][ T5974] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 187.020987][ T5974] usb 6-1: USB disconnect, device number 2 [ 187.478318][ T7717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.226'. [ 187.633843][ T5971] usb 3-1: USB disconnect, device number 7 [ 190.133791][ T7754] fuse: fd is not a fuse device [ 192.316106][ T7776] input: syz1 as /devices/virtual/input/input13 [ 194.439363][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.446793][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.509408][ T7832] binder: 7829:7832 ioctl 4018620d 0 returned -22 [ 199.679864][ T7843] binder: 7840:7843 ioctl 4018620d 0 returned -22 [ 200.088290][ T5978] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.207334][ T7861] syzkaller0: entered promiscuous mode [ 200.213882][ T7861] syzkaller0: entered allmulticast mode [ 200.248405][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 200.264689][ T5978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 200.283265][ T7861] tipc: Started in network mode [ 200.292619][ T5978] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 200.302095][ T7861] tipc: Node identity 6a610afba4a3, cluster identity 4711 [ 200.321815][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.331790][ T7861] tipc: Enabled bearer , priority 0 [ 200.339604][ T5978] usb 3-1: Product: syz [ 200.344581][ T5978] usb 3-1: Manufacturer: syz [ 200.355445][ T5978] usb 3-1: SerialNumber: syz [ 200.372235][ T5978] usb 3-1: config 0 descriptor?? [ 200.397776][ T5978] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 200.419932][ T7866] netlink: 'syz.3.249': attribute type 13 has an invalid length. [ 200.552134][ T7858] tipc: Resetting bearer [ 200.576691][ T7858] tipc: Disabling bearer [ 200.612019][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 200.879795][ T29] audit: type=1326 audit(1778533891.188:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 200.953631][ T29] audit: type=1326 audit(1778533891.218:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 200.978034][ T29] audit: type=1326 audit(1778533891.218:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 201.148875][ T29] audit: type=1326 audit(1778533891.218:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 201.175678][ T29] audit: type=1326 audit(1778533891.218:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 201.317703][ T29] audit: type=1326 audit(1778533891.218:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 201.446746][ T29] audit: type=1326 audit(1778533891.218:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 201.640978][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 201.641021][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 201.647280][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 201.653598][ T4943] Bluetooth: hci0: command 0x0406 tx timeout [ 201.667240][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 201.677269][ T29] audit: type=1326 audit(1778533891.218:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 201.809906][ T29] audit: type=1326 audit(1778533891.218:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 201.837037][ T29] audit: type=1326 audit(1778533891.218:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.0.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 202.673676][ T5978] gspca_zc3xx: i2c_w status error bc [ 203.299930][ T5978] gspca_zc3xx: i2c_r status error bc [ 203.703314][ T5978] gspca_zc3xx: reg_r err -71 [ 203.746630][ T5978] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 203.859746][ T5978] usb 3-1: USB disconnect, device number 8 [ 204.310479][ T7932] binder: 7928:7932 ioctl 4018620d 0 returned -22 [ 206.764546][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 206.817008][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 207.438192][ T5974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 207.621998][ T5974] usb 6-1: config 15 has an invalid interface number: 122 but max is 1 [ 207.647890][ T5974] usb 6-1: config 15 has an invalid interface number: 4 but max is 1 [ 207.691560][ T5974] usb 6-1: config 15 has no interface number 0 [ 207.711888][ T5974] usb 6-1: config 15 has no interface number 1 [ 207.742672][ T5974] usb 6-1: config 15 interface 122 altsetting 19 endpoint 0x8 has an invalid bInterval 215, changing to 7 [ 207.781051][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 207.801461][ T5974] usb 6-1: config 15 interface 4 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 207.825007][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 207.857600][ T5974] usb 6-1: config 15 interface 4 altsetting 7 has an endpoint descriptor with address 0x98, changing to 0x88 [ 207.920169][ T5974] usb 6-1: config 15 interface 4 altsetting 7 endpoint 0x88 has invalid maxpacket 30236, setting to 1024 [ 207.977148][ T5974] usb 6-1: config 15 interface 4 altsetting 7 bulk endpoint 0x88 has invalid maxpacket 1024 [ 208.004096][ T5974] usb 6-1: config 15 interface 4 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.025004][ T5974] usb 6-1: config 15 interface 122 has no altsetting 0 [ 208.033899][ T5974] usb 6-1: config 15 interface 4 has no altsetting 0 [ 208.044495][ T5974] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a70, bcdDevice=43.5b [ 208.054573][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.063863][ T5974] usb 6-1: Product: syz [ 208.074037][ T5974] usb 6-1: Manufacturer: syz [ 208.079565][ T5974] usb 6-1: SerialNumber: syz [ 208.420483][ T5974] usb 6-1: USB disconnect, device number 3 [ 208.872579][ T5971] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 209.075263][ T5971] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.128562][ T5971] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.190767][ T5971] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.237224][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.304455][ T8018] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.382120][ T5971] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.073660][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.109711][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.427817][ T5983] usb 2-1: USB disconnect, device number 5 [ 214.248324][ T5978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.408339][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 214.461196][ T5978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 214.523608][ T5978] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.555933][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.566108][ T5978] usb 2-1: Product: syz [ 214.592431][ T5978] usb 2-1: Manufacturer: syz [ 214.616360][ T5978] usb 2-1: SerialNumber: syz [ 214.685452][ T5978] usb 2-1: config 0 descriptor?? [ 214.703784][ T8081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 214.722703][ T5978] hub 2-1:0.0: bad descriptor, ignoring hub [ 214.753216][ T5978] hub 2-1:0.0: probe with driver hub failed with error -5 [ 215.883301][ T5986] usb 2-1: USB disconnect, device number 6 [ 216.767485][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.775420][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.907953][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.946362][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.012796][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 217.037873][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 217.190787][ T8093] bridge0: entered promiscuous mode [ 217.200762][ T8093] bridge0: entered allmulticast mode [ 217.217550][ T8081] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 217.262637][ T7995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.292480][ T7995] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 217.334381][ T6027] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.359328][ T6027] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.371400][ T6027] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.384432][ T6027] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.437693][ T7995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.452740][ T7995] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 217.694974][ T7995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.733365][ T7995] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 217.819469][ T6991] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 217.920114][ T5691] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.978313][ T6991] usb 2-1: Using ep0 maxpacket: 32 [ 217.991611][ T6991] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 218.002393][ T6991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.058863][ T6991] usb 2-1: selecting invalid altsetting 3 [ 218.096726][ T6991] comedi comedi5: could not set alternate setting 3 in high speed [ 218.127954][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 218.135166][ T6991] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 218.150202][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.167355][ T6991] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 218.178520][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.247261][ T5691] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 218.262800][ T7995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.282937][ T7995] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 218.306681][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.367630][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.394240][ T7995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.421126][ T7995] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 218.428324][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.501498][ T6991] usb 2-1: USB disconnect, device number 7 [ 218.513120][ T5691] usb 4-1: config 0 descriptor?? [ 218.671051][ T7995] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 218.722352][ T7995] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 218.912627][ T5691] usbhid 4-1:0.0: can't add hid device: -71 [ 218.970018][ T5691] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 219.106370][ T5691] usb 4-1: USB disconnect, device number 10 [ 219.597643][ T8204] netlink: 80 bytes leftover after parsing attributes in process `syz.1.284'. [ 223.518423][ T5974] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 223.738258][ T5974] usb 6-1: unable to get BOS descriptor or descriptor too short [ 223.777733][ T5974] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 223.796879][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 223.844703][ T5974] usb 6-1: config 114 has no interface number 0 [ 223.880959][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 223.898287][ T5974] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 223.942394][ T5974] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 223.972832][ T5974] usb 6-1: config 114 interface 240 has no altsetting 0 [ 224.006963][ T5974] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 224.053074][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.089987][ T5974] usb 6-1: Product: syz [ 224.103591][ T5974] usb 6-1: Manufacturer: syz [ 224.124052][ T5974] usb 6-1: SerialNumber: syz [ 224.164086][ T8273] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 224.529661][ T8282] capability: warning: `syz.5.291' uses deprecated v2 capabilities in a way that may be insecure [ 229.150075][ T8300] netlink: 'syz.0.296': attribute type 11 has an invalid length. [ 229.255320][ T5974] ir_usb 6-1:114.240: required endpoints missing [ 229.626179][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.661670][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.098636][ T5691] usb 6-1: USB disconnect, device number 4 [ 232.998964][ T8367] bridge_slave_0: left allmulticast mode [ 233.086963][ T8367] bridge_slave_0: left promiscuous mode [ 233.164985][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.094098][ T8367] bridge_slave_1: left allmulticast mode [ 235.107704][ T8367] bridge_slave_1: left promiscuous mode [ 235.114215][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.211471][ T8367] bond0: (slave bond_slave_0): Releasing backup interface [ 235.331469][ T8367] bond0: (slave bond_slave_1): Releasing backup interface [ 235.437162][ T8367] team0: Port device team_slave_0 removed [ 235.526053][ T8367] team0: Port device team_slave_1 removed [ 235.544395][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.587353][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.754883][ T8367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.328290][ T5986] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.518183][ T5986] usb 3-1: Using ep0 maxpacket: 8 [ 236.555750][ T5986] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.597949][ T5986] usb 3-1: config 0 has no interface number 0 [ 236.636002][ T5986] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.701082][ T5986] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 236.778437][ T5986] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.846071][ T5986] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.925081][ T5986] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.005498][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.077662][ T5986] usb 3-1: config 0 descriptor?? [ 237.192047][ T5986] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.278611][ T5691] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 237.533706][ T5974] usb 3-1: USB disconnect, device number 9 [ 237.560955][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 237.653176][ T5974] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 237.657998][ T5691] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.934197][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.098210][ T5691] usb 2-1: Product: syz [ 238.146601][ T5691] usb 2-1: Manufacturer: syz [ 238.184677][ T5691] usb 2-1: SerialNumber: syz [ 239.484216][ T5691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 239.603734][ T5691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 239.683531][ T5691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 239.743688][ T5691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 239.965280][ T5691] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 240.094177][ T5691] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 240.338484][ T5691] usb 2-1: USB disconnect, device number 8 [ 240.462239][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.312'. [ 240.596833][ T8485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.312'. [ 241.072572][ T8485] IPVS: Scheduler module ip_vs_ not found [ 241.898200][ T5986] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 242.094862][ T5986] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 242.134482][ T5986] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 242.183583][ T5986] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.227439][ T5986] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.276103][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.288224][ T5691] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 242.340758][ T5986] usb 2-1: Product: syz [ 242.345671][ T5986] usb 2-1: Manufacturer: syz [ 242.353650][ T5986] usb 2-1: SerialNumber: syz [ 242.356723][ T8514] syzkaller0: entered promiscuous mode [ 242.368412][ T8514] syzkaller0: entered allmulticast mode [ 242.393339][ T5986] usb 2-1: config 0 descriptor?? [ 242.448375][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 242.456831][ T5691] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 242.466132][ T5986] usb 2-1: selecting invalid altsetting 0 [ 242.488611][ T5691] usb 3-1: config 0 has no interface number 0 [ 242.509817][ T5691] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.521120][ T5691] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 242.533198][ T5691] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 242.544779][ T5691] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 242.555159][ T5691] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 242.567742][ T5691] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.595609][ T5691] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 242.625594][ T8510] syzkaller0: entered promiscuous mode [ 242.640918][ T5691] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 242.659367][ T8510] syzkaller0: entered allmulticast mode [ 242.679328][ T5691] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 242.757749][ T5691] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.809824][ T5986] usb 2-1: USB disconnect, device number 9 [ 242.827638][ T5691] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 242.841203][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.905199][ T5691] usb 3-1: Product: syz [ 242.910872][ T5691] usb 3-1: Manufacturer: syz [ 242.915752][ T5691] usb 3-1: SerialNumber: syz [ 243.131862][ T5691] usb 3-1: config 0 descriptor?? [ 243.158043][ T8506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 243.231187][ T8506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 243.334501][ T5691] usb 3-1: will this work? Response EP is not usually 3 [ 243.342969][ T5691] usb 3-1: will this work? Image data EP is not usually 2 [ 243.386851][ T5691] scsi host1: microtekX6 [ 244.820888][ T5691] usb 3-1: USB disconnect, device number 10 [ 244.952500][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 249.207106][ T8610] hub 8-0:1.0: USB hub found [ 249.214312][ T8610] hub 8-0:1.0: 1 port detected [ 250.517538][ T8563] syz_tun: entered allmulticast mode [ 250.541715][ T8565] syz_tun: left allmulticast mode [ 252.650957][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.700630][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.735979][ T8688] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 252.756913][ T8688] netlink: 76 bytes leftover after parsing attributes in process `syz.0.330'. [ 252.794647][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.826058][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.347894][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.333'. [ 254.356922][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.333'. [ 255.880234][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.888615][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.821289][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 257.850878][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 259.857010][ T8772] hub 8-0:1.0: USB hub found [ 259.873193][ T8772] hub 8-0:1.0: 1 port detected [ 261.226632][ T5691] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 261.408285][ T5691] usb 6-1: Using ep0 maxpacket: 8 [ 261.427157][ T5691] usb 6-1: config 0 has an invalid interface number: 33 but max is 1 [ 261.464179][ T5691] usb 6-1: config 0 has no interface number 1 [ 261.493164][ T5691] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 261.560527][ T5691] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 