last executing test programs: 47.97527263s ago: executing program 0 (id=3829): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x1c95, 0x2, 0x1f, 0x1c, 0x1e, 0x8}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3ff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x70}}, 0x804) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sysfs$1(0x1, &(0x7f0000000040)='$)-m#-#[\"$\x00') lstat(0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x3}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x284, &(0x7f0000000280)="1a00000002000000", 0x65) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x45, "ba2ea15e502f1d2a28a3570d53fd0cfd3ab318ba199e4879745975394b744bcfe41f7146286e576a6166f66658c7d30946ce6ec0cbfae78762f92aab2b2095ad75a930dd45"}, &(0x7f00000000c0)=0x4d) tee(r4, r5, 0x4, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'}) 42.75952321s ago: executing program 0 (id=3838): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24014040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 42.062975879s ago: executing program 0 (id=3839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) r8 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 40.55400668s ago: executing program 0 (id=3843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) 38.271951129s ago: executing program 0 (id=3857): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) 36.431145922s ago: executing program 0 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24014040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 28.608251356s ago: executing program 4 (id=3869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d0001010330050904000801039760eb8921ff0001f021b00b09058103100002ba07090502032000080e01"], 0x0) r2 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x2a, &(0x7f0000000900)=ANY=[@ANYBLOB="18110000000000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32, @ANYBLOB, @ANYBLOB="8abadb60cd7e31cb7a30e5225e9ef40d857c90f6abe70f2e3ab0f1064d8c6f354b4e7074e6", @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x2, 0x100, 0x4, {0xf, 0x82, 0x1, 0x7}}) syz_io_uring_setup(0x20be, 0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="c3b9992280ff3da72979e0bb1fac9be169b1cbcdbba822c774817561f907e56ce9a3afeaefe038b5d6cca8", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) syz_emit_ethernet(0x1232, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd607428dd11fc3afffe8000000000000000000000000000bbff020000000000000000000000000001850090780000000022127fd4409f371955b4c3909dd9c8fb306a531909b0c9af18891f1cbfa1e61de24d060ef55c95e5dc9bcf6534fc4ed6f602c74fda703aed0ec1597485e936ba1e18d6a5b3ba91a7dd2eab0399ea0f9a8330b91045fd4f063398d0c3116e256e31c855beb8eb21fa539c11950c647cbfc6adde008050290c830ab911878ea83a356cef12a9db5262694652d1e72e4fbec3bc7ca70200fcd3312a70f7c3ddbaf27c9f4f7e535121228bab897fc236a7acc2c62bd04cb8ac0d1699b4e2a50fe5152eeec7f996b94eb21af49bc0a4e2e2bc902350a3a7e8bf94a044ae9b1137fc29da9192ea72c8bce97eb752efb379e5cfd28f87438237490f31820e77e878ec4e090c8d490a1155d0adbd598e1be7f47dce83e5a58369279214f69bf09f66406098c57f820795dd03f8c9724c0069fe01bb12994bad06ffab449251724da1e06066c46682341ff267834a9c3b5195f1dad422731427c27947d540d7dfc0bc7d8567649d0f6884a62d2c26b96b6d0b352a624ecf5988721fcf4052e2e9c0c704c58691124ea030e5280ca0e6c4cb6dcef19196f9604acb2e7a2fec62250a952f793bbd8b425d10c3a5ef8327759ffb64ee822b75bad72e5d55036542d5790efc071aae32349cac28c4d13d375c82caade961e17ab8ddd0b96e1de22f41ddcc0a2656f114bb3fc6338f1e2ece2489734597e006e6e442f6dbb9341956e29530f153b97923540a333c6467c65ad5942ac151c19451137b2d77c68aac"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0xffff, 0x2, 0x2}) syz_usb_connect(0x0, 0x100, &(0x7f0000000240)={{0x12, 0x1, 0x51, 0xad, 0x68, 0xb3, 0x20, 0x7d1, 0x3e01, 0x2e9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x2, 0x59, 0x5, 0x40, 0xf4, [{{0x9, 0x4, 0xe4, 0x0, 0x2, 0xff, 0xff, 0xff, 0x80, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x3, 0x80, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0x3, 0xfb}}]}}, {{0x9, 0x4, 0xfb, 0x13, 0x3, 0x1c, 0x4, 0xaa, 0x5, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "afd0abe2f7"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0xc, 0x3, 0x7}}], [{{0x9, 0x5, 0xe, 0xc, 0x10, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x5, 0x0, 0x85, [@generic={0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x180, 0x3, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x9, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x100}, @generic={0x6c, 0xc, "ce4f64d58e4730a0277e59881b0179e0d2ef4524885d1cb2cc767ff52bc15463dedf03219f529ea566ee81258f479cc10b0acc2a40fed4e5323c7c38d6e84ec3650a407598a123c6f9280f1e3b9ca69d5a90df0c42cb4d070a8b1e6c3a342c03a230e297470e8202b228"}]}}]}}]}}]}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000200)='ipvlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160003000000080004"], 0x44}}, 0x0) 26.143238181s ago: executing program 3 (id=3872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) r8 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 26.049410297s ago: executing program 1 (id=3873): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0xc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000005c0)={0x3, 0x2, 0x2, "0d159fe28bdca5a7951c5861adf99c93ee9288816c78b6ef0482e45b0ec1eb6e", 0x796a7f23}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x384}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)}}, {}], 0x2, 0xc0) 25.445292769s ago: executing program 4 (id=3875): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502) r3 = dup2(r2, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004e00004c0000000000059078ac1414000a010100441405030000000000000000ffffffff00000000890bcee0000002ac1414bb830200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="02d22eb1bdfd0000"], 0x0) syz_io_uring_setup(0x310b, &(0x7f0000000180)={0x0, 0xcebf, 0x20, 0x3, 0x2f7, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000200)) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x2) syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40046432, &(0x7f0000000280)=0x3) r4 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000840)={@link_local, @dev, @val={@void}, {@can={0xc, {{0x1}, 0x1, 0x2, 0x0, 0x0, "3c152338035611f4"}}}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff020e27"], 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000000), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c0001800600060080350000b82002"], 0x20dc}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000240)=@arm64={0x2, 0x2, 0x1, '\x00', 0x100000000000003}) 25.165135054s ago: executing program 3 (id=3876): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000001e00)={0xa, 0x4e23, 0x55e, @loopback}, 0x1c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x22b8, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x2295, 0xec, 0x0, 0x1, [@typed={0x6, 0x30, 0x0, 0x0, @str='\xff\xff'}, @typed={0x8, 0xec, 0x0, 0x0, @fd=r8}, @generic="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", @generic="369972648388045c82d61e0be04ac0fbe835bf5047d3a92b3d57de13ec922e56788e8fb46c36d844a3670e88c2d8265c0c94ba02e5449774f61061d201f2b5433498ed7ae1aa2fc5c5ff7a6b5fd2c1ee64cc756e66133eb32e3aa4131ec804d93240c3d46e11eb429b2a3f31685ab1e23d227282dba94e", @nested={0xa8, 0xc, 0x0, 0x1, [@nested={0x4, 0x12}, @generic="1bd02b5a35ed70d8dfe7a7ffd4958cc9013ff14d4b91c0cda5f5c7e54f27e8a4cca25f542ad3e65ccc398f8d5cf637799748806db0d3fafe035c904fbe41c6b5b6340d746bba4c8128c685f057792d571b43162edd364651bffa733d9361642bdb6f8ece7099fbfd4ac35df7a8fc191bd64214de180b6b9970fca2153bff3c41ee8a6aba82c61aff541ee506b8444b9020cc25cf1d7f85b5377eb1c281d68bd3"]}, @nested={0x10bf, 0x70, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @u32}, @typed={0x1004, 0xc9, 0x0, 0x0, @binary="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"}, @generic="6420d9ede12b93b078a00a5b187bbd4ae5da3d809b96b4ed05336bb6dcc674de71c5cbdb33472aa7d51c4f4842806fba8302a3a6db069b34173e191560859f599ed4d68de3cc9f31a676839b918386bca85ab326d9513ebcda7a5036a20ee9c2848fe0f67fc6835ccc5dd9fb7b3ad85918f3c93b00dca81eb94a3b5bc21e88e928eae2fac05e282e5c487f608942cceed317fb443cff9df9bf98bef78014fae6c2070b", @typed={0x8, 0xda, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x135}]}, @nested={0x75, 0x5f, 0x0, 0x1, [@generic="8dfa7c4a70beca8857dcd11d9590feaed4b944243e05cb321de2dea14fd314d55cde838d411975aee0bf8183b2f17334d4b4c04bfb8b31adfccba7b17a7e5b86dd5ade544ffb4045d112242c244366a1b8a64e36e4dfde78fb808be04c6a9bbd092f3752a2b7544fb6", @typed={0x8, 0xd4, 0x0, 0x0, @fd=r8}]}, @generic="1405122dc553d078c1861d8da9970cb0f90aacc5999584870ffec23e83", @typed={0x8, 0x63, 0x0, 0x0, @fd=r5}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x22b8}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, 0x0) close(r9) openat$misdntimer(0xffffff9c, &(0x7f0000000140), 0x80c40, 0x0) 24.178724984s ago: executing program 1 (id=3877): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) r8 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 22.999944254s ago: executing program 1 (id=3878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) r8 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 21.849827843s ago: executing program 3 (id=3880): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x4818}, &(0x7f0000000400)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r8, 0x4008af25, 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x40000000, 0x0, {0x7, 0x0, 0x0, r7, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x4000) r9 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902", @ANYRES8], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000080)={0xc, &(0x7f0000000440)={0x0, 0x22, 0x84, {0x84, 0x1f, "ffdf00000004002008006977ebdff1d9711dd2b303e2377621da95b70cf074f9f353f3dcab024fec452481743fc31c1b7de0512728b8a31aac262a1249b5dee15c2205edaa0a3e32e415b98468154b986c32ee1c5a3d105f333b550ad12948d40430a42e546beb823c13bed3a192684e5f771fc9fc09f383e63ce7c85574ae67a85f"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x0, 0xd51397165183550, 0xd, "ba317e6dc7a45cdd5ffe13319c"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x26}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x1, 0x481, 0x20000000, 0x4, 0x0, 0x4, 0xc8a, 0x7, 0xff5, 0x7, 0x0, 0xfa73}}, &(0x7f00000001c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000200)={0x20, 0x83, 0x2}, &(0x7f0000000280)={0x20, 0x87, 0x2, 0x9}, 0x0}) 21.685860186s ago: executing program 1 (id=3881): socket(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000300)=0x1) close(r0) syz_open_dev$sg(&(0x7f0000000080), 0xf9bc, 0x65ea84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x804) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r7, &(0x7f00000001c0)=""/212, 0xd4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 21.44222716s ago: executing program 4 (id=3882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000", @ANYBLOB="f7", @ANYRESDEC], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r6, 0x81, 0x7, &(0x7f0000000080)="00012c615bc200") syz_usb_control_io(r6, 0x0, 0x0) read$char_usb(r7, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 21.104236938s ago: executing program 32 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x24014040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 20.628680903s ago: executing program 2 (id=3884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) 19.442982663s ago: executing program 1 (id=3885): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) setsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000380)="67609f1bc76b660c7f522543621903dbd6dfb1322eb58ade49f7f6873e8c5b3a1e47a60fb805cbdca74d2ef9be337149a65b0c074f4b1001eff7a36fd2627258a02a3b46aba1f0f5f27cca55a28ffd26acca165107f55e8dfc020f192c7931515be26928a4af66540b951c34e67537616956b8022eaf08fef4a00257a4868b80ff3c2fcbe10ae082c9c46072d2c8e96da8a63af5cb6d56edf5d74507277a42ff37ed45231249e12d7e84a0cb2f08f24f1fd6010187f1a047", 0xb8) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x30000008}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010026bd7000000000000200000000000001000000001400030073797a6b616c6ce57230000000000000"], 0x30}}, 0x0) 19.321907588s ago: executing program 2 (id=3886): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) r8 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 18.373182735s ago: executing program 3 (id=3887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x40000008) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="00001000ec252155b21c0012000c000100626f6e0900000000000000000800017ec3"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r10, 0x0, 0xffffffdb) 17.990947301s ago: executing program 2 (id=3888): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) r8 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 17.894694717s ago: executing program 4 (id=3889): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x5b, 0xd4, 0x3}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x20000000}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x98}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) r8 = request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000280)="a9d6a9", 0x3, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 16.925468203s ago: executing program 4 (id=3890): syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) 16.787837838s ago: executing program 2 (id=3891): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc9, 0xf3}}}, 0x8) 16.671947614s ago: executing program 4 (id=3892): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(r5) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000180)={0x1, 0x0, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20000253) symlink(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x40045731, &(0x7f0000000000)) unlink(&(0x7f0000000140)='./file0/../file0\x00') 16.570447877s ago: executing program 3 (id=3893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x6, 0x4, 0x1, r3, 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x35, 0x8, 0x0, 0x0, 0x4, 0x0, 0x6c, 0x0, 0x8400000000000, 0x80000000000000, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0xa74], 0xdddd0000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000280)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x0, 0x0, 'queue1\x00', 0x8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x9, 0x4, 0x2, 0x0, 0x2, 0x6, 0x4, 0x2], 0xf000, 0x82106}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) execve(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r8, &(0x7f0000022c00)={0x0, 0x0, 0x0}, 0x10120) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002f40), 0xffffffffffffffff) 16.453259537s ago: executing program 2 (id=3894): socket(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000300)=0x1) close(r0) syz_open_dev$sg(&(0x7f0000000080), 0xf9bc, 0x65ea84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x804) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r7, &(0x7f00000001c0)=""/212, 0xd4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15.406426294s ago: executing program 3 (id=3895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) 15.403252571s ago: executing program 2 (id=3896): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x4818}, &(0x7f0000000400)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r8, 0x4008af25, 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x40000000, 0x0, {0x7, 0x0, 0x0, r7, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x4000) r9 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902", @ANYRES8], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000080)={0xc, &(0x7f0000000440)={0x0, 0x22, 0x84, {0x84, 0x1f, "ffdf00000004002008006977ebdff1d9711dd2b303e2377621da95b70cf074f9f353f3dcab024fec452481743fc31c1b7de0512728b8a31aac262a1249b5dee15c2205edaa0a3e32e415b98468154b986c32ee1c5a3d105f333b550ad12948d40430a42e546beb823c13bed3a192684e5f771fc9fc09f383e63ce7c85574ae67a85f"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x0, 0xd51397165183550, 0xd, "ba317e6dc7a45cdd5ffe13319c"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x26}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x1, 0x481, 0x20000000, 0x4, 0x0, 0x4, 0xc8a, 0x7, 0xff5, 0x7, 0x0, 0xfa73}}, &(0x7f00000001c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000200)={0x20, 0x83, 0x2}, &(0x7f0000000280)={0x20, 0x87, 0x2, 0x9}, 0x0}) 15.234051687s ago: executing program 1 (id=3897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) 1.093326772s ago: executing program 33 (id=3892): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(r5) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000180)={0x1, 0x0, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20000253) symlink(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x40045731, &(0x7f0000000000)) unlink(&(0x7f0000000140)='./file0/../file0\x00') 91.130771ms ago: executing program 34 (id=3897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) 61.841509ms ago: executing program 35 (id=3896): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x4818}, &(0x7f0000000400)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r8, 0x4008af25, 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x40000000, 0x0, {0x7, 0x0, 0x0, r7, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x4000) r9 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902", @ANYRES8], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000080)={0xc, &(0x7f0000000440)={0x0, 0x22, 0x84, {0x84, 0x1f, "ffdf00000004002008006977ebdff1d9711dd2b303e2377621da95b70cf074f9f353f3dcab024fec452481743fc31c1b7de0512728b8a31aac262a1249b5dee15c2205edaa0a3e32e415b98468154b986c32ee1c5a3d105f333b550ad12948d40430a42e546beb823c13bed3a192684e5f771fc9fc09f383e63ce7c85574ae67a85f"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x0, 0xd51397165183550, 0xd, "ba317e6dc7a45cdd5ffe13319c"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x26}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x1, 0x481, 0x20000000, 0x4, 0x0, 0x4, 0xc8a, 0x7, 0xff5, 0x7, 0x0, 0xfa73}}, &(0x7f00000001c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000200)={0x20, 0x83, 0x2}, &(0x7f0000000280)={0x20, 0x87, 0x2, 0x9}, 0x0}) 0s ago: executing program 36 (id=3895): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)) write$dsp(r2, &(0x7f0000000000)="81", 0x1) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080) kernel console output (not intermixed with test programs): e [ 1652.277741][T20334] ip6gretap0: left promiscuous mode [ 1652.283814][T20334] ip6gretap0: entered allmulticast mode [ 1652.291673][T20334] vcan0: left promiscuous mode [ 1652.296586][T20334] vcan0: entered allmulticast mode [ 