261.648985][ T5691] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 261.678790][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.687752][ T5691] usb 6-1: Product: syz [ 261.693288][ T5691] usb 6-1: Manufacturer: syz [ 261.698992][ T5691] usb 6-1: SerialNumber: syz [ 261.729680][ T5691] usb 6-1: config 0 descriptor?? [ 261.744529][ T5691] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 265.602005][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.623037][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.717661][ T8860] fuse: Invalid gid '00000000000000000000004' [ 266.492442][ T2363] pvrusb2: Invalid read control endpoint [ 266.510712][ T5691] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 266.555726][ T2363] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 266.579887][ T5691] usb 6-1: USB disconnect, device number 5 [ 266.610427][ T2363] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 266.659040][ T5974] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 266.858126][ T5974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.905156][ T5974] usb 4-1: not running at top speed; connect to a high speed hub [ 266.956658][ T5974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.014345][ T5974] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.092250][ T5974] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 267.157546][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.216598][ T5974] usb 4-1: Product: syz [ 267.264908][ T5974] usb 4-1: Manufacturer: syz [ 267.292241][ T5974] usb 4-1: SerialNumber: syz [ 267.368484][ T3296] bridge_slave_1: left promiscuous mode [ 267.378219][ T5986] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 267.485841][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.626037][ T3296] bridge_slave_0: left promiscuous mode [ 267.635678][ T5986] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.674451][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.741616][ T5986] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 267.830924][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 267.913189][ T5986] usb 2-1: Product: syz [ 267.963128][ T5986] usb 2-1: Manufacturer: syz [ 268.017423][ T5986] usb 2-1: SerialNumber: syz [ 269.824008][ T5974] usb 4-1: 1:1 : bogus bTerminalLink 9 [ 269.995093][ T5974] usb 4-1: unit 6 not found! [ 270.292004][ T3296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.436340][ T3296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.533457][ T3296] bond0 (unregistering): Released all slaves [ 270.837535][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 270.947681][ T5974] usb 4-1: USB disconnect, device number 11 [ 271.042808][ T8967] binder: BINDER_SET_CONTEXT_MGR already set [ 271.234708][ T8967] binder: 8958:8967 ioctl 4018620d 200000004a80 returned -16 [ 272.025378][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.851395][ T5974] usb 2-1: USB disconnect, device number 10 [ 272.894482][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 273.377390][ T3296] hsr_slave_0: left promiscuous mode [ 273.450518][ T3296] hsr_slave_1: left promiscuous mode [ 273.526211][ T3296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.617982][ T3296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.681568][ T3296] batman_adv: batadv0: Removing interface: macvlan2 [ 274.307827][ T9025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.486664][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.683232][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.872822][ T9024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.929170][ T9035] fuse: Bad value for 'fd' [ 274.961657][ T9024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.318512][ T5986] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 275.546053][ T5986] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 275.623754][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.784049][ T5986] usb-storage 3-1:32.0: USB Mass Storage device detected [ 275.996969][ T5986] usb-storage 3-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 276.055646][ T3296] team0 (unregistering): Port device team_slave_1 removed [ 276.184453][ T5986] usb 3-1: USB disconnect, device number 11 [ 276.206567][ T3296] team0 (unregistering): Port device team_slave_0 removed [ 276.588381][ T5974] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.788141][ T5974] usb 4-1: Using ep0 maxpacket: 16 [ 276.844430][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 276.952571][ T5974] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.018438][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.075292][ T5974] usb 4-1: Product: syz [ 277.105679][ T5974] usb 4-1: Manufacturer: syz [ 277.140169][ T5974] usb 4-1: SerialNumber: syz [ 277.316548][ T5974] usb 4-1: config 0 descriptor?? [ 277.500647][ T5974] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.565092][ T5974] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 277.895014][ T6989] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.014036][ T5974] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 278.136884][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 278.160275][ T6989] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 278.203350][ T6989] usb 3-1: config 1 has no interface number 0 [ 278.225028][ T6989] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 278.256897][ T6989] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 278.314694][ T6989] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 278.382776][ T6989] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.503130][ T5974] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 278.543469][ T6989] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 278.592178][ T5974] em28xx 4-1:0.0: board has no eeprom [ 278.625053][ T6989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.720105][ T6989] usb 3-1: Product: syz [ 278.775427][ T6989] usb 3-1: Manufacturer: syz [ 278.823680][ T6989] usb 3-1: SerialNumber: syz [ 278.917279][ T9089] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 278.938250][ T5974] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 278.994772][ T9089] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 279.040469][ T5974] em28xx 4-1:0.0: dvb set to bulk mode. [ 279.097073][ T5986] em28xx 4-1:0.0: Binding DVB extension [ 279.111617][ T6989] usb 3-1: Error in usbnet_get_endpoints (-22) [ 279.165593][ T9068] em28xx 4-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 279.242161][ T5974] usb 4-1: USB disconnect, device number 12 [ 279.297584][ T5974] em28xx 4-1:0.0: Disconnecting em28xx [ 279.680736][ T5986] em28xx 4-1:0.0: Registering input extension [ 279.808746][ T5974] em28xx 4-1:0.0: Closing input extension [ 279.863460][ T3296] IPVS: stop unused estimator thread 0... [ 280.563414][ T5974] em28xx 4-1:0.0: Freeing device [ 280.726894][ T9150] binder: 9142:9150 ioctl c0306201 0 returned -14 [ 281.231831][ T9159] bridge_slave_0: left allmulticast mode [ 281.268451][ T9159] bridge_slave_0: left promiscuous mode [ 281.301680][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.401487][ T9159] bridge_slave_1: left allmulticast mode [ 281.463893][ T9159] bridge_slave_1: left promiscuous mode [ 281.508351][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.655593][ T9159] bond0: (slave bond_slave_0): Releasing backup interface [ 281.758486][ T9159] bond0: (slave bond_slave_1): Releasing backup interface [ 281.815507][ T9159] team0: Port device team_slave_0 removed [ 281.912035][ T9159] team0: Port device team_slave_1 removed [ 281.947767][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.017946][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.104128][ T9159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.540771][ T5974] usb 3-1: USB disconnect, device number 12 [ 282.715540][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.795363][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.877651][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.936750][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.087625][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 284.839396][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.391'. [ 284.862943][ T9243] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 284.923458][ T9243] openvswitch: netlink: Message has 16 unknown bytes. [ 286.245455][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 286.324666][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 286.575440][ T9254] team0: Failed to send options change via netlink (err -105) [ 286.647662][ T9254] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 286.725548][ T9254] team0: Port device team_slave_0 removed [ 287.487512][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 287.546396][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 287.600833][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 289.234738][ T9305] program syz.3.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.277873][ T9305] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.873063][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.915173][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.008699][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 292.008764][ T29] audit: type=1326 audit(1778533982.318:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.5.401" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6cc19cdd9 code=0x0 [ 293.415647][ T9341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.482115][ T9341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.248908][ T9358] warning: `syz.2.407' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 294.346596][ T9360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.383198][ T9358] netlink: 56 bytes leftover after parsing attributes in process `syz.2.407'. [ 294.588702][ T9360] input: syz1 as /devices/virtual/input/input17 [ 295.046374][ T9379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.151992][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 296.244452][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 299.774066][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 299.966998][ T9428] syzkaller0: entered promiscuous mode [ 300.034412][ T9428] syzkaller0: entered allmulticast mode [ 300.869131][ T9407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 304.707183][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 304.752883][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 306.765656][ T9557] program syz.1.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.822684][ T9557] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 307.851058][ T9574] binder: 9570:9574 ioctl c0306201 0 returned -14 [ 308.257393][ T9569] ucma_write: process 157 (syz.5.429) changed security contexts after opening file descriptor, this is not allowed. [ 308.931117][ T5986] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 309.141384][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 309.192110][ T5986] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 309.216117][ T9583] input: syz0 as /devices/virtual/input/input18 [ 309.264602][ T5986] usb 4-1: config 0 has no interface number 0 [ 309.334398][ T5986] usb 4-1: config 0 interface 184 has no altsetting 0 [ 309.420739][ T5986] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 309.522858][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.597308][ T5986] usb 4-1: Product: syz [ 309.638119][ T5986] usb 4-1: Manufacturer: syz [ 309.700567][ T5986] usb 4-1: SerialNumber: syz [ 309.785251][ T5986] usb 4-1: config 0 descriptor?? [ 311.025749][ T9599] input: syz1 as /devices/virtual/input/input19 [ 311.792060][ T9574] syz.0.430 (9574): drop_caches: 2 [ 312.071399][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 312.349348][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 312.411563][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 312.563597][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 312.617162][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 312.657884][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 312.699134][ T5986] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 312.723156][ T5986] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 313.827250][ T29] audit: type=1800 audit(1778534004.138:76): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.439" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 314.122281][ T5986] usb 4-1: USB disconnect, device number 13 [ 314.394551][ T9668] bridge_slave_0: left allmulticast mode [ 314.426110][ T9668] bridge_slave_0: left promiscuous mode [ 314.495360][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.617746][ T9668] bridge_slave_1: left allmulticast mode [ 314.685401][ T9668] bridge_slave_1: left promiscuous mode [ 314.733621][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.848700][ T9668] bond0: (slave bond_slave_0): Releasing backup interface [ 314.861157][ T5986] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 314.944623][ T9668] bond0: (slave bond_slave_1): Releasing backup interface [ 315.065712][ T9668] team0: Port device team_slave_0 removed [ 315.130627][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 315.157549][ T9668] team0: Port device team_slave_1 removed [ 315.194535][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.229197][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 315.240033][ T5986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.300872][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.308471][ T5986] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.347727][ T5986] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.379437][ T5986] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 315.419488][ T9668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 315.474900][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.571712][ T5986] usb 4-1: config 0 descriptor?? [ 315.646551][ T5986] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 317.310296][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.322292][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.456696][ T5986] usb 4-1: USB disconnect, device number 14 [ 317.673787][ T9721] lo: Caught tx_queue_len zero misconfig [ 318.498283][ T6989] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 318.516248][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 318.552721][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 318.738366][ T6989] usb 3-1: Using ep0 maxpacket: 32 [ 318.769333][ T6989] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 318.816702][ T6989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.887290][ T6989] usb 3-1: config 0 descriptor?? [ 318.967912][ T6989] gspca_main: sunplus-2.14.0 probing 041e:400b [ 319.520352][ T6989] gspca_sunplus: reg_w_riv err -110 [ 319.553026][ T6989] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 321.375027][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 321.427230][ T9771] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 321.534929][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 322.231835][ T5986] usb 3-1: USB disconnect, device number 13 [ 323.606179][ T9805] netlink: 'syz.5.457': attribute type 1 has an invalid length. [ 323.946308][ T9793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.455'. [ 324.050027][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.455'. [ 324.747817][ T9811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.458'. [ 325.290585][ T9815] syzkaller0: entered promiscuous mode [ 325.331439][ T9815] syzkaller0: entered allmulticast mode [ 325.939683][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 325.986932][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 326.630894][ T9840] syz_tun: entered allmulticast mode [ 326.998948][ T5986] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 327.198148][ T5986] usb 4-1: Using ep0 maxpacket: 8 [ 327.240803][ T5986] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 327.303678][ T5986] usb 4-1: config 0 has no interface number 0 [ 327.345494][ T5986] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 327.399850][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.462111][ T5986] usb 4-1: Product: syz [ 327.504726][ T5986] usb 4-1: Manufacturer: syz [ 327.570128][ T5986] usb 4-1: SerialNumber: syz [ 327.608762][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 327.644945][ T2363] pvrusb2: Failure uploading firmware1 [ 327.670555][ T5986] usb 4-1: config 0 descriptor?? [ 327.706844][ T2363] pvrusb2: Device initialization was not successful. [ 327.795759][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 327.861564][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 327.990943][ T5691] pvrusb2: Device being rendered inoperable [ 327.999592][ T2363] pvrusb2: Failed to submit write-control URB status=-19 [ 328.087731][ T9853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.159514][ T2363] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 328.240651][ T2363] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 329.654215][ T5986] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 329.736534][ T5986] usb 4-1: USB disconnect, device number 15 [ 330.483092][ T9906] bridge_slave_0: left allmulticast mode [ 330.548467][ T9906] bridge_slave_0: left promiscuous mode [ 330.591103][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.662630][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.697438][ T9906] bridge_slave_1: left allmulticast mode [ 330.737372][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.752142][ T9906] bridge_slave_1: left promiscuous mode [ 330.804384][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.940493][ T9906] bond0: (slave bond_slave_0): Releasing backup interface [ 331.024769][ T9906] bond0: (slave bond_slave_1): Releasing backup interface [ 331.075570][ T9906] team0: Port device team_slave_1 removed [ 331.102531][ T9906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.165515][ T9906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.240775][ T9906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.489928][ T9920] netlink: 'syz.1.473': attribute type 13 has an invalid length. [ 332.131525][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 332.141890][ T9942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.173329][ T9942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.018548][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 335.772675][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.488'. [ 336.067706][T10018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.107318][T10024] bridge_slave_0: left allmulticast mode [ 336.115491][T10024] bridge_slave_0: left promiscuous mode [ 