1652.303015][T20334] bond0: left promiscuous mode [ 1652.309994][T20334] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1652.359525][T20334] bond0: entered allmulticast mode [ 1652.371496][T20334] dummy0: left promiscuous mode [ 1652.401975][T20334] dummy0: entered allmulticast mode [ 1652.414944][T20334] nlmon0: left promiscuous mode [ 1652.420996][T20334] nlmon0: entered allmulticast mode [ 1652.647752][T20334] caif0: left promiscuous mode [ 1652.666206][T20334] caif0: entered allmulticast mode [ 1652.683405][T20334] bond1: left promiscuous mode [ 1653.235488][T20351] overlayfs: missing 'lowerdir' [ 1655.437426][T11956] usb 4-1: USB disconnect, device number 58 [ 1655.958763][ T54] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1656.159261][T18156] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1656.181700][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 1656.201052][ T54] usb 4-1: config 0 has an invalid interface number: 250 but max is 2 [ 1656.214433][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.234850][ T54] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1656.275513][ T54] usb 4-1: config 0 has no interface number 0 [ 1656.435955][ T54] usb 4-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 1656.447040][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.468826][ T54] usb 4-1: Product: syz [ 1656.473118][ T54] usb 4-1: Manufacturer: syz [ 1656.488146][ T54] usb 4-1: SerialNumber: syz [ 1656.515747][ T54] usb 4-1: config 0 descriptor?? [ 1656.536312][T18156] usb 2-1: config 0 has no interfaces? [ 1656.572933][T18156] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1656.597010][T18156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.615812][T18156] usb 2-1: Product: syz [ 1657.017223][ T54] usb 4-1: USB disconnect, device number 59 [ 1657.100115][T18156] usb 2-1: Manufacturer: syz [ 1657.105604][T18156] usb 2-1: SerialNumber: syz [ 1657.125364][T18156] usb 2-1: config 0 descriptor?? [ 1657.288743][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1657.599828][ T9] usb 3-1: config 0 has no interfaces? [ 1657.622977][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1657.654620][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.699484][ T9] usb 3-1: Product: syz [ 1657.703844][ T9] usb 3-1: Manufacturer: syz [ 1657.709129][ T9] usb 3-1: SerialNumber: syz [ 1657.720692][ T9] usb 3-1: config 0 descriptor?? [ 1657.816905][T20386] input input185: cannot allocate more than FF_MAX_EFFECTS effects [ 1657.883680][T20386] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1658.584245][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 1659.693472][ T9] usb 2-1: USB disconnect, device number 66 [ 1659.855236][T20401] input input186: cannot allocate more than FF_MAX_EFFECTS effects [ 1660.222904][ T9] usb 3-1: USB disconnect, device number 80 [ 1663.131336][T20424] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1663.427805][T20436] input input187: cannot allocate more than FF_MAX_EFFECTS effects [ 1663.559985][T20436] lo: entered allmulticast mode [ 1663.565412][T20436] tunl0: entered allmulticast mode [ 1663.643784][T20436] gre0: entered allmulticast mode [ 1663.709494][T20436] gretap0: entered allmulticast mode [ 1663.731978][T20436] ip_vti0: entered allmulticast mode [ 1663.827019][T20436] ip6_vti0: entered allmulticast mode [ 1663.833330][T20436] sit0: entered allmulticast mode [ 1663.839166][T20436] ip6tnl0: entered allmulticast mode [ 1663.844710][T20436] ip6gre0: entered allmulticast mode [ 1663.850676][T20436] syz_tun: entered allmulticast mode [ 1663.856233][T20436] ip6gretap0: entered allmulticast mode [ 1663.890314][T20436] bridge0: entered allmulticast mode [ 1663.909297][T20436] vcan0: entered allmulticast mode [ 1663.920468][T20436] bond0: entered allmulticast mode [ 1663.959451][T20436] nlmon0: entered allmulticast mode [ 1663.969231][T20436] caif0: entered allmulticast mode [ 1663.974571][T20436] batadv0: entered allmulticast mode [ 1664.108992][T20436] vxcan0: entered allmulticast mode [ 1664.134916][T20436] vxcan1: entered allmulticast mode [ 1664.322217][T20436] veth0: entered allmulticast mode [ 1664.338412][T20436] veth1: entered allmulticast mode [ 1664.357018][T20436] wg0: entered allmulticast mode [ 1664.379411][T20436] wg1: entered allmulticast mode [ 1664.397185][T20436] wg2: entered allmulticast mode [ 1664.406068][T20436] veth0_to_bridge: entered allmulticast mode [ 1664.418937][T20436] bridge_slave_0: entered allmulticast mode [ 1664.435305][T20436] veth1_to_bridge: entered allmulticast mode [ 1664.463934][T20436] bridge_slave_1: entered allmulticast mode [ 1664.472119][T20436] veth0_to_bond: entered allmulticast mode [ 1664.484861][T20436] bond_slave_0: entered allmulticast mode [ 1664.491251][T20436] veth1_to_bond: entered allmulticast mode [ 1664.507629][T20436] bond_slave_1: entered allmulticast mode [ 1664.514163][T20436] veth0_to_team: entered allmulticast mode [ 1664.526348][T20436] team_slave_0: entered allmulticast mode [ 1664.544928][T20436] veth1_to_team: entered allmulticast mode [ 1664.551644][T20436] team_slave_1: entered allmulticast mode [ 1664.563812][T20436] veth0_to_batadv: entered allmulticast mode [ 1664.571818][T20436] batadv_slave_0: entered allmulticast mode [ 1664.579142][T20436] xfrm0: entered allmulticast mode [ 1664.584765][T20436] veth0_to_hsr: entered allmulticast mode [ 1664.621233][T20436] hsr_slave_0: entered allmulticast mode [ 1664.645362][T20436] veth1_to_hsr: entered allmulticast mode [ 1664.682861][T20436] hsr_slave_1: entered allmulticast mode [ 1664.716612][T20436] hsr0: entered allmulticast mode [ 1664.749226][T20436] veth1_virt_wifi: entered allmulticast mode [ 1664.775489][T20436] veth0_virt_wifi: entered allmulticast mode [ 1664.802746][T20436] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1664.821653][T20436] veth1_vlan: entered allmulticast mode [ 1664.834145][T20436] veth0_vlan: entered allmulticast mode [ 1664.846255][T20436] @: entered allmulticast mode [ 1664.854612][T20436] vlan1: entered allmulticast mode [ 1664.862015][T20436] macvlan0: entered allmulticast mode [ 1664.871599][T20436] macvlan1: entered allmulticast mode [ 1664.882256][T20436] ipvlan0: entered allmulticast mode [ 1664.892358][T20436] ipvlan1: entered allmulticast mode [ 1664.901077][T20436] veth1_macvtap: entered allmulticast mode [ 1664.913446][T20436] veth0_macvtap: entered allmulticast mode [ 1664.921795][T20436] macvtap0: entered allmulticast mode [ 1664.927536][T20436] macsec0: entered allmulticast mode [ 1664.936813][T20436] geneve0: entered allmulticast mode [ 1664.943452][T20436] geneve1: entered allmulticast mode [ 1664.953238][T20436] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1664.971562][T20436] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1664.986747][T20436] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1665.001325][T20436] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1665.019760][T20436] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1665.032022][T20436] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1665.042305][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1665.053627][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1665.071562][T20436] vlan0: entered allmulticast mode [ 1665.077062][T20436] erspan1: entered allmulticast mode [ 1665.084477][T20436] gtp0: entered allmulticast mode [ 1665.092226][T20436] bond1: entered allmulticast mode [ 1665.113085][T20436] vxlan0: entered allmulticast mode [ 1665.145737][T20436] macvlan2: entered allmulticast mode [ 1665.302127][T20456] input input188: cannot allocate more than FF_MAX_EFFECTS effects [ 1665.605834][T20465] macsec0: entered promiscuous mode [ 1665.612141][T20465] macsec0: left allmulticast mode [ 1665.618780][T20465] macsec0: left promiscuous mode [ 1665.633463][T20465] 8021q: VLANs not supported on vcan0 [ 1666.011732][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1666.218698][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1666.221091][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1666.221121][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1666.221142][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1666.226312][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1666.226347][ T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1666.226371][ T9] usb 3-1: Product: syz [ 1666.226389][ T9] usb 3-1: Manufacturer: syz [ 1666.226406][ T9] usb 3-1: SerialNumber: syz [ 1666.519607][T20469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.525531][T20469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.539757][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input189 [ 1666.610891][ T9] usb 3-1: USB disconnect, device number 81 [ 1666.610913][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1666.636881][ T9] appletouch 3-1:1.0: input: appletouch disconnected [ 1666.909343][ T9116] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1667.087714][ T9116] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1667.106697][ T9116] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1667.131580][ T9116] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1667.148258][ T9116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.692582][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1667.692599][ T30] audit: type=1326 audit(1744379684.820:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20488 comm="syz.0.3258" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 1667.796829][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'. [ 1668.222476][T20497] trusted_key: encrypted_key: insufficient parameters specified [ 1668.244651][ T9116] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1668.264663][ T9116] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input190 [ 1668.329480][ T9116] input: failed to attach handler kbd to device input190, error: -5 [ 1668.349553][ T9116] usb 4-1: USB disconnect, device number 60 [ 1669.467000][T20510] input input191: cannot allocate more than FF_MAX_EFFECTS effects [ 1669.764926][T20515] input input192: cannot allocate more than FF_MAX_EFFECTS effects [ 1669.998881][ T30] audit: type=1326 audit(1744379687.090:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1670.074765][ T30] audit: type=1326 audit(1744379687.090:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1670.322060][ T30] audit: type=1326 audit(1744379687.090:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1670.448745][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1670.510081][ T30] audit: type=1326 audit(1744379687.090:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1670.707165][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.734929][ T9] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1670.811444][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1670.828258][ T30] audit: type=1326 audit(1744379687.090:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1670.908948][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.030810][ T30] audit: type=1326 audit(1744379687.090:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1671.389358][ T30] audit: type=1326 audit(1744379687.100:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1671.580666][ T30] audit: type=1326 audit(1744379687.100:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1671.663811][ T30] audit: type=1326 audit(1744379687.100:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1672.343631][T20524] netlink: 'syz.0.3270': attribute type 3 has an invalid length. [ 1672.700497][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 1672.700522][ T30] audit: type=1326 audit(1744379689.820:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1672.855550][ T30] audit: type=1326 audit(1744379689.820:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1673.166125][ T30] audit: type=1326 audit(1744379689.820:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1673.244058][ T30] audit: type=1326 audit(1744379689.820:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1673.268266][ T30] audit: type=1326 audit(1744379689.820:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1673.319551][ T30] audit: type=1326 audit(1744379689.820:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1673.394985][ T9] usb 3-1: USB disconnect, device number 82 [ 1673.419919][ T30] audit: type=1326 audit(1744379689.820:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1673.478239][ T30] audit: type=1326 audit(1744379689.820:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1673.555806][ T30] audit: type=1326 audit(1744379689.820:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1673.670430][ T30] audit: type=1326 audit(1744379689.820:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20512 comm="syz.1.3262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf749d598 code=0x7ffc0000 [ 1673.789224][ T9116] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1674.099456][ T9116] usb 4-1: Using ep0 maxpacket: 32 [ 1674.106893][ T9116] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1674.119695][ T9116] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1674.146017][ T9116] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.173416][T20546] netlink: 'syz.2.3269': attribute type 3 has an invalid length. [ 1674.197705][ T9116] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1674.208154][ T9116] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1674.221663][ T9116] usb 4-1: Product: syz [ 1674.231114][ T9116] usb 4-1: Manufacturer: syz [ 1674.302382][ T9116] usb 4-1: SerialNumber: syz [ 1674.306319][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.317870][ T9116] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input193 [ 1674.318720][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.634512][T20550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.662390][T20550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.866251][ T9] usb 4-1: USB disconnect, device number 61 [ 1675.006770][ T9] appletouch 4-1:1.0: input: appletouch disconnected [ 1677.377135][T20573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'. [ 1677.685979][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1678.268900][ T9] usb 3-1: config 0 has no interfaces? [ 1678.441442][T20584] macvlan0: left allmulticast mode [ 1678.447595][T20584] netlink: 'syz.3.3274': attribute type 2 has an invalid length. [ 1678.682955][T20592] lo: left allmulticast mode [ 1678.691012][T20592] tunl0: left allmulticast mode [ 1678.698173][T20592] gre0: left allmulticast mode [ 1678.714575][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1678.728670][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.737073][ T9] usb 3-1: Product: syz [ 1678.750928][ T9] usb 3-1: Manufacturer: syz [ 1678.774975][T20592] gretap0: left allmulticast mode [ 1678.784771][T20592] erspan0: left allmulticast mode [ 1678.792620][T20592] ip_vti0: left allmulticast mode [ 1678.800101][T20592] ip6_vti0: left allmulticast mode [ 1678.807975][T20592] sit0: left allmulticast mode [ 1678.822297][T20592] ip6tnl0: left allmulticast mode [ 1678.830151][T20592] ip6gre0: left allmulticast mode [ 1678.845712][T20592] ip6gretap0: left allmulticast mode [ 1678.853958][T20592] vcan0: left allmulticast mode [ 1678.860393][T20592] bond0: left allmulticast mode [ 1678.869153][T20592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1678.877170][T20592] dummy0: left allmulticast mode [ 1678.885449][T20592] nlmon0: left allmulticast mode [ 1678.919509][T20592] caif0: left allmulticast mode [ 1678.924495][T20592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1678.976775][ T9] usb 3-1: SerialNumber: syz [ 1679.067014][ T9] usb 3-1: config 0 descriptor?? [ 1681.423762][T18156] usb 3-1: USB disconnect, device number 83 [ 1686.137858][T18156] IPVS: starting estimator thread 0... [ 1686.229488][T20650] IPVS: using max 27 ests per chain, 64800 per kthread [ 1686.432455][T20653] input input195: cannot allocate more than FF_MAX_EFFECTS effects [ 1687.354545][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 1687.659347][ T9116] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1687.810837][ T9116] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1687.839753][ T9116] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1687.862241][ T9116] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 1687.885117][ T9116] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1687.899222][ T9116] usb 2-1: config 220 has no interface number 2 [ 1687.907539][ T9116] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1687.951247][ T9116] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1687.960085][ T9116] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1687.969369][ T9116] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1687.996730][ T9116] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1688.007153][ T9116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.024581][ T9116] usb 2-1: Product: syz [ 1688.029912][ T9116] usb 2-1: Manufacturer: syz [ 1688.034755][ T9116] usb 2-1: SerialNumber: syz [ 1688.109723][T18156] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1688.290122][T18156] usb 3-1: config 0 has no interfaces? [ 1688.302729][ T9116] usb 2-1: selecting invalid altsetting 0 [ 1688.310090][T18156] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1688.320097][T18156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.334360][T18156] usb 3-1: Product: syz [ 1688.338549][T18156] usb 3-1: Manufacturer: syz [ 1688.353898][T18156] usb 3-1: SerialNumber: syz [ 1688.366737][T18156] usb 3-1: config 0 descriptor?? [ 1688.409819][ T9116] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1688.432969][ T9116] usb 2-1: No valid video chain found. [ 1688.540899][T20675] wg1: entered promiscuous mode [ 1688.720349][ T9116] usb 2-1: selecting invalid altsetting 0 [ 1688.729590][ T9116] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1688.750411][ T9116] usb 2-1: USB disconnect, device number 67 [ 1689.384438][T20676] futex_wake_op: syz.4.3300 tries to shift op by -33; fix this program [ 1689.444742][T20676] netdevsim netdevsim4: Direct firmware load for . [ 1689.444742][T20676] failed with error -2 [ 1689.494255][T20676] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1689.494255][T20676] [ 1691.667896][T20703] wg1: left promiscuous mode [ 1691.677565][T20703] macsec0: entered allmulticast mode [ 1691.725160][ T9116] usb 3-1: USB disconnect, device number 84 [ 1693.853876][T20732] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3309'. [ 1694.061292][ T5895] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1694.328131][ T5895] usb 2-1: config 0 has no interfaces? [ 1694.341133][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1694.353331][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.362308][ T5895] usb 2-1: Product: syz [ 1694.366531][ T5895] usb 2-1: Manufacturer: syz [ 1694.416261][ T5895] usb 2-1: SerialNumber: syz [ 1694.451837][ T5895] usb 2-1: config 0 descriptor?? [ 1695.047759][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3312'. [ 1695.329303][T16959] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1695.663061][T20714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.681280][T16959] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1695.690134][T16959] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1695.706404][T16959] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 1695.783626][T20747] syzkaller0: entered promiscuous mode [ 1695.789382][T20747] syzkaller0: entered allmulticast mode [ 1695.867747][T16959] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1695.912836][T16959] usb 4-1: config 220 has no interface number 2 [ 1695.953306][T16959] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1696.042187][T16959] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1696.079459][T16959] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1696.086637][T16959] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1696.111786][T16959] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1696.124006][T16959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.132841][T16959] usb 4-1: Product: syz [ 1696.137215][T16959] usb 4-1: Manufacturer: syz [ 1696.142532][T16959] usb 4-1: SerialNumber: syz [ 1696.530526][T16959] usb 4-1: selecting invalid altsetting 0 [ 1696.559207][T16959] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1696.580761][T16959] usb 4-1: No valid video chain found. [ 1696.655700][T16959] usb 4-1: selecting invalid altsetting 0 [ 1696.672887][T16959] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1696.704561][T16959] usb 4-1: USB disconnect, device number 62 [ 1697.020046][T16959] usb 2-1: USB disconnect, device number 68 [ 1697.187479][T20755] xt_recent: Unsupported userspace flags (000000fe) [ 1697.286842][T20756] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1697.445235][T20757] futex_wake_op: syz.2.3315 tries to shift op by -33; fix this program [ 1699.565818][T20757] netdevsim netdevsim2: Direct firmware load for . [ 1699.565818][T20757] failed with error -2 [ 1699.586870][T20757] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1699.586870][T20757] [ 1699.950508][T20766] kvm: pic: non byte read [ 1699.955362][T20766] kvm: pic: non byte read [ 1699.963882][T20766] kvm: pic: level sensitive irq not supported [ 1699.965991][T20766] kvm: pic: level sensitive irq not supported [ 1699.996100][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 1700.528821][ T5895] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1700.689017][T20782] netlink: 8848 bytes leftover after parsing attributes in process `syz.3.3320'. [ 1700.699094][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 1700.705861][ T5895] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1700.726143][ T5895] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1700.775053][ T5895] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1700.809474][ T5895] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1700.819182][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1700.827693][ T5895] usb 3-1: Product: syz [ 1700.832221][ T5895] usb 3-1: Manufacturer: syz [ 1700.840999][ T5895] usb 3-1: SerialNumber: syz [ 1701.020630][ T5895] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input196 [ 1701.236478][T20777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.253349][T20777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.309297][T16959] usb 3-1: USB disconnect, device number 85 [ 1701.333149][T16959] appletouch 3-1:1.0: input: appletouch disconnected [ 1704.106085][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1704.758503][T20812] futex_wake_op: syz.1.3332 tries to shift op by -33; fix this program [ 1704.777578][T20812] netdevsim netdevsim1: Direct firmware load for . [ 1704.777578][T20812] failed with error -2 [ 1704.884876][T20812] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1704.884876][T20812] [ 1705.186783][T20827] misc userio: The device must be registered before sending interrupts [ 1706.555938][T20834] bond0: (slave netdevsim0): Releasing backup interface [ 1706.799550][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1707.691485][T20851] ======================================================= [ 1707.691485][T20851] WARNING: The mand mount option has been deprecated and [ 1707.691485][T20851] and is ignored by this kernel. Remove the mand [ 1707.691485][T20851] option from the mount to silence this warning. [ 1707.691485][T20851] ======================================================= [ 1707.749565][T20851] tipc: Trying to set illegal importance in message [ 1708.030296][T20855] futex_wake_op: syz.2.3340 tries to shift op by -33; fix this program [ 1708.080009][T20855] netdevsim netdevsim2: Direct firmware load for . [ 1708.080009][T20855] failed with error -2 [ 1708.091612][T20855] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1708.091612][T20855] [ 1708.128958][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1708.582340][ T9] usb 4-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1708.756225][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1708.774984][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 1708.912646][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.924453][ T9] usb 4-1: config 0 descriptor?? [ 1709.749463][ T5895] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1709.988545][ T5895] usb 3-1: config 0 has no interfaces? [ 1710.000329][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1710.020050][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.039470][ T9116] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1710.059249][ T5895] usb 3-1: Product: syz [ 1710.075906][ T5895] usb 3-1: Manufacturer: syz [ 1710.164187][ T5895] usb 3-1: SerialNumber: syz [ 1710.333938][ T9116] usb 2-1: Using ep0 maxpacket: 16 [ 1710.344088][ T5895] usb 3-1: config 0 descriptor?? [ 1710.459304][ T9116] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1710.552333][ T9116] usb 2-1: config 1 has an invalid interface number: 160 but max is 0 [ 1710.566943][ T9116] usb 2-1: config 1 has no interface number 0 [ 1710.593116][ T9116] usb 2-1: config 1 interface 160 has no altsetting 0 [ 1710.631040][ T9116] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 1710.669872][ T9116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.678016][ T9116] usb 2-1: Product: syz [ 1710.701577][T20875] netlink: 'syz.2.3347': attribute type 10 has an invalid length. [ 1710.710265][T20875] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 1710.719300][T20875] bond0: (slave wlan1): Opening slave failed [ 1710.804684][ T9116] usb 2-1: Manufacturer: syz [ 1710.861160][ T9116] usb 2-1: SerialNumber: syz [ 1710.938154][ T9] usb 4-1: string descriptor 0 read error: -71 [ 1710.948666][ T9] usb 4-1: ucan: probing device on interface #0 [ 1710.968464][ T9] usb 4-1: ucan: invalid endpoint configuration [ 1711.046880][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 1711.082385][ T9] usb 4-1: USB disconnect, device number 63 [ 1711.161405][T20878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3348'. [ 1711.177421][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3348'. [ 1711.922783][T20891] xt_CT: No such helper "syz0" [ 1713.002149][ T9116] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 1713.033142][ T9116] visor 2-1:1.160: Handspring Visor / Palm OS converter detected [ 1713.099141][ T9] usb 3-1: USB disconnect, device number 86 [ 1713.108440][ T9116] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1713.208651][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1713.208676][ T30] audit: type=1800 audit(1744379730.330:3826): pid=20899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3352" name="nullb0" dev="devtmpfs" ino=4967 res=0 errno=0 [ 1713.239641][ T9116] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1713.281056][ T9116] usb 2-1: USB disconnect, device number 69 [ 1713.379216][ T9116] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1713.603006][T20909] netlink: 'syz.1.3353': attribute type 12 has an invalid length. [ 1713.616082][T20909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3353'. [ 1713.640473][ T9116] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1713.748376][ T9116] visor 2-1:1.160: device disconnected [ 1714.460958][T20917] futex_wake_op: syz.4.3355 tries to shift op by -33; fix this program [ 1714.480854][T20920] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3357'. [ 1714.502285][T20917] netdevsim netdevsim4: Direct firmware load for . [ 1714.502285][T20917] failed with error -2 [ 1714.531357][T20917] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1714.531357][T20917] [ 1716.639644][T20945] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1716.937563][T16959] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1717.277084][T16959] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1717.286440][T16959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.311762][T16959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1717.358686][T16959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.393278][T20955] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3365'. [ 1717.497953][T16959] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1717.520073][T16959] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1717.657514][T16959] usb 4-1: Product: syz [ 1717.748810][T16959] usb 4-1: Manufacturer: syz [ 1717.774212][T16959] cdc_wdm 4-1:1.0: skipping garbage [ 1717.779714][T16959] cdc_wdm 4-1:1.0: skipping garbage [ 1717.788734][T16959] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1718.581638][T20963] netlink: 'syz.1.3367': attribute type 21 has an invalid length. [ 1718.691241][ T9116] usb 4-1: USB disconnect, device number 64 [ 1718.798783][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 1719.571066][T20985] input input197: cannot allocate more than FF_MAX_EFFECTS effects [ 1719.880062][T20977] netlink: 'syz.0.3369': attribute type 3 has an invalid length. [ 1720.079499][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1720.244465][T20996] sctp: [Deprecated]: syz.3.3373 (pid 20996) Use of int in maxseg socket option. [ 1720.244465][T20996] Use struct sctp_assoc_value instead [ 1720.280668][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 1720.363159][ T9] usb 3-1: config 0 has no interfaces? [ 1720.453775][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1720.463003][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.491134][ T9] usb 3-1: Product: syz [ 1720.501539][ T9] usb 3-1: Manufacturer: syz [ 1720.517012][ T9] usb 3-1: SerialNumber: syz [ 1720.534296][ T9] usb 3-1: config 0 descriptor?? [ 1721.673603][ T5895] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1721.989336][ T5895] usb 4-1: config 0 has no interfaces? [ 1722.034325][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1722.084424][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.127839][ T5895] usb 4-1: Product: syz [ 1722.147199][ T5895] usb 4-1: Manufacturer: syz [ 1722.165388][ T5895] usb 4-1: SerialNumber: syz [ 1722.236298][T16959] usb 3-1: USB disconnect, device number 87 [ 1722.294492][ T5895] usb 4-1: config 0 descriptor?? [ 1722.579121][ T5895] usb 4-1: USB disconnect, device number 65 [ 1725.735314][T21029] fuse: Bad value for 'fd' [ 1726.181281][T21029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1726.277225][T21038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3381'. [ 1727.743106][T21051] input input198: cannot allocate more than FF_MAX_EFFECTS effects [ 1727.775525][ T30] audit: type=1326 audit(1744379744.900:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1727.885219][ T30] audit: type=1326 audit(1744379744.900:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1727.939047][ T30] audit: type=1326 audit(1744379744.900:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1727.968332][T21057] kvm: pic: non byte read [ 1727.988936][T21057] kvm: pic: non byte read [ 1728.014262][T21057] kvm: pic: level sensitive irq not supported [ 1728.034228][T21057] kvm: pic: level sensitive irq not supported [ 1728.048745][ T30] audit: type=1326 audit(1744379744.900:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1728.079281][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1728.147778][ T30] audit: type=1326 audit(1744379744.900:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1728.174980][T16959] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1728.197444][ T30] audit: type=1326 audit(1744379744.900:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1728.219486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.230539][ T30] audit: type=1326 audit(1744379745.150:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1728.252625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.338118][ T30] audit: type=1326 audit(1744379745.220:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1728.416001][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1728.435139][ T30] audit: type=1326 audit(1744379745.320:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1728.510657][T16959] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1728.539620][T16959] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1729.115332][ T9] usb 4-1: config 0 has no interfaces? [ 1729.143059][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1729.294105][ T30] audit: type=1326 audit(1744379745.320:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21046 comm="syz.2.3384" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2579 code=0x7ffc0000 [ 1729.463495][T16959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1729.474891][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.484696][T16959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1729.582717][ T9] usb 4-1: Product: syz [ 1729.592908][ T9] usb 4-1: Manufacturer: syz [ 1729.597704][ T9] usb 4-1: SerialNumber: syz [ 1729.602545][T16959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1729.618878][ T9] usb 4-1: config 0 descriptor?? [ 1729.624197][T16959] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1729.657303][T16959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.917359][T16959] usb 3-1: config 0 descriptor?? [ 1729.935295][T21047] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1730.380361][T16959] plantronics 0003:047F:FFFF.001B: item fetching failed at offset 14/15 [ 1730.390546][T16959] plantronics 0003:047F:FFFF.001B: parse failed [ 1730.399685][T16959] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 1730.625902][T16959] usb 3-1: USB disconnect, device number 88 [ 1731.288775][T16959] usb 4-1: USB disconnect, device number 66 [ 1732.279118][ T5895] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1732.418714][T16959] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1732.471537][ T5895] usb 2-1: config 0 has no interfaces? [ 1732.567185][T21090] input: syz1 as /devices/virtual/input/input201 [ 1732.585848][T16959] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1732.598423][T16959] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1732.672789][T16959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.704001][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1732.744335][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.748135][T16959] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1732.929291][ T5895] usb 2-1: Product: syz [ 1732.968483][ T5895] usb 2-1: Manufacturer: syz [ 1733.122179][ T5895] usb 2-1: SerialNumber: syz [ 1733.220199][ T5895] usb 2-1: config 0 descriptor?? [ 1734.621485][ T5895] usb 4-1: USB disconnect, device number 67 [ 1734.969122][T21116] futex_wake_op: syz.0.3396 tries to shift op by 144; fix this program [ 1734.979845][T21113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3395'. [ 1735.114083][T16959] usb 2-1: USB disconnect, device number 70 [ 1735.144524][T21115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3398'. [ 1735.733158][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.739666][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.339396][T21142] wg1: entered promiscuous mode [ 1738.280685][T21148] syz.2.3404 (21148): drop_caches: 2 [ 1738.286785][T21148] syz.2.3404 (21148): drop_caches: 2 [ 1738.783757][T21157] macsec0: entered promiscuous mode [ 1738.789573][T21157] macsec0: left allmulticast mode [ 1738.797226][T21157] macsec0: left promiscuous mode [ 1738.855416][T21157] vlan4: entered allmulticast mode [ 1739.664737][T21160] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1740.479266][T21177] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1741.399183][ T5895] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1741.564640][T21200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1741.575918][ T5895] usb 2-1: device descriptor read/64, error -71 [ 1741.819295][ T5895] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1741.950263][ T5895] usb 2-1: device descriptor read/64, error -71 [ 1742.059725][ T5895] usb usb2-port1: attempt power cycle [ 1742.417235][ T5895] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1742.443586][T21211] input: syz0 as /devices/virtual/input/input203 [ 1742.450400][T21211] input: failed to attach handler leds to device input203, error: -6 [ 1742.499432][ T9116] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1742.521403][ T5895] usb 2-1: device descriptor read/8, error -71 [ 1742.793961][ T9116] usb 4-1: Using ep0 maxpacket: 32 [ 1742.839175][ T5895] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1742.847307][ T9116] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.868381][ T5895] usb 2-1: device descriptor read/8, error -71 [ 1742.878128][ T9116] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.909515][ T9116] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1742.919414][ T9116] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1742.949326][ T9116] usb 4-1: Product: syz [ 1742.953577][ T9116] usb 4-1: Manufacturer: syz [ 1742.984680][ T9116] hub 4-1:4.0: USB hub found [ 1742.999776][ T5895] usb usb2-port1: unable to enumerate USB device [ 1743.474616][ T9116] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1743.585265][ T9116] usb 