336.148472][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.207583][T10024] bridge_slave_1: left allmulticast mode [ 336.264409][T10024] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.445829][T10024] team0: Port device team_slave_1 removed [ 336.482274][ T5972] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 336.497097][T10024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.711313][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 336.764512][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.841254][ T5972] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.897937][ T5972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.931129][ T5972] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 336.974464][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.066805][ T5972] usb 3-1: config 0 descriptor?? [ 337.140260][ T5972] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 337.388165][ T29] audit: type=1326 audit(1778534027.698:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 337.480761][ T29] audit: type=1326 audit(1778534027.698:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 337.593762][ T29] audit: type=1326 audit(1778534027.708:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 337.764916][ T29] audit: type=1326 audit(1778534027.708:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 337.906536][ T29] audit: type=1326 audit(1778534027.708:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 338.048988][ T29] audit: type=1326 audit(1778534027.758:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 338.117533][ T29] audit: type=1326 audit(1778534027.768:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 338.146256][ T29] audit: type=1326 audit(1778534027.768:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 338.193124][ T29] audit: type=1326 audit(1778534027.768:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 338.235980][ T29] audit: type=1326 audit(1778534027.768:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73db9cdd9 code=0x7ffc0000 [ 338.795804][T10082] syzkaller0: entered promiscuous mode [ 338.833826][T10082] syzkaller0: entered allmulticast mode [ 339.160370][ T5972] usb 3-1: USB disconnect, device number 14 [ 339.293957][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 339.582330][T10113] xt_hashlimit: max too large, truncated to 1048576 [ 339.960107][T10122] sctp: [Deprecated]: syz.3.504 (pid 10122) Use of int in maxseg socket option. [ 339.960107][T10122] Use struct sctp_assoc_value instead [ 340.258814][ T6989] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 340.522328][ T6989] usb 4-1: Using ep0 maxpacket: 8 [ 340.574657][ T6989] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.624441][ T6989] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 340.706000][ T6989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.799098][ T6989] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 340.850465][ T6989] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 340.914524][ T6989] usb 4-1: Product: syz [ 340.953869][ T6989] usb 4-1: Manufacturer: syz [ 341.021674][ T6989] usb 4-1: SerialNumber: syz [ 341.047295][ T6989] usb 4-1: config 0 descriptor?? [ 341.417368][T10122] random: crng reseeded on system resumption [ 341.578147][ T6989] rc_core: IR keymap rc-imon-rsc not found [ 341.681629][ T6989] Registered IR keymap rc-empty [ 341.704307][ T6989] rc rc1: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 341.810161][ T6989] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input21 [ 341.995763][ T6989] usb 4-1: USB disconnect, device number 16 [ 343.196248][T10170] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 343.232356][ T5972] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 343.692901][T10183] binder: 10179:10183 ioctl c0306201 0 returned -14 [ 345.486891][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 347.779375][ T5972] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.852032][ T5972] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 347.892195][ T5972] usb 3-1: can't read configurations, error -71 [ 351.162889][T10296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.215078][T10296] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.384334][T10296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.285170][T10296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.337501][T10296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.434324][T10296] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 353.280575][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 353.280590][ T29] audit: type=1800 audit(1778534043.588:93): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.527" name="bus" dev="tmpfs" ino=547 res=0 errno=0 [ 354.657306][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 355.695593][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 358.393646][T10408] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 358.463308][T10411] netlink: 'syz.3.536': attribute type 62 has an invalid length. [ 358.573552][T10415] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 360.847760][T10432] program syz.0.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.893687][T10432] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 361.905834][T10444] binder: BINDER_SET_CONTEXT_MGR already set [ 361.942876][T10444] binder: 10439:10444 ioctl 4018620d 200000004a80 returned -16 [ 363.692802][ T5972] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 363.716508][ T5974] IPVS: starting estimator thread 0... [ 363.808282][T10466] IPVS: using max 29 ests per chain, 69600 per kthread [ 363.859495][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 363.872068][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.891587][ T5972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.924336][ T5972] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.934632][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.950131][ T5972] usb 3-1: config 0 descriptor?? [ 364.103565][T10480] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 364.121036][T10480] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 364.202757][T10480] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 365.127145][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.192589][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.666644][ T5972] usbhid 3-1:0.0: can't add hid device: -71 [ 366.697344][ T5972] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 366.764551][ T5972] usb 3-1: USB disconnect, device number 17 [ 368.618853][ T5986] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 368.710444][T10542] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 368.727842][ T29] audit: type=1400 audit(1778534059.038:94): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10541 comm="syz.1.555" [ 368.933610][ T5986] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.968994][ T5986] usb 4-1: not running at top speed; connect to a high speed hub [ 369.027694][ T5986] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.060232][ T5986] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.118600][ T5986] usb 4-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 369.141899][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 369.177003][ T5986] usb 4-1: Product: syz [ 369.210175][ T5986] usb 4-1: Manufacturer: syz [ 369.253686][ T5986] usb 4-1: SerialNumber: syz [ 369.531331][ T5986] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 369.594913][ T5986] usb 4-1: USB disconnect, device number 17 [ 372.208227][ T6989] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 372.402358][ T6989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 372.443286][ T6989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.468913][ T6989] usb 3-1: Product: syz [ 372.481931][ T6989] usb 3-1: Manufacturer: syz [ 372.496086][ T6989] usb 3-1: SerialNumber: syz [ 372.572721][ T6989] usb 3-1: config 0 descriptor?? [ 372.857456][ T6989] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 374.151685][T10627] tipc: Started in network mode [ 374.172370][T10627] tipc: Node identity da2f5897f33a, cluster identity 4711 [ 374.200824][T10627] tipc: Enabled bearer , priority 0 [ 374.223965][T10630] syzkaller0: entered promiscuous mode [ 374.260036][T10630] syzkaller0: entered allmulticast mode [ 374.437840][T10630] netlink: 44 bytes leftover after parsing attributes in process `syz.3.569'. [ 374.488452][T10627] tipc: Resetting bearer [ 374.547831][T10626] tipc: Resetting bearer [ 374.703855][T10626] tipc: Disabling bearer [ 375.390001][T10642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.559644][ T6989] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 375.721846][ T6989] usb 3-1: USB disconnect, device number 18 [ 375.760666][T10634] netlink: 'syz.1.570': attribute type 1 has an invalid length. [ 375.800667][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 377.358591][T10683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.702431][ T6991] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 378.051475][ T6991] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 378.129630][ T6991] usb 2-1: config 1 has no interface number 0 [ 378.171177][ T6991] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 378.272089][ T6991] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 378.349691][ T6991] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.601085][ T6991] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 378.650302][ T6991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.784326][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.793607][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.818211][ T6991] usb 2-1: Product: syz [ 378.907771][ T6991] usb 2-1: Manufacturer: syz [ 378.966836][ T6991] usb 2-1: SerialNumber: syz [ 379.099458][T10676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.577674][T10676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 380.166461][ T6991] usb 2-1: Incompatible driver and firmware versions [ 380.240489][ T6991] usb 2-1: USB disconnect, device number 11 [ 382.050299][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'. [ 382.413820][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.584'. [ 384.028886][T10757] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.888705][T10757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.904101][T10757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.037150][T10757] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 388.715393][T10861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.720340][T10854] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 10854 comm: syz.5.596) [ 388.765080][ T29] audit: type=1800 audit(1778534079.068:95): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.596" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27556 res=0 errno=0 [ 388.834234][T10861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.064382][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 389.101540][ T2363] pvrusb2: Failure uploading firmware1 [ 389.128286][ T6990] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 389.212033][ T2363] pvrusb2: Device initialization was not successful. [ 389.283224][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 389.375169][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 389.447246][ T5691] pvrusb2: Device being rendered inoperable [ 390.165364][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 392.716448][T10919] netlink: 'syz.5.607': attribute type 9 has an invalid length. [ 392.832931][T10919] netlink: 'syz.5.607': attribute type 7 has an invalid length. [ 392.841209][T10919] netlink: 'syz.5.607': attribute type 8 has an invalid length. [ 393.003786][T10925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.608'. [ 394.095525][T10948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.612'. [ 394.343390][T10948] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 394.704273][ T6990] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 394.902778][ T6990] usb 2-1: device descriptor read/64, error -71 [ 395.118625][ T5972] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 395.198348][ T6990] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 395.358215][ T6990] usb 2-1: device descriptor read/64, error -71 [ 395.378821][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 395.444304][ T5972] usb 4-1: config 2 has an invalid interface number: 241 but max is 0 [ 395.479130][ T6990] usb usb2-port1: attempt power cycle [ 395.488775][ T5972] usb 4-1: config 2 has no interface number 0 [ 395.520130][ T5972] usb 4-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.581146][ T5972] usb 4-1: config 2 interface 241 has no altsetting 0 [ 395.644160][ T5972] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 395.664445][T10977] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 395.687283][T10972] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 395.713694][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.724730][ T5972] usb 4-1: Product: syz [ 395.746733][ T5972] usb 4-1: Manufacturer: syz [ 395.764464][ T5972] usb 4-1: SerialNumber: syz [ 395.838359][ T6990] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 395.866355][ T5972] ti_usb_3410_5052 4-1:2.241: TI USB 3410 1 port adapter converter detected [ 395.887476][ T6990] usb 2-1: device descriptor read/8, error -71 [ 395.938353][ T5972] ti_usb_3410_5052 4-1:2.241: missing endpoints [ 396.085661][T10981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.138629][T10981] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.158339][ T6990] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 396.237313][T10981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.268989][ T6990] usb 2-1: device descriptor read/8, error -71 [ 396.315863][T10963] kvm: pic: non byte write [ 396.350389][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.359967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.371902][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.380335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.410481][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.425212][ T3296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.436420][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.455158][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.465617][ T6989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.475271][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.485024][ T6990] usb usb2-port1: unable to enumerate USB device [ 396.647087][T10995] kvm: pic: non byte write [ 396.796782][ T5974] usb 4-1: USB disconnect, device number 18 [ 396.832386][T10981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.878199][T10981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.946377][T10981] veth1_vlan: left promiscuous mode [ 396.974088][T10981] veth0_vlan: left promiscuous mode [ 396.997868][T10981] veth0_vlan: entered promiscuous mode [ 397.057065][T10981] veth1_vlan: entered promiscuous mode [ 397.124070][T10981] veth1_macvtap: left promiscuous mode [ 397.162595][T10981] veth0_macvtap: left promiscuous mode [ 397.185440][T10981] veth0_macvtap: entered promiscuous mode [ 397.234967][T10981] veth1_macvtap: entered promiscuous mode [ 397.326112][T10981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.362701][T10981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.413271][T10981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.512995][T10981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.893331][ T6027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.077803][T11026] netlink: 56 bytes leftover after parsing attributes in process `syz.3.623'. [ 398.095828][ T6027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.335921][ T6027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.367393][ T6027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.308990][ T6989] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 400.506702][ T6989] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.568763][ T6989] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 400.615712][ T6989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.687235][ T6989] usb 4-1: config 0 descriptor?? [ 400.738435][ T6989] pwc: Askey VC010 type 2 USB webcam detected. [ 401.661874][T11090] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 401.794221][ T6989] pwc: send_video_command error -71 [ 401.837711][ T6989] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 401.912769][ T6989] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 402.073712][ T6989] usb 4-1: USB disconnect, device number 19 [ 402.118520][ T5974] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 402.303396][ T5974] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.356780][ T5974] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 402.405454][ T5974] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.452845][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.538153][ T144] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.570725][T11090] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 402.585842][ T144] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.641998][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.846127][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.861427][ T144] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.924811][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.936810][ T144] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.126354][ T6989] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 403.409034][ T6989] usb 3-1: Using ep0 maxpacket: 32 [ 403.483304][ T6989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.616343][ T6989] usb 3-1: config 0 has no interfaces? [ 403.679947][ T6989] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 403.767362][ T6989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.924360][ T6989] usb 3-1: config 0 descriptor?? [ 404.002625][ T6989] usb 3-1: can't set config #0, error -71 [ 404.112722][ T6989] usb 3-1: USB disconnect, device number 20 [ 404.588557][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 404.641266][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 404.678862][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 404.720116][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 404.781736][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 404.879614][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 405.008204][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 405.091461][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 405.152573][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 405.220434][ T5691] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 405.302273][ T5691] hid-generic 0006:0008:0001.