4-1: USB disconnect, device number 68 [ 1743.605219][T21216] delete_channel: no stack [ 1743.947652][T21219] netlink: 8848 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1744.513181][T21225] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3420'. [ 1744.710358][T21226] bond0: (slave netdevsim0): Releasing backup interface [ 1744.725494][T21226] bond2: (slave gretap1): Releasing backup interface [ 1744.783549][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1746.150826][T21242] bond4 (unregistering): Released all slaves [ 1748.442861][T21265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1748.452320][T21265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1748.461718][T21265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1748.471414][T21265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1748.587966][T21267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3427'. [ 1748.667306][T21269] blktrace: Concurrent blktraces are not allowed on sg0 [ 1749.538172][T21274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1750.731876][T21283] input: syz1 as /devices/virtual/input/input204 [ 1750.962437][T21289] delete_channel: no stack [ 1751.259730][T16959] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1751.447815][T16959] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1751.595928][T16959] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1751.698710][T16959] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1751.707850][T16959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.844524][T21290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1751.865194][T16959] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1754.272106][T21317] sctp: [Deprecated]: syz.1.3437 (pid 21317) Use of int in maxseg socket option. [ 1754.272106][T21317] Use struct sctp_assoc_value instead [ 1754.638259][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 1755.269129][T16959] usb 3-1: USB disconnect, device number 89 [ 1755.653143][T21335] input: syz0 as /devices/virtual/input/input205 [ 1757.018341][T21350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3443'. [ 1758.691024][T21363] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3445'. [ 1759.402978][T21376] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1759.744995][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1759.875241][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1759.875258][ T30] audit: type=1326 audit(1744379777.000:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1759.909140][T21381] xt_ecn: cannot match TCP bits for non-tcp packets [ 1760.209328][ T30] audit: type=1326 audit(1744379777.030:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1760.231421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.283273][ T30] audit: type=1326 audit(1744379777.030:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1760.316391][ T30] audit: type=1326 audit(1744379777.030:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1760.453684][ T30] audit: type=1326 audit(1744379777.030:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1760.591843][ T30] audit: type=1326 audit(1744379777.030:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1760.613930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.711565][ T30] audit: type=1326 audit(1744379777.030:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1760.733738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.843458][ T30] audit: type=1326 audit(1744379777.030:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1760.865639][ C1] vkms_vblank_simulate: vblank timer overrun [ 1760.934736][ T30] audit: type=1326 audit(1744379777.030:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1761.022553][ T30] audit: type=1326 audit(1744379777.030:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21380 comm="syz.3.3449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 1761.149741][T21387] sctp: [Deprecated]: syz.0.3451 (pid 21387) Use of int in maxseg socket option. [ 1761.149741][T21387] Use struct sctp_assoc_value instead [ 1761.172749][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3451'. [ 1764.021611][T21417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1764.802329][T21420] syz.3.3459 (21420): drop_caches: 2 [ 1764.871792][T21420] syz.3.3459 (21420): drop_caches: 2 [ 1766.044127][T21429] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x30314742, 4, 2, 3, 4) [ 1768.109615][T21457] wg1: entered promiscuous mode [ 1768.908957][T21474] fuse: Bad value for 'fd' [ 1768.995423][ T5895] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1769.048779][T21471] macsec0: entered promiscuous mode [ 1769.054419][T21471] macsec0: left allmulticast mode [ 1769.085038][T21477] macsec0: left promiscuous mode [ 1769.173087][T21471] vlan2: entered allmulticast mode [ 1769.255263][T21474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1769.682287][ T5895] usb 3-1: config 0 has no interfaces? [ 1769.786555][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1769.797686][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.848978][ T5895] usb 3-1: Product: syz [ 1769.864621][ T5895] usb 3-1: Manufacturer: syz [ 1769.901708][ T5895] usb 3-1: SerialNumber: syz [ 1769.972122][ T5895] usb 3-1: config 0 descriptor?? [ 1771.929762][T21498] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1772.429486][ T9] usb 3-1: USB disconnect, device number 90 [ 1772.785393][T21509] netdevsim netdevsim4: Direct firmware load for . [ 1772.785393][T21509] failed with error -2 [ 1772.796871][T21509] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1772.796871][T21509] [ 1772.870831][T21512] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3476'. [ 1773.346442][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1773.346462][ T30] audit: type=1804 audit(1744379790.470:3935): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3477" name="/newroot/dev/nullb0" dev="devtmpfs" ino=4967 res=1 errno=0 [ 1774.937193][T21524] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1775.344879][ T5895] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1775.519294][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 1775.547915][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.672781][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1775.695225][T21535] netlink: 'syz.1.3482': attribute type 72 has an invalid length. [ 1775.704219][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 1775.731964][T21535] futex_wake_op: syz.1.3482 tries to shift op by 144; fix this program [ 1775.789514][ T5895] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1775.799511][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.882722][ T5895] usb 4-1: config 0 descriptor?? [ 1775.945928][ T5895] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1776.276455][T16959] usb 4-1: USB disconnect, device number 69 [ 1778.934305][T21575] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1779.427238][T21542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1780.264972][T21592] input: syz0 as /devices/virtual/input/input207 [ 1780.272689][T21592] input: failed to attach handler leds to device input207, error: -6 [ 1781.280128][T21597] netdevsim netdevsim1: Direct firmware load for . [ 1781.280128][T21597] failed with error -2 [ 1781.336621][T21597] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1781.336621][T21597] [ 1781.765898][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1781.782773][T21610] netlink: 'syz.2.3498': attribute type 1 has an invalid length. [ 1781.843245][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1782.483383][T21617] input input208: cannot allocate more than FF_MAX_EFFECTS effects [ 1782.630286][T21617] macsec0: entered allmulticast mode [ 1782.643817][T21617] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 1783.176439][T21631] misc userio: The device must be registered before sending interrupts [ 1783.355493][T21634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1786.517209][ T9116] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1786.541814][ T9116] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1786.688758][T16959] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1786.911078][T16959] usb 2-1: Using ep0 maxpacket: 32 [ 1786.934694][T16959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1786.963309][T16959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1786.989921][T16959] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1787.017677][T16959] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1787.027560][T16959] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1787.037756][T16959] usb 2-1: Product: syz [ 1787.048878][T16959] usb 2-1: Manufacturer: syz [ 1787.062602][T16959] usb 2-1: SerialNumber: syz [ 1787.094068][T16959] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input209 [ 1787.303561][T21664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.317488][T21664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.365874][T16959] usb 2-1: USB disconnect, device number 75 [ 1787.371958][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1787.450678][T16959] appletouch 2-1:1.0: input: appletouch disconnected [ 1787.632769][T21665] delete_channel: no stack [ 1788.002420][T21681] netdevsim netdevsim4: Direct firmware load for . [ 1788.002420][T21681] failed with error -2 [ 1788.013201][T21681] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1788.013201][T21681] [ 1788.283952][T21685] hsr_slave_0: left promiscuous mode [ 1788.328374][T21685] hsr_slave_1: left promiscuous mode [ 1791.035397][T21712] input: syz0 as /devices/virtual/input/input210 [ 1791.297495][T21715] input input211: cannot allocate more than FF_MAX_EFFECTS effects [ 1791.325401][T21715] lo: entered allmulticast mode [ 1791.340994][T21715] tunl0: entered allmulticast mode [ 1791.362450][T21715] tipc: Resetting bearer [ 1791.384499][T21715] gre0: entered allmulticast mode [ 1791.413793][T21715] gretap0: entered allmulticast mode [ 1791.425556][T21715] erspan0: entered allmulticast mode [ 1791.446926][T21715] ip_vti0: entered allmulticast mode [ 1791.460946][T21715] ip6_vti0: entered allmulticast mode [ 1791.510245][T21715] sit0: entered allmulticast mode [ 1791.676248][T21715] ip6tnl0: entered allmulticast mode [ 1791.707088][T21715] ip6gre0: entered allmulticast mode [ 1791.761903][T21715] ip6gretap0: entered allmulticast mode [ 1791.770221][T21715] vcan0: entered allmulticast mode [ 1791.776346][T21715] bond0: entered allmulticast mode [ 1791.824761][T21715] dummy0: entered allmulticast mode [ 1791.841100][T21715] nlmon0: entered allmulticast mode [ 1791.859523][T21715] caif0: entered allmulticast mode [ 1791.873271][T21715] wg1: left promiscuous mode [ 1791.931108][T21715] gre2: entered allmulticast mode [ 1791.971428][T21715] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1792.468705][T18156] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1792.698804][T18156] usb 3-1: Using ep0 maxpacket: 16 [ 1792.710160][T18156] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.720955][T18156] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1792.732381][T18156] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1792.825541][T18156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.990771][T18156] usb 3-1: config 0 descriptor?? [ 1795.164098][ T9116] usb 3-1: USB disconnect, device number 91 [ 1795.643275][T21764] netdevsim netdevsim1: Direct firmware load for . [ 1795.643275][T21764] failed with error -2 [ 1795.654144][T21764] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1795.654144][T21764] [ 1797.177170][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.183645][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.075351][T21795] input: syz0 as /devices/virtual/input/input212 [ 1798.226050][T21798] futex_wake_op: syz.4.3536 tries to shift op by -33; fix this program [ 1798.542873][T21718] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1798.855952][T21718] usb 3-1: config 0 has no interfaces? [ 1798.863948][T21718] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1798.904898][T21718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.970050][T21718] usb 3-1: Product: syz [ 1798.992036][T21718] usb 3-1: Manufacturer: syz [ 1799.012131][T21718] usb 3-1: SerialNumber: syz [ 1799.045323][T21718] usb 3-1: config 0 descriptor?? [ 1799.283029][T21718] usb 3-1: USB disconnect, device number 92 [ 1799.522916][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3540'. [ 1800.468918][T18156] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1800.697191][T18156] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1800.715185][T18156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.737642][T18156] usb 2-1: Product: syz [ 1800.759503][T18156] usb 2-1: Manufacturer: syz [ 1800.776933][T18156] usb 2-1: SerialNumber: syz [ 1800.840445][T18156] usb 2-1: config 0 descriptor?? [ 1800.938796][T18156] usb 2-1: selecting invalid altsetting 3 [ 1800.949207][T18156] comedi comedi0: could not set alternate setting 3 in high speed [ 1800.958673][T18156] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1800.977249][T18156] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 1803.116238][T21822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.549096][T18156] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1803.592800][T21718] usb 2-1: USB disconnect, device number 76 [ 1803.624799][T21846] netdevsim netdevsim0: Direct firmware load for . [ 1803.624799][T21846] failed with error -2 [ 1803.655396][T21846] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1803.655396][T21846] [ 1803.761777][T18156] usb 3-1: Using ep0 maxpacket: 16 [ 1803.860795][T18156] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.913354][T21849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1804.009089][T18156] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.034320][T18156] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1804.074985][T18156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.102314][T21852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1804.520665][T21842] delete_channel: no stack [ 1804.550093][T18156] usb 3-1: config 0 descriptor?? [ 1805.968737][T18156] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1806.106059][T21867] input: syz0 as /devices/virtual/input/input213 [ 1806.168773][T21723] usb 3-1: USB disconnect, device number 93 [ 1806.199797][T18156] usb 2-1: config 0 has no interfaces? [ 1806.257998][T18156] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1806.287497][T18156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.308361][T18156] usb 2-1: Product: syz [ 1806.312653][T18156] usb 2-1: Manufacturer: syz [ 1806.317461][T18156] usb 2-1: SerialNumber: syz [ 1806.324808][T18156] usb 2-1: config 0 descriptor?? [ 1807.804605][T21718] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1807.855078][T21893] input: syz0 as /devices/virtual/input/input214 [ 1807.862230][T21893] input: failed to attach handler leds to device input214, error: -6 [ 1808.078245][T21892] futex_wake_op: syz.3.3556 tries to shift op by -33; fix this program [ 1808.152014][T21718] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.171776][T21718] usb 3-1: config 17 interface 0 has no altsetting 0 [ 1808.348004][T21718] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1808.364772][T21718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.626066][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3562'. [ 1808.698848][T21899] sg_write: data in/out 813332815/427 bytes for SCSI command 0x0-- guessing data in; [ 1808.698848][T21899] program syz.4.3562 not setting count and/or reply_len properly [ 1808.721149][T21723] usb 2-1: USB disconnect, device number 77 [ 1808.762214][T21718] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1808.781286][T21900] fuse: Unknown parameter ' [ 1808.781286][T21900] Ú0x0000000000000009' [ 1808.853823][T21898] tipc: Disabling bearer [ 1808.890972][T21902] input input216: cannot allocate more than FF_MAX_EFFECTS effects [ 1809.296280][T21908] input: syz0 as /devices/virtual/input/input217 [ 1810.514585][T21922] netlink: 'syz.1.3568': attribute type 12 has an invalid length. [ 1810.522857][T21718] usb 3-1: USB disconnect, device number 94 [ 1810.523447][T21922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1810.829117][T21927] input: syz0 as /devices/virtual/input/input218 [ 1811.053199][T21931] netlink: 'syz.3.3570': attribute type 29 has an invalid length. [ 1811.628028][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1811.640957][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1811.650845][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1811.663428][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1811.684840][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 1812.459434][T21945] input input219: cannot allocate more than FF_MAX_EFFECTS effects [ 1812.624329][T21948] ptrace attach of "./syz-executor exec"[21949] was attempted by "./syz-executor exec"[21948] [ 1813.205239][T21959] bond2 (unregistering): Released all slaves [ 1814.491549][T21969] futex_wake_op: syz.2.3577 tries to shift op by -33; fix this program [ 1815.235083][T21975] lo: left allmulticast mode [ 1815.254817][T21975] tunl0: left allmulticast mode [ 1815.267380][T21975] gre0: left allmulticast mode [ 1815.280593][T21975] gretap0: left allmulticast mode [ 1815.295709][T21975] ip_vti0: left allmulticast mode [ 1815.307197][T21975] ip6_vti0: left allmulticast mode [ 1815.326957][T21975] sit0: left allmulticast mode [ 1815.347948][T21975] ip6tnl0: left allmulticast mode [ 1815.359348][T21975] ip6gre0: left allmulticast mode [ 1815.398783][T21975] syz_tun: left allmulticast mode [ 1815.408982][T21975] ip6gretap0: left allmulticast mode [ 1815.428241][T21975] vcan0: left allmulticast mode [ 1815.438060][T21975] bridge0: entered promiscuous mode [ 1815.449948][T21975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1815.463440][T21975] dummy0: left allmulticast mode [ 1815.478399][T21975] nlmon0: left allmulticast mode [ 1815.565441][T21975] caif0: left allmulticast mode [ 1815.570653][T21975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1818.069766][T21999] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1818.676435][T22001] input input220: cannot allocate more than FF_MAX_EFFECTS effects [ 1818.907060][T22006] input: syz0 as /devices/virtual/input/input221 [ 1818.979901][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 1820.834000][T22026] bond6 (unregistering): Released all slaves [ 1821.098510][T22031] sctp: [Deprecated]: syz.1.3592 (pid 22031) Use of int in maxseg socket option. [ 1821.098510][T22031] Use struct sctp_assoc_value instead [ 1821.280700][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 1821.948281][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1822.198937][T18156] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1822.530993][T18156] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1822.564938][T18156] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1822.628454][T22051] lo: left allmulticast mode [ 1822.635961][T22051] tunl0: left allmulticast mode [ 1822.644057][T22051] gre0: left allmulticast mode [ 1822.657202][T22051] gretap0: left allmulticast mode [ 1822.664932][T22051] erspan0: left allmulticast mode [ 1822.674486][T22051] ip_vti0: left allmulticast mode [ 1822.711555][T22051] ip6_vti0: left allmulticast mode [ 1822.719132][T22051] sit0: left allmulticast mode [ 1822.733899][T22051] ip6tnl0: left allmulticast mode [ 1822.742556][T22051] ip6gre0: left allmulticast mode [ 1822.760402][T22051] ip6gretap0: left allmulticast mode [ 1822.768145][T22051] bond0: left allmulticast mode [ 1822.774705][T22051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.782618][T22051] nlmon0: left allmulticast mode [ 1822.799292][T21718] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1822.889373][T22051] caif0: left allmulticast mode [ 1822.894557][T22051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1822.947891][T18156] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1823.059467][T21718] usb 2-1: Using ep0 maxpacket: 16 [ 1823.082183][T21718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.124527][T21718] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1823.128735][T18156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.151977][T21718] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1823.191602][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.294333][T21718] usb 2-1: config 0 descriptor?? [ 1824.251971][T18156] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1824.266978][T18156] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input222 [ 1824.389332][T18156] input: failed to attach handler kbd to device input222, error: -5 [ 1824.537647][T18156] usb 3-1: USB disconnect, device number 95 [ 1825.481704][T18156] usb 2-1: USB disconnect, device number 78 [ 1825.668482][T22064] input input223: cannot allocate more than FF_MAX_EFFECTS effects [ 1825.733831][T22064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1825.741142][T22064] IPv6: NLM_F_CREATE should be set when creating new route [ 1825.875306][T22066] lo: entered allmulticast mode [ 1825.892263][T22066] tunl0: entered allmulticast mode [ 1825.910335][T22066] gre0: entered allmulticast mode [ 1826.034412][T22067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1826.052507][T22066] gretap0: entered allmulticast mode [ 1826.077498][T22066] erspan0: entered allmulticast mode [ 1826.151925][T22066] ip_vti0: entered allmulticast mode [ 1826.158485][T22066] ip6_vti0: entered allmulticast mode [ 1826.204061][T22066] sit0: entered allmulticast mode [ 1826.213743][T22066] ip6tnl0: entered allmulticast mode [ 1826.231967][T22066] ip6gre0: entered allmulticast mode [ 1826.292009][T22066] ip6gretap0: entered allmulticast mode [ 1826.304815][T22066] bond0: entered allmulticast mode [ 1826.319158][T22066] nlmon0: entered allmulticast mode [ 1826.328231][T22066] caif0: entered allmulticast mode [ 1826.638475][T22059] delete_channel: no stack [ 1826.663831][T22066] wg1: left promiscuous mode [ 1826.669496][T22066] macvlan0: entered allmulticast mode [ 1826.683285][T22066] gre1: entered allmulticast mode [ 1828.561322][T22092] futex_wake_op: syz.1.3602 tries to shift op by -33; fix this program [ 1828.621669][T22092] netdevsim netdevsim1: Direct firmware load for . [ 1828.621669][T22092] failed with error -2 [ 1828.633038][T22092] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1828.633038][T22092] [ 1830.211550][T22108] sctp: [Deprecated]: syz.4.3607 (pid 22108) Use of int in maxseg socket option. [ 1830.211550][T22108] Use struct sctp_assoc_value instead [ 1830.288425][ T9116] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1830.330494][ T9116] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1831.106399][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1831.383474][T22068] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1831.660501][T22068] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1831.671976][T22068] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1831.725663][T22068] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1831.779368][T22068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.137504][T22127] lo: left allmulticast mode [ 1832.165153][T22127] tunl0: left allmulticast mode [ 1832.174771][T22127] gre0: left allmulticast mode [ 1832.192284][T22127] erspan0: left allmulticast mode [ 1832.205699][T22127] ip_vti0: left allmulticast mode [ 1832.219640][T22127] ip6_vti0: left allmulticast mode [ 1832.231842][T22127] sit0: left allmulticast mode [ 1832.263031][T22127] ip6tnl0: left allmulticast mode [ 1832.283895][T22127] ip6gre0: left allmulticast mode [ 1832.417444][T22127] ip6gretap0: left allmulticast mode [ 1832.562003][T22106] delete_channel: no stack [ 1832.604455][T22127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.677755][T22127] dummy0: left allmulticast mode [ 1832.747137][T22127] nlmon0: left allmulticast mode [ 1832.866902][T22127] caif0: left allmulticast mode [ 1832.885534][T22127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1833.082602][T22068] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1833.095087][T22143] input input225: cannot allocate more than FF_MAX_EFFECTS effects [ 1833.096447][T22068] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input224 [ 1833.140742][T22143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1833.148055][T22143] IPv6: NLM_F_CREATE should be set when creating new route [ 1833.272704][T22068] input: failed to attach handler kbd to device input224, error: -5 [ 1833.323603][T22068] usb 4-1: USB disconnect, device number 70 [ 1833.746295][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1833.764199][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1833.895923][T22152] input input226: cannot allocate more than FF_MAX_EFFECTS effects [ 1834.649440][T22068] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1834.789221][T22165] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 1835.040798][T22068] usb 2-1: config 0 has no interfaces? [ 1835.056782][T22068] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1835.073804][T22068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.082876][T22068] usb 2-1: Product: syz [ 1835.088417][T22068] usb 2-1: Manufacturer: syz [ 1835.096567][T22068] usb 2-1: SerialNumber: syz [ 1835.120949][T22068] usb 2-1: config 0 descriptor?? [ 1835.355800][ T9116] usb 2-1: USB disconnect, device number 79 [ 1835.404768][T22169] futex_wake_op: syz.3.3618 tries to shift op by -33; fix this program [ 1835.424401][T22169] netdevsim netdevsim3: Direct firmware load for . [ 1835.424401][T22169] failed with error -2 [ 1835.449903][T22169] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1835.449903][T22169] [ 1835.599069][T22127] syz.2.3611 (22127) used greatest stack depth: 18072 bytes left [ 1835.714675][T22173] sctp: [Deprecated]: syz.4.3621 (pid 22173) Use of int in maxseg socket option. [ 1835.714675][T22173] Use struct sctp_assoc_value instead [ 1836.368690][T22179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3622'. [ 1837.028470][T22187] input input227: cannot allocate more than FF_MAX_EFFECTS effects [ 1837.278467][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1837.611528][T22199] input input228: cannot allocate more than FF_MAX_EFFECTS effects [ 1838.249218][ T9116] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1838.422703][ T9116] usb 4-1: Using ep0 maxpacket: 16 [ 1838.469872][ T9116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.481316][ T9116] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1838.496323][ T9116] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1838.521138][T22208] futex_wake_op: syz.4.3630 tries to shift op by 144; fix this program [ 1838.569470][ T9116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.640889][ T9116] usb 4-1: config 0 descriptor?? [ 1838.948663][T22068] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1839.194534][T22068] usb 3-1: config 0 has no interfaces? [ 1839.228502][T22068] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1839.238012][T22068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.248172][T22068] usb 3-1: Product: syz [ 1839.253074][T22068] usb 3-1: Manufacturer: syz [ 1839.259413][T22068] usb 3-1: SerialNumber: syz [ 1839.279203][T22068] usb 3-1: config 0 descriptor?? [ 1841.148756][T22068] usb 4-1: USB disconnect, device number 71 [ 1841.321728][T22224] sctp: [Deprecated]: syz.1.3634 (pid 22224) Use of int in maxseg socket option. [ 1841.321728][T22224] Use struct sctp_assoc_value instead [ 1841.350018][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1841.422026][T22228] sctp: [Deprecated]: syz.3.3635 (pid 22228) Use of int in maxseg socket option. [ 1841.422026][T22228] Use struct sctp_assoc_value instead [ 1841.752500][ T9116] usb 3-1: USB disconnect, device number 96 [ 1842.448800][T22068] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1842.554093][T22245] input input229: cannot allocate more than FF_MAX_EFFECTS effects [ 1842.574125][T22244] input input230: cannot allocate more than FF_MAX_EFFECTS effects [ 1842.624829][T22068] usb 3-1: config 0 has no interfaces? [ 1842.647029][T22068] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1842.659261][T22068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.667889][T22068] usb 3-1: Product: syz [ 1842.674638][T22068] usb 3-1: Manufacturer: syz [ 1842.680491][T22068] usb 3-1: SerialNumber: syz [ 1842.688115][T22068] usb 3-1: config 0 descriptor?? [ 1843.078847][T22252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1843.129154][T22238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.138869][T22238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.188788][T22068] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1843.348666][T22068] usb 2-1: Using ep0 maxpacket: 32 [ 1843.356311][T22068] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1843.368506][T22068] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 1843.384424][T22068] usb 2-1: config 7 has no interface number 0 [ 1843.399770][T22068] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 1843.413220][T22068] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 1843.471008][T22068] usb 2-1: config 7 interface 187 has no altsetting 0 [ 1843.493520][T22068] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1843.518094][T22068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.528010][T22068] usb 2-1: Product: syz [ 1843.536187][T22068] usb 2-1: Manufacturer: syz [ 1843.542318][T22068] usb 2-1: SerialNumber: syz [ 1843.557873][T22251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1843.589352][T22251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1843.808381][T22068] usb 2-1: Limiting number of CPorts to U8_MAX [ 1843.871037][ T30] audit: type=1326 audit(1744379860.990:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22239 comm="syz.4.3638" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 1843.871855][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1843.907393][T22068] usb 2-1: Unknown endpoint type found, address 0x07 [ 1843.918264][T22068] usb 2-1: Unused bulk OUT endpoint found: 0x03 [ 1843.929284][T22068] usb 2-1: Not enough endpoints found in device, aborting! [ 1844.344539][T22068] usb 2-1: USB disconnect, device number 80 [ 1845.407514][T22068] usb 3-1: USB disconnect, device number 97 [ 1845.644265][T22276] macsec0: entered promiscuous mode [ 1845.650244][T22276] macsec0: left allmulticast mode [ 1845.662222][T22276] macsec0: left promiscuous mode [ 1845.713574][T22276] vlan0: entered allmulticast mode [ 1845.876548][T22284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1845.888491][T22284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1846.578725][T11956] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1846.645973][T22294] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1846.757168][T11956] usb 2-1: config 0 has no interfaces? [ 1846.938396][T22299] input input231: cannot allocate more than FF_MAX_EFFECTS effects [ 1846.982048][T11956] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1847.106779][T22299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1847.125427][T11956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.163840][T11956] usb 2-1: Product: syz [ 1847.242351][T11956] usb 2-1: Manufacturer: syz [ 1847.275900][T11956] usb 2-1: SerialNumber: syz [ 1847.358143][T11956] usb 2-1: config 0 descriptor?? [ 1847.681408][T11956] usb 2-1: USB disconnect, device number 81 [ 1848.503164][T22320] futex_wake_op: syz.0.3654 tries to shift op by -33; fix this program [ 1849.492252][T22328] futex_wake_op: syz.1.3657 tries to shift op by 144; fix this program [ 1849.606813][T22330] input: syz0 as /devices/virtual/input/input232 [ 1851.508690][T22069] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1851.578342][T22354] input input233: cannot allocate more than FF_MAX_EFFECTS effects [ 1851.871848][T22069] usb 4-1: Using ep0 maxpacket: 32 [ 1851.983806][T22069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.995720][T22069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.045724][T22069] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1852.084823][T22069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.188509][T22069] usb 4-1: config 0 descriptor?? [ 1852.607444][T22348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3660'. [ 1852.624632][T22348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1853.611491][T22370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3669'. [ 1853.855743][T22372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1854.196886][T22365] delete_channel: no stack [ 1854.269901][T22068] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1854.445798][T22068] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1854.485306][T22068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.537302][T22068] usb 2-1: Product: syz [ 1854.542997][T22069] usbhid 4-1:0.0: can't add hid device: -71 [ 1854.549255][T22069] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1854.593813][T22069] usb 4-1: USB disconnect, device number 72 [ 1854.600153][T22068] usb 2-1: Manufacturer: syz [ 1854.614296][T22068] usb 2-1: SerialNumber: syz [ 1854.656761][T22068] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1854.685896][T22068] r8152-cfgselector 2-1: config 0 descriptor?? [ 1855.131710][T22381] input: syz0 as /devices/virtual/input/input234 [ 1855.164813][T22372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1855.193510][T22068] r8152-cfgselector 2-1: USB disconnect, device number 82 [ 1856.247068][T22389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1856.257718][T22389] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1856.341323][T22389] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1856.586309][T22402] futex_wake_op: syz.2.3673 tries to shift op by -33; fix this program [ 1857.951485][T22421] sctp: [Deprecated]: syz.3.3679 (pid 22421) Use of int in maxseg socket option. [ 1857.951485][T22421] Use struct sctp_assoc_value instead [ 1858.060394][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1858.602644][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.625516][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.512259][T22439] input: syz0 as /devices/virtual/input/input236 [ 1860.274112][T22447] sctp: [Deprecated]: syz.3.3685 (pid 22447) Use of int in maxseg socket option. [ 1860.274112][T22447] Use struct sctp_assoc_value instead [ 1860.698679][T22068] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1860.878728][T22068] usb 2-1: Using ep0 maxpacket: 8 [ 1860.886613][T22068] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1860.896290][T22068] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1861.028507][T22068] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1861.138804][T22068] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1861.141056][T22457] input input237: cannot allocate more than FF_MAX_EFFECTS effects [ 1861.169994][T22457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1861.177293][T22457] IPv6: NLM_F_CREATE should be set when creating new route [ 1861.219663][T22068] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1861.277782][T22068] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1861.302007][T22460] input: syz0 as /devices/virtual/input/input238 [ 1861.428503][T22068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.668386][T22068] usb 2-1: usb_control_msg returned -32 [ 1861.674133][T22068] usbtmc 2-1:16.0: can't read capabilities [ 1862.035040][T22471] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 1862.045597][T22471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.056945][T22471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.247040][T22068] usb 2-1: USB disconnect, device number 83 [ 1862.811098][T22480] input: syz0 as /devices/virtual/input/input239 [ 1863.035128][T22485] sctp: [Deprecated]: syz.1.3693 (pid 22485) Use of int in maxseg socket option. [ 1863.035128][T22485] Use struct sctp_assoc_value instead [ 1863.079072][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3693'. [ 1864.055668][T22498] xt_socket: unknown flags 0x4 [ 1864.160977][T22499] macsec0: entered promiscuous mode [ 1864.166369][T22499] macsec0: left allmulticast mode [ 1864.174197][T22499] macsec0: left promiscuous mode [ 1864.196861][T22499] vlan0: entered allmulticast mode [ 1865.500166][T22514] input: syz0 as /devices/virtual/input/input241 [ 1865.597966][T22517] input input242: cannot allocate more than FF_MAX_EFFECTS effects [ 1866.256094][T22535] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3703'. [ 1866.353436][T22534] input: syz0 as /devices/virtual/input/input244 [ 1867.027551][T22542] sctp: [Deprecated]: syz.2.3704 (pid 22542) Use of int in maxseg socket option. [ 1867.027551][T22542] Use struct sctp_assoc_value instead [ 1867.066709][T22545] sctp: [Deprecated]: syz.3.3705 (pid 22545) Use of int in maxseg socket option. [ 1867.066709][T22545] Use struct sctp_assoc_value instead [ 1867.083817][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3705'. [ 1868.287157][T22561] input: syz0 as /devices/virtual/input/input245 [ 1868.384458][T22564] input: syz0 as /devices/virtual/input/input246 [ 1868.458863][T22069] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1869.028794][T22069] usb 3-1: config 0 has no interfaces? [ 1869.216642][T22069] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1869.235584][T22069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.255555][T22069] usb 3-1: Product: syz [ 1869.303569][T22069] usb 3-1: Manufacturer: syz [ 1869.315560][T22069] usb 3-1: SerialNumber: syz [ 1869.360083][T22069] usb 3-1: config 0 descriptor?? [ 1869.766747][T22575] sctp: [Deprecated]: syz.0.3711 (pid 22575) Use of int in maxseg socket option. [ 1869.766747][T22575] Use struct sctp_assoc_value instead [ 1870.934333][T22578] input input247: cannot allocate more than FF_MAX_EFFECTS effects [ 1870.996038][T22578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1871.220957][T22588] sctp: [Deprecated]: syz.1.3714 (pid 22588) Use of int in maxseg socket option. [ 1871.220957][T22588] Use struct sctp_assoc_value instead [ 1871.262023][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3714'. [ 1871.885552][ T5895] usb 3-1: USB disconnect, device number 98 [ 1872.157189][T22601] sctp: [Deprecated]: syz.3.3718 (pid 22601) Use of int in maxseg socket option. [ 1872.157189][T22601] Use struct sctp_assoc_value instead [ 1872.284459][T22610] sctp: [Deprecated]: syz.1.3719 (pid 22610) Use of int in maxseg socket option. [ 1872.284459][T22610] Use struct sctp_assoc_value instead [ 1872.322058][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1873.577436][T22625] sctp: [Deprecated]: syz.1.3722 (pid 22625) Use of int in maxseg socket option. [ 1873.577436][T22625] Use struct sctp_assoc_value instead [ 1873.614424][T22627] sctp: [Deprecated]: syz.0.3723 (pid 22627) Use of int in maxseg socket option. [ 1873.614424][T22627] Use struct sctp_assoc_value instead [ 1874.919509][T22648] input input248: cannot allocate more than FF_MAX_EFFECTS effects [ 1875.009430][ T30] audit: type=1326 audit(1744379892.130:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22637 comm="syz.0.3724" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 1875.398009][T11956] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1875.797059][T22661] input: syz0 as /devices/virtual/input/input249 [ 1876.103063][T11956] usb 2-1: config 0 has no interfaces? [ 1876.143781][T11956] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1876.159376][T11956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.203036][T11956] usb 2-1: Product: syz [ 1876.253455][T11956] usb 2-1: Manufacturer: syz [ 1876.334340][T22666] sctp: [Deprecated]: syz.4.3729 (pid 22666) Use of int in maxseg socket option. [ 1876.334340][T22666] Use struct sctp_assoc_value instead [ 1876.363094][T11956] usb 2-1: SerialNumber: syz [ 1876.396689][T11956] usb 2-1: config 0 descriptor?? [ 1876.453842][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3729'. [ 1876.993250][T22670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.005113][T22670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.105818][T22654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1877.384035][T22672] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3730'. [ 1878.173360][T22680] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 1878.195314][T22681] sctp: [Deprecated]: syz.0.3732 (pid 22681) Use of int in maxseg socket option. [ 1878.195314][T22681] Use struct sctp_assoc_value instead [ 1878.457512][T22688] sctp: [Deprecated]: syz.3.3733 (pid 22688) Use of int in maxseg socket option. [ 1878.457512][T22688] Use struct sctp_assoc_value instead [ 1878.470293][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 1878.705015][T11956] usb 2-1: USB disconnect, device number 84 [ 1879.228477][T22695] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1879.379688][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1879.451994][T22695] netlink: 'syz.1.3734': attribute type 3 has an invalid length. [ 1879.684892][T22701] sctp: [Deprecated]: syz.2.3735 (pid 22701) Use of int in maxseg socket option. [ 1879.684892][T22701] Use struct sctp_assoc_value instead [ 1879.741584][T22701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 1879.773170][T22705] input input250: cannot allocate more than FF_MAX_EFFECTS effects [ 1880.251343][T22714] netlink: 'syz.1.3740': attribute type 5 has an invalid length. [ 1880.259730][T22714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1881.078220][T22720] input: syz0 as /devices/virtual/input/input251 [ 1881.835333][T22731] input: syz0 as /devices/virtual/input/input252 [ 1883.449526][T22742] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3744'. [ 1883.818768][T22749] sctp: [Deprecated]: syz.1.3746 (pid 22749) Use of int in maxseg socket option. [ 1883.818768][T22749] Use struct sctp_assoc_value instead [ 1884.110386][T22749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1885.188942][T22764] input: syz0 as /devices/virtual/input/input253 [ 1886.379816][T22069] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1886.442129][T22069] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1887.573907][T22787] sctp: [Deprecated]: syz.1.3752 (pid 22787) Use of int in maxseg socket option. [ 1887.573907][T22787] Use struct sctp_assoc_value instead [ 1887.621044][T22787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3752'. [ 1888.511465][T22802] input: syz0 as /devices/virtual/input/input254 [ 1889.333035][T22810] macsec0: entered promiscuous mode [ 1889.338287][T22810] macsec0: left allmulticast mode [ 1889.405513][T22812] macsec0: left promiscuous mode [ 1889.678807][T22069] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1889.927745][T22069] usb 4-1: Using ep0 maxpacket: 16 [ 1889.979492][T22069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.993785][T22069] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1890.014874][T22069] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1890.036540][T22069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.081538][T22069] usb 4-1: config 0 descriptor?? [ 1890.131961][T22069] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1890.273613][T22818] sctp: [Deprecated]: syz.1.3760 (pid 22818) Use of int in maxseg socket option. [ 1890.273613][T22818] Use struct sctp_assoc_value instead [ 1890.365157][T22818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1891.150986][ T5895] usb 4-1: USB disconnect, device number 73 [ 1891.281804][T22827] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 1891.432345][T22837] input: syz0 as /devices/virtual/input/input255 [ 1891.686371][T22843] sctp: [Deprecated]: syz.3.3766 (pid 22843) Use of int in maxseg socket option. [ 1891.686371][T22843] Use struct sctp_assoc_value instead [ 1891.820671][T22843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'. [ 1892.620619][T11956] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1892.792244][T11956] usb 2-1: Using ep0 maxpacket: 32 [ 1892.894082][T11956] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1892.911518][T11956] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1892.924985][T11956] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1892.939966][T11956] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1892.961364][T11956] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1892.976612][T11956] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1892.997228][T11956] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1893.053241][T11956] usb 2-1: Product: syz [ 1893.066884][T11956] usb 2-1: Manufacturer: syz [ 1893.092434][T11956] usb 2-1: SerialNumber: syz [ 1893.133870][T11956] usb 2-1: config 0 descriptor?? [ 1893.279704][T11956] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1893.292394][T22856] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1893.305638][T11956] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1893.452995][T11956] usb 2-1: USB disconnect, device number 85 [ 1893.470542][T11956] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1894.346555][T22864] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1894.367044][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1894.404538][T22864] netlink: 'syz.2.3771': attribute type 3 has an invalid length. [ 1894.998294][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 1895.608785][T22069] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1895.799335][T22069] usb 3-1: Using ep0 maxpacket: 32 [ 1895.811524][T22069] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1895.837165][T22069] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1895.858475][T22069] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1895.858611][T22068] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1895.901181][T22069] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1895.938647][T22069] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1895.977659][T22069] usb 3-1: Product: syz [ 1895.997939][T22069] usb 3-1: Manufacturer: syz [ 1896.008128][T22069] usb 3-1: SerialNumber: syz [ 1896.069927][T22069] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input256 [ 1896.131364][T22068] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1896.152120][T22068] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1896.274149][T22891] input: syz0 as /devices/virtual/input/input257 [ 1896.291603][T22068] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1896.319307][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 1896.331988][T22068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.422604][T22894] sg_write: data in/out 813332815/427 bytes for SCSI command 0x0-- guessing data in; [ 1896.422604][T22894] program syz.3.3779 not setting count and/or reply_len properly [ 1896.454827][T22892] sctp: [Deprecated]: syz.0.3778 (pid 22892) Use of int in maxseg socket option. [ 1896.454827][T22892] Use struct sctp_assoc_value instead [ 1896.467440][T22894] fuse: Unknown parameter ' [ 1896.467440][T22894] Ú0x0000000000000008' [ 1896.483722][T22878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.547128][T22878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.580873][T22892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 1896.694512][ T5895] usb 3-1: USB disconnect, device number 99 [ 1896.780099][ T5895] appletouch 3-1:1.0: input: appletouch disconnected [ 1896.979644][ T9116] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1897.141281][ T9116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.167071][ T9116] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1897.200487][ T9116] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1897.235166][ T9116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.298059][ T9116] usb 4-1: config 0 descriptor?? [ 1897.362157][ T9116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1897.420519][ T9116] dvb-usb: bulk message failed: -22 (3/0) [ 1897.464073][ T9116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1897.526788][T22068] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1897.536659][T22068] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input258 [ 1897.553394][ T9116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1897.581026][T22903] sctp: [Deprecated]: syz.2.3781 (pid 22903) Use of int in maxseg socket option. [ 1897.581026][T22903] Use struct sctp_assoc_value instead [ 1897.596273][ T9116] usb 4-1: media controller created [ 1897.612547][ T9116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1897.616631][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1897.687772][T22068] input: failed to attach handler kbd to device input258, error: -5 [ 1897.698801][ T9116] dvb-usb: bulk message failed: -22 (6/0) [ 1897.717517][ T9116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1897.743546][ T9116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input259 [ 1897.807716][ T9116] dvb-usb: schedule remote query interval to 150 msecs. [ 1897.819281][ T9116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1897.904323][T22068] usb 2-1: USB disconnect, device number 86 [ 1897.980500][ T9116] dvb-usb: bulk message failed: -22 (1/0) [ 1897.987553][ T9116] dvb-usb: error while querying for an remote control event. [ 1898.160906][T11956] dvb-usb: bulk message failed: -22 (1/0) [ 1898.166766][T11956] dvb-usb: error while querying for an remote control event. [ 1898.349414][T11956] dvb-usb: bulk message failed: -22 (1/0) [ 1898.357853][T11956] dvb-usb: error while querying for an remote control event. [ 1898.527063][T22918] sctp: [Deprecated]: syz.1.3783 (pid 22918) Use of int in maxseg socket option. [ 1898.527063][T22918] Use struct sctp_assoc_value instead [ 1898.542538][T11956] dvb-usb: bulk message failed: -22 (1/0) [ 1898.554587][T11956] dvb-usb: error while querying for an remote control event. [ 1898.565624][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1898.680222][ T30] audit: type=1326 audit(1744379915.810:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22920 comm="syz.4.3784" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cd579 code=0x0 [ 1898.719394][T11956] dvb-usb: bulk message failed: -22 (1/0) [ 1898.725213][T11956] dvb-usb: error while querying for an remote control event. [ 1898.767388][T22921] could not allocate digest TFM handle sha1-ce [ 1898.940374][T11956] dvb-usb: bulk message failed: -22 (1/0) [ 1898.949173][T11956] dvb-usb: error while querying for an remote control event. [ 1899.109266][T11956] dvb-usb: bulk message failed: -22 (1/0) [ 1899.119648][T11956] dvb-usb: error while querying for an remote control event. [ 1899.149235][T22936] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 1899.195651][T11956] usb 4-1: USB disconnect, device number 74 [ 1899.409943][T11956] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1900.349223][ T9116] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1900.501117][ T9116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.518392][ T9116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.539429][ T9116] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1900.549801][ T9116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.582279][ T9116] usb 2-1: config 0 descriptor?? [ 1901.513921][ T9116] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 1901.527195][T22964] input: syz0 as /devices/virtual/input/input260 [ 1901.620754][ T9116] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 1902.809310][ T9116] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1903.050087][ T9116] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1903.089491][ T9116] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1903.105693][ T9116] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1903.129275][ T9116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.131299][T22068] usb 2-1: USB disconnect, device number 87 [ 1903.673964][T22986] input: syz0 as /devices/virtual/input/input262 [ 1903.739155][T22985] sctp: [Deprecated]: syz.3.3795 (pid 22985) Use of int in maxseg socket option. [ 1903.739155][T22985] Use struct sctp_assoc_value instead [ 1904.181123][ T9116] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1904.191214][ T9116] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input261 [ 1904.304090][ T9116] input: failed to attach handler kbd to device input261, error: -5 [ 1904.431743][ T9116] usb 3-1: USB disconnect, device number 100 [ 1904.853483][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1905.040021][T22997] sg_write: data in/out 813332815/427 bytes for SCSI command 0x0-- guessing data in; [ 1905.040021][T22997] program syz.2.3798 not setting count and/or reply_len properly [ 1905.196560][T22997] fuse: Unknown parameter ' [ 1905.196560][T22997] Ú0x0000000000000008' [ 1905.658974][T22069] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1906.031948][T22069] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.105006][T22069] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1906.166574][T22069] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1906.204142][T22069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.267599][T22069] usb 3-1: config 0 descriptor?? [ 1906.280188][T22069] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1906.302219][T22069] dvb-usb: bulk message failed: -22 (3/0) [ 1906.329372][T22069] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1906.344355][T22069] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1906.352682][T22069] usb 3-1: media controller created [ 1906.391403][T22069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1906.491916][T22069] dvb-usb: bulk message failed: -22 (6/0) [ 1906.497840][T22069] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1907.086926][T22069] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input263 [ 1907.123842][T22069] dvb-usb: schedule remote query interval to 150 msecs. [ 1907.139723][T23035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1907.201009][T22069] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1907.209371][T22068] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1907.368959][T22069] dvb-usb: bulk message failed: -22 (1/0) [ 1907.390071][T22069] dvb-usb: error while querying for an remote control event. [ 1907.399504][T22068] usb 2-1: Using ep0 maxpacket: 16 [ 1907.418271][T22068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1907.526341][T22068] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1907.552441][T22068] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1907.649290][T22068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.658744][T22069] dvb-usb: bulk message failed: -22 (1/0) [ 1907.665018][T22069] dvb-usb: error while querying for an remote control event. [ 1907.846065][T22068] usb 2-1: config 0 descriptor?? [ 1907.884663][T22068] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1907.929279][T22069] dvb-usb: bulk message failed: -22 (1/0) [ 1907.935328][T22069] dvb-usb: error while querying for an remote control event. [ 1908.135270][T22068] usb 3-1: USB disconnect, device number 101 [ 1908.479516][T22068] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1908.812268][T11956] usb 2-1: USB disconnect, device number 88 [ 1909.190983][T23047] sctp: [Deprecated]: syz.2.3808 (pid 23047) Use of int in maxseg socket option. [ 1909.190983][T23047] Use struct sctp_assoc_value instead [ 1909.551728][T23049] macsec0: entered promiscuous mode [ 1909.661758][T23053] macsec0: left promiscuous mode [ 1909.705403][T23049] 8021q: VLANs not supported on vcan0 [ 1909.736435][T23055] support for cryptoloop has been removed. Use dm-crypt