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 405.936588][T11181] fido_id[11181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 406.166877][T11192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.635'. [ 406.553238][ T6990] usb 2-1: USB disconnect, device number 16 [ 407.662145][T11227] kAFS: unable to lookup cell '' [ 410.059855][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.641'. [ 410.179211][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 410.232817][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.641'. [ 411.389063][ T5972] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 412.027225][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 412.736479][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.824498][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 412.903116][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.111776][ T5972] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 413.175290][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.226405][ T5972] usb 2-1: Product: syz [ 413.248162][ T5974] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 413.257214][ T5972] usb 2-1: Manufacturer: syz [ 413.278511][ T5972] usb 2-1: SerialNumber: syz [ 413.325547][ T5972] usb 2-1: config 0 descriptor?? [ 413.386928][T11275] batadv_slave_1: entered promiscuous mode [ 413.402556][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 413.438384][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 413.473592][T11274] batadv_slave_1: left promiscuous mode [ 413.507159][ T5974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.518675][ T5972] mcba_usb 2-1:0.0: Can't find endpoints [ 413.629151][ T5974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.712608][ T5974] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.769475][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.817972][ T5974] usb 6-1: config 0 descriptor?? [ 413.854838][ T5974] hub 6-1:0.0: USB hub found [ 414.069336][ T5974] hub 6-1:0.0: 1 port detected [ 415.077247][ T5974] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 415.078015][ T6989] usb 6-1: USB disconnect, device number 6 [ 415.685290][T11309] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 415.796155][T11309] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 415.877084][T11317] syzkaller1: entered promiscuous mode [ 415.900420][T11317] syzkaller1: entered allmulticast mode [ 416.120980][ T5974] usb 2-1: USB disconnect, device number 17 [ 416.927842][ T6989] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 417.143566][ T6989] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.188287][ T6989] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 417.233449][ T6989] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.282498][ T6989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.380047][T11321] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 417.542848][ T6989] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.718360][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.765470][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.584790][T11373] netlink: 96 bytes leftover after parsing attributes in process `syz.0.655'. [ 419.308538][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 420.459603][ T6989] usb 4-1: USB disconnect, device number 20 [ 421.640212][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.725931][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.852486][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.660'. [ 422.168366][ T5974] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 422.445823][ T5974] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 422.528376][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.592415][ T5974] usb 6-1: Product: syz [ 422.638122][ T5974] usb 6-1: Manufacturer: syz [ 422.700593][ T5974] usb 6-1: SerialNumber: syz [ 422.771323][ T5974] usb 6-1: config 0 descriptor?? [ 422.796146][ T5974] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 423.002411][ T5971] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 423.199894][ T5971] usb 2-1: Using ep0 maxpacket: 32 [ 423.227347][ T5971] usb 2-1: config 0 has no interfaces? [ 423.263334][ T5971] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 423.318078][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.373670][ T5971] usb 2-1: config 0 descriptor?? [ 423.700710][ T6989] usb 2-1: USB disconnect, device number 18 [ 423.830917][ T5974] gspca_sunplus: reg_w_riv err -71 [ 423.875334][ T5974] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 423.943168][ T5974] usb 6-1: USB disconnect, device number 7 [ 424.308221][ T5971] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 424.487514][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.552923][ T5971] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.610809][ T5971] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 424.658754][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.722115][ T5971] usb 4-1: config 0 descriptor?? [ 425.563132][T11440] vivid-000: disconnect [ 425.855625][T11440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.319741][T11440] vivid-000: reconnect [ 426.400524][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.407763][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.426612][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.656727][ C0] sched: DL replenish lagged too much [ 446.073834][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.095650][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.840285][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.862906][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.758959][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.780874][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.177933][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 575.185019][ C1] rcu: (detected by 1, t=10502 jiffies, g=68201, q=787177 ncpus=2) [ 575.193030][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 6792 (4294994620-4294987828), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 575.206340][ C1] rcu: rcu_preempt kthread starved for 6793 jiffies! g68201 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 575.217515][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 575.227517][ C1] rcu: RCU grace-period kthread stack dump: [ 575.233432][ C1] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 575.246961][ C1] Call Trace: [ 575.250265][ C1] [ 575.253234][ C1] __schedule+0x1821/0x5740 [ 575.257777][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 575.262777][ C1] ? __pfx___schedule+0x10/0x10 [ 575.267675][ C1] ? schedule+0x90/0x360 [ 575.271962][ C1] schedule+0x164/0x360 [ 575.276158][ C1] schedule_timeout+0x158/0x2c0 [ 575.281048][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 575.286457][ C1] ? __pfx_process_timeout+0x10/0x10 [ 575.291786][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 575.297622][ C1] ? prepare_to_swait_event+0x340/0x370 [ 575.303210][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 575.308103][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 575.314285][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 575.319596][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 575.324840][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 575.329464][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 575.334684][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.340526][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 575.345496][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 575.350547][ C1] kthread+0x388/0x470 [ 575.354643][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 575.359865][ C1] ? __pfx_kthread+0x10/0x10 [ 575.364482][ C1] ret_from_fork+0x514/0xb70 [ 575.369097][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 575.374238][ C1] ? __switch_to+0xc79/0x1410 [ 575.378953][ C1] ? __pfx_kthread+0x10/0x10 [ 575.383578][ C1] ret_from_fork_asm+0x1a/0x30 [ 575.388391][ C1] [ 575.391438][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 575.397786][ C1] CPU: 1 UID: 0 PID: 32 Comm: kworker/R-write Not tainted syzkaller #0 PREEMPT(full) [ 575.407363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.417444][ C1] Workqueue: writeback wb_workfn (flush-250:0) [ 575.423655][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 575.428968][ C1] Code: ff ff ff e8 e1 11 07 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb 7c 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 58 61 92 [ 575.448602][ C1] RSP: 0018:ffffc90000a07d18 EFLAGS: 00000286 [ 575.454696][ C1] RAX: b841ce1ab3f6b300 RBX: 0000000000000000 RCX: 0000000080000100 [ 575.462691][ C1] RDX: 00000000a42637f2 RSI: ffffffff8e219b45 RDI: ffffffff8c28af60 [ 575.470684][ C1] RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cd60 [ 575.478681][ C1] R10: ffffc90000a07e78 R11: ffffffff81b0ebd0 R12: 0000000000000002 [ 575.486681][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246 [ 575.494676][ C1] FS: 0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 575.503632][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.510243][ C1] CR2: 0000200000158030 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 575.518247][ C1] Call Trace: [ 575.521551][ C1] [ 575.524435][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 575.530536][ C1] ? unwind_next_frame+0xa6/0x2550 [ 575.535683][ C1] unwind_next_frame+0xc3/0x2550 [ 575.540644][ C1] ? unwind_next_frame+0xa6/0x2550 [ 575.545788][ C1] ? unwind_next_frame+0xa6/0x2550 [ 575.550928][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 575.555989][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 575.562451][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 575.568639][ C1] arch_stack_walk+0x11b/0x150 [ 575.573528][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 575.579635][ C1] stack_trace_save+0xa9/0x100 [ 575.584428][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 575.589840][ C1] ? unwind_next_frame+0xa6/0x2550 [ 575.594978][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 575.599940][ C1] kasan_save_track+0x3e/0x80 [ 575.604642][ C1] ? kasan_save_track+0x3e/0x80 [ 575.609522][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 575.614575][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 575.620718][ C1] __kasan_slab_alloc+0x6c/0x80 [ 575.625608][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 575.631528][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 575.636141][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 575.642243][ C1] __alloc_skb+0x1d0/0x7d0 [ 575.646688][ C1] ? ret_from_fork+0x514/0xb70 [ 575.651480][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 575.656452][ C1] synproxy_send_client_synack+0x172/0xe30 [ 575.662307][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 575.668664][ C1] ? nft_masq_eval+0x340/0x4a0 [ 575.673456][ C1] ? synproxy_pernet+0x45/0x270 [ 575.678345][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 575.683578][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 575.689339][ C1] ? nf_ip_checksum+0x13c/0x510 [ 575.694223][ C1] nft_synproxy_do_eval+0x305/0x580 [ 575.699454][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 575.705215][ C1] nft_do_chain+0x48d/0x1ae0 [ 575.709847][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 575.714902][ C1] ? ipt_do_table+0x2b2/0x1630 [ 575.719701][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 575.724592][ C1] nft_do_chain_inet+0x360/0x4b0 [ 575.729580][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 575.735067][ C1] ? ipt_do_table+0x2b2/0x1630 [ 575.739865][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 575.745274][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 575.750849][ C1] nf_hook_slow+0xc5/0x220 [ 575.755307][ C1] NF_HOOK+0x21f/0x3c0 [ 575.759416][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 575.765426][ C1] ? NF_HOOK+0x9e/0x3c0 [ 575.769606][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 575.774231][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 575.779576][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 575.785622][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 575.790691][ C1] NF_HOOK+0x336/0x3c0 [ 575.794794][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 575.799945][ C1] ? NF_HOOK+0x9e/0x3c0 [ 575.804150][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 575.808776][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 575.813929][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 575.818474][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 575.823005][ C1] ? process_backlog+0x3eb/0x1950 [ 575.828059][ C1] process_backlog+0xaa3/0x1950 [ 575.832961][ C1] __napi_poll+0xae/0x340 [ 575.837315][ C1] ? skb_defer_free_flush+0x233/0x260 [ 575.842722][ C1] net_rx_action+0x627/0xf70 [ 575.847366][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 575.852521][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 575.857762][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 575.863073][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 575.869278][ C1] handle_softirqs+0x22a/0x840 [ 575.874092][ C1] ? __irq_exit_rcu+0xca/0x220 [ 575.878889][ C1] __irq_exit_rcu+0xca/0x220 [ 575.883510][ C1] irq_exit_rcu+0x9/0x30 [ 575.887780][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 575.893447][ C1] [ 575.896401][ C1] [ 575.899356][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.905369][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 575.910680][ C1] Code: ff ff ff e8 e1 11 07 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 cb 7c 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 58 61 92 [ 575.930314][ C1] RSP: 0018:ffffc90000a869b8 EFLAGS: 00000286 [ 575.936423][ C1] RAX: b841ce1ab3f6b300 RBX: 0000000000000000 RCX: 0000000000000046 [ 575.944415][ C1] RDX: 00000000e291cbf8 RSI: ffffffff8e219b45 RDI: ffffffff8c28af60 [ 575.952415][ C1] RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cd60 [ 575.960414][ C1] R10: ffffc90000a86b18 R11: ffffffff81b0ebd0 R12: 0000000000000002 [ 575.968415][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246 [ 575.976419][ C1] ? unwind_next_frame+0xa6/0x2550 [ 575.981566][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 575.987756][ C1] ? unwind_next_frame+0xa6/0x2550 [ 575.992912][ C1] ? folio_alloc_buffers+0x19b/0x640 [ 575.998236][ C1] ? unwind_next_frame+0xa6/0x2550 [ 576.003380][ C1] unwind_next_frame+0xc3/0x2550 [ 576.008359][ C1] ? unwind_next_frame+0xa6/0x2550 [ 576.013508][ C1] ? unwind_next_frame+0xa6/0x2550 [ 576.018646][ C1] ? alloc_buffer_head+0x2a/0x270 [ 576.023708][ C1] ? folio_alloc_buffers+0x19b/0x640 [ 576.029026][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 576.035218][ C1] arch_stack_walk+0x11b/0x150 [ 576.040022][ C1] ? folio_alloc_buffers+0x19b/0x640 [ 576.045380][ C1] stack_trace_save+0xa9/0x100 [ 576.050174][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 576.055589][ C1] save_stack+0x122/0x230 [ 576.059954][ C1] ? __pfx_save_stack+0x10/0x10 [ 576.064831][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 576.070148][ C1] ? __slab_free+0x274/0x2c0 [ 576.074763][ C1] ? qlist_free_all+0x99/0x100 [ 576.079553][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 576.085211][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 576.090262][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 576.095925][ C1] ? alloc_buffer_head+0x2a/0x270 [ 576.100976][ C1] ? folio_alloc_buffers+0x19b/0x640 [ 576.106315][ C1] __reset_page_owner+0x71/0x1f0 [ 576.111299][ C1] __free_frozen_pages+0xbc7/0xd30 [ 576.116451][ C1] __slab_free+0x274/0x2c0 [ 576.120929][ C1] ? qlist_free_all+0x8e/0x100 [ 576.125737][ C1] qlist_free_all+0x99/0x100 [ 576.130368][ C1] ? alloc_buffer_head+0x2a/0x270 [ 576.135430][ C1] kasan_quarantine_reduce+0x148/0x160 [ 576.140926][ C1] __kasan_slab_alloc+0x22/0x80 [ 576.145813][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 576.151301][ C1] ? alloc_buffer_head+0x2a/0x270 [ 576.156376][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 576.162046][ C1] alloc_buffer_head+0x2a/0x270 [ 576.166937][ C1] ? folio_alloc_buffers+0x235/0x640 [ 576.172257][ C1] folio_alloc_buffers+0x19b/0x640 [ 576.177405][ C1] create_empty_buffers+0x3a/0x530 [ 576.182548][ C1] __block_write_full_folio+0xc5/0xe10 [ 576.188041][ C1] ? block_write_full_folio+0x23b/0x470 [ 576.193613][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 576.199017][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 576.204416][ C1] blkdev_writepages+0xef/0x1b0 [ 576.209313][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 576.214826][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 576.219969][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 576.225449][ C1] do_writepages+0x32e/0x550 [ 576.230073][ C1] ? reacquire_held_locks+0x104/0x190 [ 576.235482][ C1] ? writeback_sb_inodes+0x463/0x19d0 [ 576.240883][ C1] __writeback_single_inode+0x133/0x10e0 [ 576.246549][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 576.251704][ C1] writeback_sb_inodes+0x979/0x19d0 [ 576.256968][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 576.262662][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 576.268155][ C1] ? __pfx_move_expired_inodes+0x10/0x10 [ 576.273831][ C1] __writeback_inodes_wb+0x111/0x240 [ 576.279156][ C1] writeback_inodes_wb+0x197/0x240 [ 576.284307][ C1] ? __pfx_writeback_inodes_wb+0x10/0x10 [ 576.289991][ C1] ? kthread_data+0x4f/0xc0 [ 576.294527][ C1] wb_workfn+0xed8/0xf10 [ 576.298800][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 576.303761][ C1] ? look_up_lock_class+0x57/0x110 [ 576.308910][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 576.313882][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 576.318685][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 576.323750][ C1] ? lock_acquire+0x106/0x350 [ 576.328455][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 576.333867][ C1] ? process_scheduled_works+0xa70/0x1860 [ 576.339623][ C1] ? process_scheduled_works+0xa70/0x1860 [ 576.345386][ C1] ? process_scheduled_works+0xa70/0x1860 [ 576.351129][ C1] ? process_scheduled_works+0xa70/0x1860 [ 576.356874][ C1] process_scheduled_works+0xb5d/0x1860 [ 576.362476][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.368480][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 576.373557][ C1] rescuer_thread+0x827/0x1130 [ 576.378367][ C1] ? rescuer_thread+0xbb/0x1130 [ 576.383264][ C1] kthread+0x388/0x470 [ 576.387369][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 576.392598][ C1] ? __pfx_kthread+0x10/0x10 [ 576.397226][ C1] ret_from_fork+0x514/0xb70 [ 576.401938][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 576.407252][ C1] ? __switch_to+0xc79/0x1410 [ 576.411964][ C1] ? __pfx_kthread+0x10/0x10 [ 576.416588][ C1] ret_from_fork_asm+0x1a/0x30 [ 576.421410][ C1]