instead. [ 1910.455113][T23060] input: syz0 as /devices/virtual/input/input264 [ 1910.611043][ T30] audit: type=1326 audit(1744379927.710:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1910.750924][ T30] audit: type=1326 audit(1744379927.710:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.039310][ T30] audit: type=1326 audit(1744379927.710:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.119329][ T30] audit: type=1326 audit(1744379927.710:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.142306][ T30] audit: type=1326 audit(1744379927.710:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.164397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.231842][ T30] audit: type=1326 audit(1744379927.710:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.410704][ T30] audit: type=1326 audit(1744379927.710:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.432811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.551595][ T30] audit: type=1326 audit(1744379927.710:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.579416][ T30] audit: type=1326 audit(1744379927.710:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.601537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.611997][ T30] audit: type=1326 audit(1744379927.710:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23062 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 1911.634113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1912.062835][T23088] sctp: [Deprecated]: syz.4.3816 (pid 23088) Use of int in maxseg socket option. [ 1912.062835][T23088] Use struct sctp_assoc_value instead [ 1912.080631][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3816'. [ 1912.295720][T23082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1912.324540][T23082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1912.436093][T23092] fuse: Bad value for 'fd' [ 1914.170657][T23107] delete_channel: no stack [ 1914.362324][T23116] sctp: [Deprecated]: syz.0.3822 (pid 23116) Use of int in maxseg socket option. [ 1914.362324][T23116] Use struct sctp_assoc_value instead [ 1915.482973][T23132] fuse: Bad value for 'fd' [ 1915.777182][T23138] sctp: [Deprecated]: syz.0.3827 (pid 23138) Use of int in maxseg socket option. [ 1915.777182][T23138] Use struct sctp_assoc_value instead [ 1915.973169][T11956] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1915.995588][T11956] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1916.149159][T23138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 1918.432403][T23169] input: syz0 as /devices/virtual/input/input265 [ 1918.956207][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1918.956228][ T30] audit: type=1326 audit(1744379936.080:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23168 comm="syz.1.3831" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0 [ 1918.983949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1920.071971][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.078448][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.578956][T23186] wg1: entered promiscuous mode [ 1921.335487][T23195] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1921.924289][T23198] fuse: Bad value for 'fd' [ 1922.166492][T23203] sctp: [Deprecated]: syz.4.3837 (pid 23203) Use of int in maxseg socket option. [ 1922.166492][T23203] Use struct sctp_assoc_value instead [ 1923.475094][T23219] sctp: [Deprecated]: syz.0.3839 (pid 23219) Use of int in maxseg socket option. [ 1923.475094][T23219] Use struct sctp_assoc_value instead [ 1923.492042][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3839'. [ 1924.823774][T23236] input: syz0 as /devices/virtual/input/input266 [ 1925.186596][T23245] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3842'. [ 1926.878012][ T30] audit: type=1326 audit(1744379943.970:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.930653][T23260] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 1926.941817][ T30] audit: type=1326 audit(1744379943.970:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.941878][ T30] audit: type=1326 audit(1744379944.050:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.941926][ T30] audit: type=1326 audit(1744379944.050:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.941971][ T30] audit: type=1326 audit(1744379944.050:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.942032][ T30] audit: type=1326 audit(1744379944.050:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.942078][ T30] audit: type=1326 audit(1744379944.050:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.942124][ T30] audit: type=1326 audit(1744379944.050:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.942172][ T30] audit: type=1326 audit(1744379944.050:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.942215][ T30] audit: type=1326 audit(1744379944.050:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23256 comm="syz.1.3848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1926.987119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1926.994347][T23266] input: syz0 as /devices/virtual/input/input267 [ 1927.219725][T23269] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1927.479186][T22068] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1927.692576][T22068] usb 2-1: Using ep0 maxpacket: 16 [ 1927.735094][T22068] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1927.777250][T22068] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1927.793078][T22068] usb 2-1: config 0 has no interface number 0 [ 1927.802771][T22068] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1927.839667][T22068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.885660][T22068] usb 2-1: Product: syz [ 1927.935211][T22068] usb 2-1: Manufacturer: syz [ 1927.990783][T22068] usb 2-1: SerialNumber: syz [ 1928.026472][T22068] usb 2-1: config 0 descriptor?? [ 1928.983812][T22068] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 1928.991593][T22068] usb 2-1: No valid video chain found. [ 1929.003282][T23286] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 1929.012869][T22068] usb 2-1: USB disconnect, device number 89 [ 1930.059615][T23294] sctp: [Deprecated]: syz.3.3853 (pid 23294) Use of int in maxseg socket option. [ 1930.059615][T23294] Use struct sctp_assoc_value instead [ 1930.175658][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3853'. [ 1931.448848][T16959] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1931.519180][ T5895] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1931.621857][T16959] usb 3-1: Using ep0 maxpacket: 32 [ 1931.644382][T16959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1931.671467][T23309] veth0_to_team: entered promiscuous mode [ 1931.692035][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 1931.695920][T16959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1931.709064][T16959] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1931.732924][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.752726][ T5895] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 1931.762864][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.771753][ T5895] usb 4-1: Product: syz [ 1931.776183][ T5895] usb 4-1: Manufacturer: syz [ 1931.780103][T16959] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1931.781720][ T5895] usb 4-1: SerialNumber: syz [ 1931.799163][T16959] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1931.827591][T16959] usb 3-1: Product: syz [ 1931.830094][ T5895] usb 4-1: config 0 descriptor?? [ 1931.846079][ T5895] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 1931.857773][ T5895] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1931.880423][T16959] usb 3-1: Manufacturer: syz [ 1931.974324][T23312] fuse: Bad value for 'fd' [ 1931.978967][T16959] usb 3-1: SerialNumber: syz [ 1932.012040][T16959] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input268 [ 1932.276582][T23303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.292588][T23303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.367561][T16959] usb 3-1: USB disconnect, device number 102 [ 1932.547644][T16959] appletouch 3-1:1.0: input: appletouch disconnected [ 1933.105370][T23314] Cannot find del_set index 320 as target [ 1933.390379][T23317] sctp: [Deprecated]: syz.4.3860 (pid 23317) Use of int in maxseg socket option. [ 1933.390379][T23317] Use struct sctp_assoc_value instead [ 1933.447511][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3860'. [ 1934.204420][T23324] input: syz0 as /devices/virtual/input/input269 [ 1934.599788][T16959] usb 4-1: USB disconnect, device number 75 [ 1934.793492][T23333] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 1934.956025][T23329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3863'. [ 1935.393392][T23342] sctp: [Deprecated]: syz.2.3866 (pid 23342) Use of int in maxseg socket option. [ 1935.393392][T23342] Use struct sctp_assoc_value instead [ 1935.421477][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1935.488001][T23343] kvm: pic: non byte read [ 1935.496724][T23343] kvm: pic: level sensitive irq not supported [ 1935.496947][T23343] kvm: pic: non byte read [ 1935.508894][T23343] kvm: pic: non byte read [ 1935.518836][T23343] kvm: pic: level sensitive irq not supported [ 1935.518911][T23343] kvm: pic: non byte read [ 1935.595509][T23343] kvm: pic: non byte read [ 1937.689034][T16959] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1937.771617][T23365] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1937.872916][T16959] usb 2-1: Using ep0 maxpacket: 32 [ 1937.886307][T16959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1937.913812][T16959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1937.945156][T16959] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1938.020624][T16959] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1938.104546][T23371] input: syz0 as /devices/virtual/input/input270 [ 1938.115576][T16959] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1938.139493][T16959] usb 2-1: Product: syz [ 1938.143787][T16959] usb 2-1: Manufacturer: syz [ 1938.148443][T16959] usb 2-1: SerialNumber: syz [ 1938.192487][T16959] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input271 [ 1938.403183][ T9116] usb 2-1: USB disconnect, device number 90 [ 1938.475290][ T9116] appletouch 2-1:1.0: input: appletouch disconnected [ 1939.006912][T23375] sctp: [Deprecated]: syz.3.3872 (pid 23375) Use of int in maxseg socket option. [ 1939.006912][T23375] Use struct sctp_assoc_value instead [ 1939.089269][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1939.561384][T23383] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3873'. [ 1939.777919][T23383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3873'. [ 1940.873862][T23407] futex_wake_op: syz.2.3874 tries to shift op by -33; fix this program [ 1941.197385][T23410] netlink: 8848 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1941.225668][T23412] sctp: [Deprecated]: syz.1.3877 (pid 23412) Use of int in maxseg socket option. [ 1941.225668][T23412] Use struct sctp_assoc_value instead [ 1941.249578][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1942.347691][T23420] sctp: [Deprecated]: syz.1.3878 (pid 23420) Use of int in maxseg socket option. [ 1942.347691][T23420] Use struct sctp_assoc_value instead [ 1942.395003][T23420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1943.219116][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3880'. [ 1943.479198][T16959] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1943.656203][T16959] usb 4-1: config index 0 descriptor too short (expected 255, got 27) [ 1943.668885][T16959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.680244][T16959] usb 4-1: config 0 has no interfaces? [ 1943.689613][T16959] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1943.699449][T16959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.722703][T16959] usb 4-1: config 0 descriptor?? [ 1944.662344][T23443] input: syz0 as /devices/virtual/input/input272 [ 1945.840332][T23452] sctp: [Deprecated]: syz.2.3886 (pid 23452) Use of int in maxseg socket option. [ 1945.840332][T23452] Use struct sctp_assoc_value instead [ 1945.857022][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1946.129333][ T5895] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1946.293554][ T5895] usb 2-1: config 0 has no interfaces? [ 1946.305749][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1946.321214][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.357383][ T5895] usb 2-1: Product: syz [ 1946.386038][ T5895] usb 2-1: Manufacturer: syz [ 1946.395657][ T9116] usb 4-1: USB disconnect, device number 76 [ 1946.543811][ T5895] usb 2-1: SerialNumber: syz [ 1946.990379][ T5895] usb 2-1: config 0 descriptor?? [ 1947.221485][T23464] sctp: [Deprecated]: syz.2.3888 (pid 23464) Use of int in maxseg socket option. [ 1947.221485][T23464] Use struct sctp_assoc_value instead [ 1947.254904][T23467] sctp: [Deprecated]: syz.4.3889 (pid 23467) Use of int in maxseg socket option. [ 1947.254904][T23467] Use struct sctp_assoc_value instead [ 1947.285376][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3888'. [ 1947.418194][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 1947.934243][T23473] bond6 (unregistering): Released all slaves [ 1948.592778][T23488] kvm: pic: non byte read [ 1948.597394][T23488] kvm: pic: level sensitive irq not supported [ 1948.597449][T23488] kvm: pic: non byte read [ 1948.659899][T23488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1949.708767][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'. [ 1949.732904][ T5895] usb 2-1: USB disconnect, device number 91 [ 1981.484619][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.491596][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.923907][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.931281][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2090.279847][ T31] INFO: task syz.0.3507:21604 blocked for more than 143 seconds. [ 2090.287630][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 2090.296088][ T31] Blocked by coredump. [ 2090.300810][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2090.309882][ T31] task:syz.0.3507 state:D stack:26088 pid:21604 tgid:21604 ppid:5861 task_flags:0x40044c flags:0x20004006 [ 2090.322417][ T31] Call Trace: [ 2090.325722][ T31] [ 2090.329446][ T31] __schedule+0x1b88/0x5240 [ 2090.334017][ T31] ? schedule+0x163/0x360 [ 2090.338393][ T31] ? __pfx___schedule+0x10/0x10 [ 2090.344009][ T31] ? schedule+0x90/0x360 [ 2090.348338][ T31] ? schedule+0x90/0x360 [ 2090.353353][ T31] schedule+0x163/0x360 [ 2090.357550][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2090.362989][ T31] schedule_preempt_disabled+0x13/0x30 [ 2090.369109][ T31] __mutex_lock+0x805/0x10c0 [ 2090.373742][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2090.379405][ T31] ? rfkill_fop_release+0x4a/0x230 [ 2090.384555][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2090.390232][ T31] rfkill_fop_release+0x4a/0x230 [ 2090.395337][ T31] ? __pfx_rfkill_fop_release+0x10/0x10 [ 2090.401904][ T31] __fput+0x3e9/0x9f0 [ 2090.405949][ T31] task_work_run+0x251/0x310 [ 2090.411492][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2090.416691][ T31] ? do_exit+0xa0c/0x27f0 [ 2090.421713][ T31] ? do_exit+0xa0c/0x27f0 [ 2090.426100][ T31] do_exit+0xa11/0x27f0 [ 2090.430973][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2090.436397][ T31] ? __pfx_do_exit+0x10/0x10 [ 2090.441712][ T31] do_group_exit+0x207/0x2c0 [ 2090.446328][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2090.452180][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2090.457423][ T31] get_signal+0x1696/0x1730 [ 2090.462669][ T31] ? do_nanosleep+0x82/0x660 [ 2090.467310][ T31] ? __pfx_get_signal+0x10/0x10 [ 2090.472782][ T31] ? hrtimer_nanosleep+0x335/0x3f0 [ 2090.477942][ T31] arch_do_signal_or_restart+0x98/0x840 [ 2090.484542][ T31] ? __pfx_get_old_timespec32+0x10/0x10 [ 2090.490745][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2090.497062][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 2090.502986][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 2090.509636][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 2090.515242][ T31] __do_fast_syscall_32+0xc1/0x110 [ 2090.521116][ T31] ? exc_page_fault+0x5f8/0x920 [ 2090.526012][ T31] do_fast_syscall_32+0x34/0x80 [ 2090.531597][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2090.537951][ T31] RIP: 0023:0xf7fb4579 [ 2090.542692][ T31] RSP: 002b:00000000f50b5460 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 2090.551679][ T31] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 2090.560375][ T31] RDX: 00000000f50b5494 RSI: 00000000f50b548c RDI: 00000000f50b5494 [ 2090.568381][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2090.576919][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2090.585542][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2090.594111][ T31] [ 2090.597200][ T31] INFO: task kworker/0:9:21729 blocked for more than 143 seconds. [ 2090.605604][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 2090.613331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2090.622250][ T31] task:kworker/0:9 state:D stack:26280 pid:21729 tgid:21729 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2090.634840][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 2090.642232][ T31] Call Trace: [ 2090.645542][ T31] [ 2090.649225][ T31] __schedule+0x1b88/0x5240 [ 2090.653799][ T31] ? do_raw_spin_lock+0xc1/0x370 [ 2090.659499][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2090.664949][ T31] ? schedule+0x163/0x360 [ 2090.669999][ T31] ? __pfx___schedule+0x10/0x10 [ 2090.674903][ T31] ? schedule+0x90/0x360 [ 2090.679934][ T31] ? schedule+0x90/0x360 [ 2090.684196][ T31] schedule+0x163/0x360 [ 2090.688351][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2090.693746][ T31] schedule_preempt_disabled+0x13/0x30 [ 2090.699806][ T31] __mutex_lock+0x805/0x10c0 [ 2090.704469][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2090.709945][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 2090.716224][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2090.721884][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2090.727148][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 2090.733700][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 2090.740554][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 2090.746331][ T31] process_scheduled_works+0xac3/0x18e0 [ 2090.752523][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2090.759313][ T31] ? assign_work+0x367/0x3d0 [ 2090.763979][ T31] worker_thread+0x870/0xd50 [ 2090.769173][ T31] ? __kthread_parkme+0x1a8/0x200 [ 2090.774222][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2090.780067][ T31] kthread+0x7b7/0x940 [ 2090.784183][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2090.790024][ T31] ? __pfx_kthread+0x10/0x10 [ 2090.794691][ T31] ? __pfx_kthread+0x10/0x10 [ 2090.799930][ T31] ? __pfx_kthread+0x10/0x10 [ 2090.804579][ T31] ? __pfx_kthread+0x10/0x10 [ 2090.809779][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2090.815014][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2090.821016][ T31] ? __pfx_kthread+0x10/0x10 [ 2090.825674][ T31] ret_from_fork+0x4b/0x80 [ 2090.830725][ T31] ? __pfx_kthread+0x10/0x10 [ 2090.835365][ T31] ret_from_fork_asm+0x1a/0x30 [ 2090.840927][ T31] [ 2090.843978][ T31] INFO: task kworker/0:12:22069 blocked for more than 143 seconds. [ 2090.852558][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 2090.860799][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2090.870129][ T31] task:kworker/0:12 state:D stack:21832 pid:22069 tgid:22069 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2090.882733][ T31] Workqueue: events rfkill_sync_work [ 2090.888126][ T31] Call Trace: [ 2090.892048][ T31] [ 2090.895022][ T31] __schedule+0x1b88/0x5240 [ 2090.900293][ T31] ? schedule+0x163/0x360 [ 2090.904674][ T31] ? __pfx___schedule+0x10/0x10 [ 2090.910100][ T31] ? schedule+0x90/0x360 [ 2090.914390][ T31] ? schedule+0x90/0x360 [ 2090.918830][ T31] schedule+0x163/0x360 [ 2090.923037][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2090.927840][ T31] schedule_preempt_disabled+0x13/0x30 [ 2090.933624][ T31] __mutex_lock+0x805/0x10c0 [ 2090.938267][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2090.943860][ T31] ? nfc_rfkill_set_block+0x50/0x310 [ 2090.950517][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2090.955696][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 2090.962343][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2090.969400][ T31] ? __lock_acquire+0xad5/0xd80 [ 2090.974337][ T31] nfc_rfkill_set_block+0x50/0x310 [ 2090.980201][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2090.985977][ T31] rfkill_set_block+0x1f1/0x440 [ 2090.991487][ T31] rfkill_sync_work+0x12c/0x220 [ 2090.996364][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 2091.002937][ T31] process_scheduled_works+0xac3/0x18e0 [ 2091.009219][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2091.015262][ T31] ? assign_work+0x367/0x3d0 [ 2091.020611][ T31] worker_thread+0x870/0xd50 [ 2091.025295][ T31] ? __kthread_parkme+0x1a8/0x200 [ 2091.031060][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2091.036256][ T31] kthread+0x7b7/0x940 [ 2091.041029][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2091.046270][ T31] ? __pfx_kthread+0x10/0x10 [ 2091.051538][ T31] ? __pfx_kthread+0x10/0x10 [ 2091.056216][ T31] ? __pfx_kthread+0x10/0x10 [ 2091.061602][ T31] ? __pfx_kthread+0x10/0x10 [ 2091.066245][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2091.072151][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2091.077396][ T31] ? __pfx_kthread+0x10/0x10 [ 2091.082743][ T31] ret_from_fork+0x4b/0x80 [ 2091.087367][ T31] ? __pfx_kthread+0x10/0x10 [ 2091.092689][ T31] ret_from_fork_asm+0x1a/0x30 [ 2091.097513][ T31] [ 2091.101435][ T31] INFO: task syz.0.3850:23279 blocked for more than 144 seconds. [ 2091.109779][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 2091.117465][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2091.126832][ T31] task:syz.0.3850 state:D stack:27016 pid:23279 tgid:23279 ppid:5861 task_flags:0x400040 flags:0x20004004 [ 2091.139434][ T31] Call Trace: [ 2091.142730][ T31] [ 2091.145670][ T31] __schedule+0x1b88/0x5240 [ 2091.150856][ T31] ? schedule+0x163/0x360 [ 2091.155250][ T31] ? __pfx___schedule+0x10/0x10 [ 2091.160798][ T31] ? register_lock_class+0x54/0x330 [ 2091.166030][ T31] ? schedule+0x90/0x360 [ 2091.171084][ T31] ? schedule+0x90/0x360 [ 2091.175356][ T31] schedule+0x163/0x360 [ 2091.180276][ T31] schedule_timeout+0xb1/0x2b0 [ 2091.185118][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2091.191113][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2091.196330][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2091.202191][ T31] ? wait_for_completion+0x2d4/0x600 [ 2091.207506][ T31] wait_for_completion+0x32f/0x600 [ 2091.213287][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2091.219617][ T31] ? __flush_work+0xee/0xc60 [ 2091.224271][ T31] __flush_work+0xa48/0xc60 [ 2091.229303][ T31] ? __flush_work+0xee/0xc60 [ 2091.233939][ T31] ? __pfx___flush_work+0x10/0x10 [ 2091.239190][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2091.244556][ T31] ? __pfx___cancel_work+0x10/0x10 [ 2091.249793][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2091.254856][ T31] ? nfc_genl_device_removed+0x266/0x380 [ 2091.261243][ T31] __cancel_work_sync+0xbc/0x110 [ 2091.266244][ T31] rfkill_unregister+0x96/0x230 [ 2091.271781][ T31] nfc_unregister_device+0x96/0x2a0 [ 2091.277024][ T31] virtual_ncidev_close+0x56/0x90 [ 2091.282906][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2091.289254][ T31] __fput+0x3e9/0x9f0 [ 2091.293298][ T31] task_work_run+0x251/0x310 [ 2091.297908][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2091.303767][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 2091.310068][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 2091.315728][ T31] __do_fast_syscall_32+0xc1/0x110 [ 2091.321716][ T31] ? exc_page_fault+0x5f8/0x920 [ 2091.326614][ T31] do_fast_syscall_32+0x34/0x80 [ 2091.332027][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2091.338389][ T31] RIP: 0023:0xf7fb4579 [ 2091.343140][ T31] RSP: 002b:00000000f759fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 2091.352668][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 2091.361306][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2091.370077][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2091.378095][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2091.386739][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2091.395623][ T31] [ 2091.399465][ T31] INFO: task syz-executor:23437 blocked for more than 144 seconds. [ 2091.407389][ T31] Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 [ 2091.415670][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2091.425001][ T31] task:syz-executor state:D stack:23592 pid:23437 tgid:23437 ppid:5828 task_flags:0x400000 flags:0x20004004 [ 2091.437513][ T31] Call Trace: [ 2091.441434][ T31] [ 2091.444380][ T31] __schedule+0x1b88/0x5240 [ 2091.449570][ T31] ? schedule+0x163/0x360 [ 2091.453937][ T31] ? __pfx___schedule+0x10/0x10 [ 2091.459453][ T31] ? schedule+0x90/0x360 [ 2091.463713][ T31] ? schedule+0x90/0x360 [ 2091.467954][ T31] schedule+0x163/0x360 [ 2091.472729][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2091.477530][ T31] schedule_preempt_disabled+0x13/0x30 [ 2091.483667][ T31] __mutex_lock+0x805/0x10c0 [ 2091.488295][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 2091.493788][ T31] ? rfkill_register+0x34/0x8c0 [ 2091.499657][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2091.504729][ T31] ? device_initialize+0x266/0x460 [ 2091.510506][ T31] rfkill_register+0x34/0x8c0 [ 2091.515240][ T31] hci_register_dev+0x407/0x8b0 [ 2091.520801][ T31] vhci_create_device+0x38b/0x6e0 [ 2091.525983][ T31] vhci_write+0x3c8/0x4a0 [ 2091.530982][ T31] vfs_write+0x70f/0xd10 [ 2091.535259][ T31] ? trace_irq_disable+0x3b/0x120 [ 2091.540851][ T31] ? __pfx_vhci_write+0x10/0x10 [ 2091.545979][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2091.551014][ T31] ksys_write+0x19d/0x2d0 [ 2091.555502][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2091.560556][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2091.567184][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2091.572968][ T31] __do_fast_syscall_32+0xb4/0x110 [ 2091.578117][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2091.584434][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2091.590334][ T31] do_fast_syscall_32+0x34/0x80 [ 2091.595228][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2091.602299][ T31] RIP: 0023:0xf73dd579 [ 2091.606664][ T31] RSP: 002b:00000000ffaf2260 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2091.615854][ T31] RAX: ffffffffffffffda RBX: 00000000000000ca RCX: 00000000ffaf22ba [ 2091.624561][ T31] RDX: 0000000000000002 RSI: 00000000f73cdff4 RDI: 00000000f7405468 [ 2091.633280][ T31] RBP: 00000000ffaf2448 R08: 0000000000000000 R09: 0000000000000000 [ 2091.642006][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2091.650669][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2091.659468][ T31] [ 2091.662556][ T31] [ 2091.662556][ T31] Showing all locks held in the system: [ 2091.670939][ T31] 1 lock held by rcu_preempt/16: [ 2091.675906][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 2091.686577][ T31] 1 lock held by khungtaskd/31: [ 2091.692024][ T31] #0: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 2091.702672][ T31] 4 locks held by udevd/5214: [ 2091.707395][ T31] #0: ffff88807bcf19e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 2091.716853][ T31] #1: ffff88807eac2488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 2091.727164][ T31] #2: ffff88807ee775a8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 2091.737364][ T31] #3: ffff8880336f1100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 2091.747038][ T31] 2 locks held by getty/5594: [ 2091.752331][ T31] #0: ffff8880360520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2091.762775][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 2091.773484][ T31] 1 lock held by syz.3.3352/20904: [ 2091.779334][ T31] #0: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4a/0x230 [ 2091.790236][ T31] 1 lock held by syz.0.3507/21604: [ 2091.795391][ T31] #0: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4a/0x230 [ 2091.806358][ T31] 3 locks held by kworker/0:9/21729: [ 2091.812129][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 2091.823758][ T31] #1: ffffc9000c317c60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 2091.837993][ T31] #2: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 2091.850265][ T31] 4 locks held by kworker/0:12/22069: [ 2091.855663][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 2091.867162][ T31] #1: ffffc9001c32fc60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 2091.879754][ T31] #2: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 2091.890456][ T31] #3: ffff88807cb03100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 2091.900847][ T31] 1 lock held by syz.2.3754/22791: [ 2091.905969][ T31] #0: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4a/0x230 [ 2091.916890][ T31] 1 lock held by syz.3.3787/22947: [ 2091.922952][ T31] #0: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4a/0x230 [ 2091.933874][ T31] 1 lock held by syz.0.3850/23279: [ 2091.939902][ T31] #0: ffff88807cb03100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 2091.950378][ T31] 2 locks held by syz-executor/23437: [ 2091.955807][ T31] #0: ffff888028172118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 2091.966576][ T31] #1: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 2091.977224][ T31] 3 locks held by syz.4.3892/23499: [ 2091.983098][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2091.992242][ T31] #1: ffff8880336f1100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9c/0x320 [ 2092.002680][ T31] #2: ffffffff903d83c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 2092.013278][ T31] 1 lock held by syz.4.3892/23503: [ 2092.018408][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.027800][ T31] 1 lock held by syz.4.3892/23509: [ 2092.033526][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.042876][ T31] 1 lock held by syz.2.3896/23498: [ 2092.049301][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.057933][ T31] 1 lock held by syz.2.3896/23504: [ 2092.063745][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.072870][ T31] 1 lock held by syz.3.3895/23511: [ 2092.078028][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.087155][ T31] 1 lock held by syz.1.3897/23514: [ 2092.092959][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.102203][ T31] 1 lock held by syz-executor/23518: [ 2092.107628][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.116914][ T31] 1 lock held by syz-executor/23519: [ 2092.122974][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.132389][ T31] 1 lock held by syz-executor/23520: [ 2092.137781][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.147214][ T31] 1 lock held by syz-executor/23521: [ 2092.153115][ T31] #0: ffffffff8f5af5a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x54/0x340 [ 2092.162514][ T31] 3 locks held by kworker/u8:2/23523: [ 2092.167926][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 2092.178369][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 2092.190169][ T31] #2: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0xcb/0x610 [ 2092.200506][ T31] [ 2092.202863][ T31] ============================================= [ 2092.202863][ T31] [ 2092.211952][ T31] NMI backtrace for cpu 1 [ 2092.211975][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 2092.212001][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2092.212015][ T31] Call Trace: [ 2092.212025][ T31] [ 2092.212034][ T31] dump_stack_lvl+0x241/0x360 [ 2092.212074][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2092.212107][ T31] ? __pfx__printk+0x10/0x10 [ 2092.212150][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 2092.212179][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2092.212199][ T31] ? _printk+0xd5/0x120 [ 2092.212243][ T31] ? __wake_up_klogd+0xcc/0x110 [ 2092.212277][ T31] ? __pfx__printk+0x10/0x10 [ 2092.212312][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2092.212338][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2092.212364][ T31] watchdog+0x1058/0x10a0 [ 2092.212390][ T31] ? watchdog+0x1ea/0x10a0 [ 2092.212418][ T31] ? __pfx_watchdog+0x10/0x10 [ 2092.212441][ T31] kthread+0x7b7/0x940 [ 2092.212474][ T31] ? __pfx_watchdog+0x10/0x10 [ 2092.212497][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.212524][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.212554][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.212583][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.212613][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2092.212635][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2092.212660][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.212691][ T31] ret_from_fork+0x4b/0x80 [ 2092.212714][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.212745][ T31] ret_from_fork_asm+0x1a/0x30 [ 2092.212782][ T31] [ 2092.212792][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2092.383710][ C0] NMI backtrace for cpu 0 [ 2092.383731][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 2092.383753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2092.383765][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2092.383791][ C0] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 80 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 2092.383807][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c6 [ 2092.383824][ C0] RAX: ff55de87889e0900 RBX: ffffffff8197aebe RCX: ffffffff8c30b95c [ 2092.383838][ C0] RDX: 0000000000000001 RSI: ffffffff8e69c6ac RDI: ffffffff8ca1b4a0 [ 2092.383852][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 2092.383865][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 2092.383879][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 2092.383892][ C0] FS: 0000000000000000(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 2092.383907][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2092.383919][ C0] CR2: 00007fff5c5c3f3c CR3: 000000000eb38000 CR4: 00000000003526f0 [ 2092.383935][ C0] DR0: 0000000000000007 DR1: 0000000000000000 DR2: 0000000000000005 [ 2092.383946][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2092.383958][ C0] Call Trace: [ 2092.383966][ C0] [ 2092.383973][ C0] default_idle+0x13/0x20 [ 2092.383997][ C0] default_idle_call+0x74/0xb0 [ 2092.384021][ C0] do_idle+0x22e/0x5d0 [ 2092.384047][ C0] ? __pfx_do_idle+0x10/0x10 [ 2092.384068][ C0] ? rest_init+0x31/0x300 [ 2092.384097][ C0] ? rest_init+0x31/0x300 [ 2092.384121][ C0] cpu_startup_entry+0x42/0x60 [ 2092.384141][ C0] rest_init+0x2dc/0x300 [ 2092.384166][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2092.384193][ C0] start_kernel+0x484/0x510 [ 2092.384215][ C0] x86_64_start_reservations+0x2a/0x30 [ 2092.384239][ C0] x86_64_start_kernel+0x66/0x70 [ 2092.384262][ C0] common_startup_64+0x13e/0x147 [ 2092.384296][ C0] [ 2092.402826][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2092.402856][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 2092.402886][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2092.402902][ T31] Call Trace: [ 2092.402914][ T31] [ 2092.402927][ T31] dump_stack_lvl+0x241/0x360 [ 2092.402969][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2092.403005][ T31] ? __pfx__printk+0x10/0x10 [ 2092.403046][ T31] ? vscnprintf+0x5d/0x90 [ 2092.403071][ T31] panic+0x349/0x880 [ 2092.403101][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 2092.403130][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2092.403155][ T31] ? __pfx_panic+0x10/0x10 [ 2092.403191][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2092.403220][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2092.403243][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2092.403270][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2092.403298][ T31] watchdog+0x1097/0x10a0 [ 2092.403326][ T31] ? watchdog+0x1ea/0x10a0 [ 2092.403357][ T31] ? __pfx_watchdog+0x10/0x10 [ 2092.403382][ T31] kthread+0x7b7/0x940 [ 2092.403425][ T31] ? __pfx_watchdog+0x10/0x10 [ 2092.403451][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.403483][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.403515][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.403546][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.403580][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2092.403604][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 2092.403632][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.403666][ T31] ret_from_fork+0x4b/0x80 [ 2092.403692][ T31] ? __pfx_kthread+0x10/0x10 [ 2092.403727][ T31] ret_from_fork_asm+0x1a/0x30 [ 2092.403768][ T31] [ 2092.412611][ T31] Kernel Offset: disabled